Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
4 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Mar 20, 2026 | CVE-2025-32432 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | Critical 10.0 | 99.8% | Apr 3, 2026 |
| Jun 2, 2025 | CVE-2025-35939 | Craft CMS · Craft CMS | Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability | Medium 5.3 | 1.4% | Jun 23, 2025 |
| Jun 2, 2025 | CVE-2024-56145 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | Critical 9.3 | 97.5% | Jun 23, 2025 |
| Feb 20, 2025 | CVE-2025-23209 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | High 8.1 | 21.6% | Mar 13, 2025 |