Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
5 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| May 22, 2026 | CVE-2026-9082 | Drupal · Core | Drupal Core SQL Injection Vulnerability | Critical 9.8 | 89.4% | May 27, 2026 |
| Apr 13, 2022 | CVE-2018-7602 Ransomware | Drupal · Core | Drupal Core Remote Code Execution Vulnerability | High 8.1 | 99.2% | May 4, 2022 |
| Mar 25, 2022 | CVE-2019-6340 | Drupal · Core | Drupal Core Remote Code Execution Vulnerability | High 8.1 | 92.0% | Apr 15, 2022 |
| Jan 18, 2022 | CVE-2020-13671 | Drupal · Drupal core | Drupal core Un-restricted Upload of File | High 8.8 | 36.2% | Jul 18, 2022 |
| Nov 3, 2021 | CVE-2018-7600 Ransomware | Drupal · Drupal Core | Drupal Core Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |