Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
8 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 22, 2026 | CVE-2026-94127 | F5 · BIG-IP APM | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | Critical 9.8 | 26.6% | Sep 25, 2026 |
| Mar 27, 2026 | CVE-2025-53521 | F5 · BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | Critical 9.8 | 2.3% | Mar 30, 2026 |
| Oct 31, 2023 | CVE-2023-46748 | F5 · BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | High 8.8 | 4.3% | Nov 21, 2023 |
| Oct 31, 2023 | CVE-2023-46747 Ransomware | F5 · BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | Critical 9.8 | 96.7% | Nov 21, 2023 |
| May 10, 2022 | CVE-2022-1388 Ransomware | F5 · BIG-IP | F5 BIG-IP Missing Authentication Vulnerability | Critical 9.8 | 100.0% | May 31, 2022 |
| Jan 18, 2022 | CVE-2021-22991 | F5 · BIG-IP Traffic Management Microkernel | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | Critical 9.8 | 62.4% | Feb 1, 2022 |
| Nov 3, 2021 | CVE-2021-22986 Ransomware | F5 · BIG-IP and BIG-IQ Centralized Management | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2020-5902 Ransomware | F5 · BIG-IP | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |