Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
4 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 20, 2026 | CVE-2025-2749 | Kentico · Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | High 7.2 | 4.0% | May 4, 2026 |
| Oct 20, 2025 | CVE-2025-2747 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.8 | 97.2% | Nov 10, 2025 |
| Oct 20, 2025 | CVE-2025-2746 | Kentico · Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.8 | 74.1% | Nov 10, 2025 |
| Mar 25, 2022 | CVE-2019-10068 | Kentico · Xperience | Kentico Xperience Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 95.1% | Apr 15, 2022 |