Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
3 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Dec 11, 2025 | CVE-2025-58360 | OSGeo · GeoServer | OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability | High 8.2 | 61.2% | Jan 1, 2026 |
| Jul 15, 2024 | CVE-2024-36401 | OSGeo · GeoServer | OSGeo GeoServer GeoTools Eval Injection Vulnerability | Critical 9.8 | 99.8% | Aug 5, 2024 |
| Jun 26, 2024 | CVE-2022-24816 | OSGeo · JAI-EXT | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | Critical 10.0 | 99.9% | Jul 17, 2024 |