Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
3 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 26, 2026 | CVE-2026-109619 | PHP Group · PHP | PHP Stale Internal Request-State Vulnerability | Critical 9.2 | 100.0% | Oct 29, 2026 |
| Oct 26, 2026 | CVE-2026-109618 | PHP Group · PHP | PHP Memory Corruption Vulnerability | Critical 9.2 | 100.0% | Oct 29, 2026 |
| Jun 12, 2024 | CVE-2024-4577 Ransomware | PHP Group · PHP | PHP-CGI OS Command Injection Vulnerability | Critical 9.8 | 100.0% | Jul 3, 2024 |