Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
9 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Aug 7, 2026 | CVE-2026-8037 | Progress · LoadMaster | Progress LoadMaster Command Injection Vulnerability | Critical 9.6 | 99.8% | Aug 10, 2026 |
| Mar 3, 2025 | CVE-2024-4885 | Progress · WhatsUp Gold | Progress WhatsUp Gold Path Traversal Vulnerability | Critical 9.8 | 99.3% | Mar 24, 2025 |
| Nov 18, 2024 | CVE-2024-1212 | Progress · Kemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | Critical 10.0 | 95.4% | Dec 9, 2024 |
| Sep 16, 2024 | CVE-2024-6670 Ransomware | Progress · WhatsUp Gold | Progress WhatsUp Gold SQL Injection Vulnerability | Critical 9.8 | 92.9% | Oct 7, 2024 |
| Jun 13, 2024 | CVE-2024-4358 | Progress · Telerik Report Server | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | Critical 9.8 | 97.5% | Jul 4, 2024 |
| Oct 5, 2023 | CVE-2023-40044 Ransomware | Progress · WS_FTP Server | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 90.4% | Oct 26, 2023 |
| Jun 2, 2023 | CVE-2023-34362 Ransomware | Progress · MOVEit Transfer | Progress MOVEit Transfer SQL Injection Vulnerability | Critical 9.8 | 99.9% | Jun 23, 2023 |
| Nov 3, 2021 | CVE-2019-18935 Ransomware | Progress · Telerik UI for ASP.NET AJAX | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 99.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-9248 | Progress · ASP.NET AJAX and Sitefinity | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | Critical 9.8 | 75.1% | May 3, 2022 |