Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
11 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Feb 20, 2026 | CVE-2025-68461 | Roundcube · Webmail | RoundCube Webmail Cross-site Scripting Vulnerability | High 7.2 | 27.4% | Mar 13, 2026 |
| Feb 20, 2026 | CVE-2025-49113 | Roundcube · Webmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | Critical 9.9 | 99.5% | Mar 13, 2026 |
| Jun 9, 2025 | CVE-2024-42009 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting Vulnerability | Critical 9.3 | 82.9% | Jun 30, 2025 |
| Oct 24, 2024 | CVE-2024-37383 | Roundcube · Webmail | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 74.0% | Nov 14, 2024 |
| Jun 26, 2024 | CVE-2020-13965 | Roundcube · Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.3 | 76.6% | Jul 17, 2024 |
| Feb 12, 2024 | CVE-2023-43770 | Roundcube · Webmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 63.7% | Mar 4, 2024 |
| Oct 26, 2023 | CVE-2023-5631 | Roundcube · Webmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 76.3% | Nov 16, 2023 |
| Jun 22, 2023 | CVE-2021-44026 | Roundcube · Roundcube Webmail | Roundcube Webmail SQL Injection Vulnerability | Critical 9.8 | 69.9% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2020-35730 | Roundcube · Roundcube Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 32.9% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2020-12641 | Roundcube · Roundcube Webmail | Roundcube Webmail Remote Code Execution Vulnerability | Critical 9.8 | 84.4% | Jul 13, 2023 |
| Nov 3, 2021 | CVE-2017-16651 | Roundcube · Roundcube Webmail | Roundcube Webmail File Disclosure Vulnerability | High 7.8 | 45.7% | May 3, 2022 |