Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
4 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 4, 2025 | CVE-2025-53690 | Sitecore · Multiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | Critical 9.0 | 60.7% | Sep 25, 2025 |
| Mar 26, 2025 | CVE-2019-9875 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | High 8.8 | 25.4% | Apr 16, 2025 |
| Mar 26, 2025 | CVE-2019-9874 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | Critical 9.8 | 83.7% | Apr 16, 2025 |
| Mar 25, 2022 | CVE-2021-42237 Ransomware | Sitecore · XP | Sitecore XP Remote Command Execution Vulnerability | Critical 9.8 | 97.6% | Apr 15, 2022 |