Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
7 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Feb 6, 2025 | CVE-2020-29574 Ransomware | Sophos · CyberoamOS | CyberoamOS (CROS) SQL Injection Vulnerability | Critical 9.8 | 4.7% | Feb 27, 2025 |
| Feb 6, 2025 | CVE-2020-15069 | Sophos · XG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | Critical 9.8 | 10.7% | Feb 27, 2025 |
| Nov 16, 2023 | CVE-2023-1671 | Sophos · Web Appliance | Sophos Web Appliance Command Injection Vulnerability | Critical 9.8 | 100.0% | Dec 7, 2023 |
| Sep 23, 2022 | CVE-2022-3236 | Sophos · Firewall | Sophos Firewall Code Injection Vulnerability | Critical 9.8 | 98.9% | Oct 14, 2022 |
| Mar 31, 2022 | CVE-2022-1040 | Sophos · Firewall | Sophos Firewall Authentication Bypass Vulnerability | Critical 9.8 | 99.8% | Apr 21, 2022 |
| Mar 25, 2022 | CVE-2020-25223 | Sophos · SG UTM | Sophos SG UTM Remote Code Execution Vulnerability | Critical 9.8 | 96.8% | Apr 15, 2022 |
| Nov 3, 2021 | CVE-2020-12271 Ransomware | Sophos · SFOS | Sophos SFOS SQL Injection Vulnerability | Critical 10.0 | 43.3% | May 3, 2022 |