VULNERABILITY INTELLIGENCE TOPIC

Known Exploited Vulnerabilities

Track vulnerabilities confirmed as exploited in the wild in the CISA KEV catalog, with remediation deadlines and ransomware context.

How to use this page

Prioritize these vulnerabilities ahead of score-only queues: inclusion in KEV means exploitation has been observed, not merely predicted.

Latest matching records

CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability CVE-2016-3081Apache Struts Command Injection Vulnerability CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability CVE-2021-3199ONLYOFFICE Docs Server Path Traversal Vulnerability CVE-2015-3306ProFTPD Improper Access Control Vulnerability CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability CVE-2026-102489Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-86950Apple Multiple Products Out-of-Bounds Write Vulnerability CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-65660Microsoft SharePoint Code Injection Vulnerability CVE-2026-87902WordPress Core Remote File Inclusion Vulnerability CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability