Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,709 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability Palo Alto Networks · PAN-OS
- CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux · Kernel
- CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros · cPanel & WHM and WP2 (WordPress Squared)
- CVE-2024-1708 ConnectWise ScreenConnect Path Traversal Vulnerability ConnectWise · ScreenConnect
- CVE-2026-32202 Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2025-29635 D-Link DIR-823X Command Injection Vulnerability D-Link · DIR-823X
- CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability Samsung · MagicINFO 9 Server
- CVE-2024-57728 SimpleHelp Path Traversal Vulnerability SimpleHelp · SimpleHelp
- CVE-2024-57726 SimpleHelp Missing Authorization Vulnerability SimpleHelp · SimpleHelp
- CVE-2026-39987 Marimo Remote Code Execution Vulnerability Marimo · Marimo
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft · Defender
- CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability Cisco · Catalyst SD-WAN Manger
- CVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability Kentico · Kentico Xperience
- CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability PaperCut · NG/MF
- CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability Cisco · Catalyst SD-WAN Manager
- CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Quest · KACE Systems Management Appliance (SMA)
- CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability JetBrains · TeamCity
- CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability Apache · ActiveMQ
- CVE-2009-0238 Microsoft Office Remote Code Execution Microsoft · Office
- CVE-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft · SharePoint Server
- CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Microsoft · Visual Basic for Applications (VBA)
- CVE-2025-60710 Microsoft Windows Link Following Vulnerability Microsoft · Windows
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability Microsoft · Exchange Server
- CVE-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability Microsoft · Windows
- CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe · Acrobat
- CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet · FortiClient EMS
- CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe · Acrobat and Reader
- CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet · FortiClient EMS
- CVE-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf · Client
- CVE-2026-5281 Google Dawn Use-After-Free Vulnerability Google · Dawn
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix · NetScaler
- CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability F5 · BIG-IP
- CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity · Trivy
- CVE-2026-33017 Langflow Code Injection Vulnerability Langflow · Langflow
- CVE-2025-32432 Craft CMS Code Injection Vulnerability Craft CMS · Craft CMS
- CVE-2025-54068 Laravel Livewire Code Injection Vulnerability Laravel · Livewire
- CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability Apple · Multiple Products
- CVE-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco · Secure Firewall Management Center (FMC)
- CVE-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft · SharePoint
- CVE-2025-47813 Wing FTP Server Information Disclosure Vulnerability Wing FTP Server · Wing FTP Server
- CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google · Chromium V8
- CVE-2026-3909 Google Skia Out-of-Bounds Write Vulnerability Google · Skia
- CVE-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability n8n · n8n
- CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery Omnissa · Workspace One UEM
- CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability Hikvision · Multiple Products
- CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell · Multiple Products
- CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple · Multiple Products
- CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple · iOS and iPadOS
- CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom · VMware Aria Operations
- CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco · SD-WAN
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager
- CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K · FileZen
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube · Webmail
- CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube · Webmail
- CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab · GitLab
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell · RecoverPoint for Virtual Machines (RP4VMs)
- CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor · Zimbra Collaboration Suite
- CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 · ThreatSonar Anti-Ransomware
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability Google · Chromium
- CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability Microsoft · Configuration Manager
- CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ · Notepad++
- CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds · Web Help Desk
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability Microsoft · Windows
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft · Office
- CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability React Native Community · CLI
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools · SmarterMail
- CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab · Community and Enterprise Editions
- CVE-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability Sangoma · FreePBX
- CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability Sangoma · FreePBX
- CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet · Multiple Products
- CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability Linux · Kernel
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools · SmarterMail
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools · SmarterMail
- CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability GNU · InetUtils
- CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom · VMware vCenter Server
- CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability Versa · Concerto
- CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability Vite · Vitejs
- CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier · eslint-config-prettier
- CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco · Unified Communications Manager
- CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-8110 Gogs Path Traversal Vulnerability Gogs · Gogs
- CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability Microsoft · Office
- CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) · OneView
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB · MongoDB and MongoDB Server
- CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever · DS-2105 Pro
- CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability ASUS · Live Update
- CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability SonicWall · SMA1000 appliance
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco · Multiple Products
- CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet · Multiple Products
- CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability Apple · Multiple Products
- CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless · AirLink ALEOS
- CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google · Chromium
- CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo · GeoServer
- CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2025-62221 Microsoft Windows Use After Free Vulnerability Microsoft · Windows
- CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability D-Link · Routers
Nothing on this page matches that filter.