Exploitation intelligence

Known Exploited Vulnerabilities Feed

Search evidence-backed known exploited vulnerabilities enriched with confidence scoring, CISA KEV status, sensor telemetry, and practical detection artifacts for vulnerability management, CTI, SOC, and MSSP workflows.

2,721
Total KEVs

Known exploited vulnerabilities tracked by KEV Intelligence

1,059
Beyond CISA KEV

Additional exploited CVEs beyond the official catalog

65
Observed in Sensors

Tracked KEVs with sensor activity in the last 7 days

1,862+
Artifacts Available

PoC, Nuclei, Metasploit, and virtual patch context

Explore the KEV Intelligence Feed

Filter known exploited vulnerabilities by evidence confidence, CISA status, sensor activity, recency, vendor, and available artifacts.

Reset

Displaying vulnerabilities 2601 - 2625 of 2721 in total

Query the complete API
CVE-2022-1950

Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress

Unknown

High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
PoC Nuclei
CVE-2022-35653

GHSA-62WH-M4JR-233R

Moodle

Moodle
High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
PoC Nuclei
High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
CVE-2022-1916

Active Products Tables for WooCommerce. Professional products tables for WooCommerce store

Unknown

High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
PoC Nuclei
CVE-2022-29013

Sila Gaming Router

Razer
High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
PoC Nuclei
CVE-2022-1883

camptocamp/terraboard

camptocamp
High
CISA
Not listed
Sensors
Added
about 4 years ago
Artifacts
PoC Nuclei
CVE-2021-46442

DIR-825 G1

D-Link
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
CVE-2022-28290

GHSA-WMQQ-3WJJ-MG5P

Country Selector Plugin

Welaunch
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
PoC Nuclei
CVE-2022-1439

GHSA-9W7H-3WWH-6M5Q

microweber/microweber

microweber
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
PoC Nuclei
CVE-2022-29153

GHSA-Q6H7-4QGW-2J9P

Consul

HashiCorp
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
PoC Nuclei
CVE-2022-0142

GHSA-G4V7-HFRX-HQF3

Visual Form Builder

Unknown

High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
CVE-2022-28363

GHSA-RPVC-QGRM-R54F

Reprise License Manager

Reprise Software
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
PoC Nuclei
CVE-2022-23900

GHSA-5JM7-X4MP-X3XJ

WL-WN531P3

Wavlink
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
CVE-2022-26186

GHSA-PM89-XMVF-HR23

N600R

TOTOLINK
High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
CVE-2022-0591

GHSA-X9WP-HPRC-2GVQ

FormCraft

Unknown

High
CISA
Not listed
Sensors
Added
over 4 years ago
Artifacts
PoC Nuclei

What Are Known Exploited Vulnerabilities?

Known exploited vulnerabilities are CVEs with credible evidence of real-world exploitation. They help security teams move beyond severity-only prioritization and focus remediation on vulnerabilities attackers are actually using.

For a deeper definition, see What Is a Known Exploited Vulnerability?.

More Than a Catalog Match

KEV Intelligence extends CISA KEV with additional public sources, vendor advisories, exploit evidence, and proprietary honeypot observations.

Compare with CISA KEV →

Evidence You Can Act On

Each record can include confidence, exploitation status, EPSS, CVSS, CWE, proof-of-concept references, scanner templates, and sensor telemetry.

Read the methodology →

Consume the Data in Your Workflow

Browse the live feed, subscribe via RSS, pull the free JSON feed, or use the Pro API for enriched records, telemetry summaries, virtual patches, and integration-ready delivery.

Known Exploited Vulnerability Feed FAQ

How KEV Intelligence defines, validates, and distributes exploitation intelligence.

What is a known exploited vulnerability?

A known exploited vulnerability is a CVE with credible evidence that attackers have exploited it in real-world conditions, rather than a vulnerability assessed only through theoretical severity. See also What Is a Known Exploited Vulnerability?.

How does KEV Intelligence differ from the CISA KEV Catalog?

KEV Intelligence includes CISA KEV records and adds exploited CVEs identified through vendor advisories, public research, multiple intelligence sources, and proprietary honeypot telemetry. Browse known exploited vulnerabilities not in CISA KEV or compare with CISA KEV.

What does observed in sensors mean?

It means KEV Intelligence honeypots recorded activity associated with exploitation attempts for that vulnerability. Sensor observations complement, rather than replace, the wider evidence and confidence model. Explore live telemetry on Exploitation Signals.

Can teams consume the feed through RSS or an API?

Yes. KEV Intelligence provides a free RSS feed, a free JSON feed, and a Pro API for enriched records and integration-oriented workflows. See API & Integrations and API docs.

Email Alerts

Get High-Impact KEV Alerts by Email

KEV Intelligence tracks known exploited vulnerabilities beyond CISA KEV. Subscribe for occasional, curator-picked alerts when exploitation warrants attention. For every update, use the RSS feed or API.

Occasional high-impact alerts. Unsubscribe anytime. See our Privacy Policy.