Live Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | First Seen | Added | Artifacts |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-24016 | wazuh | wazuh | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-32433 | otp | erlang | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Scanner
|
| CVE-2024-42009 | Roundcube Webmail | Roundcube | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-5419 | Chrome | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
|
| CVE-2025-27038 | Snapdragon | Qualcomm, Inc. | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2025-21480 | Snapdragon | Qualcomm, Inc. | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2025-21479 | Snapdragon | Qualcomm, Inc. | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2025-3935 | ScreenConnect | ConnectWise | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2025-35939 | CMS | Craft | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2024-56145 | cms | craftcms | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2023-39780 | RT-AX55 | ASUS | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager | Cisco | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
|
| CVE-2026-41940 | cPanel, WP Squared, WHM | WebPros | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-5777 | ADC, Gateway | NetScaler | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-55182 | react-server-dom-webpack, react-server-dom-turbopack, react-server-dom-parcel | Meta | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-3055 | ADC, Gateway | NetScaler | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-1302 | jsonpath-plus | JSONPath-Plus | Medium | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-34197 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ | Apache Software Foundation | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-68645 | Zimbra Collaboration (ZCS) | Zimbra | Confirmed | Active exploitation | — | 17 days ago | 17 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-55346 | — | — | Medium | Active exploitation | — | 17 days ago | 17 days ago |
—
|
| CVE-2026-0257 | Cloud NGFW, PAN-OS, Prisma Access | Palo Alto Networks | Confirmed | Active exploitation | — | 19 days ago | 19 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-58360 | geoserver | geoserver | Confirmed | Active exploitation | — | 19 days ago | 19 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-61882 | Oracle Concurrent Processing | Oracle Corporation | Confirmed | Active exploitation | — | 20 days ago | 20 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-35616 | FortiClientEMS | Fortinet | Confirmed | Active exploitation | — | 21 days ago | 21 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-21643 | FortiClientEMS | Fortinet | Confirmed | Active exploitation | — | 21 days ago | 21 days ago |
PoC
Nuclei
Scanner
|