Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,578
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
956
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
16
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,676+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | First Seen | Added | Artifacts |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-20035 | SMA100 | SonicWall | Confirmed | Active | — | about 1 year ago | about 1 year ago |
—
|
| CVE-2025-3102 | OttoKit: All-in-One Automation Platform (Formerly SureTriggers) | brainstormforce | High | Exploited | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2024-53150 | Linux | Linux | Confirmed | Active | — | about 1 year ago | about 1 year ago |
—
|
| CVE-2024-53197 | Linux | Linux | Confirmed | Active | — | about 1 year ago | about 1 year ago |
—
|
| CVE-2025-29824 | Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | Confirmed | Active | — | about 1 year ago | about 1 year ago |
—
|
| CVE-2025-30406 | CentreStack | Gladinet | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2025-31161 | CrushFTP | CrushFTP | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2025-22457 | Connect Secure, Policy Secure, Neurons for ZTA gateways | Ivanti | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
|
| CVE-2025-24813 | Apache Tomcat | Apache Software Foundation | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2024-20439 | Cisco Smart License Utility | Cisco | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2025-2783 | Chrome | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
|
|
| CVE-2019-9875 | Sitecore CMS | Sitecore | Confirmed | Active | — | about 1 year ago | about 1 year ago |
—
|
| CVE-2019-9874 | CMS | Sitecore | Confirmed | Active | — | about 1 year ago | about 1 year ago |
PoC
Nuclei
|
| CVE-2025-30349 | IMP | Horde | High | Exploited | — | about 1 year ago | about 1 year ago |
PoC
|
| CVE-2017-12637 | NetWeaver Application Server Java | SAP | Confirmed | Active | Yes | over 1 year ago | over 1 year ago |
PoC
Nuclei
|
| CVE-2024-48248 | Backup & Replication Director | NAKIVO | Confirmed | Active | — | over 1 year ago | over 1 year ago |
PoC
Nuclei
|
| CVE-2025-30066 | changed-files | tj-actions | Confirmed | Active | — | over 1 year ago | over 1 year ago |
PoC
|
| CVE-2025-24472 | FortiProxy, FortiOS | Fortinet | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-21590 | Junos OS | Juniper Networks | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24201 | Safari, iOS and iPadOS, iPadOS, macOS, visionOS, watchOS | Apple | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24993 | Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24991 | Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24985 | Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24984 | Windows 10 Version 1507, Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|
| CVE-2025-24983 | Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation) | Microsoft | Confirmed | Active | — | over 1 year ago | over 1 year ago |
—
|