Vulnerabilities exploitable today
367,165in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,685
New KEV · 24H0
Exploit Today ≥ 701,629
Distribution · last window
- Critical2,263
- High9,269
- Medium5,274
- Low508
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2020-10148—99.8%
KEV—80SolarWinds Orion Authentication Bypass Vulnerability—CVE-2023-40044—99.8%
KEVR80Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability—CVE-2025-92429.8 CRI99.8%
KEV—80WatchGuard Firebox Out-of-Bounds Write Vulnerability21dCVE-2020-29583—99.8%
KEV—80Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability—CVE-2022-43939—99.8%
KEV—80Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability—CVE-2010-0249—99.8%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2025-12480—99.8%
KEV—80Gladinet Triofox Improper Access Control Vulnerability—CVE-2024-40711—99.8%
KEVR80Veeam Backup and Replication Deserialization Vulnerability—CVE-2025-37164—99.8%
KEV—80Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability—CVE-2025-11371—99.8%
KEV—80Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability—CVE-2017-3066—99.8%
KEV—80Adobe ColdFusion Deserialization Vulnerability—CVE-2021-21315—99.8%
KEV—80System Information Library for Node.JS Command Injection—CVE-2025-2747—99.8%
KEV—80Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2026-356169.8 CRI99.8%
KEV—80Fortinet FortiClient EMS Improper Access Control Vulnerability38dCVE-2020-1350—99.8%
KEV—80Microsoft Windows DNS Server Remote Code Execution Vulnerability—CVE-2022-26352—99.8%
KEVR80dotCMS Unrestricted Upload of File Vulnerability—CVE-2017-5689—99.8%
KEV—80Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability—CVE-2023-36844—99.8%
KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2009-39606.5 MED99.8%
KEVR80Adobe BlazeDS Information Disclosure Vulnerability25dCVE-2021-32648—99.8%
KEV—80October CMS Improper Authentication—CVE-2026-20182—99.8%
KEV—80Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability—CVE-2022-370429.8 CRI99.8%
KEVR80Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability27dCVE-2021-20123—99.8%
KEV—80Draytek VigorConnect Path Traversal Vulnerability —CVE-2012-0151—99.8%
KEV—80Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability—CVE-2026-20127—99.8%
KEV—80Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability—CVE-2010-3333—99.8%
KEV—80Microsoft Office Stack-based Buffer Overflow Vulnerability—CVE-2025-57819—99.8%
KEV—80Sangoma FreePBX Authentication Bypass Vulnerability—CVE-2014-3120—99.8%
KEV—80Elasticsearch Remote Code Execution Vulnerability—CVE-2024-12356—99.8%
KEV—80BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability —CVE-2023-20273—99.8%
KEV—80Cisco IOS XE Web UI Command Injection Vulnerability—CVE-2019-7195—99.8%
KEVR80QNAP Photo Station Path Traversal Vulnerability—CVE-2014-1776—99.8%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—CVE-2018-14839—99.8%
KEV—80LG N1A1 NAS Remote Command Execution Vulnerability—CVE-2026-1731—99.8%
KEVR80BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability—CVE-2020-8193—99.8%
KEV—80Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability—CVE-2025-29635—99.8%
KEV—80D-Link DIR-823X Command Injection Vulnerability—CVE-2022-0847—99.8%
KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2024-8190—99.8%
KEV—80Ivanti Cloud Services Appliance OS Command Injection Vulnerability—CVE-2017-5521—99.8%
KEV—80NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability—CVE-2018-81747.5 HIG99.8%
KEVR80Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability18d