Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,675
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,028
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
54
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,826+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2018-15517 | Central WiFiManager CWM-100 | D-Link | High | Active | — | over 7 years ago |
PoC
Nuclei
|
| CVE-2018-13350 | TOS | TerraMaster | High | Active | — | over 7 years ago |
—
|
| CVE-2018-13307 | A3002RU | TOTOLINK | High | Active | — | over 7 years ago |
—
|
| CVE-2017-18349 | Fastjson | Alibaba | High | Active | — | over 7 years ago |
PoC
Nuclei
|
| CVE-2018-10823 | DWR-116, DWR-512, DWR-712, DWR-912, DWR-921, DWR-111 | D-Link | High | Active | — | almost 8 years ago |
PoC
Nuclei
|
| CVE-2018-8006 | Apache ActiveMQ | Apache Software Foundation | High | Active | — | almost 8 years ago |
PoC
Nuclei
|
| CVE-2018-17283 | ManageEngine OpManager | Zoho | High | Active | — | almost 8 years ago |
PoC
Nuclei
|
| CVE-2018-15138 | iPECS NMS 30M | Ericsson-LG | High | Active | — | almost 8 years ago |
PoC
Nuclei
|
| CVE-2018-7700 | DedeCMS 5.7 | DedeCMS | High | Active | — | over 8 years ago |
PoC
Nuclei
|
| CVE-2017-18046 | GPON ONT WiFi Router H640X | Dasan | High | Active | — | over 8 years ago |
—
|
| CVE-2017-8046 | Pivotal Spring Data REST and Spring Boot | Pivotal | High | Active | — | over 8 years ago |
PoC
Nuclei
|
| CVE-2017-17106 | PR115-204-P-RS | Zivif | High | Active | — | over 8 years ago |
—
|
| CVE-2017-17105 | PR115-204-P-RS | Zivif | High | Active | — | over 8 years ago |
PoC
|
| CVE-2017-17560 | MyCloud PR4100 | Western Digital | High | Active | — | over 8 years ago |
PoC
|
| CVE-2017-16959 | TL-WVR, TL-WAR, TL-ER, TL-R devices | TP-Link | High | Active | — | over 8 years ago |
—
|
| CVE-2017-9506 | Atlassian OAuth Plugin | Atlassian | High | Active | — | almost 9 years ago |
PoC
Nuclei
|
| CVE-2017-11610 | Supervisor | Supervisor | High | Active | — | almost 9 years ago |
PoC
Nuclei
|
| CVE-2015-2280 | SkyIPCam1620W | AirLink101 | High | Active | — | almost 9 years ago |
—
|
| CVE-2017-5173 | IP Camera G-Cam/EFD-2250 | Geutebruck | High | Active | — | about 9 years ago |
—
|
| CVE-2014-1677 | TC7200 | Technicolor | High | Active | — | over 9 years ago |
—
|
| CVE-2016-5700 | BIG-IP | F5 Networks | High | Active | — | almost 10 years ago |
—
|
| CVE-2015-2863 | Virtual System Administrator (VSA) | Kaseya | High | Active | — | almost 11 years ago |
PoC
Nuclei
|
| CVE-2014-9727 | Fritz!Box | AVM | High | Active | — | about 11 years ago |
PoC
|
| CVE-2013-5948 | RT-AC68U | ASUS | High | Active | — | about 12 years ago |
—
|
| CVE-2012-0297 | Web Gateway | Symantec | High | Active | — | about 14 years ago |
PoC
|