Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,682
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,031
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
56
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,831+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2026-35616 | FortiClientEMS | Fortinet | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2026-3502 | TrueConf Client | TrueConf | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2026-5281 | Chrome | Confirmed | Active | — | about 2 months ago |
PoC
|
|
| CVE-2026-3055 | ADC, Gateway | NetScaler | Confirmed | Active | Yes | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-53521 | BIG-IP | F5 | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2026-33634 | setup-trivy, trivy-action, trivy, LiteLLM, telnyx | aquasecurity, BerriAI, team-telnyx | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2026-33017 | langflow | langflow-ai | Confirmed | Active | Yes | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-54068 | livewire | livewire | Confirmed | Active | Yes | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-43520 | iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Apple | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-43510 | iOS and iPadOS, macOS, tvOS, visionOS, watchOS | Apple | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-32432 | cms | craftcms | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2026-20131 | Cisco Secure Firewall Management Center (FMC) | Cisco | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2026-20963 | Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | Microsoft | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2025-66376 | Collaboration | Zimbra | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-47813 | Wing FTP Server | wftpserver | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2026-3910 | Chrome | Confirmed | Active | — | about 2 months ago |
—
|
|
| CVE-2026-3909 | Chrome | Confirmed | Active | — | about 2 months ago |
—
|
|
| CVE-2025-68613 | n8n | n8n-io | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2026-1603 | Endpoint Manager | Ivanti | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-26399 | Web Help Desk | SolarWinds | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2021-22054 | Workspace ONE UEM | VMware | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-41974 | iOS and iPadOS | Apple | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2021-30952 | watchOS, iOS and iPadOS, macOS | Apple | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2021-22681 | Studio 5000 Logix Designer, RSLogix 5000 | Rockwell Automation | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2017-7921 | DS-2CD2xx2F-I Series, DS-2CD2xx0F-I Series, DS-2CD2xx2FWD Series, DS-2CD4x2xFWD Series, DS-2CD4xx5 Series, DS-2DFx Series, DS-2CD63xx Series | Hikvision | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|