Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,684
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,033
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
58
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,832+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2020-24363 | TL-WA855RE | TP-Link | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-57819 | endpoint | FreePBX | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-55177 | WhatsApp Desktop for Mac, WhatsApp Business for iOS, WhatsApp for iOS | Confirmed | Active | — | about 2 months ago |
—
|
|
| CVE-2025-7775 | ADC, Gateway | NetScaler | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-48384 | git | git | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2024-8069 | Citrix Session Recording | Citrix Session Recording | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2024-8068 | Citrix Session Recording | Citrix | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-43300 | iOS and iPadOS, iPadOS, macOS | Apple | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-8876 | N-central | N-able | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-8875 | N-central | N-able | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-54948 | Trend Micro Apex One | Trend Micro, Inc. | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2013-3893 | Internet Explorer | Microsoft | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2007-0671 | Excel | Microsoft | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-8088 | WinRAR | win.rar GmbH | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2022-40799 | DNR-322L | D-Link | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2020-25079 | DCS-2530L, DCS-2670L | D-Link | Confirmed | Active | — | about 2 months ago |
Nessus
|
| CVE-2020-25078 | DCS-2530L, DCS-2670L | D-Link | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-44976 | Rentdrv2 | Hangzhou Shunwang | High | Active | — | about 2 months ago |
—
|
| CVE-2014-125123 | Kloxo | LXCenter | High | Active | — | about 2 months ago |
—
|
| CVE-2025-47729 | archiving backend | TeleMessage | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-4632 | MagicINFO 9 Server | Samsung Electronics | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-42999 | SAP NetWeaver (Visual Composer development server) | SAP_SE | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-32756 | FortiNDR, FortiCamera, FortiRecorder, FortiVoice, FortiMail | Fortinet | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-20337 | Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector | Cisco | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-20281 | Cisco Identity Services Engine Software | Cisco | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|