Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,686
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,033
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
63
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,834+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2025-20337 | Cisco Identity Services Engine Software, Cisco ISE Passive Identity Connector | Cisco | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-20281 | Cisco Identity Services Engine Software | Cisco | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-2533 | PaperCut NG/MF | PaperCut | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-6558 | Chrome | Confirmed | Active | — | about 2 months ago |
—
|
|
| CVE-2025-49706 | Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | Microsoft | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-49704 | Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019 | Microsoft | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-2776 | SysAid On-Prem | SysAid | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-2775 | SysAid On-Prem | SysAid | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-53770 | Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | Microsoft | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-54309 | CrushFTP | CrushFTP | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-25257 | FortiWeb | Fortinet | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-47812 | Wing FTP Server | wftpserver | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-5777 | ADC, Gateway | NetScaler | Confirmed | Active | Yes | about 2 months ago |
PoC
Nuclei
|
| CVE-2019-9621 | Zimbra Collaboration Suite | Zimbra | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2019-5418 | https://github.com/rails/rails | Rails | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2016-10033 | PHPMailer | PHPMailer | Confirmed | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2014-3931 | Multi-Router Looking Glass | MRLG | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-6554 | Chrome | Confirmed | Active | — | about 2 months ago |
—
|
|
| CVE-2025-48928 | service | TeleMessage | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-48927 | service | TeleMessage | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2025-6543 | ADC, Gateway | NetScaler | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2024-0769 | DIR-859 | D-Link | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2024-54085 | MegaRAC-SPx | AMI | Confirmed | Active | — | about 2 months ago |
—
|
| CVE-2019-6693 | FortiGate | Fortinet | Confirmed | Active | — | about 2 months ago |
PoC
|
| CVE-2023-0386 | Linux kernel | Linux | Confirmed | Active | — | about 2 months ago |
PoC
|