Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,678
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,031
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
56
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,827+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2026-41176 | rclone | rclone | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-48828 | vBulletin | vBulletin | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-48827 | vBulletin | vBulletin | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2026-8206 | Kirki – Freeform Page Builder, Website Builder & Customizer | themeum | High | Active | — | about 2 months ago |
PoC
|
| CVE-2025-34037 | E4200, E3200, E3000, E2500 v1/v2, E2100L v1, E2000, E1550, E1500 v1, E1200 v1, E1000 v1, E900 v1 | Linksys | High | Active | — | about 2 months ago |
—
|
| CVE-2025-55346 | — | — | High | Active | — | about 2 months ago |
—
|
| CVE-2025-1302 | jsonpath-plus | JSONPath-Plus | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2024-12847 | DGN1000 | NETGEAR | Confirmed | Active | Yes | about 2 months ago |
VPatch
|
| CVE-2026-41089 | Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) | Microsoft | High | Active | — | about 2 months ago |
PoC
|
| CVE-2025-34048 | DSL-2730U, DSL-2750U, DSL-2750E | D-Link | High | Active | — | about 2 months ago |
—
|
| CVE-2022-0785 | Daily Prayer Time | Unknown | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2022-0948 | Order Listener for WooCommerce – Play Sounds Instantly on New Orders | Unknown | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2022-2414 | Dogtag Certificate System | Dogtag PKI | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2018-9205 | avatar_uploader | Robbin Zhao | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-7311 | Flow Control Router | BYTEVALUE (Luoyang Baiwei Intelligent Technology Co., Ltd.) | High | Active | — | about 2 months ago |
—
|
| CVE-2025-34023 | Karel IP Phone IP1211 | Karel | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2020-11963 | IQrouter | Evenroute | High | Active | — | about 2 months ago |
—
|
| CVE-2025-7544 | AC1206 | Tenda | High | Active | — | about 2 months ago |
—
|
| CVE-2018-11409 | Splunk | Splunk | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-10353 | Melis Platform | Melis Technology | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-25573 | metersphere | metersphere | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-0159 | Extensive VC Addons for WPBakery page builder | Unknown | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2023-37999 | HT Mega | HasThemes | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2025-34509 | Experience Manager, Experience Platform | Sitecore | High | Active | — | about 2 months ago |
PoC
Nuclei
|
| CVE-2024-6893 | Journyx (jtime) | Journyx | High | Active | — | about 2 months ago |
PoC
Nuclei
|