Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,684
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,031
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
58
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,832+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2022-22274 | SonicOS | SonicWall | High | Active | — | about 1 year ago |
PoC
|
| CVE-2023-0656 | SonicOS | SonicWall | High | Active | — | about 1 year ago |
—
|
| CVE-2023-38646 | Metabase | Metabase | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2023-24488 | Citrix ADC and Citrix Gateway | Citrix | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2023-26801 | BL-AC1900_2.0, BL-WR9000, BL-X26, BL-LTE300 | LB-LINK | Confirmed | Active | Yes | about 1 year ago |
—
|
| CVE-2024-3721 | DVR-4104, DVR-4216 | TBK | Confirmed | Active | Yes | about 1 year ago |
—
|
| CVE-2025-2825 | — | — | High | Active | — | about 1 year ago |
PoC
|
| CVE-2021-32030 | GT-AC2900, Lyra Mini | ASUS | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2018-9995 | DVR4104, DVR4216 | TBK | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2024-22024 | ICS, IPS | Ivanti, Ivant | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-26295 | Apache OFBiz | Apache Software Foundation | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-25003 | WPCargo Track & Trace | Unknown | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-27850 | Apache Tapestry | Apache Software Foundation | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-25899 | Aural Rec Monitor | Void | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-25114 | Paid Memberships Pro | Unknown | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-25646 | Apache Druid | Apache Software Foundation | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-4191 | GitLab | GitLab | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2021-26294 | ["Aurora", "WebMail Pro"] | AfterLogic | High | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2017-17215 | HG532 | Huawei Technologies Co., Ltd. | High | Active | — | about 1 year ago |
PoC
|
| CVE-2025-42599 | Active! mail 6 | QUALITIA CO., LTD. | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2025-1976 | Fabric OS | Brocade | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2025-3987 | N150RT | TOTOLINK | High | Active | — | about 1 year ago |
—
|
| CVE-2020-29583 | USG devices | Zyxel | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2019-8394 | ManageEngine ServiceDesk Plus | Zoho | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2020-10189 | ManageEngine Desktop Central | Zoho | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|