Known Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
2,684
Total KEVs
Known exploited vulnerabilities tracked in KEVIntel
1,031
Beyond CISA KEV
Additional exploited CVEs tracked beyond CISA KEV
58
KEVs Observed in Sensors (7d)
Tracked KEVs with live exploitation attempts in honeypots
1,832+
Artifacts Available
PoC, Nuclei, and scanner context
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | Added | Artifacts |
|---|---|---|---|---|---|---|---|
| CVE-2019-16920 | DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, DIR-825 | D-Link | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2019-2616 | BI Publisher (formerly XML Publisher) | Oracle Corporation | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2019-6340 | Drupal Core | Drupal | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-1631 | Junos OS | Juniper Networks | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2020-1956 | Kylin | Apache | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-2021 | PAN-OS | Palo Alto Networks | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2020-2506 | Helpdesk | QNAP Systems Inc. | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2020-25223 | SG UTM | Sophos | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-5410 | Spring Cloud Config | Spring by VMware | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-7247 | OpenSMTPD | OpenBSD | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-9054 | NAS326, NAS520, NAS540, NAS542, NSA210, NSA220, NSA220+, NSA221, NSA310, NSA320, NSA320S, NSA325, NSA325v2 | ZyXEL | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2020-9377 | DIR-610 | D-Link | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2021-22941 | Citrix ShareFile storage zones controller | Citrix | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2021-42237 | Sitecore XP | Sitecore | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-21999 | Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Microsoft | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2022-26143 | MiCollab, MiVoice Business Express | Mitel | Confirmed | Active | — | about 1 year ago |
PoC
Nuclei
|
| CVE-2022-26318 | Firebox and XTM appliances | WatchGuard | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2010-4398 | Windows | Microsoft | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2011-2005 | Windows | Microsoft | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2012-0518 | Fusion Middleware | Oracle | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2012-2034 | Flash Player | Adobe | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2012-2539 | Word | Microsoft | Confirmed | Active | — | about 1 year ago |
—
|
| CVE-2012-5076 | Java SE | Oracle | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-1690 | Firefox, Firefox ESR, Thunderbird, Thunderbird ESR | Mozilla | Confirmed | Active | — | about 1 year ago |
PoC
|
| CVE-2013-2465 | Java SE | Oracle | Confirmed | Active | — | about 1 year ago |
PoC
|