Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Every CVE in the CISA Known Exploited Vulnerabilities Catalog, with CVSS, EPSS and the references published for it. CISA lists a CVE only once there is evidence of exploitation against real targets, so this view answers what is being attacked, not what could be.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups (in the search, select to remove) is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: ransomware-linked past its KEV remediation deadline clear

CVEs in the Known exploited view, sorted by KEV listed
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2026-59310 CVE-2026-59310 Broadcom 3% 9.8, critical ransomware overdue advisory 3
CVE-2026-63077 CVE-2026-63077 JetBrains 90% 9.8, critical ransomware overdue advisory 1
CVE-2026-20316 CVE-2026-20316 Cisco 35% 5.3, medium ransomware overdue advisory 1
CVE-2026-15410 CVE-2026-15410 SonicWall 12% 7.2, high ransomware overdue advisory 1
CVE-2026-15409 CVE-2026-15409 SonicWall 7% 10, critical ransomware overdue advisory 1
CVE-2026-45659 CVE-2026-45659 Microsoft 3% 8.8, high ransomware overdue advisory 1
CVE-2026-12569 CVE-2026-12569 PTC 46% 9.8, critical ransomware overdue
CVE-2026-35273 CVE-2026-35273 Oracle 97% 9.8, critical ransomware overdue advisory 2
CVE-2026-50751 CVE-2026-50751 Check Point 85% 9.3, critical ransomware overdue patch 1 advisory 1
CVE-2026-0257 CVE-2026-0257 Palo Alto Networks and 1 more vendor 97% 9.1, critical ransomware overdue advisory 2
CVE-2026-48027 CVE-2026-48027 Nx 1% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2026-45321 CVE-2026-45321 TanStack 1% 9.6, critical ransomware overdue exploit 2 advisory 1
CVE-2026-41940 CVE-2026-41940 WebPros 99% 9.8, critical ransomware overdue exploit 2 advisory 4
CVE-2024-1708 CVE-2024-1708 ConnectWise 95% 8.4, high ransomware overdue exploit 1 advisory 3
CVE-2024-57728 CVE-2024-57728 SimpleHelp 65% 7.2, high ransomware overdue advisory 4
CVE-2024-57726 CVE-2024-57726 SimpleHelp 67% 9.9, critical ransomware overdue advisory 4
CVE-2026-33825 CVE-2026-33825 Microsoft 0.4% 7.8, high ransomware overdue advisory 2
CVE-2024-27199 CVE-2024-27199 JetBrains 100% 7.3, high ransomware overdue exploit 1 advisory 1
CVE-2023-27351 CVE-2023-27351 PaperCut 78% 7.5, high ransomware overdue advisory 2
CVE-2025-60710 CVE-2025-60710 Microsoft 5% 7.8, high ransomware overdue advisory 3
CVE-2023-21529 CVE-2023-21529 Microsoft 59% 8.8, high ransomware overdue patch 1 advisory 1
CVE-2026-20131 CVE-2026-20131 Cisco 43% 10, critical ransomware overdue advisory 2
CVE-2025-26399 CVE-2025-26399 SolarWinds 90% 9.8, critical ransomware overdue patch 1 advisory 1
CVE-2026-1731 CVE-2026-1731 BeyondTrust 92% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2026-24423 CVE-2026-24423 SmarterTools 88% 9.8, critical ransomware overdue advisory 2
CVE-2026-23760 CVE-2026-23760 SmarterTools 97% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2025-52691 CVE-2025-52691 SmarterTools 86% 10, critical ransomware overdue exploit 1 advisory 1
CVE-2025-14733 CVE-2025-14733 WatchGuard 27% 9.8, critical ransomware overdue advisory 1
CVE-2025-55182 CVE-2025-55182 Meta 100% 10, critical ransomware overdue patch 2 advisory 2
CVE-2025-61884 CVE-2025-61884 Oracle 96% 7.5, high ransomware overdue exploit 1 advisory 2
CVE-2025-61882 CVE-2025-61882 Oracle 100% 9.8, critical ransomware overdue advisory 2
CVE-2021-43226 CVE-2021-43226 Microsoft 3% 7.8, high ransomware overdue patch 1
CVE-2025-10035 CVE-2025-10035 Fortra 100% 9.8, critical ransomware overdue advisory 1
CVE-2025-8088 CVE-2025-8088 RARLAB 95% 8.8, high ransomware overdue advisory 5
CVE-2025-49706 CVE-2025-49706 Microsoft 99% 6.5, medium ransomware overdue advisory 2
CVE-2025-49704 CVE-2025-49704 Microsoft 100% 8.8, high ransomware overdue advisory 2
CVE-2025-53770 CVE-2025-53770 Microsoft 100% 9.8, critical ransomware overdue exploit 3 patch 2
CVE-2025-5777 CVE-2025-5777 Citrix 100% 7.5, high ransomware overdue patch 1 advisory 7
CVE-2019-6693 CVE-2019-6693 Fortinet 7% 6.5, medium ransomware overdue advisory 1
CVE-2025-42999 CVE-2025-42999 SAP 13% 9.1, critical ransomware overdue exploit 1 patch 1
CVE-2025-3248 CVE-2025-3248 Langflow 100% 9.8, critical ransomware overdue exploit 1 patch 1
CVE-2025-31324 CVE-2025-31324 SAP 99% 9.8, critical ransomware overdue patch 2 advisory 2
CVE-2025-29824 CVE-2025-29824 Microsoft 14% 7.8, high ransomware overdue exploit 2 advisory 1
CVE-2025-31161 CVE-2025-31161 CrushFTP 100% 9.8, critical ransomware overdue exploit 4 advisory 4
CVE-2025-22457 CVE-2025-22457 Ivanti 100% 9.8, critical ransomware overdue advisory 1
CVE-2025-24472 CVE-2025-24472 Fortinet 7% 8.1, high ransomware overdue advisory 1
CVE-2025-26633 CVE-2025-26633 Microsoft 30% 7, high ransomware overdue exploit 2 advisory 1
CVE-2025-22225 CVE-2025-22225 VMware 1% 8.2, high ransomware overdue advisory 1
CVE-2018-8639 CVE-2018-8639 Microsoft 22% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2024-53704 CVE-2024-53704 SonicWall 95% 9.8, critical ransomware overdue advisory 1
CVE-2024-57727 CVE-2024-57727 SimpleHelp 97% 7.5, high ransomware overdue advisory 2
CVE-2020-29574 CVE-2020-29574 Sophos 5% 9.8, critical ransomware overdue advisory 1
CVE-2025-23006 CVE-2025-23006 SonicWall 23% 9.8, critical ransomware overdue advisory 1
CVE-2024-55591 CVE-2024-55591 Fortinet 94% 9.8, critical ransomware overdue advisory 1
CVE-2023-48365 CVE-2023-48365 Qlik 47% 9.9, critical ransomware overdue advisory 1
CVE-2025-0282 CVE-2025-0282 Ivanti 100% 9, critical ransomware overdue exploit 3 advisory 2
CVE-2024-55550 CVE-2024-55550 Mitel 38% 2.7, low ransomware overdue advisory 2
CVE-2024-41713 CVE-2024-41713 Mitel 97% 9.1, critical ransomware overdue advisory 1
CVE-2024-55956 CVE-2024-55956 Cleo 94% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-50623 CVE-2024-50623 Cleo 99% 9.8, critical ransomware overdue advisory 1
CVE-2024-51378 CVE-2024-51378 CyberPersons 95% 9.8, critical ransomware overdue exploit 2 patch 2
CVE-2024-11667 CVE-2024-11667 Zyxel 3% 9.8, critical ransomware overdue advisory 1
CVE-2023-28461 CVE-2023-28461 Array Networks 68% 9.8, critical ransomware overdue advisory 1
CVE-2024-9474 CVE-2024-9474 Palo Alto Networks and 1 more vendor 95% 7.2, high ransomware overdue exploit 2 advisory 2
CVE-2024-0012 CVE-2024-0012 Palo Alto Networks 100% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2024-49039 CVE-2024-49039 Microsoft 14% 8.8, high ransomware overdue patch 1
CVE-2024-51567 CVE-2024-51567 CyberPersons 87% 9.8, critical ransomware overdue exploit 1 patch 2
CVE-2024-38094 CVE-2024-38094 Microsoft 51% 7.2, high ransomware overdue patch 1
CVE-2024-40711 CVE-2024-40711 Veeam 90% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2024-9680 CVE-2024-9680 Mozilla 23% 9.8, critical ransomware overdue patch 1 advisory 2
CVE-2024-30088 CVE-2024-30088 Microsoft 68% 7, high ransomware overdue patch 1
CVE-2020-0618 CVE-2020-0618 Microsoft 99% 8.8, high ransomware overdue exploit 2 patch 1
CVE-2024-6670 CVE-2024-6670 Progress and 1 more vendor 93% 9.8, critical ransomware overdue advisory 1
CVE-2024-40766 CVE-2024-40766 SonicWall 18% 9.8, critical ransomware overdue advisory 1
CVE-2017-1000253 CVE-2017-1000253 Linux and 2 more vendors 11% 7.8, high ransomware overdue patch 1 advisory 12
CVE-2024-23897 CVE-2024-23897 Jenkins and 1 more vendor 100% 9.8, critical ransomware overdue exploit 4 advisory 2
CVE-2024-37085 CVE-2024-37085 VMware 27% 7.2, high ransomware overdue patch 1
CVE-2024-23692 CVE-2024-23692 Rejetto 99% 9.8, critical ransomware overdue exploit 5 advisory 1
CVE-2024-26169 CVE-2024-26169 Microsoft 4% 7.8, high ransomware overdue patch 1
CVE-2024-4577 CVE-2024-4577 PHP Group and 1 more vendor 100% 9.8, critical ransomware overdue exploit 12 patch 1
CVE-2024-24919 CVE-2024-24919 Check Point 100% 8.6, high ransomware overdue patch 1 advisory 1
CVE-2024-1086 CVE-2024-1086 Linux 28% 7.8, high ransomware overdue exploit 4 patch 4
CVE-2023-43208 CVE-2023-43208 NextGen Healthcare 83% 9.8, critical ransomware overdue exploit 2
CVE-2024-30051 CVE-2024-30051 Microsoft 6% 7.8, high ransomware overdue patch 1
CVE-2024-3400 CVE-2024-3400 Palo Alto Networks and 1 more vendor 100% 10, critical ransomware overdue exploit 2 advisory 2
CVE-2023-24955 CVE-2023-24955 Microsoft 85% 7.2, high ransomware overdue patch 1
CVE-2023-48788 CVE-2023-48788 Fortinet 98% 9.8, critical ransomware overdue advisory 1
CVE-2021-44529 CVE-2021-44529 Ivanti 99% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2024-27198 CVE-2024-27198 JetBrains 100% 9.8, critical ransomware overdue advisory 2
CVE-2024-21338 CVE-2024-21338 Microsoft 60% 7.8, high ransomware overdue exploit 3 patch 1
CVE-2024-1709 CVE-2024-1709 ConnectWise 100% 10, critical ransomware overdue exploit 3 patch 3
CVE-2020-3259 CVE-2020-3259 Cisco 72% 7.5, high ransomware overdue advisory 1
CVE-2024-21412 CVE-2024-21412 Microsoft 99% 8.1, high ransomware overdue patch 1
CVE-2024-21762 CVE-2024-21762 Fortinet 83% 9.8, critical ransomware overdue advisory 1
CVE-2024-21893 CVE-2024-21893 Ivanti 100% 8.2, high ransomware overdue advisory 1
CVE-2023-22527 CVE-2023-22527 Atlassian 100% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2023-35082 CVE-2023-35082 Ivanti 100% 9.8, critical ransomware overdue advisory 1
CVE-2024-21887 CVE-2024-21887 Ivanti 100% 9.1, critical ransomware overdue exploit 1 advisory 1
CVE-2023-46805 CVE-2023-46805 Ivanti 100% 8.2, high ransomware overdue exploit 1 advisory 1
CVE-2023-29357 CVE-2023-29357 Microsoft 100% 9.8, critical ransomware overdue patch 1

Showing 1–100 of 361 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.