Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: past its KEV remediation deadline clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2026-96951 CVE-2026-96951 Microsoft 2% 8.8, high overdue patch 1
CVE-2026-104935 CVE-2026-104935 Ivanti 26% 8.6, high overdue advisory 1
CVE-2026-88779 CVE-2026-88779 Citrix 0.6% 7.5, high overdue advisory 2
CVE-2026-104286 CVE-2026-104286 Fortinet 2% 9.8, critical overdue advisory 1
CVE-2026-76504 CVE-2026-76504 Cisco 2% 9.8, critical overdue advisory 1
CVE-2026-102490 CVE-2026-102490 Zammad GmbH 0.5% 7.8, high overdue advisory 4
CVE-2026-102489 CVE-2026-102489 Zammad GmbH 1% 9.8, critical overdue advisory 4
CVE-2026-86950 CVE-2026-86950 Apple 1% 8.8, high overdue exploit 3 advisory 3
CVE-2026-88772 CVE-2026-88772 Citrix 1% 8.1, high overdue advisory 1
CVE-2026-88771 CVE-2026-88771 Citrix 1% 9.8, critical overdue advisory 1
CVE-2026-94127 CVE-2026-94127 F5 2% 9.8, critical overdue advisory 1
CVE-2026-93952 CVE-2026-93952 Arista 1% 10, critical overdue advisory 1
CVE-2026-93616 CVE-2026-93616 Check Point 76% 9.8, critical overdue patch 1 advisory 1
CVE-2026-87902 CVE-2026-87902 WordPress 40% 8.1, high overdue patch 1 advisory 1
CVE-2026-87886 CVE-2026-87886 Acronis 0.2% 7.8, high overdue advisory 1
CVE-2026-76460 CVE-2026-76460 Cisco 14% 10, critical overdue advisory 1
CVE-2026-58704 CVE-2026-58704 Google 0.6% 8.8, high overdue advisory 1
CVE-2026-76461 CVE-2026-76461 Cisco 30% 9.8, critical overdue advisory 1
CVE-2026-85706 CVE-2026-85706 GitLab 93% 10, critical overdue advisory 1
CVE-2026-87491 CVE-2026-87491 Google 3% 8.8, high overdue advisory 1
CVE-2026-85102 CVE-2026-85102 Check Point 50% 9.8, critical overdue patch 1 advisory 1
CVE-2026-85880 CVE-2026-85880 Microsoft 4% 7.8, high overdue patch 1
CVE-2026-84869 CVE-2026-84869 ConnectWise 0.9% 9.9, critical overdue advisory 4
CVE-2026-81963 CVE-2026-81963 Microsoft 0.4% 7.8, high overdue patch 1
CVE-2026-75650 CVE-2026-75650 Adobe 4% 10, critical overdue patch 1
CVE-2026-86218 CVE-2026-86218 N-able 13% 9.8, critical overdue advisory 1
CVE-2026-86060 CVE-2026-86060 MikroTik 6% 9.8, critical overdue exploit 1 advisory 3
CVE-2026-67279 CVE-2026-67279 MikroTik 1% 6.5, medium overdue exploit 1 advisory 4
CVE-2026-67277 CVE-2026-67277 MikroTik 2% 8.2, high overdue exploit 1 advisory 3
CVE-2026-85046 CVE-2026-85046 Google 49% 8.8, high overdue exploit 2 patch 1 advisory 2
CVE-2026-83549 CVE-2026-83549 SonicWall 10% 7.8, high overdue advisory 1
CVE-2026-83548 CVE-2026-83548 SonicWall 8% 10, critical overdue advisory 1
CVE-2026-82329 CVE-2026-82329 JFrog 14% 9.8, critical overdue advisory 2
CVE-2026-82078 CVE-2026-82078 PaperCut 64% 9.1, critical overdue patch 3
CVE-2026-81578 CVE-2026-81578 PaperCut 86% 9.8, critical overdue patch 3
CVE-2026-60004 CVE-2026-60004 Gitea 24% 9.8, critical overdue exploit 2 advisory 1
CVE-2026-72530 CVE-2026-72530 TrueConf 2% 9, critical overdue exploit 1 advisory 1
CVE-2026-72529 CVE-2026-72529 TrueConf 1% 9.8, critical overdue exploit 1 advisory 1
CVE-2026-19490 CVE-2026-19490 Citrix 23% 9.8, critical overdue advisory 1
CVE-2026-64849 CVE-2026-64849 MLflow 10% 9.3, critical overdue exploit 2 patch 2
CVE-2026-73570 CVE-2026-73570 Synacor 72% 8.9, high overdue advisory 3
CVE-2026-66384 CVE-2026-66384 JFrog 0.7% 5.3, medium overdue advisory 3
CVE-2026-42018 CVE-2026-42018 JFrog 10% 7.5, high overdue advisory 2
CVE-2026-71362 CVE-2026-71362 Adobe 88% 9.1, critical overdue advisory 1
CVE-2026-68820 CVE-2026-68820 Microsoft 0.3% 7, high overdue patch 1
CVE-2026-65660 CVE-2026-65660 Microsoft 2% 8.8, high overdue patch 1 advisory 1
CVE-2026-20349 CVE-2026-20349 Cisco 1% 8.6, high overdue advisory 1
CVE-2026-72898 CVE-2026-72898 Metabase 97% 10, critical overdue patch 2 advisory 1
CVE-2026-65400 CVE-2026-65400 Apple 2% 9.8, critical overdue exploit 2 advisory 6
CVE-2026-5430 CVE-2026-5430 WSO2 0.6% 10, critical overdue advisory 1
CVE-2026-18577 CVE-2026-18577 N-able 15% 8.1, high overdue patch 1 advisory 1
CVE-2026-18556 CVE-2026-18556 N-able 8% 7.4, high overdue advisory 2
CVE-2026-59310 CVE-2026-59310 Broadcom 3% 9.8, critical ransomware overdue advisory 3
CVE-2026-20316 CVE-2026-20316 Cisco 35% 5.3, medium ransomware overdue advisory 1
CVE-2026-63077 CVE-2026-63077 JetBrains 90% 9.8, critical ransomware overdue advisory 1
CVE-2026-42016 CVE-2026-42016 JFrog 9% 8.8, high overdue advisory 2
CVE-2026-16812 CVE-2026-16812 Arista 1% 10, critical overdue advisory 1
CVE-2026-16232 CVE-2026-16232 Check Point 78% 9.8, critical overdue patch 1
CVE-2026-9586 CVE-2026-9586 Sangoma 19% 9.8, critical overdue exploit 1 advisory 3
CVE-2026-9198 CVE-2026-9198 IBM 29% 9.8, critical overdue advisory 1
CVE-2026-63030 CVE-2026-63030 WordPress 11% 9.8, critical overdue advisory 1
CVE-2026-60137 CVE-2026-60137 WordPress 5% 5.9, medium overdue advisory 1
CVE-2021-27137 CVE-2021-27137 DD-WRT 4% 8.1, high overdue exploit 4 patch 1
CVE-2026-58644 CVE-2026-58644 Microsoft 16% 9.8, critical overdue patch 1
CVE-2026-56164 CVE-2026-56164 Microsoft 1% 9.8, critical overdue advisory 1
CVE-2026-56155 CVE-2026-56155 Microsoft 0.3% 7.8, high overdue advisory 1
CVE-2026-55040 CVE-2026-55040 Microsoft 70% 9.1, critical overdue exploit 2 patch 1
CVE-2026-50522 CVE-2026-50522 Microsoft 3% 9.8, critical overdue patch 1
CVE-2026-15410 CVE-2026-15410 SonicWall 12% 7.2, high ransomware overdue advisory 1
CVE-2026-15409 CVE-2026-15409 SonicWall 7% 10, critical ransomware overdue advisory 1
CVE-2026-56291 CVE-2026-56291 Balbooa 15% 9.8, critical overdue exploit 1
CVE-2026-59822 CVE-2026-59822 BerriAI 0.8% 8.2, high overdue patch 3 advisory 1
CVE-2026-53362 CVE-2026-53362 Linux and 1 more vendor 0.7% 7.8, high overdue patch 6 advisory 1
CVE-2026-8452 CVE-2026-8452 Citrix 1% 9.8, critical overdue advisory 1
CVE-2026-48282 CVE-2026-48282 Adobe 42% 10, critical overdue advisory 1
CVE-2026-56290 CVE-2026-56290 Joomlack 31% 9.8, critical overdue exploit 1 patch 1
CVE-2026-49869 CVE-2026-49869 Kestra 2% 10, critical overdue exploit 1
CVE-2026-53266 CVE-2026-53266 Linux 0.8% 8.8, high overdue patch 8
CVE-2026-55255 CVE-2026-55255 Langflow 0.9% 8.4, high overdue exploit 1 patch 2 advisory 1
CVE-2026-48939 CVE-2026-48939 iCagenda 20% 9.8, critical overdue exploit 1 advisory 1
CVE-2026-48908 CVE-2026-48908 JoomShaper 89% 9.8, critical overdue advisory 1
CVE-2026-12569 CVE-2026-12569 PTC 46% 9.8, critical ransomware overdue
CVE-2026-7273 CVE-2026-7273 Zyxel 3% 8.8, high overdue exploit 1 advisory 2
CVE-2026-20262 CVE-2026-20262 Cisco 28% 6.5, medium overdue advisory 1
CVE-2026-54420 CVE-2026-54420 LiteSpeed 0.8% 8.5, high overdue advisory 1
CVE-2026-48558 CVE-2026-48558 SimpleHelp 6% 10, critical overdue patch 1 advisory 2
CVE-2026-35273 CVE-2026-35273 Oracle 97% 9.8, critical ransomware overdue advisory 2
CVE-2026-20253 CVE-2026-20253 Splunk 97% 9.8, critical overdue exploit 1 advisory 1
CVE-2026-25089 CVE-2026-25089 Fortinet 76% 9.8, critical overdue advisory 1
CVE-2026-11645 CVE-2026-11645 Google 2% 8.8, high overdue advisory 1
CVE-2026-10520 CVE-2026-10520 Ivanti 100% 10, critical overdue patch 1 advisory 1
CVE-2026-50751 CVE-2026-50751 Check Point 85% 9.3, critical ransomware overdue patch 1 advisory 1
CVE-2026-7473 CVE-2026-7473 Arista 0.6% 5.8, medium overdue advisory 2
CVE-2026-48907 CVE-2026-48907 Widget Factory 16% 9.8, critical overdue patch 1
CVE-2026-8037 CVE-2026-8037 Progress 77% 9.8, critical overdue exploit 1 patch 1 advisory 1
CVE-2026-28318 CVE-2026-28318 SolarWinds 2% 7.5, high overdue advisory 1
CVE-2026-20245 CVE-2026-20245 Cisco 25% 7.8, high overdue advisory 2
CVE-2026-20230 CVE-2026-20230 Cisco 88% 8.6, high overdue exploit 1 advisory 1
CVE-2025-48595 CVE-2025-48595 Android 2% 8.4, high overdue advisory 1
CVE-2026-46817 CVE-2026-46817 Oracle 0.8% 9.8, critical overdue advisory 1

Showing 1–100 of 1,741 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.