Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
8 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-94127 | F5 | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | Severity: Critical CVSS 9.3 | Sep 22, 2026 | Not known |
| CVE-2025-53521 | F5 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | Severity: Critical CVSS 9.3 | Mar 27, 2026 | Not known |
| CVE-2023-46747 | F5 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | Severity: Critical CVSS 9.8 | Oct 31, 2023 | Known |
| CVE-2023-46748 | F5 | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | Severity: High CVSS 8.8 | Oct 31, 2023 | Not known |
| CVE-2022-1388 | F5 | F5 BIG-IP Missing Authentication Vulnerability | Severity: Critical CVSS 9.8 | May 10, 2022 | Known |
| CVE-2021-22991 | F5 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | Severity: Critical CVSS 9.8 | Jan 18, 2022 | Not known |
| CVE-2020-5902 | F5 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
| CVE-2021-22986 | F5 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.