Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
4 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2025-10035 | Fortra | Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability | Severity: Critical CVSS 9.8 | Sep 29, 2025 | Known |
| CVE-2022-42948 | Fortra | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Mar 30, 2023 | Not known |
| CVE-2022-39197 | Fortra | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | Severity: Elevated CVSS 6.1 | Mar 30, 2023 | Not known |
| CVE-2023-0669 | Fortra | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | Severity: High CVSS 7.2 | Feb 10, 2023 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.