Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
5 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-24061 | GNU | GNU InetUtils Argument Injection Vulnerability | Severity: Critical CVSS 9.8 | Jan 26, 2026 | Not known |
| CVE-2014-6278 | GNU | GNU Bash OS Command Injection Vulnerability | Severity: High CVSS 8.8 | Oct 2, 2025 | Not known |
| CVE-2023-4911 | GNU | GNU C Library Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Nov 21, 2023 | Not known |
| CVE-2014-6271 | GNU | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Jan 28, 2022 | Not known |
| CVE-2014-7169 | GNU | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Jan 28, 2022 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.