Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
5 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2026-0770 | Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | Severity: Critical CVSS 9.8 | Jul 21, 2026 | Not known |
| CVE-2026-55255 | Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | Severity: High CVSS 8.4 | Jul 7, 2026 | Not known |
| CVE-2025-34291 | Langflow | Langflow Origin Validation Error Vulnerability | Severity: Critical CVSS 9.4 | May 21, 2026 | Not known |
| CVE-2026-33017 | Langflow | Langflow Code Injection Vulnerability | Severity: Critical CVSS 9.3 | Mar 25, 2026 | Not known |
| CVE-2025-3248 | Langflow | Langflow Missing Authentication Vulnerability | Severity: Critical CVSS 9.8 | May 5, 2025 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.