Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
7 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2024-41710 | Mitel | Mitel SIP Phones Argument Injection Vulnerability | Severity: High CVSS 7.2 | Feb 12, 2025 | Not known |
| CVE-2024-41713 | Mitel | Mitel MiCollab Path Traversal Vulnerability | Severity: Critical CVSS 9.1 | Jan 7, 2025 | Known |
| CVE-2024-55550 | Mitel | Mitel MiCollab Path Traversal Vulnerability | Severity: Informational CVSS 2.7 | Jan 7, 2025 | Known |
| CVE-2022-40765 | Mitel | Mitel MiVoice Connect Command Injection Vulnerability | Severity: Elevated CVSS 6.8 | Feb 21, 2023 | Known |
| CVE-2022-41223 | Mitel | Mitel MiVoice Connect Code Injection Vulnerability | Severity: Elevated CVSS 6.8 | Feb 21, 2023 | Known |
| CVE-2022-29499 | Mitel | Mitel MiVoice Connect Data Validation Vulnerability | Severity: Critical CVSS 9.8 | Jun 27, 2022 | Known |
| CVE-2022-26143 | Mitel | MiCollab, MiVoice Business Express Access Control Vulnerability | Severity: Critical CVSS 9.8 | Mar 25, 2022 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.