Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
7 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2020-15069 | Sophos | Sophos XG Firewall Buffer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Feb 6, 2025 | Not known |
| CVE-2020-29574 | Sophos | CyberoamOS (CROS) SQL Injection Vulnerability | Severity: Critical CVSS 9.8 | Feb 6, 2025 | Known |
| CVE-2023-1671 | Sophos | Sophos Web Appliance Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Nov 16, 2023 | Not known |
| CVE-2022-3236 | Sophos | Sophos Firewall Code Injection Vulnerability | Severity: Critical CVSS 9.8 | Sep 23, 2022 | Not known |
| CVE-2022-1040 | Sophos | Sophos Firewall Authentication Bypass Vulnerability | Severity: Critical CVSS 9.8 | Mar 31, 2022 | Not known |
| CVE-2020-25223 | Sophos | Sophos SG UTM Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Mar 25, 2022 | Not known |
| CVE-2020-12271 | Sophos | Sophos SFOS SQL Injection Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.