Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Live feed
Actively exploited
Stories with evidence of real-world exploitation, newest first.
Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Fortinet FortiMail Path Traversal Vulnerability (CVE-2026-104286) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Armatura LLC Armatura One
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Cisco warns of new SD-WAN zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Apple patches CoreGraphics zero-day flaw exploited in attacks
Severity: CriticalAction: Act nowExploitation: Exploited
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Microsoft SharePoint Code Injection Vulnerability (CVE-2026-65660) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVE-2026-67279) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (CVE-2026-7273) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
CISA Adds One Known Exploited Vulnerability to Catalog
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2025-39682) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2026-53266) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Linux Kernel Race Condition Vulnerability (CVE-2025-39964) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Acronis Backup Incorrect Default Permissions Vulnerability (CVE-2026-87886) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVE-2026-76460) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Google Pixel Improper Authorization Vulnerability (CVE-2026-58704) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV