Known Exploited Vulnerabilities catalog

CIRCL

CIRCL provides a known-exploited vulnerability catalog and supports the different status reasons described in GCVE BCP-07.

UUID 1a89b78e-f703-45f3-bb86-59eb712668bd · Licence CC0-1.0 · All catalogs

Entries 32 currently asserted
Last change 2026-10-16 11 days ago
Listed recently 6 in 30 days · 0 in 7 days
Evidence Sinkhole 62% of 8 records
Also in other catalogs 91% 29 entries · 3 only here
Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
Vulnerability ID Status Status Updated Evidence Characteristics Also in Actions
GCVE-1-2026-20208
Ruijie - Reyee RG-ES208GC
Confirmed
Asserted: 2026-08-24
2026-08-24
First seen: 2026-08-24
- - only here Details
CVE-2026-19478
GitLab - GitLab
Confirmed
Asserted: 2026-08-21
2026-08-21
First seen: 2026-08-21
- Severity: 100.0
No Auth Required
Remote
Details
CVE-2026-16232
checkpoint - Quantum Security Management , checkpoint - Multi-Domain Security Management
Confirmed
Asserted: 2026-07-29
2026-07-29
First seen: 2026-07-29
- Remote Details
CVE-2026-48908
joomshaper.net - SP Page Builder extension for Joomla
Confirmed
Asserted: 2026-07-09
2026-07-09
First seen: 2026-07-09
- - Details
CVE-2026-20245
Cisco - Cisco Catalyst SD-WAN Controller , Cisco - Cisco Catalyst SD-WAN Manager
Suspected
Asserted: 2026-06-25
2026-06-25
First seen: 2026-06-25
- Details
CVE-2026-39813
Fortinet - FortiSandbox , Fortinet - FortiSandbox Cloud
Confirmed
Asserted: 2026-06-22
2026-06-22
First seen: 2026-06-22
- Severity: 100.0
No Auth Required
Remote
Details
CVE-2026-10520
ivanti - Sentry
Suspected
Asserted: 2026-06-12
2026-06-12
First seen: 2026-06-12
- Severity: 100.0
RCE
No Auth Required
Remote
Details
CVE-2026-50751
checkpoint - Quantum Security Gateway , checkpoint - Spark Firewalls
Confirmed
Asserted: 2026-06-08
2026-06-08
First seen: 2026-06-08
1 source
Public report
No Auth Required
Remote
Details
CVE-2026-31431
Linux - Linux , Siemens - SIMATIC AX Runtime Core Linux Common Debian +97 more
Confirmed
Asserted: 2026-05-04
2026-05-04
First seen: 2026-05-02
1 source
Incident response
Details
CVE-2026-35616
Fortinet - FortiClientEMS
Confirmed
Asserted: 2026-04-06
2026-04-06
First seen: 2026-04-06
- - Details
displaying 11 - 20 KEV entries in total 32
About this Catalog

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.