GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
KEV

Known Exploited Vulnerabilities Catalog

External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: caeb2787-0d58-4236-9039-7c86c3e566f3 (Previdian)

Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2026-29059
windmill-labs - windmill
Confirmed
Asserted: 2026-07-22
Yes 2026-07-22
First seen: 2026-07-22
1 source
public_report
- Details
CVE-2026-36356 Confirmed
Asserted: 2026-07-22
Yes 2026-07-22
First seen: 2026-07-22
1 source
public_report
- Details
CVE-2021-27137
DD-WRT - DD-WRT
Confirmed
Asserted: 2026-07-21
Yes 2026-07-21
First seen: 2026-07-21
1 source
public_report
- Details
CVE-2026-0770
Langflow - Langflow
Confirmed
Asserted: 2026-07-21
Yes 2026-07-21
First seen: 2026-07-21
1 source
public_report
- Details
CVE-2026-50522
Microsoft - Microsoft SharePoint Enterprise Server 2016 , Microsoft - Microsoft SharePoint Server 2019 +1 more
Confirmed
Asserted: 2026-07-21
Yes 2026-07-21
First seen: 2026-07-21
1 source
public_report
- Details
CVE-2026-48611
phpBB - phpBB
Confirmed
Asserted: 2026-07-20
Yes 2026-07-20
First seen: 2026-07-20
1 source
public_report
- Details
CVE-2025-68493
Apache Software Foundation - Apache Struts , Red Hat - Red Hat Enterprise Linux 8 +3 more
Confirmed
Asserted: 2026-07-20
Yes 2026-07-20
First seen: 2026-07-20
1 source
public_report
- Details
CVE-2026-22679
Weaver Network Co., Ltd. - E-cology
Confirmed
Asserted: 2026-07-19
Yes 2026-07-19
First seen: 2026-07-19
1 source
public_report
- Details
CVE-2026-63030
WordPress - WordPress
Confirmed
Asserted: 2026-07-18
Yes 2026-07-18
First seen: 2026-07-18
1 source
public_report
- Details
CVE-2026-60137
WordPress - WordPress
Confirmed
Asserted: 2026-07-18
Yes 2026-07-18
First seen: 2026-07-18
1 source
public_report
- Details
displaying 161 - 170 KEV entries in total 2720
About this Catalog

Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.