Known Exploited Vulnerabilities Catalog
External catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: caeb2787-0d58-4236-9039-7c86c3e566f3 (KEVIntel)
| Vulnerability ID | Status | Exploited | Status Updated | Evidence | Characteristics | Actions |
|---|---|---|---|---|---|---|
|
CVE-2026-34486
Apache Software Foundation - Apache Tomcat , Red Hat - Red Hat Enterprise Linux 10 +16 more |
Confirmed
Asserted: 2026-08-04 |
Yes |
2026-08-04
First seen: 2026-08-04 |
1
source
public_report |
- | Details |
|
CVE-2026-48313
Adobe - ColdFusion |
Confirmed
Asserted: 2026-08-04 |
Yes |
2026-08-04
First seen: 2026-08-04 |
1
source
public_report |
- | Details |
|
CVE-2026-28409
LabRedesCefetRJ - WeGIA |
Confirmed
Asserted: 2026-08-04 |
Yes |
2026-08-04
First seen: 2026-08-04 |
1
source
public_report |
- | Details |
|
CVE-2026-18577
N-able - N-central |
Confirmed
Asserted: 2026-08-03 |
Yes |
2026-08-03
First seen: 2026-08-03 |
1
source
public_report |
- | Details |
|
CVE-2026-54066
siyuan-note - siyuan |
Confirmed
Asserted: 2026-08-03 |
Yes |
2026-08-03
First seen: 2026-08-03 |
1
source
public_report |
- | Details |
|
CVE-2026-28496
FOSSBilling - FOSSBilling |
Confirmed
Asserted: 2026-08-03 |
Yes |
2026-08-03
First seen: 2026-08-03 |
1
source
public_report |
- | Details |
| CVE-2026-38992 |
Confirmed
Asserted: 2026-08-03 |
Yes |
2026-08-03
First seen: 2026-08-03 |
1
source
public_report |
- | Details |
|
CVE-2023-54359
Adivaha - WordPress adivaha Travel Plugin |
Confirmed
Asserted: 2026-08-02 |
Yes |
2026-08-02
First seen: 2026-08-02 |
1
source
public_report |
- | Details |
|
CVE-2025-71324
Flowise - Flowise |
Confirmed
Asserted: 2026-08-02 |
Yes |
2026-08-02
First seen: 2026-08-02 |
1
source
public_report |
- | Details |
|
CVE-2023-2825
GitLab - GitLab |
Confirmed
Asserted: 2026-08-02 |
Yes |
2026-08-02
First seen: 2026-08-02 |
1
source
public_report |
- | Details |
About this Catalog
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.
Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.