KEVIntel - Known Exploited Vulnerabilities Catalog

Recent Items

CVE-2026-1207 - Confirmed Exploitation

<h3>CVE-2026-1207</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-09 16:15 UTC Evidence Sources: 1 First Seen: 2026-07-09 Asserted: 2026-07-09 Scope Notes: Potential SQL injection via raster lookups on PostGIS | Affected: djangoproject / Django | CVSS: 5.4 (MEDIUM) | EPSS: 0.09436 | Used in malware: unknown | Not yet in …

Published on 2026-07-09T16:15:55+00:00

Updated on 2026-07-09T17:00:23.052492+00:00

CVE-2023-39361 - Confirmed Exploitation

<h3>CVE-2023-39361</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-08 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-08 Asserted: 2026-07-08 Scope Notes: Unauthenticated SQL Injection in graph_view.php in Cacti | Affected: Cacti / cacti | CVSS: 9.8 (CRITICAL) | EPSS: 0.87575 | Used in malware: unknown | Not yet in CIS…

Published on 2026-07-08T00:00:00+00:00

Updated on 2026-07-09T09:00:21.300000+00:00

CVE-2026-4631 - Confirmed Exploitation

<h3>CVE-2026-4631</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-08 00:00 UTC Evidence Sources: 1 First Seen: 2026-07-08 Asserted: 2026-07-08 Scope Notes: Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection | Affected: Red Hat / Red Hat Enterprise Linux 10, Red Hat Enterpri…

Published on 2026-07-08T00:00:00+00:00

Updated on 2026-07-09T09:00:21.183388+00:00

CVE-2026-48908 - Confirmed Exploitation

<h3>CVE-2026-48908</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 17:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEVIntel entry: Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 | Affected: joomshaper.net / SP Page Buil…

Published on 2026-07-07T17:00:54+00:00

Updated on 2026-07-07T18:00:24.567134+00:00

CVE-2026-56290 - Confirmed Exploitation

<h3>CVE-2026-56290</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 17:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEVIntel entry: Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 | Affected: joomlack.fr / JoomlaCK.fr Page Build…

Published on 2026-07-07T17:00:54+00:00

Updated on 2026-07-07T18:00:24.420909+00:00

CVE-2026-55255 - Confirmed Exploitation

<h3>CVE-2026-55255</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-07 17:00 UTC Evidence Sources: 1 First Seen: 2026-07-07 Asserted: 2026-07-07 Scope Notes: KEVIntel entry: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow | Affected: langflow-ai…

Published on 2026-07-07T17:00:54+00:00

Updated on 2026-07-07T18:00:24.497341+00:00

CVE-2026-48282 - Confirmed Exploitation

<h3>CVE-2026-48282</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-02 18:20 UTC Evidence Sources: 1 First Seen: 2026-07-02 Asserted: 2026-07-02 Scope Notes: KEVIntel entry: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Affected: Adobe / ColdFusion | CVSS: 1…

Published on 2026-07-02T18:20:12+00:00

Updated on 2026-07-02T19:00:21.358164+00:00

CVE-2026-8451 - Confirmed Exploitation

<h3>CVE-2026-8451</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-01 21:50 UTC Evidence Sources: 1 First Seen: 2026-07-01 Asserted: 2026-07-01 Scope Notes: KEVIntel entry: Insufficient input validation leading to memory overread | Affected: NetScaler / ADC, Gateway | CVSS: 8.8 (HIGH) | EPSS: 0.00502 | Used in malware: un…

Published on 2026-07-01T21:50:00+00:00

Updated on 2026-07-02T17:00:20.251799+00:00

CVE-2026-45659 - Confirmed Exploitation

<h3>CVE-2026-45659</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-01 19:00 UTC Evidence Sources: 1 First Seen: 2026-07-01 Asserted: 2026-07-01 Scope Notes: KEVIntel entry: Microsoft SharePoint Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Se…

Published on 2026-07-01T19:00:06+00:00

Updated on 2026-07-01T20:00:20.076719+00:00

CVE-2026-8037 - Confirmed Exploitation

<h3>CVE-2026-8037</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-07-01 14:51 UTC Evidence Sources: 1 First Seen: 2026-07-01 Asserted: 2026-07-01 Scope Notes: KEVIntel entry: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit …

Published on 2026-07-01T14:51:57+00:00

Updated on 2026-07-01T15:00:40.046067+00:00

CVE-2026-52813 - Confirmed Exploitation

<h3>CVE-2026-52813</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-30 16:02 UTC Evidence Sources: 1 First Seen: 2026-06-30 Asserted: 2026-06-30 Scope Notes: KEVIntel entry: Gogs: Path Traversal in organization name results in RCE through Git hooks | Affected: gogs / gogs | CVSS: 10.0 (CRITICAL) | EPSS: 0.01107 | Used in …

Published on 2026-06-30T16:02:32+00:00

Updated on 2026-06-30T17:00:16.849468+00:00

CVE-2026-46817 - Confirmed Exploitation

<h3>CVE-2026-46817</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-29 15:45 UTC Evidence Sources: 1 First Seen: 2026-06-29 Asserted: 2026-06-29 Scope Notes: KEVIntel entry: Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are... …

Published on 2026-06-29T15:45:00+00:00

Updated on 2026-06-29T16:00:26.604680+00:00

CVE-2026-48558 - Confirmed Exploitation

<h3>CVE-2026-48558</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-29 14:20 UTC Evidence Sources: 1 First Seen: 2026-06-29 Asserted: 2026-06-29 Scope Notes: KEVIntel entry: SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification | Affected: SimpleHelp / SimpleHelp | CVSS: 9.5 (CRITICAL) | EPSS: 0.007…

Published on 2026-06-29T14:20:22+00:00

Updated on 2026-06-29T15:00:33.392585+00:00

CVE-2026-8054 - Confirmed Exploitation

<h3>CVE-2026-8054</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-27 14:36 UTC Evidence Sources: 1 First Seen: 2026-06-27 Asserted: 2026-06-27 Scope Notes: KEVIntel entry: Unauthenticated SQL Injection in dotCMS Publish Audit API | Affected: dotCMS / dotCMS Core | CVSS: 10.0 (CRITICAL) | EPSS: 0.01584 | Used in malware: …

Published on 2026-06-27T14:36:50+00:00

Updated on 2026-06-27T15:00:21.767696+00:00

CVE-2023-6567 - Confirmed Exploitation

<h3>CVE-2023-6567</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-27 14:36 UTC Evidence Sources: 1 First Seen: 2026-06-27 Asserted: 2026-06-27 Scope Notes: KEVIntel entry: The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including,... | …

Published on 2026-06-27T14:36:38+00:00

Updated on 2026-06-27T15:00:21.863394+00:00

CVE-2026-12569 - Confirmed Exploitation

<h3>CVE-2026-12569</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-25 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-25 Asserted: 2026-06-25 Scope Notes: KEVIntel entry: Remote Code Execution (RCE) vulnerability in Windchill PDMlink | Affected: PTC / Windchill PDMLink, FlexPLM | CVSS: 9.3 (CRITICAL) | EPSS: 0.00499 | …

Published on 2026-06-25T00:00:00+00:00

Updated on 2026-06-25T20:00:16.811203+00:00

CVE-2026-20230 - Confirmed Exploitation

<h3>CVE-2026-20230</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 22:20 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEVIntel entry: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified... …

Published on 2026-06-23T22:20:36+00:00

Updated on 2026-06-23T23:00:21.171298+00:00

CVE-2025-67038 - Confirmed Exploitation

<h3>CVE-2025-67038</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-23 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-23 Asserted: 2026-06-23 Scope Notes: KEVIntel entry: An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authantication... …

Published on 2026-06-23T00:00:00+00:00

Updated on 2026-06-23T19:00:19.290787+00:00

CVE-2026-4020 - Confirmed Exploitation

<h3>CVE-2026-4020</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-17 10:28 UTC Evidence Sources: 1 First Seen: 2026-06-17 Asserted: 2026-06-17 Scope Notes: KEVIntel entry: Gravity SMTP <= 2.1.4 - Unauthenticated Sensitive Information Exposure via REST API | Affected: RocketGenius / Gravity SMTP | CVSS: 7.5 (HIGH) | EP…

Published on 2026-06-17T10:28:34+00:00

Updated on 2026-06-19T12:42:00.260518+00:00

CVE-2026-48907 - Confirmed Exploitation

<h3>CVE-2026-48907</h3> Status: Confirmed Exploited: Yes Status Updated: 2026-06-16 00:00 UTC Evidence Sources: 1 First Seen: 2026-06-16 Asserted: 2026-06-16 Scope Notes: KEVIntel entry: Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5 | Affected: joomlacontenteditor.net / Jo…

Published on 2026-06-16T00:00:00+00:00

Updated on 2026-06-19T12:42:00.334512+00:00