Shadowserver - Known Exploited Vulnerabilities Catalog https://db.gcve.eu/known-exploited-vulnerabilities-catalog KEV catalog conforming to GCVE BCP-07. Contains the most recent 20 entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 02 Jul 2026 02:17:40 +0000 CVE-2017-12542 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2017-12542 <h3>CVE-2017-12542</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 13:11 UTC</p> <p><strong>Characteristics:</strong> Severity: 100</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-06-30</p> <p><strong>Asserted:</strong> 2026-06-30</p> <p><strong>Scope Notes:</strong> Affected: HP / HP iLO 4 | Class: device-management-platform | Severity: Critical (CVSS 10) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> <h3>CVE-2017-12542</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 13:11 UTC</p> <p><strong>Characteristics:</strong> Severity: 100</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-06-30</p> <p><strong>Asserted:</strong> 2026-06-30</p> <p><strong>Scope Notes:</strong> Affected: HP / HP iLO 4 | Class: device-management-platform | Severity: Critical (CVSS 10) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fe026380-c375-4ff6-b489-8b01e189972d Tue, 30 Jun 2026 13:11:03 +0000 CVE-2025-25231 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2025-25231 <h3>CVE-2025-25231</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-12-28</p> <p><strong>Asserted:</strong> 2025-12-28</p> <p><strong>Scope Notes:</strong> Affected: Omnissa / Omnissa Workspace ONE UEM | Class: device-management-platform | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2025-25231</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-12-28</p> <p><strong>Asserted:</strong> 2025-12-28</p> <p><strong>Scope Notes:</strong> Affected: Omnissa / Omnissa Workspace ONE UEM | Class: device-management-platform | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/91fb4a77-2fe2-42cc-b943-ea44b06d790d Tue, 30 Jun 2026 00:00:00 +0000 CVE-2019-5128 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2019-5128 <h3>CVE-2019-5128</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 11</p> <h3>CVE-2019-5128</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 11</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3d326d7-dd79-478d-b974-a1edfbef1374 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2025-22214 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2025-22214 <h3>CVE-2025-22214</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 43</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-28</p> <p><strong>Asserted:</strong> 2025-11-28</p> <p><strong>Scope Notes:</strong> Affected: Landray / Landray EIS | Class: other-software | Severity: Medium (CVSS 4.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2025-22214</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 43</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-28</p> <p><strong>Asserted:</strong> 2025-11-28</p> <p><strong>Scope Notes:</strong> Affected: Landray / Landray EIS | Class: other-software | Severity: Medium (CVSS 4.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9f319a87-ef63-4b63-aaf3-376fbd9b4784 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2020-10189 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2020-10189 <h3>CVE-2020-10189</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-21</p> <p><strong>Asserted:</strong> 2024-07-21</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine Desktop Central (now Engine Central) | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2020-10189</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-21</p> <p><strong>Asserted:</strong> 2024-07-21</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine Desktop Central (now Engine Central) | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/78030535-ff22-41f8-8859-a6dfd0801c6f Tue, 30 Jun 2026 00:00:00 +0000 CVE-2024-2330 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2024-2330 <h3>CVE-2024-2330</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 63</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-09-26</p> <p><strong>Asserted:</strong> 2024-09-26</p> <p><strong>Scope Notes:</strong> Affected: Netentsec / NS-ASG Application Security Gateway | Class: firewall | Severity: Medium (CVSS 6.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2024-2330</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 63</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-09-26</p> <p><strong>Asserted:</strong> 2024-09-26</p> <p><strong>Scope Notes:</strong> Affected: Netentsec / NS-ASG Application Security Gateway | Class: firewall | Severity: Medium (CVSS 6.3) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/27de3994-3412-4469-b9e4-4a6927b202c3 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2022-38627 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2022-38627 <h3>CVE-2022-38627</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-13</p> <p><strong>Asserted:</strong> 2025-07-13</p> <p><strong>Scope Notes:</strong> Affected: Linear / eMerge E3-series | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2022-38627</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-13</p> <p><strong>Asserted:</strong> 2025-07-13</p> <p><strong>Scope Notes:</strong> Affected: Linear / eMerge E3-series | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b18a7779-58cc-40ba-a795-077289fe2afd Tue, 30 Jun 2026 00:00:00 +0000 CVE-2023-34659 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2023-34659 <h3>CVE-2023-34659</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: JEECG / jeecg-boot | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2023-34659</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: JEECG / jeecg-boot | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/798e4ec0-659a-427c-898b-25408fff3803 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2024-53944 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2024-53944 <h3>CVE-2024-53944</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-02</p> <p><strong>Asserted:</strong> 2025-07-02</p> <p><strong>Scope Notes:</strong> Affected: Tuoshi/Dionlink / Tuoshi/Dionlink LT15D 4G Wi-Fi | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 13</p> <h3>CVE-2024-53944</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-07-02</p> <p><strong>Asserted:</strong> 2025-07-02</p> <p><strong>Scope Notes:</strong> Affected: Tuoshi/Dionlink / Tuoshi/Dionlink LT15D 4G Wi-Fi | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 13</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6c846690-fcf6-4cc2-9834-effb3bd4bc9d Tue, 30 Jun 2026 00:00:00 +0000 CVE-2023-43795 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2023-43795 <h3>CVE-2023-43795</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-22</p> <p><strong>Asserted:</strong> 2024-07-22</p> <p><strong>Scope Notes:</strong> Affected: GeoServer / GeoServer | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2023-43795</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-22</p> <p><strong>Asserted:</strong> 2024-07-22</p> <p><strong>Scope Notes:</strong> Affected: GeoServer / GeoServer | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/078d66c4-f021-45fa-ae5d-e8597f625323 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2017-17215 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2017-17215 <h3>CVE-2017-17215</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2022-05-04</p> <p><strong>Asserted:</strong> 2022-05-04</p> <p><strong>Scope Notes:</strong> Affected: Huawei / Huawei Home Gateway HG532 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 5578</p> <h3>CVE-2017-17215</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2022-05-04</p> <p><strong>Asserted:</strong> 2022-05-04</p> <p><strong>Scope Notes:</strong> Affected: Huawei / Huawei Home Gateway HG532 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-06-30: 5578</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a7dccd3-97eb-4bc5-8f6b-ae5d5937caa9 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2019-7238 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2019-7238 <h3>CVE-2019-7238</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Sonatype / Nexus Repository Manager | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 7</p> <h3>CVE-2019-7238</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Sonatype / Nexus Repository Manager | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 7</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fab19a2e-741d-48f5-a85a-f515a0752b4b Tue, 30 Jun 2026 00:00:00 +0000 CVE-2017-12635 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2017-12635 <h3>CVE-2017-12635</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / CouchDB | Class: database | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> <h3>CVE-2017-12635</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / CouchDB | Class: database | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 9</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3f8aee59-58b8-48ae-9a44-1a532441fe6a Tue, 30 Jun 2026 00:00:00 +0000 CVE-2022-25369 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2022-25369 <h3>CVE-2022-25369</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Dynamicweb Software / Dynamicweb | Class: other-software | Severity: None (CVSS 0) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2022-25369</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Dynamicweb Software / Dynamicweb | Class: other-software | Severity: None (CVSS 0) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1f561a43-e0f5-4f1d-a729-65b58c66c82f Tue, 30 Jun 2026 00:00:00 +0000 CVE-2022-22897 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2022-22897 <h3>CVE-2022-22897</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-08-06</p> <p><strong>Asserted:</strong> 2024-08-06</p> <p><strong>Scope Notes:</strong> Affected: PrestaShop / PrestaShop ApolloTheme AP PageBuilder module | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2022-22897</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-08-06</p> <p><strong>Asserted:</strong> 2024-08-06</p> <p><strong>Scope Notes:</strong> Affected: PrestaShop / PrestaShop ApolloTheme AP PageBuilder module | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/675695a4-8240-4ad0-bdbd-b495c071a804 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2021-27670 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2021-27670 <h3>CVE-2021-27670</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-21</p> <p><strong>Asserted:</strong> 2026-01-21</p> <p><strong>Scope Notes:</strong> Affected: Appspace / Appspace | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2021-27670</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-21</p> <p><strong>Asserted:</strong> 2026-01-21</p> <p><strong>Scope Notes:</strong> Affected: Appspace / Appspace | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d9ba8e8b-cb40-4a94-8693-3c9e62750a8a Tue, 30 Jun 2026 00:00:00 +0000 CVE-2020-10148 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2020-10148 <h3>CVE-2020-10148</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SolarWinds / SolarWinds Orion | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2020-10148</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SolarWinds / SolarWinds Orion | Class: device-management-platform | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0b5cbe91-7dc9-4d59-8175-c88c42af8d9e Tue, 30 Jun 2026 00:00:00 +0000 CVE-2022-25486 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2022-25486 <h3>CVE-2022-25486</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 78</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: CuppaCMS / CuppaCMS | Class: cms | Severity: High (CVSS 7.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> <h3>CVE-2022-25486</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 78</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: CuppaCMS / CuppaCMS | Class: cms | Severity: High (CVSS 7.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 1</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e25a7e89-9e31-4cc0-bfa2-d2cdfe4152e0 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2021-21402 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2021-21402 <h3>CVE-2021-21402</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 65</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-17</p> <p><strong>Asserted:</strong> 2023-10-17</p> <p><strong>Scope Notes:</strong> Affected: Jellyfin / Jellyfin | Class: other-software | Severity: Medium (CVSS 6.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 10</p> <h3>CVE-2021-21402</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 65</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-17</p> <p><strong>Asserted:</strong> 2023-10-17</p> <p><strong>Scope Notes:</strong> Affected: Jellyfin / Jellyfin | Class: other-software | Severity: Medium (CVSS 6.5) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-06-30: 10</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcbf12dc-9ee2-4a67-a133-50786fa1e696 Tue, 30 Jun 2026 00:00:00 +0000 CVE-2021-42013 - Confirmed Exploitation https://db.gcve.eu/vuln/CVE-2021-42013 <h3>CVE-2021-42013</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-19</p> <p><strong>Asserted:</strong> 2024-07-19</p> <p><strong>Scope Notes:</strong> Affected: Apache / Apache HTTP Server | Class: web-server | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1345</p> <h3>CVE-2021-42013</h3> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-06-30 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-19</p> <p><strong>Asserted:</strong> 2024-07-19</p> <p><strong>Scope Notes:</strong> Affected: Apache / Apache HTTP Server | Class: web-server | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-06-30: 1345</p> https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8ee18e0-e94b-43a1-b1a5-d810997b2e7f Tue, 30 Jun 2026 00:00:00 +0000