See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest

Last sync 10:05 UTC 8 of 8 sources healthy

Latest intelligence

811–825 of 1041 matching entries · 3145 total · live data

Entries per page

CVEVulnerabilityCVSSUpdatedProductPoCKEV

CVE-2022-26923KEVMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability9.012 Sep 202615:06 UTCActive DirectorySee original advisory157 sourcesCandidateYes CVE-2022-26134KEVAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability9.85 Sep 202612:45 UTCConfluence Server/Data CenterSee original advisory2106 sourcesVerifiedYes CVE-2022-25765pdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-257650.01 Sep 202622:00 UTCUnknown productSee original advisory151 sourcesCandidateNo CVE-2022-24715Icinga Web 2.10 - Authenticated Remote Code Execution8.88 Sep 202601:15 UTCUnknown productSee original advisory143 sourcesVerifiedNo CVE-2022-24637Open Web Analytics 1.7.3 - Remote Code Execution0.09 Sep 202622:00 UTCUnknown productSee original advisory261 sourcesVerifiedNo CVE-2022-24521KEVMicrosoft Windows CLFS Driver Privilege Escalation Vulnerability7.825 Aug 202613:38 UTCWindowsSee original advisory109 sourcesCandidateYes CVE-2022-24481Exploit for CVE-2022-24481-POC CVE-2022-24481 CVE-2022-245217.825 Aug 202613:38 UTCUnknown productSee original advisory73 sourcesCandidateNo CVE-2022-23773CVE-2022-23773-Reproduce exploit7.55 Sep 202612:41 UTCUnknown productSee original advisory47 sourcesCandidateNo CVE-2022-22972Exploit for CVE-2022-229729.85 Sep 202602:43 UTCUnknown productSee original advisory23 sourcesCandidateNo CVE-2022-22965KEVSpring Framework JDK 9+ Remote Code Execution Vulnerability9.828 Aug 202619:19 UTCSpring FrameworkSee original advisory105 sourcesCandidateYes CVE-2022-22963KEVVMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability0.021 Aug 202622:00 UTCSpring CloudSee original advisory1053 sourcesVerifiedYes CVE-2022-22954KEVVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability10.011 Sep 202618:30 UTCWorkspace ONE Access and Identity ManagerSee original advisory73 sourcesCandidateYes CVE-2022-22718KEVMicrosoft Windows Print Spooler Privilege Escalation Vulnerability7.813 Sep 202618:32 UTCWindowsSee original advisory33 sourcesCandidateYes CVE-2022-22706KEVArm Mali GPU Kernel Driver Unspecified Vulnerability7.87 Sep 202619:21 UTCMali Graphics Processing Unit (GPU)See original advisory112 sourcesCandidateYes CVE-2022-22639CVE-2022-22639 exploit7.814 Sep 202604:51 UTCUnknown productSee original advisory31 sourcesCandidateNo

Priority signals

Counts across the current dataset

CISA Known Exploited Vulnerability

CVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Updated 15 Sep 2026 Open intelligence

Watched vendors

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

01

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

02

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

03

Verify

Source quality, consistency, and independent references form the confidence score.