See what became
exploitable.

Latest CVEs, exploit intelligence and public PoC references, updated hourly.

Browse latest
Last sync 22:05 UTC 8 of 8 sources healthy

Known exploited

1–15 of 309 matching entries · 6717 total · live data

CVEVulnerabilityCVSSUpdatedProductPoCKEV
CVE-2026-110936KEVSiemens Software Center vulnerability8.417 Oct 202607:16 UTCSiemens Software Centerbefore V4.0.9.8 (custom)2 sourcesNoneYesCVE-2026-106931KEVEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability0.019 Oct 202622:00 UTCSiteGuard Server EditionSee original advisory2 sourcesNoneYesCVE-2026-105134KEVAhsayCBS vulnerability9.34 Oct 202605:16 UTCAhsayCBS10.3.0; 10.3.1; 10.3.2123 sourcesCandidateYesCVE-2026-105133KEVAhsayCBS vulnerability5.54 Oct 202605:16 UTCAhsayCBS10.3.0; 10.3.1; 10.3.223 sourcesNoneYesCVE-2026-104935KEVIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability0.012 Oct 202622:00 UTCConnect SecureSee original advisory22 sourcesNoneYesCVE-2026-104286KEVFortiMail vulnerability9.82 Oct 202602:18 UTCFortiMail8.0.0; 7.6.0 through 7.6.5 (semver); 7.4.0 through 7.4.6 (semver); 7.2.0 through 7.2.9 (semver); 7.0.0 through 7.0.9 (semver)296 sourcesVerifiedYesCVE-2026-102764KEVRemote Support vulnerability9.317 Oct 202602:16 UTCRemote Support0 through 26.2.3 (custom)16 sourcesNoneYesCVE-2026-102490KEVZammad vulnerability9.43 Oct 202602:18 UTCZammad1.5.0 through before 7.1.0-alpha (semver)62 sourcesNoneYesCVE-2026-102489KEVZammad vulnerability9.410 Oct 202602:18 UTCZammad6.3.0 through before 6.5.4 (semver)75 sourcesCandidateYesCVE-2026-96951KEVOutlook.com vulnerability8.816 Oct 202602:18 UTCOutlook.com1.0.0 through before 20260925.100 (custom); 10.0.14393.0 through before 10.0.14393.9612 (custom); 10.0.17763.0 through before 10.0.17763.9376 (custom); 10.0.19044.0 through before 10.0.19044.7807 (custom); 10.0.19045.0 through before 10.0.19044.7807 (custom); 10.0.22631.0 through before 10.0.22631.7652 (custom); 10.0.26100.0 through before 10.0.26100.9711 (custom); 10.0.26200.0 through before 10.0.26200.9711 (custom); 10.0.28000.0 through before 10.0.28000.3231 (custom); 10.0.26300.0 through before 10.0.26300.9711 (custom); 6.3.9600.0 through before 6.3.9600.23470 (custom); 10.0.20348.0 through before 10.0.20348.5761 (custom); 10.0.26100.0 through before 10.0.26100.33650 (custom)17 sourcesNoneYesCVE-2026-96656KEVMedia Server vulnerability8.620 Oct 202618:17 UTCMedia Serverbefore 1.43.3.10861 (custom)8 sourcesCandidateYesCVE-2026-96655KEVMedia Server vulnerability5.320 Oct 202618:17 UTCMedia Serverbefore 1.43.3.10861 (custom)6 sourcesNoneYesCVE-2026-96654KEVMedia Server vulnerability6.920 Oct 202618:17 UTCMedia Serverbefore 1.43.3.10861 (custom)6 sourcesNoneYesCVE-2026-96652KEVMedia Server vulnerability5.320 Oct 202618:17 UTCMedia Serverbefore 1.43.3.10861 (custom)6 sourcesNoneYesCVE-2026-94127KEVF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability9.323 Sep 202612:32 UTCBIG-IP APM21.1.0 through before Hotfix-BIGIP-21.1.0.2.0.30.22-ENG (custom); 17.5.0 through before Hotfix-BIGIP-17.5.1.9.0.160.12-ENG (custom); 17.1.0 through before Hotfix-BIGIP-17.1.3.5.0.41.14-ENG (custom)366 sourcesVerifiedYes

Signals, not noise.

Every item keeps its source trail. Confidence describes evidence quality; severity describes potential impact. They remain separate throughout the product.

01

Collect

Incremental source connectors preserve timestamps, URLs, and content hashes.

02

Correlate

CVE, GHSA, product, repository, and advisory identifiers are deduplicated.

03

Verify

Source quality, consistency, and independent references form the confidence score.

Get the signal.

Save your watch preferences in this browser. Email delivery is not connected.