Live operations view
Threat Intel
Exploited vulnerabilities, ransomware claims, botnet infrastructure and the news that explains them, pulled from public feeds every fifteen minutes.
- CISA KEVlive
- EPSSlive
- ransomware.livelive
- Feodolive
- SANS ISClive
- RSSlive
Live · Refreshed 11m
Known exploited vulnerabilities
Newest entries in the CISA catalogue, with FIRST EPSS exploit probability.
updated 11mMost listed vendors · 30d
- Plex4
- Cisco3
- Ivanti3
- Ahsay2
- Barracuda Networks2
- Google2
- CVE-2026-20320added 2026-11-10
Cisco BroadWorks · Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
EPSS 0% - CVE-2026-125350added 2026-11-10
Google Chromium · Google Chromium Use-After-Free Vulnerability
EPSS — - CVE-2026-124194added 2026-11-10
Microsoft Office · Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
EPSS — - CVE-2026-116606added 2026-11-10
Barracuda Networks Barracuda Email Security Gateway (ESG) · Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
EPSS 2% - CVE-2026-111793added 2026-11-10
Openwave Messaging Limited Webtop Media Transcoder · Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
EPSS 0% - CVE-2026-111560added 2026-11-10
Barracuda Networks Multiple Products · Barracuda Networks Multiple Products OS Command Injection Vulnerability
EPSS 1% - CVE-2026-123218added 2026-11-09
IBM Aspera Faspex · IBM Aspera Faspex Incorrect Authorization Vulnerability
EPSS 1% - CVE-2026-123158added 2026-11-09
OpenBSD OpenSSH · OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
EPSS 17% - CVE-2026-116779added 2026-11-09
SignalWire FreeSwitch · SignalWire FreeSwitch Code Injection Vulnerability
EPSS 2% - CVE-2026-102895added 2026-11-09
GPUStack GPUStack · GPUStack Improper Authentication Vulnerability
EPSS 1% - CVE-2026-19868added 2026-11-06
SonicWall SonicOS SSLVPN · SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
EPSS 1% - CVE-2024-27834added 2026-11-04
Apple Multiple Products · Apple Multiple Products Improper Authentication Vulnerability
EPSS 2% - CVE-2026-119977added 2026-11-03
WordPress WordPress Core · WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
EPSS 1% - CVE-2026-118527added 2026-10-30
Ivanti Connect Secure · Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
EPSS 1% - CVE-2026-111357added 2026-10-30
Ivanti Connect Secure · Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
EPSS 1% - CVE-2026-97229added 2026-10-29
GitLab Community Edition and Enterprise Edition · GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
EPSS 65% - CVE-2026-76418added 2026-10-29
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software · Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
EPSS 1% - CVE-2026-46300added 2026-10-28
Linux Kernel · Linux Kernel Missing Initialization of a Variable Vulnerability
EPSS 16% - CVE-2026-41709added 2026-10-28
Broadcom VMware ESX · Broadcom VMWare ESX Insufficient Logging Vulnerability
EPSS 1% - CVE-2026-48356added 2026-10-27
Adobe Commerce and Magento · Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
EPSS 47% - CVE-2026-111497added 2026-10-27
Google Brotli · Google Brotli Unchecked Return Value Vulnerability
EPSS 83% - CVE-2026-109619added 2026-10-26
PHP Group PHP · PHP Stale Internal Request-State Vulnerability
EPSS 100% - CVE-2026-109618added 2026-10-26
PHP Group PHP · PHP Memory Corruption Vulnerability
EPSS 100% - CVE-2026-114625added 2026-10-23
Arista VeloCloud Orchestrator · Arista VeloCloud Orchestrator SQL Injection Vulnerability
EPSS 1% - CVE-2026-110447added 2026-10-23
Collabora Collabora Online – Built-in CODE Server · Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
EPSS 73% - CVE-2026-96656added 2026-10-20
Plex Media Server · Plex Media Server External Control of File Name or Path Vulnerability
EPSS 2% - CVE-2026-96655added 2026-10-20
Plex Media Server · Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EPSS 11% - CVE-2026-96654added 2026-10-20
Plex Media Server · Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
EPSS 2% - CVE-2026-96652added 2026-10-20
Plex Media Server · Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EPSS 12% - CVE-2026-110936added 2026-10-20
Siemens Software Center · Siemens Software Center Uncontrolled Search Path Element Vulnerability
EPSS 1%