CISA KEV Catalog
1,687 vulnerabilities confirmed exploited in the wild, as tracked in the CISA Known Exploited Vulnerabilities catalog.
KEV vulnerabilities
9 of 1,687The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local fi
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the con
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Ope
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by una
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.
Are any of these live in your stack?
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.