CVERadar

Updated Tue, 10 Nov 2026 13:30:02 GMT

Exploited CVEs, on radar.

News on newly exploited vulnerabilities: what happened, who is affected and whether attackers are using it. Every record shows the exploitation evidence, the attack chain on a playable MITRE ATT&CK board and the vendor advisory.

1922CVEs tracked
682Known exploited
179CTID ATT&CK-mapped
Play the #1 threatHow we rank
CVE radar storyboardTop CVEs shown as blips: first on the radar, then grouped by ransomware use, known exploitation and EPSS, then shown resolved with a fix.CVE-2025-53770: Microsoft SharePointCVE-2021-26086: Atlassian Jira Server and Data CenterCVE-2024-7593: Ivanti Virtual Traffic ManagerCVE-2024-23897: Jenkins Jenkins Command Line Interface (CLI)CVE-2024-3400: Palo Alto Networks PAN-OSCVE-2024-21893: Ivanti Connect Secure, Policy Secure, and NeuronsCVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron CoreCVE-2024-21887: Ivanti Connect Secure and Policy SecureCVE-2023-1671: Sophos Web ApplianceCVE-2023-22518: Atlassian Confluence Data Center and ServerCVE-2023-4966: Citrix NetScaler ADC and NetScaler GatewayCVE-2023-44487: IETF HTTP/2CVE-2023-32315: Ignite Realtime OpenfireCVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM)CVE-2023-1389: TP-Link Archer AX21CVE-2023-27350: PaperCut MF/NGCVE-2023-0669: Fortra GoAnywhere MFTCVE-2022-26134: Atlassian Confluence Server/Data CenterCVE-2014-0160: OpenSSL OpenSSLCVE-2022-29464: WSO2 Multiple ProductsCVE-2017-9841: PHPUnit PHPUnitCVE-2015-1635: Microsoft HTTP.sysCVE-2014-6271: GNU Bourne-Again Shell (Bash)CVE-2021-44228: Apache Log4j2CVE-2021-40438: Apache ApacheCVE-2017-5638: Apache StrutsCVE-2018-13379: Fortinet FortiOSCVE-2019-0708: Microsoft Remote Desktop ServicesCVE-2019-11510: Ivanti Pulse Connect SecureCVE-2019-19781: Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCVE-2020-5902: F5 BIG-IPCVE-2021-1498: Cisco HyperFlex HXCVE-2021-21985: VMware vCenter ServerCVE-2021-22005: VMware vCenter ServerCVE-2021-26084: Atlassian Confluence Server and Data CenterCVE-2021-34473: Microsoft Exchange ServerCVE-2021-35464: ForgeRock Access Management (AM)CVE-2017-7921: Hikvision Multiple ProductsCVE-2022-22954: VMware Workspace ONE Access and Identity ManagerCVE-2012-1823: PHP PHPCVE-2013-2251: Apache StrutsCVE-2020-14882: Oracle WebLogic ServerCVE-2019-16920: D-Link Multiple RoutersCVE-2021-26855: Microsoft Exchange ServerCVE-2025-49704: Microsoft SharePointCVE-2024-3273: D-Link Multiple NAS DevicesCVE-2022-44877: CWP Control Web PanelCVE-2024-34102: Adobe Commerce and Magento Open Source
  1. 1. Sweep New exploited vulnerabilities show up on the radar as they surface.
  2. 2. Triage Each blip is weighed by how much it matters to defenders.
  3. 3. Resolve Each CVE gets the fix, the vendor advisory and the ATT&CK path, so it ends patched or mitigated.

Latest posts

Search the radar

120 of 1922 CVEs