# CVERadar

> Exploited vulnerabilities, mapped to MITRE ATT&CK, with fixes you can act on. 1724 CVEs that are exploited in the wild (CISA KEV, VulnCheck KEV) or have public exploit code (Metasploit, Exploit-DB, GitHub PoCs that meet a quality bar), each with severity, EPSS, fixed versions, vendor advisories and a MITRE ATT&CK chain. Built by LayerLogix. Last data update: 2026-10-25T04:32:13.713Z.

Every CVE page lives at https://cveradar.org/cve/<CVE-ID>/ (for example https://cveradar.org/cve/CVE-2024-3400/). Only CISA KEV and VulnCheck KEV listings are described as "exploited in the wild"; public exploit code is reported separately. ATT&CK techniques are labelled as CTID-mapped or inferred. Always confirm fixes against the vendor advisory.

## Lists
- [All CVEs](https://cveradar.org/cves/): every tracked CVE, sorted by threat level
- [Exploited in the wild](https://cveradar.org/cves/in-the-wild/): CVEs listed as exploited in the wild by CISA KEV or VulnCheck KEV
- [Metasploit module](https://cveradar.org/cves/metasploit/): CVEs with a public Metasploit Framework module
- [Exploit-DB](https://cveradar.org/cves/exploit-db/): CVEs with a public exploit on Exploit-DB
- [Public PoC](https://cveradar.org/cves/public-poc/): CVEs with public proof-of-concept code on GitHub that meets the quality bar
- [CVEs by year](https://cveradar.org/cves/year/): CVE-2026 (579), CVE-2025 (548), CVE-2024 (303), CVE-2023 (83), CVE-2022 (39), CVE-2021 (47), CVE-2020 and older (125)
- [Business applications](https://cveradar.org/business-apps/): exploited CVEs in common small-business software, in plain English
- [Site map](https://cveradar.org/site-map/)

## Data
- [Exploited CVEs JSON](https://cveradar.org/data/exploited.json): machine-readable export of every CVE on the site (schema 1)
- [RSS feed](https://cveradar.org/feed.xml): new CVEs, fix guides and daily briefs
- [XML sitemap](https://cveradar.org/sitemap.xml)

## Method
- [Methodology](https://cveradar.org/methodology/): inclusion rules, PoC quality bar, threat-level formula, ATT&CK mapping sources
- [ATT&CK Explorer](https://cveradar.org/attack/): techniques enabled by the tracked CVEs, by tactic

## Top CVEs by EPSS among CISA KEV entries
- [CVE-2025-53770](https://cveradar.org/cve/CVE-2025-53770/): Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- [CVE-2021-26086](https://cveradar.org/cve/CVE-2021-26086/): Atlassian Jira Server and Data Center Path Traversal Vulnerability
- [CVE-2024-7593](https://cveradar.org/cve/CVE-2024-7593/): Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
- [CVE-2024-23897](https://cveradar.org/cve/CVE-2024-23897/): Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
- [CVE-2024-3400](https://cveradar.org/cve/CVE-2024-3400/): Palo Alto Networks PAN-OS Command Injection Vulnerability
- [CVE-2024-21893](https://cveradar.org/cve/CVE-2024-21893/): Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
- [CVE-2023-35082](https://cveradar.org/cve/CVE-2023-35082/): Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
- [CVE-2024-21887](https://cveradar.org/cve/CVE-2024-21887/): Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
- [CVE-2023-1671](https://cveradar.org/cve/CVE-2023-1671/): Sophos Web Appliance Command Injection Vulnerability
- [CVE-2023-22518](https://cveradar.org/cve/CVE-2023-22518/): Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

## Recent fix guides
- [How to fix CVE-2026-110447: Collabora Online – Built-in CODE Server (exploited in the wild)](https://cveradar.org/blog/cve-2026-110447/)
- [How to fix CVE-2026-114625: Arista VeloCloud Orchestrator (exploited in the wild)](https://cveradar.org/blog/cve-2026-114625/)
- [How to fix CVE-2026-109618: php (public exploit)](https://cveradar.org/blog/cve-2026-109618/)
- [How to fix CVE-2024-26503: openeclass (public exploit)](https://cveradar.org/blog/cve-2024-26503/)
- [How to fix CVE-2026-18963: CVE-2026-18963 (public exploit)](https://cveradar.org/blog/cve-2026-18963/)
- [How to fix CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition (exploited in the wild)](https://cveradar.org/blog/cve-2026-106931/)
- [How to fix CVE-2026-110936: Siemens Software Center (exploited in the wild)](https://cveradar.org/blog/cve-2026-110936/)
- [How to fix CVE-2026-96652: Plex Media Server (exploited in the wild)](https://cveradar.org/blog/cve-2026-96652/)
- [How to fix CVE-2026-96654: Plex Media Server (exploited in the wild)](https://cveradar.org/blog/cve-2026-96654/)
- [How to fix CVE-2026-96655: Plex Media Server (exploited in the wild)](https://cveradar.org/blog/cve-2026-96655/)
- [How to fix CVE-2026-96656: Plex Media Server (exploited in the wild)](https://cveradar.org/blog/cve-2026-96656/)
- [How to fix CVE-2025-61624: Fortinet Multiple Products (exploited in the wild)](https://cveradar.org/blog/cve-2025-61624/)
- [How to fix CVE-2026-102764: BeyondTrust Remote Support (exploited in the wild)](https://cveradar.org/blog/cve-2026-102764/)
- [How to fix CVE-2026-21589: Atlassian Multiple Products (exploited in the wild)](https://cveradar.org/blog/cve-2026-21589/)
- [How to fix CVE-2026-0322: Palo Alto Networks PAN-OS (exploited in the wild)](https://cveradar.org/blog/cve-2026-0322/)

## Optional
- [Blog](https://cveradar.org/blog/): fix guides and daily briefs
- [LayerLogix](https://www.layerlogix.com): the managed IT and cybersecurity provider that maintains CVERadar