Prioritise with evidence.
Explore known exploited vulnerabilities with NVD severity context and EPSS probabilities. Priorities are descriptive, not proprietary scores or asset-specific findings.
Snapshot: 2026-10-18T20:43:22.315380+00:00 · Showing 20 recently catalogued KEV entries · Methodology ↗
KEV entries enriched20Selected recent KEV subset
NVD responses20 / 20Partial failures shown as unknown
EPSSAvailableProbability, not confirmation of exploitation
Enriched vulnerability intelligence20 records
| CVE | Product | CVSS | EPSS | Exploitation | Remediation |
|---|---|---|---|---|---|
| CVE-2026-102764 ↗ | BeyondTrust Remote Support | 9.3 | 1.18% | KEV confirmed | View guidance ↗ |
| CVE-2025-61624 ↗ | Fortinet Multiple Products | 6.5 | 1.08% | KEV confirmed | View guidance ↗ |
| CVE-2026-21589 ↗ | Atlassian Multiple Products | Unknown | Unknown | KEV confirmed | View guidance ↗ |
| CVE-2026-76519 ↗ | Cisco Secure Email Gateway | 9.8 | 1.57% | KEV confirmed | View guidance ↗ |
| CVE-2026-105134 ↗ | Ahsay AhsayCBS | 9.3 | 4.78% | KEV confirmed | View guidance ↗ |
| CVE-2026-105133 ↗ | Ahsay AhsayCBS | 5.5 | 0.85% | KEV confirmed | View guidance ↗ |
| CVE-2026-0322 ↗ | Palo Alto Networks PAN-OS | 8.6 | 1.21% | KEV confirmed | View guidance ↗ |
| CVE-2026-96951 ↗ | Microsoft Windows | 8.8 | 1.51% | KEV confirmed | View guidance ↗ |
| CVE-2026-104935 ↗ | Ivanti Connect Secure | 8.6 | 25.98% | KEV confirmed | View guidance ↗ |
| CVE-2023-22894 ↗ | Strapi Strapi | 4.9 | 3.61% | KEV confirmed | View guidance ↗ |
| CVE-2021-3199 ↗ | ONLYOFFICE Docs | 9.8 | 20.14% | KEV confirmed | View guidance ↗ |
| CVE-2016-3081 ↗ | Apache Struts | 8.1 | 96.05% | KEV confirmed | View guidance ↗ |
| CVE-2015-5477 ↗ | ISC BIND | 7.5 | 99.41% | KEV confirmed | View guidance ↗ |
| CVE-2015-3306 ↗ | ProFTPD ProFTPD | 10 | 99.50% | KEV confirmed | View guidance ↗ |
| CVE-2026-88779 ↗ | Citrix NetScaler | 8.7 | 0.59% | KEV confirmed | View guidance ↗ |
| CVE-2026-102490 ↗ | Zammad GmbH Zammad | 9.4 | 0.55% | KEV confirmed | View guidance ↗ |
| CVE-2026-102489 ↗ | Zammad GmbH Zammad | 9.4 | 1.26% | KEV confirmed | View guidance ↗ |
| CVE-2026-104286 ↗ | Fortinet FortiMail | 9.8 | 2.20% | KEV confirmed | View guidance ↗ |
| CVE-2026-76504 ↗ | Cisco Catalyst SD-WAN Manager | 9.8 | 1.82% | KEV confirmed | View guidance ↗ |
| CVE-2026-86950 ↗ | Apple Multiple Products | 8.8 | 1.24% | KEV confirmed | View guidance ↗ |
How to interpret this page
A CVE in CISA KEV is known to have been exploited in the wild. It does not establish that any Shodan-indexed host, visitor or organisation is vulnerable. Version and configuration validation is required. EPSS estimates exploitation probability over 30 days, not CVSS severity.