https://vulnerability.circl.lu/kev-catalogs/feed 2026-07-06T01:17:31.409742+00:00 gna-1 info@circl.lu python-feedgen Aggregated feed of KEV entries across all catalogs explorable via this instance, conforming to GCVE BCP-07. Contains the most recent 20 entries. https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b8a9680-6913-4e1f-9308-d3136d97e4b7 2026-07-06T01:00:26.830621+00:00 <h3>EDB-44760</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DSL-2750B | Class: router | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 41</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/332c2162-0965-4adc-8f82-ae8b34fa430f 2026-07-06T01:01:23.188933+00:00 <h3>CVE-2021-46381</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-15</p> <p><strong>Asserted:</strong> 2023-10-15</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DAP-1620 | Class: wireless-extender | Severity: High (CVSS 7.5) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 18</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8a2bcd-1ac2-406f-9e43-69780fe9e616 2026-07-06T01:00:31.822744+00:00 <h3>CVE-2018-7600</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Drupal / Drupal | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 181</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76e94921-1d0e-4baa-aaa3-c191c81646fd 2026-07-06T01:01:27.154308+00:00 <h3>CVE-2024-45195</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-12-05</p> <p><strong>Asserted:</strong> 2024-12-05</p> <p><strong>Scope Notes:</strong> Affected: Apache / OFBiz | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 5</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5055a1c0-ab68-4ec6-b604-d4b5d78de64d 2026-07-06T01:01:25.130613+00:00 <h3>CVE-2025-0107</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 77</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-15</p> <p><strong>Asserted:</strong> 2026-01-15</p> <p><strong>Scope Notes:</strong> Affected: Palo Alto Networks / Palo Alto Networks Expedition | Class: other-software | Severity: High (CVSS 7.7) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 5</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fc5750-1fad-4e9f-b7ce-2b87a0bde698 2026-07-06T01:00:37.561062+00:00 <h3>CVE-2020-16846</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SaltStack / Salt | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 50</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2adee1b8-90e1-42a2-b135-815ff058b471 2026-07-06T01:01:10.048732+00:00 <h3>CVE-2019-5434</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Revive / Revive Adserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d527e7e-af6c-4b38-96b1-35e0e2107215 2026-07-06T01:00:22.671158+00:00 <h3>CVE-2018-10562</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Dasan / Dasan GPON Home Router | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 308</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdcbcb01-f1bf-4709-adbb-a1890873fa0c 2026-07-06T01:01:10.808413+00:00 <h3>CVE-2020-10173</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-03-13</p> <p><strong>Asserted:</strong> 2024-03-13</p> <p><strong>Scope Notes:</strong> Affected: Comtrend / Comtrend VR-3033 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 3</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2ea7cfe-4dc7-456f-b6c7-1250526dcd3c 2026-07-06T01:01:06.030565+00:00 <h3>CVE-2019-5129</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 48</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffa60d6c-624a-4e3c-bb75-50324e4bbe11 2026-07-06T01:00:27.599824+00:00 <h3>CVE-2020-17496</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: vBulletin / vBulletin | Class: cms | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 265</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/929c0d80-34e5-4a6d-9986-b1e2d37eaa30 2026-07-06T01:00:52.152122+00:00 <h3>EDB-28713</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: RedHat / JBoss | Class: app-server | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 27</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fae84844-4b6a-403c-900d-eb6e4270dc97 2026-07-06T01:01:05.515667+00:00 <h3>CVE-2020-36728</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-18</p> <p><strong>Asserted:</strong> 2025-11-18</p> <p><strong>Scope Notes:</strong> Affected: Wordpress / Wordpress Adning Advertising plugin | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 32</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0018b237-9cfb-4884-97b1-fa556aa5c174 2026-07-06T01:02:12.565122+00:00 <h3>CVE-2024-3721</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-04-21</p> <p><strong>Asserted:</strong> 2024-04-21</p> <p><strong>Scope Notes:</strong> Affected: TBK / TBK DVR-4104/DVR-4216 | Class: video-system | Severity: None (CVSS 0) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42715fd5-45a8-42a5-a69c-8ad5df98d0eb 2026-07-06T01:00:34.344574+00:00 <h3>CVE-2017-9805</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 81</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / Struts | Class: web-app-framework | Severity: High (CVSS 8.1) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 542</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d476cd36-d898-40a8-bd86-2bde23544df5 2026-07-06T01:02:09.132563+00:00 <h3>CVE-2022-47966</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine (multiple products) | Class: other-software | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 7</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4990e5b-9974-4a69-b1c7-8ed63f2d7faf 2026-07-06T01:00:50.887904+00:00 <h3>CVE-2020-8515</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Draytek / Draytek Vigor2960, Vigor3900, Vigor300B | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 26</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc454d6d-3bc8-4d70-a0c1-beffd8e4ea79 2026-07-06T01:01:00.289163+00:00 <h3>CVE-2019-9874</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Citrix / Citrix StoreFront Server | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 17</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c5cb1fe-992f-4097-82a4-c417f56d374c 2026-07-06T01:00:40.774102+00:00 <h3>CVE-2024-36401</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-28</p> <p><strong>Asserted:</strong> 2024-07-28</p> <p><strong>Scope Notes:</strong> Affected: Geoserver / Geoserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 1709</p> 2026-07-04T00:00:00+00:00 https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8869ce58-688c-482a-b5eb-0691c4cf47b6 2026-07-06T01:00:34.194409+00:00 <h3>CVE-2022-26134</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Atlassian / Confluence | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 61</p> 2026-07-04T00:00:00+00:00