https://vulnerability.circl.lu/kev-catalogs Aggregated feed of KEV entries across all catalogs explorable via this instance, conforming to GCVE BCP-07. Contains the most recent 20 entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 06 Jul 2026 01:17:31 +0000 https://vulnerability.circl.lu/vuln/EDB-44760 <h3>EDB-44760</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DSL-2750B | Class: router | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 41</p> <h3>EDB-44760</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DSL-2750B | Class: router | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 41</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b8a9680-6913-4e1f-9308-d3136d97e4b7 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2021-46381 <h3>CVE-2021-46381</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-15</p> <p><strong>Asserted:</strong> 2023-10-15</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DAP-1620 | Class: wireless-extender | Severity: High (CVSS 7.5) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 18</p> <h3>CVE-2021-46381</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-15</p> <p><strong>Asserted:</strong> 2023-10-15</p> <p><strong>Scope Notes:</strong> Affected: D-Link / D-Link DAP-1620 | Class: wireless-extender | Severity: High (CVSS 7.5) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 18</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/332c2162-0965-4adc-8f82-ae8b34fa430f Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2018-7600 <h3>CVE-2018-7600</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Drupal / Drupal | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 181</p> <h3>CVE-2018-7600</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Drupal / Drupal | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 181</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e8a2bcd-1ac2-406f-9e43-69780fe9e616 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2024-45195 <h3>CVE-2024-45195</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-12-05</p> <p><strong>Asserted:</strong> 2024-12-05</p> <p><strong>Scope Notes:</strong> Affected: Apache / OFBiz | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 5</p> <h3>CVE-2024-45195</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-12-05</p> <p><strong>Asserted:</strong> 2024-12-05</p> <p><strong>Scope Notes:</strong> Affected: Apache / OFBiz | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 5</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/76e94921-1d0e-4baa-aaa3-c191c81646fd Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2025-0107 <h3>CVE-2025-0107</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 77</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-15</p> <p><strong>Asserted:</strong> 2026-01-15</p> <p><strong>Scope Notes:</strong> Affected: Palo Alto Networks / Palo Alto Networks Expedition | Class: other-software | Severity: High (CVSS 7.7) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 5</p> <h3>CVE-2025-0107</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 77</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-01-15</p> <p><strong>Asserted:</strong> 2026-01-15</p> <p><strong>Scope Notes:</strong> Affected: Palo Alto Networks / Palo Alto Networks Expedition | Class: other-software | Severity: High (CVSS 7.7) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 5</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5055a1c0-ab68-4ec6-b604-d4b5d78de64d Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2020-16846 <h3>CVE-2020-16846</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SaltStack / Salt | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 50</p> <h3>CVE-2020-16846</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: SaltStack / Salt | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 50</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fc5750-1fad-4e9f-b7ce-2b87a0bde698 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2019-5434 <h3>CVE-2019-5434</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Revive / Revive Adserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> <h3>CVE-2019-5434</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Revive / Revive Adserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2adee1b8-90e1-42a2-b135-815ff058b471 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2018-10562 <h3>CVE-2018-10562</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Dasan / Dasan GPON Home Router | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 308</p> <h3>CVE-2018-10562</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Dasan / Dasan GPON Home Router | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 308</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d527e7e-af6c-4b38-96b1-35e0e2107215 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2020-10173 <h3>CVE-2020-10173</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-03-13</p> <p><strong>Asserted:</strong> 2024-03-13</p> <p><strong>Scope Notes:</strong> Affected: Comtrend / Comtrend VR-3033 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 3</p> <h3>CVE-2020-10173</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 88</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-03-13</p> <p><strong>Asserted:</strong> 2024-03-13</p> <p><strong>Scope Notes:</strong> Affected: Comtrend / Comtrend VR-3033 | Class: router | Severity: High (CVSS 8.8) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 3</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdcbcb01-f1bf-4709-adbb-a1890873fa0c Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2019-5129 <h3>CVE-2019-5129</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 48</p> <h3>CVE-2019-5129</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: YouPHPTube / YouPHPTube Encoder | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 48</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2ea7cfe-4dc7-456f-b6c7-1250526dcd3c Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2020-17496 <h3>CVE-2020-17496</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: vBulletin / vBulletin | Class: cms | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 265</p> <h3>CVE-2020-17496</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: vBulletin / vBulletin | Class: cms | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 265</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffa60d6c-624a-4e3c-bb75-50324e4bbe11 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/EDB-28713 <h3>EDB-28713</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: RedHat / JBoss | Class: app-server | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 27</p> <h3>EDB-28713</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: RedHat / JBoss | Class: app-server | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 27</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/929c0d80-34e5-4a6d-9986-b1e2d37eaa30 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2020-36728 <h3>CVE-2020-36728</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-18</p> <p><strong>Asserted:</strong> 2025-11-18</p> <p><strong>Scope Notes:</strong> Affected: Wordpress / Wordpress Adning Advertising plugin | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 32</p> <h3>CVE-2020-36728</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2025-11-18</p> <p><strong>Asserted:</strong> 2025-11-18</p> <p><strong>Scope Notes:</strong> Affected: Wordpress / Wordpress Adning Advertising plugin | Class: cms | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: no | Honeypot connections on 2026-07-04: 32</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fae84844-4b6a-403c-900d-eb6e4270dc97 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2024-3721 <h3>CVE-2024-3721</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-04-21</p> <p><strong>Asserted:</strong> 2024-04-21</p> <p><strong>Scope Notes:</strong> Affected: TBK / TBK DVR-4104/DVR-4216 | Class: video-system | Severity: None (CVSS 0) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> <h3>CVE-2024-3721</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 0</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-04-21</p> <p><strong>Asserted:</strong> 2024-04-21</p> <p><strong>Scope Notes:</strong> Affected: TBK / TBK DVR-4104/DVR-4216 | Class: video-system | Severity: None (CVSS 0) | IoT: yes | In CISA KEV: no | Honeypot connections on 2026-07-04: 29</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0018b237-9cfb-4884-97b1-fa556aa5c174 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2017-9805 <h3>CVE-2017-9805</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 81</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / Struts | Class: web-app-framework | Severity: High (CVSS 8.1) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 542</p> <h3>CVE-2017-9805</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 81</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Apache / Struts | Class: web-app-framework | Severity: High (CVSS 8.1) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 542</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42715fd5-45a8-42a5-a69c-8ad5df98d0eb Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2022-47966 <h3>CVE-2022-47966</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine (multiple products) | Class: other-software | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 7</p> <h3>CVE-2022-47966</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Zoho / ManageEngine (multiple products) | Class: other-software | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 7</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d476cd36-d898-40a8-bd86-2bde23544df5 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2020-8515 <h3>CVE-2020-8515</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Draytek / Draytek Vigor2960, Vigor3900, Vigor300B | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 26</p> <h3>CVE-2020-8515</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-14</p> <p><strong>Asserted:</strong> 2023-10-14</p> <p><strong>Scope Notes:</strong> Affected: Draytek / Draytek Vigor2960, Vigor3900, Vigor300B | Class: router | Severity: Critical (CVSS 9.8) | IoT: yes | In CISA KEV: yes | Honeypot connections on 2026-07-04: 26</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4990e5b-9974-4a69-b1c7-8ed63f2d7faf Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2019-9874 <h3>CVE-2019-9874</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Citrix / Citrix StoreFront Server | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 17</p> <h3>CVE-2019-9874</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 75</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2026-03-09</p> <p><strong>Asserted:</strong> 2026-03-09</p> <p><strong>Scope Notes:</strong> Affected: Citrix / Citrix StoreFront Server | Class: other-software | Severity: High (CVSS 7.5) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 17</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fc454d6d-3bc8-4d70-a0c1-beffd8e4ea79 Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2024-36401 <h3>CVE-2024-36401</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-28</p> <p><strong>Asserted:</strong> 2024-07-28</p> <p><strong>Scope Notes:</strong> Affected: Geoserver / Geoserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 1709</p> <h3>CVE-2024-36401</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2024-07-28</p> <p><strong>Asserted:</strong> 2024-07-28</p> <p><strong>Scope Notes:</strong> Affected: Geoserver / Geoserver | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 1709</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c5cb1fe-992f-4097-82a4-c417f56d374c Sat, 04 Jul 2026 00:00:00 +0000 https://vulnerability.circl.lu/vuln/CVE-2022-26134 <h3>CVE-2022-26134</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Atlassian / Confluence | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 61</p> <h3>CVE-2022-26134</h3> <p><strong>Catalog:</strong> Shadowserver</p> <p><strong>Status:</strong> Confirmed</p> <p><strong>Exploited:</strong> Yes</p> <p><strong>Status Updated:</strong> 2026-07-04 00:00 UTC</p> <p><strong>Characteristics:</strong> Severity: 98</p> <p><strong>Evidence Sources:</strong> 1</p> <p><strong>First Seen:</strong> 2023-10-13</p> <p><strong>Asserted:</strong> 2023-10-13</p> <p><strong>Scope Notes:</strong> Affected: Atlassian / Confluence | Class: other-software | Severity: Critical (CVSS 9.8) | IoT: no | In CISA KEV: yes | Honeypot connections on 2026-07-04: 61</p> https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8869ce58-688c-482a-b5eb-0691c4cf47b6 Sat, 04 Jul 2026 00:00:00 +0000