KEV

Known Exploited Vulnerabilities Catalog

Local catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: 1a89b78e-f703-45f3-bb86-59eb712668bd (gna-1)
License: CC0-1.0

Publication activity Vulnerabilities this catalog listed per day, by its earliest observation date (first seen, then recorded, falling back to the status update). Select a day to filter the entries below.

Hover a day to see what this catalog listed on it.

Less More
KEV Entries
21
Last updated First listed
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
GCVE-1-2026-0020
Eir - D1000 		Confirmed
Asserted: 2026-03-11 		Yes 2026-03-23
First seen: 2026-01-14 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2024-13030
D-Link - DIR-823G 		Confirmed
Asserted: 2026-03-12 		Yes 2026-03-12
First seen: 2026-03-12 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2021-35394 Confirmed
Asserted: 2026-03-12 		Yes 2026-03-12
First seen: 2026-03-12 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2017-17215
Huawei Technologies Co., Ltd. - HG532 		Confirmed
Asserted: 2026-03-12 		Yes 2026-03-12
First seen: 2026-03-12 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2014-8361 Confirmed
Asserted: 2026-03-12 		Yes 2026-03-12
First seen: 2026-03-12 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2026-25108
Soliton Systems K.K. - FileZen 		Confirmed
Asserted: 2026-02-26 		Yes 2026-02-26
First seen: 2026-02-26 		- RCE
 Details
CVE-2026-1340
Ivanti - Endpoint Manager Mobile 		Confirmed Yes 2026-02-03
First seen: 2026-02-03 		- RCE
No Auth Required
Remote 		Details
CVE-2026-1281
Ivanti - Endpoint Manager Mobile 		Confirmed Yes 2026-02-03
First seen: 2026-02-03 		- Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2023-28771
Zyxel - ZyWALL/USG series firmware , Zyxel - VPN series firmware +2 more
Alternative IDs: GCVE-0-2023-28771 		Confirmed Yes 2026-02-03
First seen: 2025-01-01 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2026-21509
Microsoft - Microsoft 365 Apps for Enterprise , Microsoft - Microsoft Office 2016 +3 more 		Confirmed Yes 2026-02-02
First seen: 2026-01-26 		- RCE
No Auth Required
 Details
displaying 11 - 20 KEV entries in total 21
About this Catalog

CIRCL provides a known-exploited vulnerability catalog and supports the different status reasons described in GCVE BCP-07.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.

JSON Schema JSON API NDJSON