Known Exploited Vulnerabilities Catalog

Local catalog of known exploited vulnerabilities conforming to GCVE BCP-07 standard.
Catalog UUID: 1a89b78e-f703-45f3-bb86-59eb712668bd (gna-1)

KEV Entries
15
Vulnerability ID Status Exploited Status Updated Evidence Characteristics Actions
CVE-2026-1340
Ivanti - Endpoint Manager Mobile 		Confirmed Yes 2026-02-03
First seen: 2026-02-03 		- RCE
No Auth Required
Remote 		Details
CVE-2026-1281
Ivanti - Endpoint Manager Mobile 		Confirmed Yes 2026-02-03
First seen: 2026-02-03 		- Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2023-28771
Zyxel - ZyWALL/USG series firmware , Zyxel - VPN series firmware +2 more
Alternative IDs: GCVE-0-2023-28771 		Confirmed Yes 2026-02-03
First seen: 2025-01-01 		1 source
sinkhole 		Severity: 100.0
RCE
No Auth Required
Remote 		Details
CVE-2026-21509
Microsoft - Microsoft 365 Apps for Enterprise , Microsoft - Microsoft Office 2016 +3 more 		Confirmed Yes 2026-02-02
First seen: 2026-01-26 		- RCE
No Auth Required
 Details
CVE-2025-53770
Microsoft - Microsoft SharePoint Enterprise Server 2016 , Microsoft - Microsoft SharePoint Server 2019 +1 more
Alternative IDs: GCVE-0-2025-53770 		Confirmed Yes 2026-02-02
First seen: 2025-07-20 		- RCE
No Auth Required
Remote 		Details
displaying 11 - 15 KEV entries in total 15
About this Catalog

CIRCL provides a known-exploited vulnerability and supporting the different status_reason described in GCVE BCP-07.

This Known Exploited Vulnerabilities (KEV) catalog conforms to the GCVE BCP-07 standard (Best Current Practice) standard for documenting vulnerabilities with confirmed or suspected active exploitation.

Each entry includes exploitation status, evidence sources, and characteristics to help organizations prioritize vulnerability remediation efforts.

JSON Schema JSON API NDJSON