Threat level Severe
Contact

· Vulnerability feed · live

CVE feed

Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.

RSS feed

Top vendors, 2026 year to date

1,796 published, 118 exploited
7d30d90d2026 YTD
VendorJanFebMarAprMayJunJulAugSepOctNovTotal
Google2783110
Microsoft15237788
Oracle116668
ThemeREX6666
Apache175260
HPE55055
IBM114749
TOTOLINK4040
Adobe11113539
Cisco11132329
Wavlink62026
Hitachi1818
Filters
Severity
Status
Newly exploitedAdded to KEV, last 7 days7Added to KEV, last 30 days32
Vendor
1 result any dateAdded to KEV, last 30 days Apache Sort:NewestExploited firstLikely exploitedCVSS
8.1Apache Struts — Command Injection.ExploitedEPSS 97%