Last updated
Mon, 12 Oct 2026 09:56:13 GMT (3s ago)
Drag to rotate · click a node
Click a node for country detail. Nodes: country where the affected technology vendor is headquartered. Arcs run to the CISA reporting hub. This is technology origin, not attacker attribution.
What is being exploited in the wild, right now
Every record below comes from a government or peer-reviewed source, is linked back to that source, and is re-checked every 15 minutes. Nothing here is estimated or invented.
Known exploited CVEs
1,739
Confirmed exploitation in the wild
Added last 7 days
5
30 in the last 30 days
Used by ransomware
361
Confirmed ransomware campaign use
Median days in the open
34
CVE publication → today, recent entries
Most targeted vendors
Last 180 days of confirmed exploitation
- Microsoft21
- Cisco14
- Linux7
- Citrix5
- Fortinet5
- Adobe4
- Check Point4
- Google4
- JFrog4
- SonicWall4
Exploit types
Derived from official CVE descriptions
- Remote code execution61
- Other / mixed37
- Authentication bypass26
- Privilege escalation12
- Path traversal9
- Memory corruption8
- Denial of service4
- Server-side request forgery4
Industries most at risk
Inferred from vendor / product positioning
- Telecoms23
- Cloud / SaaS15
- Energy13
- Retail13
- Manufacturing5
- Media / Entertainment2
- Non-profit1
- Government1
Product categories under attack
Derived from official CVE descriptions
- Other43
- Network gear36
- Operating system18
- Development tool12
- Healthcare software10
- Mail / Collaboration9
- VPN / Remote access7
- Database7
Technology origin
Vendor headquarters country
- United States94
- Israel4
- Taiwan2
- Czechia2
- Germany1
- Belgium1
- Japan1
- South Korea1
Ask the feed
Describe your organisation or concern in your own words — answers use only the live, sourced feed
AI risk ranking
One-call AI prioritisation of the 20 newest confirmed exploited vulnerabilities
Live exploit feed
Newest confirmed in-the-wild exploitation · click a row for sources
Support this project
Exploit Watch is free and has no ads or trackers. Sponsorship pays for the data pipeline that keeps it fresh. Give any amount you like.