CVE-20XX-?

Being exploited right now.

CVEs that CISA lists as exploited in real attacks, newest additions first.

2 CVEs · updated 2026-11-05 23:00 UTC

Reset all
  1. CVE-2026-119977

    WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.

    exploited Code execution Web app WordPress

    8.1 HIGH 1% exploit odds Fix listed
  2. CVE-2026-118527

    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.

    exploited Disclosure Network gear Ivanti Connect Secure

    4.3 MEDIUM 0.8% exploit odds Fix listed

These CVEs appear in CISA's Known Exploited Vulnerabilities (KEV) catalog, which means attackers are using them in real attacks. Each entry shows severity, exploit odds, fix status and a timeline.