Previdian - Known Exploited Vulnerabilities Catalog

CVE-2024-58387 - Confirmed Exploitation

Wed, 30 Sep 2026 22:40:21 +0000

CVE-2024-58387

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 22:40 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2023-54403 - Confirmed Exploitation

Wed, 30 Sep 2026 22:40:20 +0000

CVE-2023-54403

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 22:40 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2023-54402 - Confirmed Exploitation

Wed, 30 Sep 2026 22:30:25 +0000

CVE-2023-54402

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 22:30 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2018-17254 - Confirmed Exploitation

Wed, 30 Sep 2026 22:26:12 +0000

CVE-2018-17254

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 22:26 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

Scope Notes: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. | Affected: Arkextensions / JCK Editor | CVSS: 9.8 (CRITICAL) | EPSS: 0.82976 | Used in malware: unknown | Not yet in CISA KEV: True

CVE-2026-102490 - Confirmed Exploitation

Wed, 30 Sep 2026 20:53:04 +0000

CVE-2026-102490

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 20:53 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2026-102489 - Confirmed Exploitation

Wed, 30 Sep 2026 20:52:45 +0000

CVE-2026-102489

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 20:52 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2026-76504 - Confirmed Exploitation

Wed, 30 Sep 2026 15:49:09 +0000

CVE-2026-76504

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-30 15:49 UTC

Evidence Sources: 1

First Seen: 2026-09-30

Asserted: 2026-09-30

CVE-2023-54400 - Confirmed Exploitation

Tue, 29 Sep 2026 17:30:26 +0000

CVE-2023-54400

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-29 17:30 UTC

Evidence Sources: 1

First Seen: 2026-09-29

Asserted: 2026-09-29

CVE-2015-20122 - Confirmed Exploitation

Tue, 29 Sep 2026 17:10:34 +0000

CVE-2015-20122

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-29 17:10 UTC

Evidence Sources: 1

First Seen: 2026-09-29

Asserted: 2026-09-29

CVE-2026-85520 - Confirmed Exploitation

Tue, 29 Sep 2026 13:40:26 +0000

CVE-2026-85520

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-29 13:40 UTC

Evidence Sources: 1

First Seen: 2026-09-29

Asserted: 2026-09-29

CVE-2025-62023 - Confirmed Exploitation

Tue, 29 Sep 2026 09:10:24 +0000

CVE-2025-62023

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-29 09:10 UTC

Evidence Sources: 1

First Seen: 2026-09-29

Asserted: 2026-09-29

CVE-2026-86950 - Confirmed Exploitation

Mon, 28 Sep 2026 21:30:46 +0000

CVE-2026-86950

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-28 21:30 UTC

Evidence Sources: 1

First Seen: 2026-09-28

Asserted: 2026-09-28

Scope Notes: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia... | Affected: Apple / iOS and iPadOS, macOS | CVSS: 8.8 (HIGH) | EPSS: 0.01242 | Used in malware: unknown | Listed 19 hours ahead of CISA KEV | Not yet in CISA KEV: False

CVE-2026-49076 - Confirmed Exploitation

Mon, 28 Sep 2026 08:01:08 +0000

CVE-2026-49076

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-28 08:01 UTC

Evidence Sources: 1

First Seen: 2026-09-28

Asserted: 2026-09-28

CVE-2026-42608 - Confirmed Exploitation

Sun, 27 Sep 2026 19:12:00 +0000

CVE-2026-42608

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-27 19:12 UTC

Evidence Sources: 1

First Seen: 2026-09-27

Asserted: 2026-09-27

CVE-2026-88772 - Confirmed Exploitation

Sun, 27 Sep 2026 18:45:00 +0000

CVE-2026-88772

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-27 18:45 UTC

Evidence Sources: 1

First Seen: 2026-09-27

Asserted: 2026-09-27

CVE-2026-88771 - Confirmed Exploitation

Sun, 27 Sep 2026 18:44:00 +0000

CVE-2026-88771

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-27 18:44 UTC

Evidence Sources: 1

First Seen: 2026-09-27

Asserted: 2026-09-27

Scope Notes: A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands | Affected: Citrix NetScaler / ADC, Gateway | CVSS: 9.5 (CRITICAL) | EPSS: 0.01063 | Used in malware: unknown | Listed 5 hours ahead of CISA KEV | Not yet in CISA KEV: False

CVE-2026-65660 - Confirmed Exploitation

Thu, 24 Sep 2026 14:32:16 +0000

CVE-2026-65660

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-24 14:32 UTC

Evidence Sources: 1

First Seen: 2026-09-24

Asserted: 2026-09-24

Scope Notes: Microsoft SharePoint Server Remote Code Execution Vulnerability | Affected: Microsoft / Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | CVSS: 8.8 (HIGH) | EPSS: 0.02101 | Used in malware: unknown | Listed 1 day ahead of CISA KEV | Not yet in CISA KEV: False

CVE-2026-48842 - Confirmed Exploitation

Thu, 24 Sep 2026 11:23:00 +0000

CVE-2026-48842

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-24 11:23 UTC

Evidence Sources: 1

First Seen: 2026-09-24

Asserted: 2026-09-24

Scope Notes: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace()... | Affected: Roundcube / Webmail | CVSS: 8.1 (HIGH) | EPSS: 0.00891 | Used in malware: unknown | Not yet in CISA KEV: True

CVE-2026-67279 - Confirmed Exploitation

Wed, 23 Sep 2026 19:08:47 +0000

CVE-2026-67279

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-23 19:08 UTC

Evidence Sources: 1

First Seen: 2026-09-23

Asserted: 2026-09-23

CVE-2026-87902 - Confirmed Exploitation

Wed, 23 Sep 2026 14:53:51 +0000

CVE-2026-87902

Status: Confirmed

Exploited: Yes

Status Updated: 2026-09-23 14:53 UTC

Evidence Sources: 1

First Seen: 2026-09-23

Asserted: 2026-09-23

Scope Notes: An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active... | Affected: WordPress / WordPress | CVSS: 8.1 (HIGH) | EPSS: 0.19756 | Used in malware: unknown | Listed 2 days ahead of CISA KEV | Not yet in CISA KEV: False