Act now
Used in ransomware, an exploit probability of 50% or more in the next 30 days, critical severity (CVSS 9+), or rated by CISA as automatable with total impact. Patch or mitigate internet-facing systems within days.
Threat intelligence · updated every morning
Exploited vulnerabilities, ranked by what to fix first.
Every item below is confirmed as exploited in the wild by CISA. We rank each one by how likely it is to be used against you in the next 30 days and how severe it is, so you know what to patch today and what can wait for the next cycle.
- Act now
- –
- This week
- –
- Plan
- –
- Used in ransomware
- –
Start here
Top 10 to fix this week.
The ten exploited vulnerabilities most likely to be used against organisations right now. If you only have time for ten fixes, make it these.
Run any of these? Ask for a free exposure check and we will tell you which apply to you. See the full tracker.
Exploited vulnerability tracker
The last 120 days, most urgent first.
Official advisories
What CISA and Microsoft published this week.
Joint advisories on active threat actors, industrial and medical-device advisories, and Microsoft security updates. Each links to the original.
CISA cybersecurity advisories
Industrial control systems
Medical devices
Microsoft security updates
How we rank
Exploited first, then likelihood and impact.
Severity scores alone send teams chasing thousands of “critical” findings that are never attacked. Starting from what is actually being exploited, then adding the probability of exploitation, focuses effort where attackers are.
This week
Exploit probability of 10% or more, high severity (CVSS 7+), or rated by CISA as automatable at scale. Schedule into this week’s change window.
Plan
Exploited, but less likely to be used against you soon. Fix within your normal patch cycle, before the CISA date.
Vulnerability management
Want this applied to your own systems?
We run risk-based vulnerability management for clients: the same prioritisation, matched to your assets, with patch timelines, tracking and reporting your leadership can read.
- Founder-led
- ISACA CISM
- US & EU
- Reply within one business day
Sources and credits
- CISA Known Exploited Vulnerabilities
- FIRST Exploit Prediction Scoring System (EPSS)
- NIST National Vulnerability Database
- CISA Vulnrichment (SSVC), via the CVE Program
- CISA cybersecurity and ICS advisories
- Microsoft Security Update Guide
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS scores are provided by FIRST (first.org/epss). Summaries are machine-written from CISA’s descriptions; always treat the vendor’s advisory as the authority for fixes. RSS feed.
Make it yours
Which of these affect you?
Send us the vendors and products you run, and we will tell you which exploited vulnerabilities apply and what to fix first. Free, no obligation.
- Founder-led
- ISACA CISM
- US & EU
- Reply within one business day