NEW: Group Profiler — instant APT intel lookup.Try it →
Feeds: checking…IOCs: checking…

Cross-source corroborated CVEs

ThreatFilter ingests 52 public threat-intelligence feeds. A CVE gets a page here only once at least 3 distinct sources have reported it, which is a fraction of a percent of everything seen. Each page is the raw record of who published first and how long every other source took to follow, which is a confidence signal no single advisory can give you.

  • 54 corroborated
  • 47 in CISA KEV
  • 49 reported as exploited

  1. CVE-2026-109618

    13 sourcesCRITICAL 9.8CISA KEVEXPLOITED

    First reported 2026-10-21 by elastic-security-labs, then sophos-news, huntress-blog, fortinet-psirt, tenable-advisories and 8 more

  2. CVE-2026-109619

    13 sourcesHIGH 8.1CISA KEVEXPLOITED

    First reported 2026-10-21 by elastic-security-labs, then sophos-news, huntress-blog, fortinet-psirt, tenable-advisories and 8 more

  3. CVE-2026-111497

    8 sourcesCRITICAL 9.8CISA KEVEXPLOITED

    First reported 2026-10-22 by nvd-cve, then microsoft-msrc, rapid7-blog, palo-alto-psirt, cisa-kev and 3 more

  4. CVE-2026-0257

    6 sourcesMEDIUM 9.1CISA KEVEXPLOITEDpalo-alto

    First reported 2026-05-13 by palo-alto-psirt, then nvd-cve, cisa-kev, rapid7-blog, thehackernews and 1 more

  5. CVE-2026-20182

    5 sourcesMEDIUM 10.0CISA KEVEXPLOITEDcisco

    First reported 2026-05-14 by cisa-kev, then rapid7-blog, nvd-cve, tenable-advisories, thehackernews

  6. CVE-2026-35273

    5 sourcesINFO 9.8CISA KEVEXPLOITEDoracle

    First reported 2026-06-11 by thehackernews, then cisa-kev, rapid7-blog, tenable-advisories, zdi-blog

  7. CVE-2026-68820

    5 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-08-11 by cisa-kev, then microsoft-msrc, nvd-cve, tenable-advisories, qualys-blog

  8. CVE-2026-88772

    5 sourcesMEDIUM 9.5CISA KEVEXPLOITEDcitrix

    First reported 2026-09-27 by cisa-kev, then sophos-news, rapid7-blog, unit42, thehackernews

  9. CVE-2025-55182

    4 sourcesINFOCISA KEVEXPLOITEDmeta

    First reported 2025-12-04 by nvd-cve, then cisa-kev, greynoise-blog, huntress-blog

  10. CVE-2026-0300

    4 sourcesHIGH 9.3CISA KEVEXPLOITEDpalo-alto

    First reported 2026-05-06 by cisa-kev, then rapid7-blog, nvd-cve, palo-alto-psirt

  11. CVE-2026-15409

    4 sourcesMEDIUM 10.0CISA KEVEXPLOITEDsonicwall

    First reported 2026-07-14 by cisa-kev, then nvd-cve, rapid7-blog, tenable-advisories

  12. CVE-2026-15410

    4 sourcesMEDIUM 10.0CISA KEVEXPLOITEDsonicwall

    First reported 2026-07-14 by cisa-kev, then nvd-cve, rapid7-blog, tenable-advisories

  13. CVE-2026-21589

    4 sourcesHIGH 7.5CISA KEVEXPLOITEDatlassian

    First reported 2026-10-05 by nvd-cve, then rapid7-blog, sans-isc, cisa-kev

  14. CVE-2026-42897

    4 sourcesMEDIUM 6.1CISA KEVEXPLOITEDmicrosoft

    First reported 2026-05-14 by nvd-cve, then cisa-kev, thehackernews, microsoft-msrc

  15. CVE-2026-45659

    4 sourcesHIGH 8.8CISA KEVEXPLOITEDmicrosoft

    First reported 2026-05-26 by thehackernews, then microsoft-msrc, cisa-kev, tenable-advisories

  16. CVE-2026-46300

    4 sourcesHIGH 7.8CISA KEVEXPLOITEDubuntu

    First reported 2026-05-14 by tenable-advisories, then nvd-cve, microsoft-msrc, cisa-kev

  17. CVE-2026-58644

    4 sourcesINFO 9.8CISA KEVEXPLOITEDmicrosoft

    First reported 2026-07-14 by microsoft-msrc, then cisa-kev, thehackernews, rapid7-blog

  18. CVE-2026-63030

    4 sourcesHIGH 7.5CISA KEVEXPLOITEDwordpress

    First reported 2026-07-17 by rapid7-blog, then tenable-advisories, sans-isc, cisa-kev

  19. CVE-2026-63077

    4 sourcesCRITICAL 9.8CISA KEVEXPLOITEDjetbrains

    First reported 2026-07-27 by nvd-cve, then rapid7-blog, cisa-kev, thehackernews

  20. CVE-2026-65660

    4 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-08-11 by microsoft-msrc, then nvd-cve, cisa-kev, securityweek

  21. CVE-2026-88771

    4 sourcesMEDIUM 9.5CISA KEVEXPLOITEDcitrix

    First reported 2026-09-27 by cisa-kev, then sophos-news, rapid7-blog, unit42

  22. CVE-2025-5777

    3 sourcesINFO 7.5EXPLOITEDcitrix

    First reported 2025-06-17 by nvd-cve, then greynoise-blog, huntress-blog

  23. CVE-2026-0265

    3 sourcesHIGH 8.1palo-alto

    First reported 2026-05-13 by palo-alto-psirt, then nvd-cve, rapid7-blog

  24. CVE-2026-0322

    3 sourcesCISA KEVEXPLOITEDpalo-alto

    First reported 2026-10-14 by cisa-kev, then palo-alto-psirt, nvd-cve

  25. CVE-2026-11645

    3 sourcesMEDIUM 8.8CISA KEVEXPLOITEDgooglemicrosoft

    First reported 2026-06-09 by cisa-kev, then thehackernews, microsoft-msrc

  26. CVE-2026-16232

    3 sourcesMEDIUM 9.8CISA KEVEXPLOITEDcheck-point

    First reported 2026-07-22 by cisa-kev, then nvd-cve, rapid7-blog

  27. CVE-2026-18577

    3 sourcesHIGH 8.1CISA KEVEXPLOITEDn-able

    First reported 2026-08-02 by nvd-cve, then cisa-kev, rapid7-blog

  28. CVE-2026-19490

    3 sourcesCRITICAL 9.8CISA KEVEXPLOITEDcitrix

    First reported 2026-08-19 by nvd-cve, then rapid7-blog, cisa-kev

  29. CVE-2026-20230

    3 sourcesHIGHCISA KEVEXPLOITEDcisco

    First reported 2026-06-04 by thehackernews, then bleepingcomputer, cisa-kev

  30. CVE-2026-20245

    3 sourcesHIGH 7.8CISA KEVEXPLOITEDcisco

    First reported 2026-06-06 by thehackernews, then cisa-kev, mandiant-blog

  31. CVE-2026-31431

    3 sourcesMEDIUM 7.8CISA KEVEXPLOITEDlinux

    First reported 2026-05-01 by cisa-kev, then sophos-news, fortinet-psirt

  32. CVE-2026-32201

    3 sourcesMEDIUM 6.5CISA KEVEXPLOITEDmicrosoft

    First reported 2026-04-14 by cisa-kev, then nvd-cve, tenable-advisories

  33. CVE-2026-32202

    3 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-04-14 by nvd-cve, then cisa-kev, microsoft-msrc

  34. CVE-2026-33824

    3 sourcesHIGHCISA KEVEXPLOITEDmicrosoft

    First reported 2026-04-23 by zdi-blog, then cisa-kev, microsoft-msrc

  35. CVE-2026-41940

    3 sourcesCRITICAL 9.8CISA KEVEXPLOITEDcpanelwebpros

    First reported 2026-04-29 by nvd-cve, then rapid7-blog, cisa-kev

  36. CVE-2026-42271

    3 sourcesHIGH 8.8CISA KEVEXPLOITEDberriai

    First reported 2026-05-08 by nvd-cve, then cisa-kev, thehackernews

  37. CVE-2026-42945

    3 sourcesINFO 9.2EXPLOITEDnginx

    First reported 2026-05-13 by nvd-cve, then microsoft-msrc, thehackernews

  38. CVE-2026-46333

    3 sourcesINFOred-hatubuntususedebian

    First reported 2026-05-15 by nvd-cve, then microsoft-msrc, qualys-blog

  39. CVE-2026-50522

    3 sourcesMEDIUM 9.8CISA KEVEXPLOITEDmicrosoft

    First reported 2026-07-14 by microsoft-msrc, then thehackernews, cisa-kev

  40. CVE-2026-55200

    3 sourcesHIGH 8.3

    First reported 2026-06-17 by nvd-cve, then microsoft-msrc, thehackernews

  41. CVE-2026-56155

    3 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-07-14 by cisa-kev, then microsoft-msrc, tenable-advisories

  42. CVE-2026-56164

    3 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-07-14 by cisa-kev, then microsoft-msrc, tenable-advisories

  43. CVE-2026-64600

    3 sourcesMEDIUMred-hatubuntususedebian

    First reported 2026-07-22 by qualys-blog, then nvd-cve, microsoft-msrc

  44. CVE-2026-65400

    3 sourcesMEDIUMCISA KEVEXPLOITEDapple

    First reported 2026-08-06 by nvd-cve, then huntress-blog, cisa-kev

  45. CVE-2026-69414

    3 sourcesMEDIUMmicrosoft

    First reported 2026-08-14 by microsoft-msrc, then nvd-cve, qualys-blog

  46. CVE-2026-69836

    3 sourcesINFOCISA KEVEXPLOITEDmicrosoft

    First reported 2026-08-20 by microsoft-msrc, then cisa-kev, nvd-cve

  47. CVE-2026-73570

    3 sourcesMEDIUMCISA KEVEXPLOITEDsynacor

    First reported 2026-08-21 by cisa-kev, then microsoft-security-blog, elastic-security-labs

  48. CVE-2026-76461

    3 sourcesHIGH 9.8CISA KEVEXPLOITEDcisco

    First reported 2026-09-14 by cisa-kev, then sophos-news, rapid7-blog

  49. CVE-2026-81963

    3 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-09-08 by cisa-kev, then tenable-advisories, microsoft-msrc

  50. CVE-2026-85880

    3 sourcesMEDIUMCISA KEVEXPLOITEDmicrosoft

    First reported 2026-09-08 by cisa-kev, then tenable-advisories, microsoft-msrc

  51. CVE-2026-86950

    3 sourcesCRITICALCISA KEVEXPLOITEDapple

    First reported 2026-09-28 by nvd-cve, then sans-isc, cisa-kev

  52. CVE-2026-88779

    3 sourcesMEDIUMCISA KEVEXPLOITEDcitrix

    First reported 2026-10-04 by cisa-kev, then sophos-news, rapid7-blog

  53. CVE-2026-96951

    3 sourcesCISA KEVEXPLOITED

    First reported 2026-10-13 by cisa-kev, then nvd-cve, tenable-advisories

  54. CVE-2026-97229

    3 sourcesCISA KEVEXPLOITEDgitlab

    First reported 2026-10-13 by nvd-cve, then rapid7-blog, cisa-kev

Where this comes from

Nothing on these pages is hand-written. The corroboration set is recomputed from the live feed on every build, so a CVE appears here the moment a third independent source reports it and the timeline extends itself as more do.

Live advisory feed·Every source we track·Analyst tools·API