CriticalVulnerabilityMonitoringBackfillExploitedKEVEPSS 95%CVE-2024-1708· updated Nov 8
On 2026-04-28, CISA added CVE-2024-1708 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
729 results
On 2026-04-28, CISA added CVE-2024-1708 (ConnectWise ScreenConnect) to its Known Exploited Vulnerabilities (KEV) catalog .
The Japanese crowdfunding platform CAMPFIRE said on 24 April 2026 that personal data may have leaked from part of the systems that manage customer information, affecting 225,846 unique users, and that credit-card data is not included .
According to Asia Times Korea, Office Depot in South Korea announced on April 24, 2026 that hackers broke into the server of its corporate shopping mall, leaking some business customers' personal data .
ADT said its systems detected unauthorized access to a limited set of customer and prospective customer data on April 20, terminated the intrusion and launched a forensic investigation .
On 2026-04-24, CISA added CVE-2024-57728 (SimpleHelp SimpleHelp) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-24, CISA added CVE-2024-57726 (SimpleHelp SimpleHelp) to its Known Exploited Vulnerabilities (KEV) catalog .
2rinkan Yellow Hat confirmed on its website that its member server was accessed without authorization, and that an investigation found attackers had abused the app's API to obtain data on 3,179,454 points, mobile and app members .
China's National Information Security Vulnerability Sharing Platform (CNVD) warned that multiple AI agent skill packages carry serious risks and can be abused in mainstream agent systems such as OpenClaw to perform unauthorized actions .
On 2026-04-22, CISA added CVE-2026-33825 (Microsoft Defender) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2026-20133 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20122 (Cisco Catalyst SD-WAN Manger) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2026-20128 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities (KEV) catalog .
On 2026-04-20, CISA added CVE-2024-27199 (JetBrains TeamCity) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-20, CISA added CVE-2023-27351 (PaperCut NG/MF) to its Known Exploited Vulnerabilities (KEV) catalog .
According to BleepingComputer, ShinyHunters leaked data from 13.
On 2026-04-14, CISA added CVE-2026-32201 (Microsoft SharePoint Server) to its Known Exploited Vulnerabilities (KEV) catalog .
According to TechCrunch, Booking.
According to The Register, Basic-Fit, Europe's largest gym chain, confirmed data of around one million customers including bank details was stolen, from the system that records members' club visits .
On 2026-04-13, CISA added CVE-2026-21643 (Fortinet FortiClient EMS) to its Known Exploited Vulnerabilities (KEV) Catalog .
On 2026-04-13, CISA added CVE-2025-60710 (Microsoft Windows) to its Known Exploited Vulnerabilities (KEV) catalog .