VULNpocalypse

Early-warning watchlist

Recent bugs with strong evidence of working exploits that the standard forecast still rates as low risk.

Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.

A bug on this list is not proven to be under attack. It is a bug where the evidence and the forecast disagree, which is exactly where defenders get surprised. If one of these is in your software, check it now rather than waiting for the forecast to catch up.

Current watchlist

CVEVEDASEPSSDetection rule
CVE-2026-1175650.990.0039Nuclei · Suricata
CVE-2026-1167610.990.0022Suricata
CVE-2026-1166340.990.0050Nuclei · Suricata
CVE-2026-1162230.990.0034Suricata
CVE-2026-1160690.990.0026Nuclei · Suricata
CVE-2026-1160180.990.0021Suricata
CVE-2026-1160060.990.0083None yet
CVE-2026-1159970.990.0023Suricata
CVE-2026-1143740.990.0024Suricata
CVE-2026-1141230.990.0042Nuclei
CVE-2026-1141200.990.0029Suricata
CVE-2026-1137280.990.0051Nuclei · Suricata
CVE-2026-1136830.990.0036Nuclei · Suricata
CVE-2026-1135950.990.0032Suricata
CVE-2026-1120040.990.0031Suricata
CVE-2026-1119250.990.0043Suricata
CVE-2026-1119150.990.0046Nuclei · Suricata
CVE-2026-1116250.990.0025Suricata
CVE-2026-1116060.990.0024Suricata
CVE-2026-1110580.990.0052Nuclei · Suricata
CVE-2026-1110570.990.0070Nuclei · Suricata
CVE-2026-1098230.990.0037Nuclei · Suricata
CVE-2026-1093940.990.0045Suricata
CVE-2026-1088360.990.0047Nuclei · Suricata
CVE-2026-1075030.990.0025Suricata
CVE-2026-1028780.990.0080None yet
CVE-2026-1028110.990.0066Nuclei · Suricata
CVE-2026-1026070.990.0045Suricata
CVE-2026-1022440.990.0023Suricata
CVE-2026-958130.990.0034Nuclei · Suricata
CVE-2026-956560.990.0051Nuclei · Suricata
CVE-2026-940380.990.0051Nuclei · Suricata
CVE-2026-934850.990.0075None yet
CVE-2026-927480.990.0082Suricata
CVE-2026-922630.990.0045Suricata
CVE-2026-908960.990.0071Nuclei · Suricata
CVE-2026-907690.990.0042Nuclei · Suricata
CVE-2026-906030.990.0050Nuclei · Suricata
CVE-2026-878200.990.0087Nuclei · Suricata
CVE-2026-862820.990.0044Nuclei · Suricata
CVE-2026-857460.990.0097Suricata
CVE-2026-850210.990.0050Suricata
CVE-2026-826410.990.0060Nuclei · Suricata
CVE-2026-824770.990.0047Nuclei · Suricata
CVE-2026-824600.990.0090Nuclei · Suricata
CVE-2026-822080.990.0041None yet
CVE-2026-821860.990.0069None yet
CVE-2026-817350.990.0078Nuclei · Suricata
CVE-2026-811990.990.0047Nuclei · Suricata
CVE-2026-810940.990.0061Nuclei · Suricata
CVE-2026-802550.990.0048None yet
CVE-2026-781640.990.0034Nuclei · Suricata
CVE-2026-777670.990.0046Nuclei · Suricata
CVE-2026-773390.990.0026Nuclei
CVE-2026-770660.990.0025Suricata
CVE-2026-758720.990.0074Suricata
CVE-2026-756010.990.0039Nuclei · Suricata
CVE-2026-736660.990.0067Nuclei · Suricata
CVE-2026-735240.990.0041Suricata
CVE-2026-730840.990.0036Nuclei · Suricata
CVE-2026-692430.990.0044Suricata
CVE-2026-691370.990.0000None yet
CVE-2026-689290.990.0043Nuclei · Suricata
CVE-2026-663000.990.0032Nuclei · Suricata
CVE-2026-653190.990.0051Nuclei · Suricata
CVE-2026-637640.990.0051Nuclei · Suricata
CVE-2026-636210.990.0059None yet
CVE-2026-631790.990.0052Suricata
CVE-2026-622420.990.0037Nuclei · Suricata
CVE-2026-599710.990.0042Nuclei · Suricata
CVE-2026-597340.990.0081Suricata
CVE-2026-591480.990.0026Nuclei · Suricata
CVE-2026-584990.990.0054Suricata
CVE-2026-582570.990.0047Suricata
CVE-2026-582280.990.0047Suricata
CVE-2026-582050.990.0029Nuclei · Suricata
CVE-2026-580930.990.0010None yet
CVE-2026-580430.990.0014None yet
CVE-2026-575880.990.0033None yet
CVE-2026-575820.990.0000Nuclei · Suricata
CVE-2026-575730.990.0044Nuclei · Suricata
CVE-2026-574430.990.0074Nuclei · Suricata
CVE-2026-568450.990.0060Nuclei · Suricata
CVE-2026-567710.990.0035Suricata
CVE-2026-567690.990.0037Suricata
CVE-2026-561240.990.0064Nuclei · Suricata
CVE-2026-558820.990.0052Nuclei · Suricata
CVE-2026-558720.990.0029Suricata
CVE-2026-557800.990.0056None yet
CVE-2026-556050.990.0052Nuclei · Suricata
CVE-2026-555850.990.0077Nuclei · Suricata
CVE-2026-555620.990.0046Suricata
CVE-2026-553690.990.0026Suricata
CVE-2026-552390.990.0034Suricata
CVE-2026-550940.990.0042Nuclei · Suricata
CVE-2026-545440.990.0041Nuclei · Suricata
CVE-2026-544570.990.0040Nuclei · Suricata
CVE-2026-543390.990.0047Suricata
CVE-2026-542530.990.0040Suricata
CVE-2026-539950.990.0060Nuclei · Suricata

Track record: watchlist bugs that attackers later used

These bugs met the watchlist rule before CISA confirmed attacks. 42 so far since 13 Apr 2025.

CVEOn the watchlist fromAdded to CISA KEVDays of warning
CVE-2026-9722921 Oct 202629 Oct 20268
CVE-2026-463008 Aug 202628 Oct 202681
CVE-2026-11149724 Oct 202627 Oct 20263
CVE-2025-616242 Sep 202616 Oct 202644
CVE-2016-30812 Nov 20258 Oct 2026340
CVE-2015-54772 Nov 20258 Oct 2026340
CVE-2025-3996429 Aug 202618 Sep 202620
CVE-2025-3968221 Aug 202618 Sep 202628
CVE-2026-1949021 Aug 20269 Sep 202619
CVE-2025-252492 Sep 20269 Sep 20267
CVE-2026-5982221 Aug 20262 Sep 202612
CVE-2026-487108 Aug 20262 Sep 202625
CVE-2026-8157829 Aug 202631 Aug 20262
CVE-2026-6000421 Aug 202625 Aug 20264
CVE-2026-219628 Aug 202624 Aug 202616
CVE-2025-625938 Aug 202617 Aug 20269
CVE-2022-049212 Oct 20252 Jun 2026233
CVE-2025-3429117 Jan 202621 May 2026124
CVE-2010-08062 Nov 202520 May 2026199
CVE-2010-02492 Nov 202520 May 2026199
CVE-2009-34592 Nov 202520 May 2026199
CVE-2008-42502 Nov 202520 May 2026199
CVE-2024-170812 Oct 202528 Apr 2026198
CVE-2024-739916 Nov 202524 Apr 2026159
CVE-2024-2719912 Oct 202520 Apr 2026190
CVE-2023-2735117 Jan 202620 Apr 202693
CVE-2025-3243216 Nov 202520 Mar 2026124
CVE-2025-4781324 Aug 202516 Mar 2026204
CVE-2025-6861317 Jan 202611 Mar 202653
CVE-2025-2639917 Jan 20269 Mar 202651
CVE-2021-2205412 Oct 20259 Mar 2026148
CVE-2017-792119 Oct 20255 Mar 2026137
CVE-2025-4911328 Nov 202520 Feb 202684
CVE-2021-2217512 Oct 202518 Feb 2026129
CVE-2020-779612 Oct 202517 Feb 2026128
CVE-2008-00152 Nov 202517 Feb 2026107
CVE-2021-3993512 Oct 20253 Feb 2026114
CVE-2025-5269117 Jan 202626 Jan 20269
CVE-2025-6864517 Jan 202622 Jan 20265
CVE-2025-3402616 Nov 202522 Jan 202667
CVE-2025-3112516 Nov 202522 Jan 202667
CVE-2025-583607 Dec 202511 Dec 20254