— Ingenious AI
Key figure: CISA's Known Exploited Vulnerabilities catalog listed 1,748 entries as of October 16, 2026, every one confirmed exploited in the wild (CISA KEV catalog, version 2026.10.16).
Paste your software list below. This free CVE checker checks each product against CISA's Known Exploited Vulnerabilities (KEV) catalog — the official list of flaws attackers are actively exploiting right now. KEV data as of 2026-10-16.
This cybersecurity news tool checks your stack against CISA's Known Exploited Vulnerabilities catalog — the list of flaws attackers are actively exploiting right now. If any of your software appears in the KEV catalog, treat it as an emergency: these vulnerabilities have confirmed in-the-wild exploitation and should be patched first.
One product per line: name and version, e.g. Nextcloud 29.0.4. Version is used for display; matching is by product name, then you confirm your exact version against the advisory.
The Known Exploited Vulnerabilities catalog is maintained by the U.S. Cybersecurity and Infrastructure Security Agency. It lists only vulnerabilities confirmed to be actively exploited in the wild, with required-action deadlines for U.S. federal agencies. A match here means the flaw is not theoretical — attackers are using it.
The checker embeds a dated snapshot of the CISA catalog, fetched on 2026-10-16. It is not live data. Always confirm findings against CISA's current catalog and the vendor's advisory before acting, especially for time-sensitive patching decisions.
No. The catalog snapshot downloads with this page and every comparison runs in JavaScript in your browser. No request is made with your input, nothing is logged, nothing leaves your machine.
The CISA catalog names vulnerable products but does not publish machine-readable affected-version ranges for every entry. The checker tells you which of your products have known exploited flaws; you then confirm your exact version against the linked vendor advisory.
Treat it as urgent: exploited vulnerabilities are the highest-priority patches in any stack. Check the vendor advisory for the fixed version, patch or mitigate, and — if you were exposed before patching — look for signs of compromise. The due dates shown are CISA's deadlines for federal agencies; fix sooner.
The Known Exploited Vulnerabilities catalog is maintained by the U.S. Cybersecurity and Infrastructure Security Agency. It lists only vulnerabilities that CISA has confirmed are actively exploited in the wild, with required-action deadlines for U.S. federal agencies. A match here means the flaw is not theoretical — attackers are using it.
The checker embeds a dated snapshot of the CISA catalog, fetched on 2026-10-16. It is not live data. Always confirm findings against CISA's current catalog and the vendor's advisory before acting, especially for time-sensitive patching decisions.
No. The catalog snapshot is downloaded with this page and every comparison runs in JavaScript in your browser. No request is made with your input, nothing is logged, nothing leaves your machine.
The CISA catalog names vulnerable products but does not publish machine-readable affected-version ranges for every entry. The checker tells you which of your products have known exploited flaws; you then confirm your exact version against the vendor advisory linked on each result.
Treat it as urgent: exploited vulnerabilities are the highest-priority patches in any stack. Check the vendor advisory for the fixed version, patch or mitigate, and — if you were exposed before patching — look for signs of compromise. The due dates shown are CISA's deadlines for federal agencies; fix sooner.
A CVE checker is a free tool that tells you whether your software is affected by a published CVE — a publicly known cybersecurity vulnerability. It compares your version or configuration against the official advisory and gives you a patched, vulnerable, or unknown verdict in about 30 seconds.
Find your exact version number, then compare it against the vendor's security advisory or the NVD entry for the CVE. The fastest way is a CVE checker built for that product: paste your version and get an instant verdict against the published version tables.
You are affected when you run a vulnerable version and the vulnerable component is reachable or enabled — for example, open sign-ups, an exposed management port, or a vulnerable app installed. A CVE checker gives you the version verdict in seconds; the advisory's conditions tell you whether that verdict means real exposure.