Last 7 days · 0 CVEs moved up the ladder
Weaponized this week
Disclosure is only the start. These CVEs gained a new step toward mass exploitation in the last 7 days: a public PoC, an ExploitDB entry, a Nuclei template (scannable at scale), a Metasploit module (point-and-shoot), or confirmed exploitation. Sorted by triage priority.
0PoC on GitHub
0ExploitDB
0Nuclei template
0Metasploit module
0Exploited in the wild
0CVEs in total
| CVE | Triage | Ladder | New this week | Vulnerability |
|---|---|---|---|---|
| Nothing moved this week yet. | ||||
How to read this page
- P1 to P4
- Our patch priority. P1 patch now: confirmed exploited in the wild (CISA KEV, or CISA reports active exploitation). P2 this week: a Metasploit module or Nuclei template exists, it ranks in the top 25 likely next, or EPSS is 50% or more. P3 schedule: public exploit code, EPSS 10% or more, or CVSS 9+. P4 routine: no exploitation signal yet. The reason is always shown next to the label.
- Weaponization ladder
- Five squares, left to right: GitHub PoC, ExploitDB entry, Nuclei template, Metasploit module, exploited in the wild (red). Each step lowers the skill needed to attack: a Nuclei template means anyone can scan the internet for it, a Metasploit module means anyone can exploit it with one command.
- EPSS
- FIRST's Exploit Prediction Scoring System: the estimated probability that a CVE is exploited in the next 30 days, from observed attack data. The percentile compares it with every other CVE. It measures likelihood, not impact.