cve recordexploit reported

CVE-2023-34124

CVSS—

Severitynone

Weakness—

EPSS50.5%98.9th percentile

Exploited1 KEV source

patch window

Called exploited 827 days after disclosure.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedJul 13, 2023
First KEV listingOct 17, 20252.3y
Last sightingSep 3, 202611mo

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Oct 17, 2025
CIRCLaggregator, mirrors the abovelisted Aug 26, 2026, not counted

Sources1 of 3

Listings differ by—

Strongest claimconfirmed

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationSep 3, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2023-3
reported exploitationAug 26, 2026previdian.com/CVE-2023-34124
reported exploitationAug 26, 2026www.sentinelone.com/blog/what-two-independent-datasets-revea
reported exploitationAug 5, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2023-3
reported exploitationAug 1, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2023-3
reported exploitationJul 30, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2023-3

24 public reports collected from VulnCheck and CIRCL, first on Oct 17, 2025. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2023-34124

CVE-2026-15409Aug 26, 2026critical

Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter

A joint analysis by Tenable and SentinelOne reveals that edge infrastructure is a shared attack surface, with both state-sponsored actors and cybercriminals independently targeting the same vulnerabilities and vendors. This convergence challenges the perception that edge device exploitation is primarily a nation-state problem, demonstrating a broader threat landscape.