cve recordzero dayexploit reported

CVE-2024-28000

CVSS—

Severitynone

Weakness—

EPSS68.3%99.3th percentile

Exploited1 KEV source

patch window

Called exploited the same day it was disclosed.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedAug 21, 2024
First KEV listingAug 21, 2024same day
Last sightingAug 26, 20262.0y

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Aug 21, 2024
CIRCLaggregator, mirrors the abovelisted Aug 21, 2024, not counted

Sources1 of 3

Listings differ by—

Strongest claimconfirmed

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationAug 26, 2026hunt.io/blog/chinese-speaking-operator-philippine-nuclear-na
reported exploitationApr 23, 2026www.cve.org/CVERecord?id=CVE-2024-28000
reported exploitationSep 25, 2025app.crowdsec.net/cti/cve-explorer/CVE-2024-28000
reported exploitationAug 21, 2024www.wordfence.com/threat-intel/vulnerabilities/wordpress-plu

4 public reports collected from VulnCheck and CIRCL, first on Aug 21, 2024. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2024-28000

CVE-2023-49105Aug 29, 2026high

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

A suspected Chinese-speaking threat actor has reportedly breached a Philippine nuclear research body and a marine engineering company that provides services to the Philippine Navy, exploiting known vulnerabilities in internet-facing systems to exfiltrate sensitive data. The activity was uncovered by Hunt.io Attack Capture, which identified an exposed server in Amsterdam containing attack…