cve recordexploit reported

CVE-2026-23744

CVSS—

Severitynone

Weakness—

EPSS64.8%99.2th percentile

Exploited1 KEV source

patch window

Called exploited 33 days after disclosure.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedJan 16, 2026
First KEV listingFeb 18, 202633d
Last sightingSep 4, 20267mo

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Feb 18, 2026
CIRCLaggregator, mirrors the abovelisted Mar 7, 2026, not counted

Sources1 of 3

Listings differ by—

Strongest claimconfirmed

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationSep 4, 2026api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-2
reported exploitationSep 2, 2026dashboard.shadowserver.org/statistics/honeypot/vulnerability
reported exploitationSep 1, 2026dashboard.shadowserver.org/statistics/honeypot/vulnerability
reported exploitationAug 31, 2026dashboard.shadowserver.org/statistics/honeypot/vulnerability
reported exploitationAug 29, 2026dashboard.shadowserver.org/statistics/honeypot/vulnerability
reported exploitationAug 25, 2026dashboard.shadowserver.org/statistics/honeypot/vulnerability

104 public reports collected from VulnCheck and CIRCL, first on Feb 18, 2026. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2026-23744

CVE-2025-66516Sep 11, 2026high

Metasploit Wrap Up: This One Goes to Sixteen!

This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers! New module content (16) Elasticsearch ingest-attachment Apache Tika XFA XXE Local File Read Auth