Last updated: June 3, 2026 · Data from the last 30 days ·
Updated daily at 21:00 UTC
Exploitation Activity — Last 30 Days
Daily count of new CVEs added to the CISA Known Exploited Vulnerabilities catalog
and ransomware victims tracked by Ransomware.live. Taller bars mean busier days —
use this to spot clusters and decide whether your team is in a high-tempo period.
66 new KEVs and 1,705 ransomware victims recorded in this window.
New KEVs per Day
Ransomware Victims per Day
EPSS Movement Tracker
CVEs whose exploitation probability (EPSS) has increased the most since they were
first published on ThreatPodium. EPSS is a daily probability score from FIRST.org
estimating the likelihood of exploitation within 30 days. A large jump means
attacker tooling or active scanning has increased — these are the CVEs trending
toward confirmed exploitation before the KEV catalog catches up.
Showing 7 CVEs with a movement of
5 percentage points or more.
| CVE | Vendor / Product | First EPSS | Current EPSS | Change |
|---|---|---|---|---|
| CVE-2026-0257 | Palo Alto Networks PAN-OS | 0.1% | 36.3% | +36.2pp |
| CVE-2022-0492 | Linux Kernel | 5.2% | 26.3% | +21.1pp |
| CVE-2026-45321 | TanStack TanStack | 0.0% | 17.1% | +17.1pp |
| CVE-2026-9082 | Drupal Core | 17.3% | 34.2% | +16.9pp |
| CVE-2026-8398 | Daemon Daemon Tools Lite | 0.0% | 15.5% | +15.5pp |
| CVE-2026-48172 | LiteSpeed cPanel Plugin | 0.0% | 8.0% | +8.0pp |
| CVE-2026-48027 | Nx Nx Console | 26.8% | 32.1% | +5.3pp |
Vendor Risk Leaderboard — Last 30 Days
Vendors ranked by cumulative KEV exposure over the last 30 days.
A vendor at the top of this list has had actively exploited vulnerabilities confirmed
by CISA repeatedly — not just in a single busy week. The “Days with KEV Activity”
column shows consistency: a vendor appearing on 8 of 30 days is a structural
concern worth continuous monitoring, not just a one-off patch event.
| # | Vendor | Total KEVs (30d) | Days with KEV Activity |
|---|---|---|---|
| 1 | Microsoft | 13 | 3 |
| 2 | Litespeed | 6 | 6 |
| 3 | Nx | 6 | 6 |
| 4 | Daemon | 6 | 6 |
| 5 | Tanstack | 6 | 6 |
| 6 | Palo Alto Networks | 5 | 5 |
| 7 | Langflow | 4 | 4 |
| 8 | Adobe | 3 | 3 |
| 9 | Drupal | 3 | 3 |
| 10 | Oracle | 3 | 3 |