C-07 · weakness class

Injection and Smuggling

5,039 CVEs · 36 exploited in the wild

17 articles this week: CISA Confirms Active Exploitation of UnrealIRCd Command Injection Flaw

Each square stands for CVEs with that weakness: red exploited, bright with a check, the rest by likelihood.

ringed squares: the CVEs in a strip that CyberSIXT has reported on

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.