Actively exploited vulnerability

A vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system owner

Defined in / by

• CRA (32024R2847)

Last updated: 22 August 2026.