MyIPScan
Open data

Changes

Dated events from the site’s data, newest first: CISA adding a router or firewall flaw to its exploited-vulnerabilities catalog, VPN incidents and published VPN audits. Follow it in a feed reader with the Atom feed.

Latest events

DateWhatEvent
16 Oct 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-61624 as exploited: Fortinet Multiple Products Path Traversal Vulnerability
14 Oct 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-0322 as exploited: Palo Alto Networks PAN-OS Code Injection Vulnerability
13 Oct 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-104935 as exploited: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
4 Oct 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-88779 as exploited: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
27 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-88772 as exploited: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
27 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-88771 as exploited: Citrix NetScaler Improper Input Validation Vulnerability
25 Sep 2026Router flaw in KEVCISA lists CVE-2026-67279 as exploited: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
22 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-94127 as exploited: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
22 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-85102 as exploited: Check Point Multiple Products Improper Certificate Validation Vulnerability
10 Sep 2026Router flaw in KEVCISA lists CVE-2026-86060 as exploited: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
10 Sep 2026Router flaw in KEVCISA lists CVE-2026-67277 as exploited: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
9 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-19490 as exploited: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
9 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-25249 as exploited: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
2 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-83549 as exploited: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
2 Sep 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-83548 as exploited: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
26 Aug 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-8452 as exploited: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
11 Aug 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-20349 as exploited: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Aug 2026VPN incidentIVPN: Attackers exploited a BTCPay Server flaw on IVPN's self-hosted Bitcoin payment server and moved out IVPN's operating funds
27 Jul 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-68686 as exploited: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
14 Jul 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-15410 as exploited: SonicWall SMA1000 Appliances Code Injection Vulnerability
14 Jul 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-15409 as exploited: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
8 Jul 2026VPN incidentMysterium VPN: CVE-2026-31309: an unauthenticated request to Mysterium Node's /tequilapi/config/user endpoint could overwrite its configuration and take over the node (versions 1.21.1-rc0 to before 1.36.0)
23 Jun 2026Router flaw in KEVCISA lists CVE-2026-34910 as exploited: Ubiquiti UniFi OS Improper Input Validation Vulnerability
23 Jun 2026Router flaw in KEVCISA lists CVE-2026-34909 as exploited: Ubiquiti UniFi OS Path Traversal Vulnerability
23 Jun 2026Router flaw in KEVCISA lists CVE-2026-34908 as exploited: Ubiquiti UniFi OS Improper Access Control Vulnerability
8 Jun 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-50751 as exploited: Check Point Security Gateway Improper Authentication Vulnerability
1 Jun 2026VPN auditMullvad audited by Leviathan Security
29 May 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-0257 as exploited: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
6 May 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-0300 as exploited: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
4 May 2026VPN incidentNorton VPN: CVE-2025-58074: a low-privilege user could replace files while Norton Secure VPN installs from the Microsoft Store, leading to file deletion and privilege escalation (Talos TALOS-2025-2276)
30 Apr 2026VPN auditX-VPN audited by Deloitte
24 Apr 2026Router flaw in KEVCISA lists CVE-2025-29635 as exploited: D-Link DIR-823X Command Injection Vulnerability
2 Apr 2026VPN auditMalwarebytes Privacy VPN audited by X41 D-Sec
30 Mar 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-3055 as exploited: Citrix NetScaler Out-of-Bounds Read Vulnerability
27 Mar 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-53521 as exploited: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
6 Mar 2026VPN auditMullvad audited by Assured
Mar 2026VPN auditSurfshark audited by Cure53
3 Feb 2026VPN incidentVPN Unlimited: CVE-2020-37101: VPN Unlimited 6.1 for Windows installs its service under an unquoted path, allowing local privilege escalation
27 Jan 2026Firewall or VPN gateway flaw in KEVCISA lists CVE-2026-24858 as exploited: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
23 Jan 2026VPN auditSurfshark audited by SecuRing
21 Jan 2026VPN auditMullvad audited by X41 D-Sec
19 Dec 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-14733 as exploited: WatchGuard Firebox Out of Bounds Write Vulnerability
17 Dec 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-40602 as exploited: SonicWall SMA1000 Missing Authorization Vulnerability
16 Dec 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-59718 as exploited: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
15 Dec 2025VPN incidentUrban VPN: Koi Security reported that the Urban VPN Proxy extension and other Urban extensions capture prompts and replies on ten AI chat sites and send them to Urban's analytics servers, on by default
8 Dec 2025VPN auditPrivate Internet Access audited by Deloitte
8 Dec 2025VPN auditCyberGhost audited by Deloitte
8 Dec 2025Router flaw in KEVCISA lists CVE-2022-37055 as exploited: D-Link Routers Buffer Overflow Vulnerability
1 Dec 2025VPN auditProton VPN audited by Ruben Santamarta
24 Nov 2025VPN auditTunnelBear audited by Cure53
18 Nov 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-58034 as exploited: Fortinet FortiWeb OS Command Injection Vulnerability
14 Nov 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-64446 as exploited: Fortinet FortiWeb Path Traversal Vulnerability
12 Nov 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-9242 as exploited: WatchGuard Firebox Out-of-Bounds Write Vulnerability
Nov 2025VPN auditAmneziaVPN audited by 7ASecurity
23 Oct 2025VPN auditMullvad audited by Assured
2 Oct 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2015-7755 as exploited: Juniper ScreenOS Improper Authentication Vulnerability
25 Sep 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-20362 as exploited: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
25 Sep 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-20333 as exploited: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
19 Sep 2025VPN auditProton VPN audited by Securitum
4 Sep 2025VPN incidentTurbo VPN: Citizen Lab and Arizona State University researchers grouped 8 VPN apps from Innovative Connecting, Autumn Breeze and Lemon Clove: a shared hard-coded Shadowsocks key lets an eavesdropper decrypt traffic
3 Sep 2025Router flaw in KEVCISA lists CVE-2025-9377 as exploited: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
3 Sep 2025Router flaw in KEVCISA lists CVE-2023-50224 as exploited: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
2 Sep 2025Router flaw in KEVCISA lists CVE-2020-24363 as exploited: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
26 Aug 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-7775 as exploited: Citrix NetScaler Memory Overflow Vulnerability
18 Jul 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-25257 as exploited: Fortinet FortiWeb SQL Injection Vulnerability
10 Jul 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-5777 as exploited: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
30 Jun 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-6543 as exploited: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
25 Jun 2025Router flaw in KEVCISA lists CVE-2024-0769 as exploited: D-Link DIR-859 Router Path Traversal Vulnerability
25 Jun 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2019-6693 as exploited: Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
16 Jun 2025VPN auditSurfshark audited by Deloitte
16 Jun 2025Router flaw in KEVCISA lists CVE-2023-33538 as exploited: TP-Link Multiple Routers Command Injection Vulnerability
9 Jun 2025VPN auditSurfshark audited by SecuRing
2 Jun 2025Router flaw in KEVCISA lists CVE-2023-39780 as exploited: ASUS RT-AX55 Routers OS Command Injection Vulnerability
2 Jun 2025Router flaw in KEVCISA lists CVE-2021-32030 as exploited: ASUS Routers Improper Authentication Vulnerability
Jun 2025VPN auditExpressVPN audited by KPMG
19 May 2025VPN auditMullvad audited by Assured
15 May 2025Router flaw in KEVCISA lists CVE-2024-12987 as exploited: DrayTek Vigor Routers OS Command Injection Vulnerability
1 May 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-44221 as exploited: SonicWall SMA100 Appliances OS Command Injection Vulnerability
16 Apr 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2021-20035 as exploited: SonicWall SMA100 Appliances OS Command Injection Vulnerability
11 Apr 2025VPN incidentWindscribe: A court in Athens dismissed criminal charges against Windscribe's founder over activity by an unknown user of a Windscribe server
10 Apr 2025VPN auditIPVanish audited by Schellman
4 Apr 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-22457 as exploited: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
27 Mar 2025VPN auditMullvad audited by NCC Group
25 Mar 2025VPN auditAdGuard VPN audited by Leviathan Security
18 Mar 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-24472 as exploited: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
13 Mar 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-21590 as exploited: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
3 Mar 2025Router flaw in KEVCISA lists CVE-2023-20118 as exploited: Cisco Small Business RV Series Routers Command Injection Vulnerability
20 Feb 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-0111 as exploited: Palo Alto Networks PAN-OS File Read Vulnerability
18 Feb 2025VPN auditNordVPN audited by Deloitte
18 Feb 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-0108 as exploited: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
18 Feb 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-53704 as exploited: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
11 Feb 2025Router flaw in KEVCISA lists CVE-2024-40891 as exploited: Zyxel DSL CPE OS Command Injection Vulnerability
11 Feb 2025Router flaw in KEVCISA lists CVE-2024-40890 as exploited: Zyxel DSL CPE OS Command Injection Vulnerability
6 Feb 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2020-29574 as exploited: CyberoamOS (CROS) SQL Injection Vulnerability
6 Feb 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2020-15069 as exploited: Sophos XG Firewall Buffer Overflow Vulnerability
24 Jan 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-23006 as exploited: SonicWall SMA1000 Appliances Deserialization Vulnerability
14 Jan 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-55591 as exploited: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
13 Jan 2025VPN incidentUrban VPN: Researcher Wladimir Palant documented that Urban VPN and other Urban extensions collect browsing history, which BIScience sells through Clickstream OS and AdClarity
8 Jan 2025Firewall or VPN gateway flaw in KEVCISA lists CVE-2025-0282 as exploited: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
30 Dec 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-3393 as exploited: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
11 Dec 2024VPN auditMullvad audited by X41 D-Sec
3 Dec 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-11667 as exploited: Zyxel Multiple Firewalls Path Traversal Vulnerability
Dec 2024VPN auditAmneziaVPN audited by 7ASecurity
18 Nov 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-9474 as exploited: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
18 Nov 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-0012 as exploited: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
12 Nov 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2014-2120 as exploited: Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Nov 2024VPN auditExpressVPN audited by Cure53
24 Oct 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-20481 as exploited: Cisco ASA and FTD Denial-of-Service Vulnerability
9 Oct 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-23113 as exploited: Fortinet Multiple Products Format String Vulnerability
Oct 2024VPN auditExpressVPN audited by Cure53
30 Sep 2024Router flaw in KEVCISA lists CVE-2023-25280 as exploited: D-Link DIR-820 Router OS Command Injection Vulnerability
30 Sep 2024Router flaw in KEVCISA lists CVE-2020-15415 as exploited: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
25 Sep 2024VPN auditOpera VPN audited by Deloitte
9 Sep 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-40766 as exploited: SonicWall SonicOS Improper Access Control Vulnerability
Sep 2024VPN auditExpressVPN audited by Praetorian
12 Jul 2024VPN auditProton VPN audited by Securitum
8 Jul 2024VPN auditBrave VPN audited by Assured
27 Jun 2024VPN auditMullvad audited by Cure53
7 Jun 2024VPN audithide.me audited by Securitum
Jun 2024VPN auditWindscribe audited by Packetlabs
Jun 2024VPN auditExpressVPN audited by Cure53
30 May 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-24919 as exploited: Check Point Quantum Security Gateways Information Disclosure Vulnerability
16 May 2024Router flaw in KEVCISA lists CVE-2021-40655 as exploited: D-Link DIR-605 Router Information Disclosure Vulnerability
16 May 2024Router flaw in KEVCISA lists CVE-2014-100005 as exploited: D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
May 2024VPN auditPsiphon audited by Cure53
25 Apr 2024VPN auditPrivate Internet Access audited by Deloitte
24 Apr 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-20359 as exploited: Cisco ASA and FTD Privilege Escalation Vulnerability
24 Apr 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-20353 as exploited: Cisco ASA and FTD Denial of Service Vulnerability
16 Apr 2024VPN auditExpressVPN audited by Nettitude
12 Apr 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-3400 as exploited: Palo Alto Networks PAN-OS Command Injection Vulnerability
11 Apr 2024VPN auditIVPN audited by Cure53
19 Mar 2024VPN auditBrave VPN audited by Assured
15 Feb 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2020-3259 as exploited: Cisco ASA and FTD Information Disclosure Vulnerability
9 Feb 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-21762 as exploited: Fortinet FortiOS Out-of-Bound Write Vulnerability
6 Feb 2024VPN auditKaspersky VPN audited by AV-Test
2 Feb 2024VPN incidentiTop VPN: CVE-2024-1195 (VDB-252685): local denial of service through the IOCTL handler of the ITopVpnCallbackProcess.sys driver in iTop VPN up to 4.0.0.1
31 Jan 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-21893 as exploited: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
17 Jan 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-6549 as exploited: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
17 Jan 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-6548 as exploited: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
10 Jan 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2024-21887 as exploited: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
10 Jan 2024Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-46805 as exploited: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
8 Jan 2024Router flaw in KEVCISA lists CVE-2016-20017 as exploited: D-Link DSL-2750B Devices Command Injection Vulnerability
6 Dec 2023VPN auditMozilla VPN audited by Cure53
Dec 2023VPN auditExpressVPN audited by KPMG
16 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-1671 as exploited: Sophos Web Appliance Command Injection Vulnerability
13 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-36851 as exploited: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
13 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-36847 as exploited: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
13 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-36846 as exploited: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
13 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-36845 as exploited: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
13 Nov 2023Firewall or VPN gateway flaw in KEVCISA lists CVE-2023-36844 as exploited: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

All of it comes from the open datasets; each event links the page with its source.