Vulnerability exploited in the wild
vulnerability.exploited · Ready Government list of exploited vulnerabilities, worldwide
What it is
Public: from open or licensed sources, shared by everyone who subscribes.
- Example: Exploited in the wild: CVE-2026-41027 (Nordvik EdgeGate)
- Typed payload, validated by its JSON Schema
- Collected today from Government list of exploited vulnerabilities (worldwide)
Each event names its exact source, a link to the record, the licence and the attribution in its provenance.
Used for
Example event, standard format
{
"specversion": "1.0",
"id": "evt_01M5EV0NM0BKA4WFKQQ3EDB2E2",
"type": "vulnerability.exploited",
"source": "/sources/examples/vulnerability",
"time": "2026-10-21T09:00:00Z",
"observed_at": "2026-10-21T09:00:42Z",
"dataschema": "https://schemas.worldsignals.dev/vulnerability.exploited/1.json",
"datacontenttype": "application/json",
"visibility": "public",
"country": "XX",
"subject": {
"kind": "vulnerability",
"name": "CVE-2026-41027",
"ids": {
"cve": "CVE-2026-41027"
},
"ws_id": "ent_01M5EV0NM07JJH75DNZ5TF43J6"
},
"entities": [
{
"kind": "company",
"role": "vendor",
"name": "Nordvik Systems"
}
],
"title": "Exploited in the wild: CVE-2026-41027 (Nordvik EdgeGate)",
"data": {
"cve_id": "CVE-2026-41027",
"list": "known_exploited",
"added_on": "2026-10-21",
"vendor": "Nordvik Systems",
"product": "EdgeGate",
"name": "Nordvik EdgeGate OS command injection",
"required_action": "Apply the vendor's update or stop using the product.",
"due_date": "2026-11-11",
"ransomware_use": true,
"cwe": [
"CWE-78"
]
},
"provenance": {
"source_id": "example",
"source_name": "Example data",
"url": "https://example.com/worldsignals/vulnerability.exploited",
"licence": "Example only, not a real record",
"method": "example"
},
"confidence": 0.95,
"personal_data": false,
"revision": 1,
"tags": [
"example"
]
}Give your agents something to notice
Join the waiting list, free during early access. Pick these events and we’ll email you when you’re in.