actively exploited vulnerability

CRA, Article 3(42) First adopted 2024-10-23

a vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system owner