Vulnerability Intelligence

Exploited CVEs

1.7K
CISA KEV catalog

Ransomware-linked

338
20% of KEV

Actor-attributed

41
named groups

EPSS-scored

1.7K
861 likely-exploited (≥0.5)

KEV overdue

1.7K
past CISA due date

🏢 Top affected vendors

🔧 Top affected products

Windows
172
Multiple Products
79
Chromium V8
39
Internet Explorer
36
Flash Player
33
Office
29
Kernel
29
Win32k
25
Exchange Server
17
ColdFusion
16
Zimbra Collaboration Suite (ZCS)
15
IOS and IOS XE Software
14
Mobile Devices
13
Acrobat and Reader
13

📅 Exploited CVEs by year

2002
1
2004
2
2005
1
2006
2
2007
3
2008
6
2009
15
2010
23
2011
9
2012
22
2013
38
2014
34
2015
44
2016
59
2017
86
2018
89
2019
118
2020
146
2021
214
2022
131
2023
164
2024
164
2025
184
2026
107

🏹 Actor attribution counts

🤖 CWE weakness distribution

CWE-78
93
CWE-20
91
CWE-416
89
CWE-119
84
CWE-787
84
CWE-22
70
CWE-94
62
CWE-502
61
CWE-287
36
CWE-284
33
CWE-843
32
CWE-306
32
CWE-264
31
CWE-79
27

📈 EPSS probability bands

Likely (≥.5)
861
Elevated (.1–.5)
404
Moderate (.01–.1)
353
Low (<.01)
44

🔒 Ransomware-linked share

Other exploited
1.3K
Ransomware-known
338

📈 Exploit-probability coverage

1.7K of 1.7K KEV CVEs carry a FIRST EPSS score (100%). 861 score ≥0.5 (likely exploited within 30 days). Re-run EPSS enrichment to refresh.

☠ Most dangerous exploited CVEs (ransomware · actor · EPSS · recency weighted)

#CVEVendor / ProductDangerEPSSRansomwareActorsAdded
1CVE-2025-0282Ivanti Connect Secure, Policy Secur
110.3
100.0%KNOWNUNC / China-nexus2025-01-08
2CVE-2024-40711Veeam Backup & Replication
107.0
90.4%KNOWNAkira, Fog2024-10-17
3CVE-2024-4577PHP Group PHP
106.8
100.0%KNOWNmultiple2024-06-12
4CVE-2024-3400Palo Alto Networks PAN-OS
105.8
100.0%KNOWNmultiple2024-04-12
5CVE-2024-1709ConnectWise ScreenConnect
105.0
100.0%KNOWNmultiple ransomware2024-02-22
6CVE-2024-21412Microsoft Windows
103.9
95.4%KNOWNWater Hydra2024-02-13
7CVE-2023-46604Apache ActiveMQ
103.1
99.7%KNOWNmultiple2023-11-02
8CVE-2023-4966Citrix NetScaler ADC and NetScaler
102.9
100.0%KNOWNLockBit2023-10-18
9CVE-2023-22515Atlassian Confluence Data Center and S
102.5
99.2%KNOWNnation-state + criminal2023-10-05
10CVE-2024-21762Fortinet FortiOS
101.6
84.3%KNOWNmultiple2024-02-09
11CVE-2023-3519Citrix NetScaler ADC and NetScaler
101.3
99.7%KNOWNmultiple2023-07-19
12CVE-2023-34362Progress MOVEit Transfer
100.6
99.9%KNOWNClop (TA505/FIN11)2023-06-02
13CVE-2021-45046Apache Log4j2
100.0
100.0%KNOWNmultiple2023-05-01
14CVE-2023-27350PaperCut MF/NG
99.9
100.0%KNOWNClop, LockBit2023-04-21
15CVE-2023-0669Fortra GoAnywhere MFT
98.7
100.0%KNOWNClop (TA505)2023-02-10
16CVE-2022-41040Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
17CVE-2022-41082Microsoft Exchange Server
96.5
100.0%KNOWNmultiple ransomware2022-09-30
18CVE-2022-26134Atlassian Confluence Server/Data Cente
95.0
100.0%KNOWNmultiple2022-06-02
19CVE-2022-1388F5 BIG-IP
95.0
100.0%KNOWNmultiple2022-05-10
20CVE-2020-0796Microsoft SMBv3
95.0
99.8%KNOWNmultiple2022-02-10
21CVE-2021-44228Apache Log4j2
95.0
100.0%KNOWNmultiple (APT + criminal)2021-12-10
22CVE-2017-5638Apache Struts
95.0
100.0%KNOWNmultiple2021-11-03
23CVE-2019-0708Microsoft Remote Desktop Services
95.0
100.0%KNOWNmultiple2021-11-03
24CVE-2017-11882Microsoft Office
95.0
99.9%KNOWNmultiple (commodity + APT)2021-11-03
25CVE-2018-13379Fortinet FortiOS
95.0
100.0%KNOWNmultiple ransomware2021-11-03

🛡 Vulnerability → Malware / Ransomware / Actor

Type a full CVE id (e.g. CVE-2023-34362) for the full dossier — EPSS, KEV due-date, attributed malware/actors, entity graph & OSINT pivots.

400 vulnerabilities (use the ⇩ CSV button to export the filtered view)

CVEVendor / ProductEPSSRansomwareMalware / RansomwareActorsAddedDue date
CVE-2026-15409SonicWall SMA1000 Appliances78.4%KNOWNransomware (KEV-flagged)—2026-07-142026-07-17 ⚠
CVE-2026-15410SonicWall SMA1000 Appliances76.3%KNOWNransomware (KEV-flagged)—2026-07-142026-07-17 ⚠
CVE-2026-12569PTC Windchill and FlexPLM30.2%KNOWNransomware (KEV-flagged)—2026-06-252026-06-28 ⚠
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleT95.5%KNOWNransomware (KEV-flagged)—2026-06-122026-06-15 ⚠
CVE-2026-50751Check Point Security Gateway82.6%KNOWNransomware (KEV-flagged)—2026-06-082026-06-11 ⚠
CVE-2026-0257Palo Alto Networks PAN-OS93.9%KNOWNransomware (KEV-flagged)—2026-05-292026-06-01 ⚠
CVE-2026-45321TanStack TanStack2.3%KNOWNransomware (KEV-flagged)—2026-05-272026-06-10 ⚠
CVE-2026-48027Nx Nx Console1.9%KNOWNransomware (KEV-flagged)—2026-05-272026-06-10 ⚠
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPres97.9%KNOWNransomware (KEV-flagged)—2026-04-302026-05-03 ⚠
CVE-2024-1708ConnectWise ScreenConnect87.6%KNOWNransomware (KEV-flagged)—2026-04-282026-05-12 ⚠
CVE-2024-57726SimpleHelp SimpleHelp8.6%KNOWNransomware (KEV-flagged)—2026-04-242026-05-08 ⚠
CVE-2024-57728SimpleHelp SimpleHelp7.0%KNOWNransomware (KEV-flagged)—2026-04-242026-05-08 ⚠
CVE-2026-33825Microsoft Defender6.7%KNOWNransomware (KEV-flagged)—2026-04-222026-05-06 ⚠
CVE-2023-27351PaperCut NG/MF77.4%KNOWNransomware (KEV-flagged)—2026-04-202026-05-04 ⚠
CVE-2024-27199JetBrains TeamCity100.0%KNOWNransomware (KEV-flagged)—2026-04-202026-05-04 ⚠
CVE-2023-21529Microsoft Exchange Server62.1%KNOWNransomware (KEV-flagged)—2026-04-132026-04-27 ⚠
CVE-2026-20131Cisco Secure Firewall Management Cen28.2%KNOWNransomware (KEV-flagged)—2026-03-192026-03-22 ⚠
CVE-2025-26399SolarWinds Web Help Desk88.3%KNOWNransomware (KEV-flagged)—2026-03-092026-03-12 ⚠
CVE-2026-1731BeyondTrust Remote Support (RS) and Privil88.1%KNOWNransomware (KEV-flagged)—2026-02-132026-02-16 ⚠
CVE-2026-24423SmarterTools SmarterMail87.7%KNOWNransomware (KEV-flagged)—2026-02-052026-02-26 ⚠
CVE-2025-52691SmarterTools SmarterMail85.5%KNOWNransomware (KEV-flagged)—2026-01-262026-02-16 ⚠
CVE-2026-23760SmarterTools SmarterMail96.3%KNOWNransomware (KEV-flagged)—2026-01-262026-02-16 ⚠
CVE-2025-55182Meta React Server Components99.6%KNOWNransomware (KEV-flagged)—2025-12-052025-12-12 ⚠
CVE-2025-61884Oracle E-Business Suite97.8%KNOWNransomware (KEV-flagged)—2025-10-202025-11-10 ⚠
CVE-2025-61882Oracle E-Business Suite99.7%KNOWNransomware (KEV-flagged)—2025-10-062025-10-27 ⚠
CVE-2025-10035Fortra GoAnywhere MFT99.6%KNOWNransomware (KEV-flagged)—2025-09-292025-10-20 ⚠
CVE-2025-8088RARLAB WinRAR94.6%KNOWNransomware (KEV-flagged)—2025-08-122025-09-02 ⚠
CVE-2025-49704Microsoft SharePoint99.9%KNOWNransomware (KEV-flagged)—2025-07-222025-07-23 ⚠
CVE-2025-49706Microsoft SharePoint99.9%KNOWNransomware (KEV-flagged)—2025-07-222025-07-23 ⚠
CVE-2025-53770Microsoft SharePoint100.0%KNOWNransomware (KEV-flagged)—2025-07-202025-07-21 ⚠
CVE-2025-5777Citrix NetScaler ADC and Gateway100.0%KNOWNransomware (KEV-flagged)—2025-07-102025-07-11 ⚠
CVE-2019-6693Fortinet FortiOS5.7%KNOWNransomware (KEV-flagged)—2025-06-252025-07-16 ⚠
CVE-2025-42999SAP NetWeaver11.3%KNOWNransomware (KEV-flagged)—2025-05-152025-06-05 ⚠
CVE-2025-3248Langflow Langflow100.0%KNOWNransomware (KEV-flagged)—2025-05-052025-05-26 ⚠
CVE-2025-31324SAP NetWeaver99.5%KNOWNransomware (KEV-flagged)—2025-04-292025-05-20 ⚠
CVE-2025-29824Microsoft Windows13.5%KNOWNransomware (KEV-flagged)—2025-04-082025-04-29 ⚠
CVE-2025-31161CrushFTP CrushFTP99.9%KNOWNransomware (KEV-flagged)—2025-04-072025-04-28 ⚠
CVE-2025-22457Ivanti Connect Secure, Policy Secure,100.0%KNOWNransomware (KEV-flagged)—2025-04-042025-04-11 ⚠
CVE-2025-24472Fortinet FortiOS and FortiProxy3.3%KNOWNransomware (KEV-flagged)—2025-03-182025-04-08 ⚠
CVE-2025-26633Microsoft Windows31.9%KNOWNransomware (KEV-flagged)—2025-03-112025-04-01 ⚠
CVE-2025-22225VMware ESXi1.0%KNOWNransomware (KEV-flagged)—2025-03-042025-03-25 ⚠
CVE-2018-8639Microsoft Windows22.3%KNOWNransomware (KEV-flagged)—2025-03-032025-03-24 ⚠
CVE-2024-53704SonicWall SonicOS95.1%KNOWNransomware (KEV-flagged)—2025-02-182025-03-11 ⚠
CVE-2024-57727SimpleHelp SimpleHelp95.2%KNOWNransomware (KEV-flagged)—2025-02-132025-03-06 ⚠
CVE-2025-23006SonicWall SMA1000 Appliances23.4%KNOWNransomware (KEV-flagged)—2025-01-242025-02-14 ⚠
CVE-2024-55591Fortinet FortiOS and FortiProxy98.3%KNOWNransomware (KEV-flagged)—2025-01-142025-01-21 ⚠
CVE-2023-48365Qlik Sense24.7%KNOWNransomware (KEV-flagged)—2025-01-132025-02-03 ⚠
CVE-2025-0282Ivanti Connect Secure, Policy Secure,100.0%KNOWNnation-state (Ivanti Connect Secure)UNC / China-nexus2025-01-082025-01-15 ⚠
CVE-2024-41713Mitel MiCollab98.1%KNOWNransomware (KEV-flagged)—2025-01-072025-01-28 ⚠
CVE-2024-55550Mitel MiCollab38.1%KNOWNransomware (KEV-flagged)—2025-01-072025-01-28 ⚠
CVE-2024-55956Cleo Multiple Products93.8%KNOWNransomware (KEV-flagged)—2024-12-172025-01-07 ⚠
CVE-2024-50623Cleo Multiple Products98.6%KNOWNransomware (KEV-flagged)—2024-12-132025-01-03 ⚠
CVE-2024-51378CyberPersons CyberPanel94.7%KNOWNransomware (KEV-flagged)—2024-12-042024-12-25 ⚠
CVE-2024-11667Zyxel Multiple Firewalls3.0%KNOWNransomware (KEV-flagged)—2024-12-032024-12-24 ⚠
CVE-2023-28461Array Networks AG/vxAG ArrayOS67.9%KNOWNransomware (KEV-flagged)—2024-11-252024-12-16 ⚠
CVE-2024-0012Palo Alto Networks PAN-OS99.7%KNOWNransomware (KEV-flagged)—2024-11-182024-12-09 ⚠
CVE-2024-9474Palo Alto Networks PAN-OS94.8%KNOWNransomware (KEV-flagged)—2024-11-182024-12-09 ⚠
CVE-2024-49039Microsoft Windows13.7%KNOWNransomware (KEV-flagged)—2024-11-122024-12-03 ⚠
CVE-2024-51567CyberPersons CyberPanel86.6%KNOWNransomware (KEV-flagged)—2024-11-072024-11-28 ⚠
CVE-2024-38094Microsoft SharePoint48.7%KNOWNransomware (KEV-flagged)—2024-10-222024-11-12 ⚠
CVE-2024-40711Veeam Backup & Replication90.4%KNOWNAkira, Fog (Veeam Backup)Akira, Fog2024-10-172024-11-07 ⚠
CVE-2024-9680Mozilla Firefox23.2%KNOWNransomware (KEV-flagged)—2024-10-152024-11-05 ⚠
CVE-2024-30088Microsoft Windows 68.2%KNOWNransomware (KEV-flagged)—2024-10-152024-11-05 ⚠
CVE-2024-6670Progress WhatsUp Gold94.7%KNOWNransomware (KEV-flagged)—2024-09-162024-10-07 ⚠
CVE-2024-40766SonicWall SonicOS18.2%KNOWNransomware (KEV-flagged)—2024-09-092024-09-30 ⚠
CVE-2017-1000253Linux Kernel10.7%KNOWNransomware (KEV-flagged)—2024-09-092024-09-30 ⚠
CVE-2024-23897Jenkins Jenkins Command Line Interface100.0%KNOWNransomware (KEV-flagged)—2024-08-192024-09-09 ⚠
CVE-2024-37085VMware ESXi26.0%KNOWNBlack Basta, Akira (VMware ESXi)Black Basta, Akira2024-07-302024-08-20 ⚠
CVE-2024-23692Rejetto HTTP File Server99.5%KNOWNransomware (KEV-flagged)—2024-07-092024-07-30 ⚠
CVE-2024-26169Microsoft Windows4.0%KNOWNransomware (KEV-flagged)—2024-06-132024-07-04 ⚠
CVE-2024-4577PHP Group PHP100.0%KNOWNTellYouThePass ransomware (PHP-CGI)multiple2024-06-122024-07-03 ⚠
CVE-2024-1086Linux Kernel28.1%KNOWNransomware (KEV-flagged)—2024-05-302024-06-20 ⚠
CVE-2024-24919Check Point Quantum Security Gateways100.0%KNOWNransomware (KEV-flagged)—2024-05-302024-06-20 ⚠
CVE-2023-43208NextGen Healthcare Mirth Connect82.7%KNOWNransomware (KEV-flagged)—2024-05-202024-06-10 ⚠
CVE-2024-30051Microsoft DWM Core Library5.7%KNOWNransomware (KEV-flagged)—2024-05-142024-06-04 ⚠
CVE-2024-3400Palo Alto Networks PAN-OS100.0%KNOWNnation-state, ransomware (PAN-OS)multiple2024-04-122024-04-19 ⚠
CVE-2023-24955Microsoft SharePoint Server85.4%KNOWNransomware (KEV-flagged)—2024-03-262024-04-16 ⚠
CVE-2021-44529Ivanti Endpoint Manager Cloud Service99.1%KNOWNransomware (KEV-flagged)—2024-03-252024-04-15 ⚠
CVE-2023-48788Fortinet FortiClient EMS97.6%KNOWNransomware (KEV-flagged)—2024-03-252024-04-15 ⚠
CVE-2024-27198JetBrains TeamCity99.9%KNOWNransomware (KEV-flagged)—2024-03-072024-03-28 ⚠
CVE-2024-21338Microsoft Windows59.8%KNOWNransomware (KEV-flagged)—2024-03-042024-03-25 ⚠
CVE-2024-1709ConnectWise ScreenConnect100.0%KNOWNLockBit, Black Basta, Bl00dy (ScreenConnect)multiple ransomware2024-02-222024-02-29 ⚠
CVE-2020-3259Cisco Adaptive Security Appliance (A69.3%KNOWNransomware (KEV-flagged)—2024-02-152024-03-07 ⚠
CVE-2024-21412Microsoft Windows95.4%KNOWNDarkGate, Water HydraWater Hydra2024-02-132024-03-05 ⚠
CVE-2024-21762Fortinet FortiOS84.3%KNOWNransomware (FortiOS SSL-VPN)multiple2024-02-092024-02-16 ⚠
CVE-2024-21893Ivanti Connect Secure, Policy Secure,100.0%KNOWNransomware (KEV-flagged)—2024-01-312024-02-02 ⚠
CVE-2023-22527Atlassian Confluence Data Center and Ser100.0%KNOWNransomware (KEV-flagged)—2024-01-242024-02-14 ⚠
CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM)100.0%KNOWNransomware (KEV-flagged)—2024-01-182024-02-08 ⚠
CVE-2023-29357Microsoft SharePoint Server99.6%KNOWNransomware (KEV-flagged)—2024-01-102024-01-31 ⚠
CVE-2023-46805Ivanti Connect Secure and Policy Secu100.0%KNOWNransomware (KEV-flagged)—2024-01-102024-01-22 ⚠
CVE-2024-21887Ivanti Connect Secure and Policy Secu100.0%KNOWNransomware (KEV-flagged)—2024-01-102024-01-22 ⚠
CVE-2023-29300Adobe ColdFusion100.0%KNOWNransomware (KEV-flagged)—2024-01-082024-01-29 ⚠
CVE-2023-38203Adobe ColdFusion96.5%KNOWNransomware (KEV-flagged)—2024-01-082024-01-29 ⚠
CVE-2023-41265Qlik Sense84.5%KNOWNransomware (KEV-flagged)—2023-12-072023-12-28 ⚠
CVE-2023-41266Qlik Sense82.1%KNOWNransomware (KEV-flagged)—2023-12-072023-12-28 ⚠
CVE-2023-47246SysAid SysAid Server98.9%KNOWNransomware (KEV-flagged)—2023-11-132023-12-04 ⚠
CVE-2023-22518Atlassian Confluence Data Center and Ser100.0%KNOWNransomware (KEV-flagged)—2023-11-072023-11-28 ⚠
CVE-2023-46604Apache ActiveMQ99.7%KNOWNHelloKitty, Kinsing (ActiveMQ)multiple2023-11-022023-11-23 ⚠
CVE-2023-46747F5 BIG-IP Configuration Utility96.5%KNOWNransomware (KEV-flagged)—2023-10-312023-11-21 ⚠
CVE-2023-4966Citrix NetScaler ADC and NetScaler Ga100.0%KNOWNLockBit, Medusa (Citrix Bleed)LockBit2023-10-182023-11-08 ⚠
CVE-2023-22515Atlassian Confluence Data Center and Ser99.2%KNOWNransomware (Confluence)nation-state + criminal2023-10-052023-10-13 ⚠
CVE-2023-40044Progress WS_FTP Server90.2%KNOWNransomware (KEV-flagged)—2023-10-052023-10-26 ⚠
CVE-2023-42793JetBrains TeamCity100.0%KNOWNransomware (KEV-flagged)—2023-10-042023-10-25 ⚠
CVE-2017-6884Zyxel EMG2926 Routers37.6%KNOWNransomware (KEV-flagged)—2023-09-182023-10-09 ⚠
CVE-2021-3129Laravel Ignition99.9%KNOWNransomware (KEV-flagged)—2023-09-182023-10-09 ⚠
CVE-2023-20269Cisco Adaptive Security Appliance an21.6%KNOWNAkira, LockBit (Cisco ASA)Akira, LockBit2023-09-132023-10-04 ⚠
CVE-2023-38831RARLAB WinRAR97.8%KNOWNransomware (KEV-flagged)—2023-08-242023-09-14 ⚠
CVE-2023-27532Veeam Backup & Replication77.6%KNOWNransomware (KEV-flagged)—2023-08-222023-09-12 ⚠
CVE-2023-38035Ivanti Sentry99.9%KNOWNransomware (KEV-flagged)—2023-08-222023-09-12 ⚠
CVE-2023-35078Ivanti Endpoint Manager Mobile (EPMM)100.0%KNOWNransomware (KEV-flagged)—2023-07-252023-08-15 ⚠
CVE-2023-3519Citrix NetScaler ADC and NetScaler Ga99.7%KNOWNwebshells, ransomware (Citrix NetScaler)multiple2023-07-192023-08-09 ⚠
CVE-2023-36884Microsoft Windows98.9%KNOWNransomware (KEV-flagged)—2023-07-172023-08-29 ⚠
CVE-2022-31199Netwrix Auditor36.0%KNOWNransomware (KEV-flagged)—2023-07-112023-08-01 ⚠
CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN85.7%KNOWNransomware (KEV-flagged)—2023-06-132023-07-04 ⚠
CVE-2023-34362Progress MOVEit Transfer99.9%KNOWNClop (MOVEit Transfer)Clop (TA505/FIN11)2023-06-022023-06-23 ⚠
CVE-2021-45046Apache Log4j2100.0%KNOWNLog4Shell follow-onmultiple2023-05-012023-05-22 ⚠
CVE-2023-27350PaperCut MF/NG100.0%KNOWNClop, LockBit, Bl00dy (PaperCut)Clop, LockBit2023-04-212023-05-12 ⚠
CVE-2023-28252Microsoft Windows49.0%KNOWNransomware (KEV-flagged)—2023-04-112023-05-02 ⚠
CVE-2019-1388Microsoft Windows8.6%KNOWNransomware (KEV-flagged)—2023-04-072023-04-28 ⚠
CVE-2021-27876Veritas Backup Exec Agent13.4%KNOWNransomware (KEV-flagged)—2023-04-072023-04-28 ⚠
CVE-2021-27877Veritas Backup Exec Agent64.9%KNOWNransomware (KEV-flagged)—2023-04-072023-04-28 ⚠
CVE-2021-27878Veritas Backup Exec Agent24.0%KNOWNransomware (KEV-flagged)—2023-04-072023-04-28 ⚠
CVE-2017-7494Samba Samba99.4%KNOWNransomware (KEV-flagged)—2023-03-302023-04-20 ⚠
CVE-2023-24880Microsoft Windows78.2%KNOWNransomware (KEV-flagged)—2023-03-142023-04-04 ⚠
CVE-2022-36537ZK Framework AuUploader95.3%KNOWNransomware (KEV-flagged)—2023-02-272023-03-20 ⚠
CVE-2022-40765Mitel MiVoice Connect10.5%KNOWNransomware (KEV-flagged)—2023-02-212023-03-14 ⚠
CVE-2022-41223Mitel MiVoice Connect10.6%KNOWNransomware (KEV-flagged)—2023-02-212023-03-14 ⚠
CVE-2022-47986IBM Aspera Faspex100.0%KNOWNransomware (KEV-flagged)—2023-02-212023-03-14 ⚠
CVE-2023-23376Microsoft Windows10.9%KNOWNransomware (KEV-flagged)—2023-02-142023-03-07 ⚠
CVE-2015-2291Intel Ethernet Diagnostics Driver fo9.0%KNOWNransomware (KEV-flagged)—2023-02-102023-03-03 ⚠
CVE-2023-0669Fortra GoAnywhere MFT100.0%KNOWNClop (GoAnywhere MFT)Clop (TA505)2023-02-102023-03-03 ⚠
CVE-2022-24990TerraMaster TerraMaster OS83.5%KNOWNransomware (KEV-flagged)—2023-02-102023-03-03 ⚠
CVE-2022-21587Oracle E-Business Suite98.3%KNOWNransomware (KEV-flagged)—2023-02-022023-02-23 ⚠
CVE-2017-11357Telerik User Interface (UI) for ASP.NE75.7%KNOWNransomware (KEV-flagged)—2023-01-262023-02-16 ⚠
CVE-2022-47966Zoho ManageEngine99.8%KNOWNransomware (KEV-flagged)—2023-01-232023-02-13 ⚠
CVE-2022-41080Microsoft Exchange Server77.3%KNOWNransomware (KEV-flagged)—2023-01-102023-01-31 ⚠
CVE-2022-26500Veeam Backup & Replication5.8%KNOWNransomware (KEV-flagged)—2022-12-132023-01-03 ⚠
CVE-2022-26501Veeam Backup & Replication4.1%KNOWNransomware (KEV-flagged)—2022-12-132023-01-03 ⚠
CVE-2022-42475Fortinet FortiOS99.5%KNOWNransomware (KEV-flagged)—2022-12-132023-01-03 ⚠
CVE-2022-44698Microsoft Defender76.3%KNOWNransomware (KEV-flagged)—2022-12-132023-01-03 ⚠
CVE-2022-41073Microsoft Windows2.4%KNOWNransomware (KEV-flagged)—2022-11-082022-12-09 ⚠
CVE-2022-41091Microsoft Windows2.0%KNOWNransomware (KEV-flagged)—2022-11-082022-12-09 ⚠
CVE-2020-3153Cisco AnyConnect Secure27.5%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2020-3433Cisco AnyConnect Secure10.0%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2018-19320GIGABYTE Multiple Products3.6%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2018-19321GIGABYTE Multiple Products3.7%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2018-19322GIGABYTE Multiple Products1.9%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2018-19323GIGABYTE Multiple Products8.5%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2022-40684Fortinet Multiple Products100.0%KNOWNransomware (KEV-flagged)—2022-10-112022-11-01 ⚠
CVE-2022-41040Microsoft Exchange Server100.0%KNOWNProxyNotShell — Play, ransomwaremultiple ransomware2022-09-302022-10-21 ⚠
CVE-2022-41082Microsoft Exchange Server100.0%KNOWNProxyNotShell — Play, ransomwaremultiple ransomware2022-09-302022-10-21 ⚠
CVE-2018-6530D-Link Multiple Routers96.7%KNOWNransomware (KEV-flagged)—2022-09-082022-09-29 ⚠
CVE-2018-13374Fortinet FortiOS and FortiADC38.1%KNOWNransomware (KEV-flagged)—2022-09-082022-09-29 ⚠
CVE-2022-27593QNAP Photo Station87.9%KNOWNransomware (KEV-flagged)—2022-09-082022-09-29 ⚠
CVE-2022-2294WebRTC WebRTC70.5%KNOWNransomware (KEV-flagged)—2022-08-252022-09-15 ⚠
CVE-2022-26352dotCMS dotCMS91.1%KNOWNransomware (KEV-flagged)—2022-08-252022-09-15 ⚠
CVE-2022-27925Synacor Zimbra Collaboration Suite (ZC98.6%KNOWNransomware (KEV-flagged)—2022-08-112022-09-01 ⚠
CVE-2022-37042Synacor Zimbra Collaboration Suite (ZC88.8%KNOWNransomware (KEV-flagged)—2022-08-112022-09-01 ⚠
CVE-2022-30333RARLAB UnRAR99.1%KNOWNransomware (KEV-flagged)—2022-08-092022-08-30 ⚠
CVE-2022-27924Synacor Zimbra Collaboration Suite (ZC85.4%KNOWNransomware (KEV-flagged)—2022-08-042022-08-25 ⚠
CVE-2022-29499Mitel MiVoice Connect55.4%KNOWNransomware (KEV-flagged)—2022-06-272022-07-18 ⚠
CVE-2022-30190Microsoft Windows99.4%KNOWNFollina — Qakbot, AsyncRAT, nation-statemultiple2022-06-142022-07-05 ⚠
CVE-2019-7192QNAP Photo Station88.2%KNOWNransomware (KEV-flagged)—2022-06-082022-06-22 ⚠
CVE-2019-7193QNAP QTS14.4%KNOWNransomware (KEV-flagged)—2022-06-082022-06-22 ⚠
CVE-2019-7194QNAP Photo Station83.1%KNOWNransomware (KEV-flagged)—2022-06-082022-06-22 ⚠
CVE-2019-7195QNAP Photo Station89.7%KNOWNransomware (KEV-flagged)—2022-06-082022-06-22 ⚠
CVE-2022-26134Atlassian Confluence Server/Data Center100.0%KNOWNCerber, ransomware (Confluence OGNL)multiple2022-06-022022-06-06 ⚠
CVE-2010-0738Red Hat JBoss79.4%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2010-1428Red Hat JBoss62.3%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2012-1710Oracle Fusion Middleware11.6%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-0074Microsoft Silverlight81.9%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-0422Oracle Java Runtime Environment (JRE)97.6%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-0431Oracle Java Runtime Environment (JRE)90.0%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2013-3993IBM InfoSphere BigInsights5.2%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2016-0034Microsoft Silverlight58.5%KNOWNransomware (KEV-flagged)—2022-05-252022-06-15 ⚠
CVE-2016-3351Microsoft Internet Explorer and Edge26.3%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2017-0147Microsoft SMBv1 server99.7%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2017-18362Kaseya Virtual System/Server Administ86.8%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2018-19943QNAP Network Attached Storage (NAS)17.7%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2018-19949QNAP Network Attached Storage (NAS)24.4%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2018-19953QNAP Network Attached Storage (NAS)23.9%KNOWNransomware (KEV-flagged)—2022-05-242022-06-14 ⚠
CVE-2019-1130Microsoft Windows2.3%KNOWNransomware (KEV-flagged)—2022-05-232022-06-13 ⚠
CVE-2019-1385Microsoft Windows3.6%KNOWNransomware (KEV-flagged)—2022-05-232022-06-13 ⚠
CVE-2020-0638Microsoft Update Notification Manager3.0%KNOWNransomware (KEV-flagged)—2022-05-232022-06-13 ⚠
CVE-2022-1388F5 BIG-IP100.0%KNOWNF5 BIG-IP RCE — webshells, ransomwaremultiple2022-05-102022-05-31 ⚠
CVE-2022-29464WSO2 Multiple Products100.0%KNOWNransomware (KEV-flagged)—2022-04-252022-05-16 ⚠
CVE-2018-6882Synacor Zimbra Collaboration Suite (ZC25.2%KNOWNransomware (KEV-flagged)—2022-04-192022-05-10 ⚠
CVE-2019-16057D-Link DNS-320 Storage Device87.2%KNOWNransomware (KEV-flagged)—2022-04-152022-05-06 ⚠
CVE-2022-22954VMware Workspace ONE Access and Ident100.0%KNOWNransomware (KEV-flagged)—2022-04-142022-05-05 ⚠
CVE-2018-7602Drupal Core99.2%KNOWNransomware (KEV-flagged)—2022-04-132022-05-04 ⚠
CVE-2018-20753Kaseya Virtual System/Server Administ29.3%KNOWNransomware (KEV-flagged)—2022-04-132022-05-04 ⚠
CVE-2022-24521Microsoft Windows7.3%KNOWNransomware (KEV-flagged)—2022-04-132022-05-04 ⚠
CVE-2021-42278Microsoft Active Directory70.2%KNOWNransomware (KEV-flagged)—2022-04-112022-05-02 ⚠
CVE-2021-42287Microsoft Active Directory74.3%KNOWNransomware (KEV-flagged)—2022-04-112022-05-02 ⚠
CVE-2017-0148Microsoft SMBv1 server99.4%KNOWNransomware (KEV-flagged)—2022-04-062022-04-27 ⚠
CVE-2018-10562Dasan Gigabit Passive Optical Networ99.9%KNOWNransomware (KEV-flagged)—2022-03-312022-04-21 ⚠
CVE-2021-28799QNAP Network Attached Storage (NAS)78.3%KNOWNransomware (KEV-flagged)—2022-03-312022-04-21 ⚠
CVE-2013-2465Oracle Java SE98.7%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2013-2551Microsoft Internet Explorer74.1%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2016-0151Microsoft Client-Server Run-time Subsyst63.2%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2017-0213Microsoft Windows84.1%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2018-8405Microsoft DirectX Graphics Kernel (DXGKR3.4%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2018-8406Microsoft DirectX Graphics Kernel (DXGKR3.4%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2018-8440Microsoft Windows18.4%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2021-20028SonicWall Secure Remote Access (SRA)29.9%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2021-26085Atlassian Confluence Server99.9%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2021-38646Microsoft Office4.4%KNOWNransomware (KEV-flagged)—2022-03-282022-04-18 ⚠
CVE-2010-2861Adobe ColdFusion99.7%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2017-0146Microsoft Windows89.9%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2018-1273VMware Tanzu Spring Data Commons95.6%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2020-2021Palo Alto Networks PAN-OS4.4%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2017-12615Apache Tomcat99.6%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2018-11138Quest KACE System Management Applian91.8%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2019-11043PHP FastCGI Process Manager (FPM)99.4%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2019-15107Webmin Webmin99.8%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2021-22941Citrix ShareFile53.6%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2021-42237Sitecore XP97.9%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2022-21999Microsoft Windows41.7%KNOWNransomware (KEV-flagged)—2022-03-252022-04-15 ⚠
CVE-2015-2546Microsoft Win32k10.9%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2016-3309Microsoft Windows20.6%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2017-0101Microsoft Windows57.5%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2018-8120Microsoft Win32k73.7%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-0543Microsoft Windows4.7%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-0841Microsoft Windows41.4%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1064Microsoft Windows6.9%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1069Microsoft Task Scheduler6.1%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1129Microsoft Windows1.8%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1253Microsoft Windows11.6%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1315Microsoft Windows3.5%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1322Microsoft Windows19.2%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2019-1405Microsoft Windows30.0%KNOWNransomware (KEV-flagged)—2022-03-152022-04-05 ⚠
CVE-2009-3960Adobe BlazeDS90.0%KNOWNransomware (KEV-flagged)—2022-03-072022-09-07 ⚠
CVE-2008-2992Adobe Acrobat and Reader98.5%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2010-0188Adobe Reader and Acrobat88.2%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2012-0507Oracle Java SE98.1%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2012-1723Oracle Java SE93.7%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2012-4681Oracle Java SE98.5%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2015-1701Microsoft Win32k56.2%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2015-7645Adobe Flash Player68.4%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2016-0099Microsoft Windows37.2%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2016-1019Adobe Flash Player22.5%KNOWNransomware (KEV-flagged)—2022-03-032022-03-24 ⚠
CVE-2018-8581Microsoft Exchange Server27.4%KNOWNransomware (KEV-flagged)—2022-03-032022-03-17 ⚠
CVE-2021-41379Microsoft Windows20.1%KNOWNransomware (KEV-flagged)—2022-03-032022-03-17 ⚠
CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS)30.9%KNOWNransomware (KEV-flagged)—2022-02-252022-03-11 ⚠
CVE-2018-8174Microsoft Windows87.6%KNOWNransomware (KEV-flagged)—2022-02-152022-08-15 ⚠
CVE-2019-0752Microsoft Internet Explorer81.6%KNOWNransomware (KEV-flagged)—2022-02-152022-08-15 ⚠
CVE-2018-15982Adobe Flash Player82.5%KNOWNransomware (KEV-flagged)—2022-02-152022-08-15 ⚠
CVE-2018-20250RARLAB WinRAR96.3%KNOWNransomware (KEV-flagged)—2022-02-152022-08-15 ⚠
CVE-2017-0144Microsoft SMBv199.2%KNOWNWannaCry, NotPetya, Retefe (EternalBlue)Lazarus Group (NK), Sandworm (RU)2022-02-102022-08-10 ⚠
CVE-2017-0145Microsoft SMBv189.9%KNOWNNotPetya, WannaCry (EternalBlue family)Sandworm (RU)2022-02-102022-08-10 ⚠
CVE-2020-0796Microsoft SMBv399.8%KNOWNSMBGhost — miners / lateral movementmultiple2022-02-102022-08-10 ⚠
CVE-2017-10271Oracle WebLogic Server100.0%KNOWNransomware (KEV-flagged)—2022-02-102022-08-10 ⚠
CVE-2020-0787Microsoft Windows42.5%KNOWNransomware (KEV-flagged)—2022-01-282022-07-28 ⚠
CVE-2021-20038SonicWall SMA 100 Appliances99.9%KNOWNransomware (KEV-flagged)—2022-01-282022-02-11 ⚠
CVE-2018-8453Microsoft Win32k70.0%KNOWNransomware (KEV-flagged)—2022-01-212022-07-21 ⚠
CVE-2021-21975VMware vRealize Operations Manager AP78.3%KNOWNransomware (KEV-flagged)—2022-01-182022-02-01 ⚠
CVE-2019-1458Microsoft Win32k73.9%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2019-1579Palo Alto Networks PAN-OS46.0%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2019-2725Oracle WebLogic Server100.0%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2018-13382Fortinet FortiOS and FortiProxy81.7%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2018-13383Fortinet FortiOS and FortiProxy33.6%KNOWNransomware (KEV-flagged)—2022-01-102022-07-10 ⚠
CVE-2021-43890Microsoft Windows10.3%KNOWNransomware (KEV-flagged)—2021-12-152021-12-29 ⚠
CVE-2017-12149Red Hat JBoss Application Server90.7%KNOWNransomware (KEV-flagged)—2021-12-102022-06-10 ⚠
CVE-2021-44228Apache Log4j2100.0%KNOWNKhonsari, Conti, TellYouThePass, Mirai (Log4Shell)multiple (APT + criminal)2021-12-102021-12-24 ⚠
CVE-2021-40438Apache Apache100.0%KNOWNransomware (KEV-flagged)—2021-12-012021-12-15 ⚠
CVE-2021-40449Microsoft Windows74.1%KNOWNransomware (KEV-flagged)—2021-11-172021-12-01 ⚠
CVE-2021-42321Microsoft Exchange90.4%KNOWNransomware (KEV-flagged)—2021-11-172021-12-01 ⚠
CVE-2014-1812Microsoft Windows65.1%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2016-0167Microsoft Win32k5.7%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2017-0143Microsoft Windows93.3%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2017-0199Microsoft Office and WordPad99.9%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2017-5638Apache Struts100.0%KNOWNStruts RCE — cryptominers, webshellsmultiple2021-11-032022-05-03 ⚠
CVE-2017-9822DotNetNuke (DNN) DotNetNuke (DNN)94.8%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2018-2380SAP Customer Relationship Manageme28.9%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2018-4878Adobe Flash Player89.5%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2018-6789Exim Exim81.7%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2018-7600Drupal Drupal Core100.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-0604Microsoft SharePoint99.8%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-0708Microsoft Remote Desktop Services100.0%KNOWNBlueKeep — RDP worming / minersmultiple2021-11-032022-05-03 ⚠
CVE-2019-1215Microsoft Windows19.3%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-1367Microsoft Internet Explorer45.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-3396Atlassian Confluence Server and Data Ser99.9%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-5544VMware VMware ESXi and Horizon DaaS96.8%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-7481SonicWall SMA10099.9%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-0688Microsoft Exchange Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-0878Microsoft Edge and Internet Explorer2.7%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-1472Microsoft Netlogon99.5%KNOWNRyuk, Conti (Zerologon)Wizard Spider (RU)2021-11-032022-05-03 ⚠
CVE-2020-3580Cisco Adaptive Security Appliance (A85.6%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-3992VMware ESXi83.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-5902F5 BIG-IP100.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-1675Microsoft Windows84.8%KNOWNVice Society, Magniber (PrintNightmare)Vice Society2021-11-032021-11-17 ⚠
CVE-2021-1732Microsoft Win32k77.8%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2017-11882Microsoft Office99.9%KNOWNAgent Tesla, Loki, FormBook, manymultiple (commodity + APT)2021-11-032022-05-03 ⚠
CVE-2018-13379Fortinet FortiOS100.0%KNOWNCring, Conti, ransomware via Fortinet SSL-VPNmultiple ransomware2021-11-032022-05-03 ⚠
CVE-2019-11510Ivanti Pulse Connect Secure100.0%KNOWNREvil, Black Kingdom (Pulse Secure)REvil, APT actors (IR)2021-11-032022-05-03 ⚠
CVE-2019-11539Ivanti Pulse Connect Secure and Pulse98.6%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-11580Atlassian Crowd and Crowd Data Center95.4%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-11634Citrix Workspace Application and Rece8.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-13608Citrix StoreFront Server30.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-18935Progress Telerik UI for ASP.NET AJAX99.7%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2019-19781Citrix Application Delivery Controlle100.0%KNOWNREvil, Ragnarok, Maze, DoppelPaymer (Citrix ADC)multiple ransomware2021-11-032022-05-03 ⚠
CVE-2020-12271Sophos SFOS42.4%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2020-12812Fortinet FortiOS49.3%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-20016SonicWall SSLVPN SMA10037.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-20021SonicWall SonicWall Email Security83.4%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-20022SonicWall SonicWall Email Security16.5%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-20023SonicWall SonicWall Email Security50.2%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-21972VMware vCenter Server99.5%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-21985VMware vCenter Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-22005VMware vCenter Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-22205GitLab Community and Enterprise Editi99.7%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-22893Ivanti Pulse Connect Secure47.2%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-22986F5 BIG-IP and BIG-IQ Centralized 99.9%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-26084Atlassian Confluence Server and Data Cen100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-26411Microsoft Internet Explorer80.7%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-26855Microsoft Exchange Server100.0%KNOWNDearCry, ransomware (ProxyLogon)HAFNIUM (CN)2021-11-032022-05-03 ⚠
CVE-2021-26857Microsoft Exchange Server94.0%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-26858Microsoft Exchange Server89.5%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2021-27065Microsoft Exchange Server99.9%KNOWNDearCry (ProxyLogon)HAFNIUM (CN)2021-11-032022-05-03 ⚠
CVE-2021-27101Accellion FTA5.9%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-27102Accellion FTA3.6%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-27103Accellion FTA11.3%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-27104Accellion FTA56.4%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-30116Kaseya Virtual System/Server Administ85.7%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-31207Microsoft Exchange Server99.8%KNOWNLockFile, BlackByte (ProxyShell)multiple ransomware2021-11-032021-11-17 ⚠
CVE-2021-34473Microsoft Exchange Server100.0%KNOWNConti, LockFile, BlackByte, ALPHV (ProxyShell)multiple ransomware2021-11-032021-11-17 ⚠
CVE-2021-34523Microsoft Exchange Server100.0%KNOWNConti, LockFile, BlackByte (ProxyShell)multiple ransomware2021-11-032021-11-17 ⚠
CVE-2021-34527Microsoft Windows99.8%KNOWNVice Society, Magniber, Conti (PrintNightmare)Vice Society2021-11-032022-05-03 ⚠
CVE-2021-35211SolarWinds Serv-U91.2%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-35464ForgeRock Access Management (AM)100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-36942Microsoft Windows66.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-36955Microsoft Windows3.2%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-38647Microsoft Open Management Infrastructure99.7%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-40444Microsoft MSHTML97.2%KNOWNConti, Ryuk (MSHTML)Wizard Spider (RU)2021-11-032021-11-17 ⚠
CVE-2021-40539Zoho ManageEngine99.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-41773Apache HTTP Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-42013Apache HTTP Server100.0%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2021-42258BQE BillQuick Web Suite73.5%KNOWNransomware (KEV-flagged)—2021-11-032021-11-17 ⚠
CVE-2026-8037Progress LoadMaster84.8%———2026-08-072026-08-10
CVE-2026-63077JetBrains TeamCity1.0%———2026-08-052026-08-08 ⚠
CVE-2026-9198IBM Langflow17.1%———2026-08-042026-08-07 ⚠
CVE-2026-18556N-able N-central0.5%———2026-08-042026-08-07 ⚠
CVE-2026-34486Apache Tomcat79.9%———2026-08-042026-08-07 ⚠
CVE-2026-18577N-able N-central4.1%———2026-08-032026-08-06 ⚠
CVE-2026-20316Cisco Secure Firewall Management Cen0.8%———2026-07-292026-08-01 ⚠
CVE-2025-68686Fortinet FortiOS1.3%———2026-07-272026-08-10
CVE-2026-16812Arista VeloCloud Orchestrator0.9%———2026-07-272026-07-30 ⚠
CVE-2026-16232Check Point SmartConsole71.4%———2026-07-222026-07-25 ⚠
CVE-2026-50522Microsoft SharePoint75.8%———2026-07-222026-07-25 ⚠
CVE-2026-0770Langflow Langflow56.3%———2026-07-212026-07-24 ⚠
CVE-2021-27137DD-WRT DD-WRT16.5%———2026-07-212026-07-24 ⚠
CVE-2026-60137WordPress Core79.0%———2026-07-212026-08-04 ⚠
CVE-2026-63030WordPress Core98.4%———2026-07-212026-07-24 ⚠
CVE-2026-25089Fortinet FortiSandbox73.6%———2026-07-162026-07-19 ⚠
CVE-2026-39808Fortinet FortiSandbox91.2%———2026-07-162026-07-19 ⚠
CVE-2026-58644Microsoft SharePoint6.0%———2026-07-162026-07-19 ⚠
CVE-2023-4346KNX Association KNX Protocol Connection Author0.9%———2026-07-152026-07-29 ⚠
CVE-2026-46817Oracle E-Business Suite13.3%———2026-07-152026-07-18 ⚠
CVE-2026-56155Microsoft Active Directory Federation Se2.3%———2026-07-142026-07-28 ⚠
CVE-2026-56164Microsoft SharePoint Server22.4%———2026-07-142026-07-17 ⚠
CVE-2008-4128Cisco IOS33.0%———2026-07-132026-07-16 ⚠
CVE-2026-48939iCagenda iCagenda24.3%———2026-07-102026-07-13 ⚠
CVE-2026-56291Balbooa Forms76.1%———2026-07-102026-07-13 ⚠
CVE-2026-48282Adobe ColdFusion99.2%———2026-07-072026-07-10 ⚠
CVE-2026-48908JoomShaper SP Page Builder88.1%———2026-07-072026-07-10 ⚠
CVE-2026-55255Langflow Langflow29.1%———2026-07-072026-07-10 ⚠
CVE-2026-56290Joomlack Page Builder83.3%———2026-07-072026-07-10 ⚠
CVE-2026-45659Microsoft SharePoint Server9.1%———2026-07-012026-07-04 ⚠
CVE-2026-48558SimpleHelp SimpleHelp11.5%———2026-06-292026-07-02 ⚠
CVE-2026-20230Cisco Unified Communications Manager83.2%———2026-06-252026-06-28 ⚠
CVE-2025-67038Lantronix EDS500014.3%———2026-06-232026-06-26 ⚠
CVE-2026-34908Ubiquiti UniFi OS61.9%———2026-06-232026-06-26 ⚠
CVE-2026-34909Ubiquiti UniFi OS62.8%———2026-06-232026-06-26 ⚠
CVE-2026-34910Ubiquiti UniFi OS87.0%———2026-06-232026-06-26 ⚠
CVE-2026-20253Splunk Enterprise96.9%———2026-06-182026-06-21 ⚠
CVE-2026-48907Widget Factory Joomla Content Editor 55.9%———2026-06-162026-06-19 ⚠
CVE-2026-20262Cisco Catalyst SD-WAN Manager28.2%———2026-06-152026-06-29 ⚠
CVE-2026-54420LiteSpeed cPanel Plugin1.4%———2026-06-152026-06-18 ⚠
CVE-2026-10520Ivanti Sentry99.9%———2026-06-112026-06-14 ⚠
CVE-2026-7473Arista Extensible Operating System1.1%———2026-06-092026-06-23 ⚠
CVE-2026-11645Google Chromium V82.2%———2026-06-092026-06-23 ⚠
CVE-2026-20245Cisco Catalyst SD-WAN Manager25.3%———2026-06-092026-06-23 ⚠
CVE-2026-42271BerriAI LiteLLM83.0%———2026-06-082026-06-22 ⚠
CVE-2026-28318SolarWinds Serv-U8.4%———2026-06-052026-06-19 ⚠
CVE-2026-45247Mirasvit Mirasvit Full Page Cache Warme27.5%———2026-06-032026-06-06 ⚠
CVE-2022-0492Linux Kernel5.5%———2026-06-022026-06-05 ⚠
CVE-2025-48595Android Framework1.7%———2026-06-022026-06-05 ⚠
CVE-2024-21182Oracle WebLogic Server50.0%———2026-06-012026-06-04 ⚠
CVE-2026-8398Daemon Daemon Tools Lite1.5%———2026-05-272026-05-30 ⚠
CVE-2026-48172LiteSpeed cPanel Plugin18.9%———2026-05-262026-05-29 ⚠
CVE-2026-9082Drupal Core88.3%———2026-05-222026-05-27 ⚠
CVE-2025-34291Langflow Langflow83.8%———2026-05-212026-06-04 ⚠
CVE-2026-34926Trend Micro Apex One12.7%———2026-05-212026-06-04 ⚠
CVE-2008-4250Microsoft Windows98.8%———2026-05-202026-06-03 ⚠
CVE-2009-1537Microsoft DirectX51.2%———2026-05-202026-06-03 ⚠
CVE-2009-3459Adobe Acrobat and Reader86.6%———2026-05-202026-06-03 ⚠
CVE-2010-0249Microsoft Internet Explorer91.9%———2026-05-202026-06-03 ⚠
CVE-2010-0806Microsoft Internet Explorer82.2%———2026-05-202026-06-03 ⚠
CVE-2026-41091Microsoft Defender9.6%———2026-05-202026-06-03 ⚠
CVE-2026-45498Microsoft Defender63.1%———2026-05-202026-06-03 ⚠

🔗 Pivot

Exploit theater →Ransomware theater →Malware families →Actor profiles →Detection rules →Refresh KEV →Score EPSS →
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center