Vulnerability Intelligence

Exploited CVEs

1.7K
CISA KEV catalog

Ransomware-linked

338
20% of KEV

Actor-attributed

41
named groups

EPSS-scored

1.7K
861 likely-exploited (≥0.5)

KEV overdue

1.7K
past CISA due date

🏢 Top affected vendors

🔧 Top affected products

Windows
172
Multiple Products
79
Chromium V8
39
Internet Explorer
36
Flash Player
33
Kernel
29
Office
29
Win32k
25
Exchange Server
17
ColdFusion
16
Zimbra Collaboration Suite (ZCS)
15
IOS and IOS XE Software
14
Mobile Devices
13
Acrobat and Reader
13

📅 Exploited CVEs by year

2002
1
2004
2
2005
1
2006
2
2007
3
2008
6
2009
15
2010
23
2011
9
2012
22
2013
38
2014
34
2015
44
2016
59
2017
86
2018
89
2019
118
2020
146
2021
214
2022
131
2023
164
2024
164
2025
184
2026
107

🏹 Actor attribution counts

🤖 CWE weakness distribution

CWE-78
93
CWE-20
91
CWE-416
89
CWE-787
84
CWE-119
84
CWE-22
70
CWE-94
62
CWE-502
61
CWE-287
36
CWE-284
33
CWE-843
32
CWE-306
32
CWE-264
31
CWE-79
27

📈 EPSS probability bands

Likely (≥.5)
861
Elevated (.1–.5)
404
Moderate (.01–.1)
353
Low (<.01)
44

🔒 Ransomware-linked share

Other exploited
1.3K
Ransomware-known
338

📈 Exploit-probability coverage

1.7K of 1.7K KEV CVEs carry a FIRST EPSS score (100%). 861 score ≥0.5 (likely exploited within 30 days). Re-run EPSS enrichment to refresh.

☠ Most dangerous exploited CVEs (ransomware · actor · EPSS · recency weighted)

#CVEVendor / ProductDangerEPSSRansomwareActorsAdded
1CVE-2025-0282Ivanti Connect Secure, Policy Secur
110.3
100.0%KNOWNUNC / China-nexus2025-01-08
2CVE-2024-40711Veeam Backup & Replication
107.0
90.4%KNOWNAkira, Fog2024-10-17
3CVE-2024-4577PHP Group PHP
106.8
100.0%KNOWNmultiple2024-06-12
4CVE-2024-3400Palo Alto Networks PAN-OS
105.8
100.0%KNOWNmultiple2024-04-12
5CVE-2024-1709ConnectWise ScreenConnect
104.9
100.0%KNOWNmultiple ransomware2024-02-22
6CVE-2024-21412Microsoft Windows
103.9
95.4%KNOWNWater Hydra2024-02-13
7CVE-2023-46604Apache ActiveMQ
103.0
99.7%KNOWNmultiple2023-11-02
8CVE-2023-4966Citrix NetScaler ADC and NetScaler
102.8
100.0%KNOWNLockBit2023-10-18
9CVE-2023-22515Atlassian Confluence Data Center and S
102.4
99.2%KNOWNnation-state + criminal2023-10-05
10CVE-2024-21762Fortinet FortiOS
101.6
84.3%KNOWNmultiple2024-02-09
11CVE-2023-3519Citrix NetScaler ADC and NetScaler
101.3
99.7%KNOWNmultiple2023-07-19
12CVE-2023-34362Progress MOVEit Transfer
100.5
99.9%KNOWNClop (TA505/FIN11)2023-06-02
13CVE-2021-45046Apache Log4j2
100.0
100.0%KNOWNmultiple2023-05-01
14CVE-2023-27350PaperCut MF/NG
99.8
100.0%KNOWNClop, LockBit2023-04-21
15CVE-2023-0669Fortra GoAnywhere MFT
98.7
100.0%KNOWNClop (TA505)2023-02-10
16CVE-2022-41040Microsoft Exchange Server
96.4
100.0%KNOWNmultiple ransomware2022-09-30
17CVE-2022-41082Microsoft Exchange Server
96.4
100.0%KNOWNmultiple ransomware2022-09-30
18CVE-2022-26134Atlassian Confluence Server/Data Cente
95.0
100.0%KNOWNmultiple2022-06-02
19CVE-2022-1388F5 BIG-IP
95.0
100.0%KNOWNmultiple2022-05-10
20CVE-2020-0796Microsoft SMBv3
95.0
99.8%KNOWNmultiple2022-02-10
21CVE-2021-44228Apache Log4j2
95.0
100.0%KNOWNmultiple (APT + criminal)2021-12-10
22CVE-2017-5638Apache Struts
95.0
100.0%KNOWNmultiple2021-11-03
23CVE-2019-0708Microsoft Remote Desktop Services
95.0
100.0%KNOWNmultiple2021-11-03
24CVE-2017-11882Microsoft Office
95.0
99.9%KNOWNmultiple (commodity + APT)2021-11-03
25CVE-2018-13379Fortinet FortiOS
95.0
100.0%KNOWNmultiple ransomware2021-11-03

🛡 Vulnerability → Malware / Ransomware / Actor

Type a full CVE id (e.g. CVE-2023-34362) for the full dossier — EPSS, KEV due-date, attributed malware/actors, entity graph & OSINT pivots.

95 vulnerabilities (use the ⇩ CSV button to export the filtered view)

CVEVendor / ProductEPSSRansomwareMalware / RansomwareActorsAddedDue date
CVE-2026-20131Cisco Secure Firewall Management Cen28.2%KNOWNransomware (KEV-flagged)—2026-03-192026-03-22 ⚠
CVE-2020-3259Cisco Adaptive Security Appliance (A69.3%KNOWNransomware (KEV-flagged)—2024-02-152024-03-07 ⚠
CVE-2023-20269Cisco Adaptive Security Appliance an21.6%KNOWNAkira, LockBit (Cisco ASA)Akira, LockBit2023-09-132023-10-04 ⚠
CVE-2020-3153Cisco AnyConnect Secure27.5%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2020-3433Cisco AnyConnect Secure10.0%KNOWNransomware (KEV-flagged)—2022-10-242022-11-14 ⚠
CVE-2020-3580Cisco Adaptive Security Appliance (A85.6%KNOWNransomware (KEV-flagged)—2021-11-032022-05-03 ⚠
CVE-2026-20316Cisco Secure Firewall Management Cen0.8%———2026-07-292026-08-01 ⚠
CVE-2008-4128Cisco IOS33.0%———2026-07-132026-07-16 ⚠
CVE-2026-20230Cisco Unified Communications Manager83.2%———2026-06-252026-06-28 ⚠
CVE-2026-20262Cisco Catalyst SD-WAN Manager28.2%———2026-06-152026-06-29 ⚠
CVE-2026-20245Cisco Catalyst SD-WAN Manager25.3%———2026-06-092026-06-23 ⚠
CVE-2026-20182Cisco Catalyst SD-WAN90.3%———2026-05-142026-05-17 ⚠
CVE-2026-20122Cisco Catalyst SD-WAN Manger24.6%———2026-04-202026-04-23 ⚠
CVE-2026-20128Cisco Catalyst SD-WAN Manager6.9%———2026-04-202026-04-23 ⚠
CVE-2026-20133Cisco Catalyst SD-WAN Manager31.4%———2026-04-202026-04-23 ⚠
CVE-2022-20775Cisco SD-WAN12.5%———2026-02-252026-02-27 ⚠
CVE-2026-20127Cisco Catalyst SD-WAN Controller and88.2%———2026-02-252026-02-27 ⚠
CVE-2026-20045Cisco Unified Communications Manager4.3%———2026-01-212026-02-11 ⚠
CVE-2025-20393Cisco Multiple Products29.5%———2025-12-172025-12-24 ⚠
CVE-2025-20352Cisco IOS and IOS XE38.8%———2025-09-292025-10-20 ⚠
CVE-2025-20333Cisco Secure Firewall Adaptive Secur40.4%———2025-09-252025-09-26 ⚠
CVE-2025-20362Cisco Secure Firewall Adaptive Secur85.5%———2025-09-252025-09-26 ⚠
CVE-2025-20281Cisco Identity Services Engine97.1%———2025-07-282025-08-18 ⚠
CVE-2025-20337Cisco Identity Services Engine66.3%———2025-07-282025-08-18 ⚠
CVE-2024-20439Cisco Smart Licensing Utility92.1%———2025-03-312025-04-21 ⚠
CVE-2023-20118Cisco Small Business RV Series Route54.1%———2025-03-032025-03-24 ⚠
CVE-2014-2120Cisco Adaptive Security Appliance (A14.0%———2024-11-122024-12-03 ⚠
CVE-2024-20481Cisco Adaptive Security Appliance (A15.9%———2024-10-242024-11-14 ⚠
CVE-2024-20399Cisco NX-OS4.3%———2024-07-022024-07-23 ⚠
CVE-2024-20353Cisco Adaptive Security Appliance (A70.7%———2024-04-242024-05-01 ⚠
CVE-2024-20359Cisco Adaptive Security Appliance (A19.4%———2024-04-242024-05-01 ⚠
CVE-2023-20273Cisco Cisco IOS XE Web UI89.6%———2023-10-232023-10-27 ⚠
CVE-2023-20198Cisco IOS XE Web UI99.6%———2023-10-162023-10-20 ⚠
CVE-2023-20109Cisco IOS and IOS XE2.3%———2023-10-102023-10-31 ⚠
CVE-2004-1464Cisco IOS5.1%———2023-05-192023-06-09 ⚠
CVE-2016-6415Cisco IOS, IOS XR, and IOS XE87.3%———2023-05-192023-06-09 ⚠
CVE-2017-6742Cisco IOS and IOS XE Software21.4%———2023-04-192023-05-10 ⚠
CVE-2019-15271Cisco RV Series Routers6.0%———2022-06-082022-06-22 ⚠
CVE-2016-6366Cisco Adaptive Security Appliance (A87.6%———2022-05-242022-06-14 ⚠
CVE-2016-6367Cisco Adaptive Security Appliance (A22.6%———2022-05-242022-06-14 ⚠
CVE-2022-20821Cisco IOS XR11.8%———2022-05-232022-06-13 ⚠
CVE-2009-2055Cisco IOS XR3.3%———2022-03-252022-04-15 ⚠
CVE-2010-3035Cisco IOS XR5.6%———2022-03-252022-04-15 ⚠
CVE-2015-0666Cisco Prime Data Center Network Mana40.4%———2022-03-252022-04-15 ⚠
CVE-2017-3881Cisco IOS and IOS XE99.0%———2022-03-252022-04-15 ⚠
CVE-2018-0125Cisco VPN Routers55.2%———2022-03-252022-04-15 ⚠
CVE-2018-0147Cisco Secure Access Control System (18.3%———2022-03-252022-04-15 ⚠
CVE-2017-6627Cisco IOS and IOS XE Software6.0%———2022-03-032022-03-24 ⚠
CVE-2017-6663Cisco IOS and IOS XE Software2.1%———2022-03-032022-03-24 ⚠
CVE-2017-6736Cisco IOS and IOS XE Software70.6%———2022-03-032022-03-24 ⚠
CVE-2017-6737Cisco IOS and IOS XE Software42.6%———2022-03-032022-03-24 ⚠
CVE-2017-6738Cisco IOS and IOS XE Software10.6%———2022-03-032022-03-24 ⚠
CVE-2017-6739Cisco IOS and IOS XE Software10.6%———2022-03-032022-03-24 ⚠
CVE-2017-6740Cisco IOS and IOS XE Software10.8%———2022-03-032022-03-24 ⚠
CVE-2017-6743Cisco IOS and IOS XE Software10.6%———2022-03-032022-03-24 ⚠
CVE-2017-6744Cisco IOS software7.2%———2022-03-032022-03-24 ⚠
CVE-2018-0151Cisco IOS and IOS XE Software14.3%———2022-03-032022-03-17 ⚠
CVE-2018-0154Cisco IOS Software7.1%———2022-03-032022-03-17 ⚠
CVE-2018-0155Cisco Catalyst 4500 Series Switches 7.8%———2022-03-032022-03-17 ⚠
CVE-2018-0156Cisco IOS Software and Cisco IOS XE 8.2%———2022-03-032022-03-17 ⚠
CVE-2018-0158Cisco IOS Software and Cisco IOS XE 7.2%———2022-03-032022-03-17 ⚠
CVE-2018-0159Cisco IOS Software and Cisco IOS XE 6.9%———2022-03-032022-03-17 ⚠
CVE-2018-0161Cisco IOS Software4.7%———2022-03-032022-03-17 ⚠
CVE-2018-0167Cisco IOS, XR, and XE Software3.4%———2022-03-032022-03-17 ⚠
CVE-2018-0172Cisco IOS and IOS XE Software7.9%———2022-03-032022-03-17 ⚠
CVE-2018-0173Cisco IOS and IOS XE Software7.7%———2022-03-032022-03-17 ⚠
CVE-2018-0174Cisco IOS XE Software7.7%———2022-03-032022-03-17 ⚠
CVE-2018-0175Cisco IOS, XR, and XE Software3.5%———2022-03-032022-03-17 ⚠
CVE-2018-0179Cisco IOS Software5.0%———2022-03-032022-03-17 ⚠
CVE-2018-0180Cisco IOS Software5.0%———2022-03-032022-03-17 ⚠
CVE-2019-1652Cisco Small Business RV320 and RV32595.9%———2022-03-032022-03-17 ⚠
CVE-2017-12231Cisco IOS software7.1%———2022-03-032022-03-24 ⚠
CVE-2017-12232Cisco IOS software2.2%———2022-03-032022-03-24 ⚠
CVE-2017-12233Cisco IOS software7.1%———2022-03-032022-03-24 ⚠
CVE-2017-12234Cisco IOS software7.1%———2022-03-032022-03-24 ⚠
CVE-2017-12235Cisco IOS software7.1%———2022-03-032022-03-24 ⚠
CVE-2017-12237Cisco IOS and IOS XE Software7.1%———2022-03-032022-03-24 ⚠
CVE-2017-12238Cisco Catalyst 6800 Series Switches2.0%———2022-03-032022-03-24 ⚠
CVE-2017-12240Cisco IOS and IOS XE Software13.9%———2022-03-032022-03-24 ⚠
CVE-2017-12319Cisco IOS XE Software5.3%———2022-03-032022-03-24 ⚠
CVE-2022-20699Cisco Small Business RV160, RV260, R72.5%———2022-03-032022-03-17 ⚠
CVE-2022-20700Cisco Small Business RV160, RV260, R5.7%———2022-03-032022-03-17 ⚠
CVE-2022-20701Cisco Small Business RV160, RV260, R9.7%———2022-03-032022-03-17 ⚠
CVE-2022-20703Cisco Small Business RV160, RV260, R9.2%———2022-03-032022-03-17 ⚠
CVE-2022-20708Cisco Small Business RV160, RV260, R14.9%———2022-03-032022-03-17 ⚠
CVE-2018-0171Cisco IOS and IOS XE99.5%———2021-11-032022-05-03 ⚠
CVE-2018-0296Cisco Adaptive Security Appliance (A99.9%———2021-11-032022-05-03 ⚠
CVE-2019-1653Cisco Small Business RV320 and RV32599.9%———2021-11-032022-05-03 ⚠
CVE-2020-3118Cisco IOS XR11.7%———2021-11-032022-05-03 ⚠
CVE-2020-3161Cisco Cisco IP Phones83.7%———2021-11-032022-05-03 ⚠
CVE-2020-3452Cisco Adaptive Security Appliance (A100.0%———2021-11-032022-05-03 ⚠
CVE-2020-3566Cisco IOS XR3.6%———2021-11-032022-05-03 ⚠
CVE-2020-3569Cisco IOS XR3.3%———2021-11-032022-05-03 ⚠
CVE-2021-1497Cisco HyperFlex HX99.9%———2021-11-032021-11-17 ⚠
CVE-2021-1498Cisco HyperFlex HX100.0%———2021-11-032021-11-17 ⚠

🔗 Pivot

Exploit theater →Ransomware theater →Malware families →Actor profiles →Detection rules →Refresh KEV →Score EPSS →
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center