Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-121
Entries12
Ransomware-linked3
Vendors8
By vendor
4
2
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 2026-09-21 | 2.5% | Unknown |
| CVE-2021-27137 | DD-WRT DD-WRT | 2026-07-21 | 3.9% | Unknown |
| CVE-2025-53521 | F5 BIG-IP | 2026-03-27 | 2.2% | Unknown |
| CVE-2025-20352 | Cisco IOS and IOS XE | 2025-09-29 | 39.4% | Unknown |
| CVE-2025-42599 | Qualitia Active! Mail | 2025-04-28 | 3.2% | Unknown |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 99.9% | Known |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 99.9% | Known |
| CVE-2022-20708 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 14.8% | Unknown |
| CVE-2022-20701 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.7% | Unknown |
| CVE-2022-20700 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 5.6% | Unknown |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | 99.9% | Known |
| CVE-2020-5735 | Amcrest Cameras and Network Video Recorder (NVR) | 2021-11-03 | 36.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
12 KEV entries are classified as CWE-121. CWE definition (MITRE)