Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-138
Entries7
Ransomware-linked2
Vendors5
By vendor
3
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 17.6% | Unknown |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.2% | Known |
| CVE-2021-25298 | Nagios Nagios XI | 2022-01-18 | 73.6% | Unknown |
| CVE-2021-25297 | Nagios Nagios XI | 2022-01-18 | 56.6% | Unknown |
| CVE-2021-25296 | Nagios Nagios XI | 2022-01-18 | 71.9% | Unknown |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 99.8% | Unknown |
| CVE-2021-27101 | Accellion FTA | 2021-11-03 | 5.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
7 KEV entries are classified as CWE-138. CWE definition (MITRE)