Known exploited vulnerabilities classified as CWE-158
Entries4
Ransomware-linked0
Vendors4
By vendor
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-104286 | Fortinet FortiMail | 2026-10-01 | 2.2% | Unknown |
| CVE-2025-47812 | Wing FTP Server Wing FTP Server | 2025-07-14 | 93.2% | Unknown |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.1% | Unknown |
| CVE-2022-1040 | Sophos Firewall | 2022-03-31 | 99.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
4 KEV entries are classified as CWE-158. CWE definition (MITRE)