Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-22
Entries81
Ransomware-linked27
Vendors56
By vendor
3
3
3
3
3
3
2
2
2
2
2
2
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-3199 | ONLYOFFICE Docs | 2026-10-08 | 8.2% | Unknown |
| CVE-2026-104286 | Fortinet FortiMail | 2026-10-01 | 2.2% | Unknown |
| CVE-2026-93616 | Check Point Multiple Products | 2026-09-22 | 19.6% | Unknown |
| CVE-2026-66384 | JFrog Artifactory | 2026-08-27 | 0.6% | Unknown |
| CVE-2026-59310 | Broadcom VMware vCenter | 2026-08-18 | 2.5% | Known |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 42.3% | Unknown |
| CVE-2026-34909 | Ubiquiti UniFi OS | 2026-06-23 | 1.7% | Unknown |
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | 2026-06-15 | 28.1% | Unknown |
| CVE-2024-1708 | ConnectWise ScreenConnect | 2026-04-28 | 95.4% | Known |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 91.9% | Unknown |
| CVE-2024-57728 | SimpleHelp SimpleHelp | 2026-04-24 | 64.6% | Known |
| CVE-2025-2749 | Kentico Kentico Xperience | 2026-04-20 | 4.0% | Unknown |
| CVE-2025-8110 | Gogs Gogs | 2026-01-12 | 85.2% | Unknown |
| CVE-2025-6218 | RARLAB WinRAR | 2025-12-09 | 90.4% | Unknown |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 88.5% | Unknown |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | Unknown |
| CVE-2024-0769 | D-Link DIR-859 Router | 2025-06-25 | 82.7% | Unknown |
| CVE-2025-4632 | Samsung MagicINFO 9 Server | 2025-05-22 | 24.2% | Unknown |
| CVE-2025-27920 | Srimax Output Messenger | 2025-05-19 | 1.8% | Unknown |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | 92.4% | Unknown |
| CVE-2025-34028 | Commvault Command Center | 2025-05-02 | 97.6% | Unknown |
| CVE-2017-12637 | SAP NetWeaver | 2025-03-19 | 95.1% | Unknown |
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | 99.2% | Unknown |
| CVE-2024-57727 | SimpleHelp SimpleHelp | 2025-02-13 | 96.5% | Known |
| CVE-2024-55550 | Mitel MiCollab | 2025-01-07 | 38.1% | Known |
| CVE-2024-41713 | Mitel MiCollab | 2025-01-07 | 98.1% | Known |
| CVE-2024-11667 | Zyxel Multiple Firewalls | 2024-12-03 | 2.9% | Known |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 2024-11-12 | 99.9% | Unknown |
| CVE-2019-16278 | Nostromo nhttpd | 2024-11-07 | 99.0% | Unknown |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | 98.6% | Unknown |
| CVE-2024-7262 | Kingsoft WPS Office | 2024-09-03 | 2.9% | Unknown |
| CVE-2021-20124 | DrayTek VigorConnect | 2024-09-03 | 96.3% | Unknown |
| CVE-2021-20123 | DrayTek VigorConnect | 2024-09-03 | 90.2% | Unknown |
| CVE-2024-32113 | Apache OFBiz | 2024-08-07 | 99.9% | Unknown |
| CVE-2024-28995 | SolarWinds Serv-U | 2024-07-17 | 99.6% | Unknown |
| CVE-2023-47246 | SysAid SysAid Server | 2023-11-13 | 98.8% | Known |
| CVE-2023-32315 | Ignite Realtime Openfire | 2023-08-24 | 99.9% | Unknown |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-31 | 63.5% | Unknown |
| CVE-2022-41328 | Fortinet FortiOS | 2023-03-14 | 10.6% | Unknown |
| CVE-2018-5430 | TIBCO JasperReports | 2022-12-29 | 48.9% | Unknown |
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | 79.0% | Unknown |
| CVE-2022-26500 | Veeam Backup & Replication | 2022-12-13 | 5.8% | Known |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 95.4% | Known |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.2% | Known |
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 70.5% | Unknown |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 98.6% | Known |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 99.2% | Known |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | 89.5% | Known |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | 83.1% | Known |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.7% | Unknown |
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | 99.9% | Known |
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 74.6% | Unknown |
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | 4.0% | Unknown |
| CVE-2020-1631 | Juniper Junos OS | 2022-03-25 | 4.8% | Unknown |
| CVE-2016-0752 | Rails Ruby on Rails | 2022-03-25 | 95.5% | Unknown |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | 2022-03-25 | 63.6% | Unknown |
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | 83.9% | Unknown |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) | 2022-03-25 | 40.3% | Unknown |
| CVE-2014-0130 | Rails Ruby on Rails | 2022-03-25 | 53.7% | Unknown |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | Known |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 97.2% | Unknown |
| CVE-2018-14847 | MikroTik RouterOS | 2021-12-01 | 95.9% | Unknown |
| CVE-2021-42013 | Apache HTTP Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-41773 | Apache HTTP Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-40444 | Microsoft MSHTML | 2021-11-03 | 97.4% | Known |
| CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 4.9% | Unknown |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | 2021-11-03 | 99.9% | Unknown |
| CVE-2021-20023 | SonicWall SonicWall Email Security | 2021-11-03 | 51.6% | Known |
| CVE-2020-5902 | F5 BIG-IP | 2021-11-03 | 99.9% | Known |
| CVE-2020-4430 | IBM Data Risk Manager | 2021-11-03 | 68.5% | Unknown |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | 2021-11-03 | 97.8% | Unknown |
| CVE-2020-11652 | SaltStack Salt | 2021-11-03 | 86.1% | Unknown |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | 97.0% | Unknown |
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | 2021-11-03 | 99.9% | Known |
| CVE-2019-20085 | TVT NVMS-1000 | 2021-11-03 | 96.0% | Unknown |
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 99.9% | Known |
| CVE-2019-18187 | Trend Micro OfficeScan | 2021-11-03 | 25.1% | Unknown |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | 99.9% | Known |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) | 2021-11-03 | 28.9% | Known |
| CVE-2018-13379 | Fortinet FortiOS | 2021-11-03 | 99.9% | Known |
| CVE-2016-3976 | SAP NetWeaver | 2021-11-03 | 47.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
81 KEV entries are classified as CWE-22. CWE definition (MITRE)