Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-287
Entries47
Ransomware-linked16
Vendors31
By vendor
7
5
3
2
2
2
2
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-42018 | JFrog Artifactory | 2026-09-11 | 9.8% | Unknown |
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | 14.1% | Unknown |
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 0.8% | Unknown |
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2.0% | Unknown |
| CVE-2023-49105 | ownCloud ownCloud | 2026-08-27 | 42.9% | Unknown |
| CVE-2026-65400 | Apple macOS | 2026-08-18 | 1.7% | Unknown |
| CVE-2026-16232 | Check Point SmartConsole | 2026-07-22 | 77.9% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2026-50751 | Check Point Security Gateway | 2026-06-08 | 85.3% | Known |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 5.5% | Unknown |
| CVE-2026-20182 | Cisco Catalyst SD-WAN | 2026-05-14 | 91.5% | Unknown |
| CVE-2025-32975 | Quest KACE Systems Management Appliance (SMA) | 2026-04-20 | 2.4% | Unknown |
| CVE-2023-27351 | PaperCut NG/MF | 2026-04-20 | 78.0% | Known |
| CVE-2017-7921 | Hikvision Multiple Products | 2026-03-05 | 99.9% | Unknown |
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller and Manager | 2026-02-25 | 88.4% | Unknown |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 55.9% | Unknown |
| CVE-2016-7836 | SKYSEA Client View | 2025-10-14 | 19.2% | Unknown |
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 61.1% | Unknown |
| CVE-2025-49706 | Microsoft SharePoint | 2025-07-22 | 99.0% | Known |
| CVE-2025-3935 | ConnectWise ScreenConnect | 2025-06-02 | 3.5% | Unknown |
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | 99.3% | Unknown |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | 95.1% | Known |
| CVE-2024-11680 | ProjectSend ProjectSend | 2024-12-03 | 91.6% | Unknown |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 14.1% | Known |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 58.7% | Unknown |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | 99.9% | Unknown |
| CVE-2021-33045 | Dahua IP Camera Firmware | 2024-08-21 | 99.5% | Unknown |
| CVE-2021-33044 | Dahua IP Camera Firmware | 2024-08-21 | 99.9% | Unknown |
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 12.5% | Unknown |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 99.9% | Known |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | 99.9% | Known |
| CVE-2023-20867 | VMware Tools | 2023-06-23 | 13.5% | Unknown |
| CVE-2021-27878 | Veritas Backup Exec Agent | 2023-04-07 | 23.9% | Known |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 64.9% | Known |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 13.5% | Known |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 99.9% | Unknown |
| CVE-2018-10561 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 92.8% | Unknown |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices | 2022-03-25 | 82.8% | Unknown |
| CVE-2019-0543 | Microsoft Windows | 2022-03-15 | 4.7% | Known |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.1% | Unknown |
| CVE-2021-32648 | October CMS October CMS | 2022-01-18 | 90.4% | Unknown |
| CVE-2021-34523 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-22893 | Ivanti Pulse Connect Secure | 2021-11-03 | 47.1% | Known |
| CVE-2020-5849 | Unraid Unraid | 2021-11-03 | 93.2% | Unknown |
| CVE-2020-12812 | Fortinet FortiOS | 2021-11-03 | 45.3% | Known |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
47 KEV entries are classified as CWE-287. CWE definition (MITRE)