Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-288
Entries21
Ransomware-linked9
Vendors13
By vendor
4
2
2
2
2
2
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 88.1% | Unknown |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | 23.1% | Unknown |
| CVE-2026-18556 | N-able N-central | 2026-08-04 | 7.8% | Unknown |
| CVE-2026-18577 | N-able N-central | 2026-08-03 | 14.6% | Unknown |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 88.3% | Unknown |
| CVE-2026-24858 | Fortinet Multiple Products | 2026-01-27 | 85.7% | Unknown |
| CVE-2026-23760 | SmarterTools SmarterMail | 2026-01-26 | 96.5% | Known |
| CVE-2025-34026 | Versa Concerto | 2026-01-22 | 81.9% | Unknown |
| CVE-2025-2747 | Kentico Xperience CMS | 2025-10-20 | 97.1% | Unknown |
| CVE-2025-2746 | Kentico Xperience CMS | 2025-10-20 | 73.0% | Unknown |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 86.3% | Unknown |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | Unknown |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy | 2025-03-18 | 7.2% | Known |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | 2025-01-14 | 94.1% | Known |
| CVE-2024-27198 | JetBrains TeamCity | 2024-03-07 | 99.9% | Known |
| CVE-2024-1709 | ConnectWise ScreenConnect | 2024-02-22 | 99.9% | Known |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | 2023-10-31 | 96.5% | Known |
| CVE-2023-42793 | JetBrains TeamCity | 2023-10-04 | 99.9% | Known |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | 25.4% | Known |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | 99.9% | Known |
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | 91.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
21 KEV entries are classified as CWE-288. CWE definition (MITRE)