Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-290
Entries5
Ransomware-linked0
Vendors5
By vendor
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-50224 | TP-Link TL-WR841N | 2025-09-03 | 15.5% | Unknown |
| CVE-2024-54085 | AMI MegaRAC SPx | 2025-06-25 | 60.7% | Unknown |
| CVE-2024-4358 | Progress Telerik Report Server | 2024-06-13 | 97.4% | Unknown |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 96.0% | Unknown |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 95.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
5 KEV entries are classified as CWE-290. CWE definition (MITRE)