Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-306
Entries42
Ransomware-linked13
Vendors29
By vendor
4
3
3
2
2
2
2
2
2
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-67277 | MikroTik RouterOS | 2026-09-10 | 1.5% | Unknown |
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 0.8% | Unknown |
| CVE-2026-81578 | PaperCut NG/MF | 2026-08-31 | 85.5% | Unknown |
| CVE-2026-72529 | TrueConf Server | 2026-08-20 | 1.4% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2026-56164 | Microsoft SharePoint Server | 2026-07-14 | 1.0% | Unknown |
| CVE-2026-20253 | Splunk Enterprise | 2026-06-18 | 96.9% | Unknown |
| CVE-2026-35273 | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 9.4% | Known |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 98.5% | Known |
| CVE-2026-39987 | Marimo Marimo | 2026-04-23 | 37.8% | Unknown |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 24.7% | Unknown |
| CVE-2026-24423 | SmarterTools SmarterMail | 2026-02-05 | 88.1% | Known |
| CVE-2025-61757 | Oracle Fusion Middleware | 2025-11-21 | 88.6% | Unknown |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.6% | Unknown |
| CVE-2020-24363 | TP-Link TL-WA855RE | 2025-09-02 | 20.6% | Unknown |
| CVE-2025-32433 | Erlang Erlang/OTP | 2025-06-09 | 98.7% | Unknown |
| CVE-2025-3248 | Langflow Langflow | 2025-05-05 | 99.9% | Known |
| CVE-2025-0108 | Palo Alto Networks PAN-OS | 2025-02-18 | 98.4% | Unknown |
| CVE-2022-23227 | NUUO NVRmini2 Devices | 2024-12-18 | 48.4% | Unknown |
| CVE-2023-28461 | Array Networks AG/vxAG ArrayOS | 2024-11-25 | 68.0% | Known |
| CVE-2024-0012 | Palo Alto Networks PAN-OS | 2024-11-18 | 99.8% | Known |
| CVE-2024-5910 | Palo Alto Networks Expedition | 2024-11-07 | 91.6% | Unknown |
| CVE-2024-47575 | Fortinet FortiManager | 2024-10-23 | 94.7% | Unknown |
| CVE-2023-36851 | Juniper Junos OS | 2023-11-13 | 1.1% | Unknown |
| CVE-2023-36847 | Juniper Junos OS | 2023-11-13 | 83.4% | Unknown |
| CVE-2023-36846 | Juniper Junos OS | 2023-11-13 | 93.4% | Unknown |
| CVE-2023-27532 | Veeam Backup & Replication | 2023-08-22 | 81.3% | Known |
| CVE-2022-24990 | TerraMaster TerraMaster OS | 2023-02-10 | 83.1% | Known |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 98.3% | Known |
| CVE-2022-26501 | Veeam Backup & Replication | 2022-12-13 | 4.1% | Known |
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 10.4% | Unknown |
| CVE-2022-1388 | F5 BIG-IP | 2022-05-10 | 99.9% | Known |
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | 2022-03-25 | 87.3% | Unknown |
| CVE-2020-13927 | Apache Airflow's Experimental API | 2022-01-18 | 99.7% | Unknown |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | 93.2% | Unknown |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | 99.8% | Unknown |
| CVE-2021-20021 | SonicWall SonicWall Email Security | 2021-11-03 | 88.7% | Known |
| CVE-2020-6287 | SAP NetWeaver | 2021-11-03 | 94.7% | Unknown |
| CVE-2020-6207 | SAP Solution Manager | 2021-11-03 | 98.1% | Unknown |
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | 90.3% | Unknown |
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 97.4% | Unknown |
| CVE-2019-5591 | Fortinet FortiOS | 2021-11-03 | 18.5% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
42 KEV entries are classified as CWE-306. CWE definition (MITRE)