Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-434
Entries23
Ransomware-linked6
Vendors22
By vendor
2
1
1
1
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-56291 | Balbooa Forms | 2026-07-10 | 14.8% | Unknown |
| CVE-2026-48939 | iCagenda iCagenda | 2026-07-10 | 20.0% | Unknown |
| CVE-2026-48908 | JoomShaper SP Page Builder | 2026-07-07 | 88.5% | Unknown |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 91.9% | Unknown |
| CVE-2025-2749 | Kentico Kentico Xperience | 2026-04-20 | 4.0% | Unknown |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 1.7% | Unknown |
| CVE-2025-52691 | SmarterTools SmarterMail | 2026-01-26 | 85.6% | Known |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 27.0% | Unknown |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 39.3% | Unknown |
| CVE-2025-31324 | SAP NetWeaver | 2025-04-29 | 99.4% | Known |
| CVE-2024-57968 | Advantive VeraCore | 2025-03-10 | 32.2% | Unknown |
| CVE-2024-50623 | Cleo Multiple Products | 2024-12-13 | 98.6% | Known |
| CVE-2024-39717 | Versa Director | 2024-08-23 | 4.0% | Unknown |
| CVE-2017-12617 | Apache Tomcat | 2022-03-25 | 99.9% | Unknown |
| CVE-2017-12615 | Apache Tomcat | 2022-03-25 | 99.6% | Known |
| CVE-2020-13671 | Drupal Drupal core | 2022-01-18 | 35.3% | Unknown |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 2022-01-10 | 39.8% | Unknown |
| CVE-2021-31207 | Microsoft Exchange Server | 2021-11-03 | 99.7% | Known |
| CVE-2021-20022 | SonicWall SonicWall Email Security | 2021-11-03 | 16.6% | Known |
| CVE-2020-8260 | Ivanti Pulse Connect Secure | 2021-11-03 | 96.4% | Unknown |
| CVE-2020-25213 | WordPress File Manager Plugin | 2021-11-03 | 97.3% | Unknown |
| CVE-2019-8394 | Zoho ManageEngine | 2021-11-03 | 63.3% | Unknown |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
23 KEV entries are classified as CWE-434. CWE definition (MITRE)