Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-77
Entries31
Ransomware-linked6
Vendors21
By vendor
5
3
2
2
2
2
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2016-3081 | Apache Struts | 2026-10-08 | 93.3% | Unknown |
| CVE-2026-8037 | Progress LoadMaster | 2026-08-07 | 77.3% | Unknown |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 92.5% | Unknown |
| CVE-2025-29635 | D-Link DIR-823X | 2026-04-24 | 87.9% | Unknown |
| CVE-2026-22719 | Broadcom VMware Aria Operations | 2026-03-03 | 17.7% | Unknown |
| CVE-2025-4008 | Smartbedded Meteobridge | 2025-10-02 | 93.6% | Unknown |
| CVE-2025-59689 | Libraesva Email Security Gateway | 2025-09-29 | 1.8% | Unknown |
| CVE-2025-10035 | Fortra GoAnywhere MFT | 2025-09-29 | 99.7% | Known |
| CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Devices | 2025-08-05 | 54.0% | Unknown |
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 99.7% | Unknown |
| CVE-2023-33538 | TP-Link Multiple Routers | 2025-06-16 | 41.6% | Unknown |
| CVE-2023-20118 | Cisco Small Business RV Series Routers | 2025-03-03 | 54.1% | Unknown |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2024-12-19 | 87.2% | Unknown |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | 2024-11-18 | 94.8% | Known |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 59.6% | Unknown |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 2024-04-12 | 99.9% | Known |
| CVE-2024-3273 | D-Link Multiple NAS Devices | 2024-04-11 | 99.9% | Unknown |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2016-20017 | D-Link DSL-2750B Devices | 2024-01-08 | 64.2% | Unknown |
| CVE-2023-1671 | Sophos Web Appliance | 2023-11-16 | 99.9% | Unknown |
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | 98.2% | Unknown |
| CVE-2023-1389 | TP-Link Archer AX21 | 2023-05-01 | 99.9% | Unknown |
| CVE-2022-40765 | Mitel MiVoice Connect | 2023-02-21 | 10.5% | Known |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.6% | Known |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 22.5% | Unknown |
| CVE-2010-5330 | Ubiquiti AirOS | 2022-04-15 | 39.3% | Unknown |
| CVE-2020-2509 | QNAP QNAP Network-Attached Storage (NAS) | 2022-04-11 | 33.9% | Unknown |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | 2022-03-25 | 98.2% | Unknown |
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 97.1% | Unknown |
| CVE-2021-22899 | Ivanti Pulse Connect Secure | 2021-11-03 | 22.9% | Unknown |
| CVE-2019-0541 | Microsoft MSHTML | 2021-11-03 | 53.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
31 KEV entries are classified as CWE-77. CWE definition (MITRE)