Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-78
Entries110
Ransomware-linked12
Vendors65
By vendor
11
8
4
4
3
3
3
3
3
3
3
2
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | 10.7% | Unknown |
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2.0% | Unknown |
| CVE-2026-73570 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-08-21 | 71.6% | Unknown |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | 2026-07-27 | 1.0% | Unknown |
| CVE-2026-39808 | Fortinet FortiSandbox | 2026-07-16 | 47.3% | Unknown |
| CVE-2026-25089 | Fortinet FortiSandbox | 2026-07-16 | 76.1% | Unknown |
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 19.9% | Unknown |
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 99.9% | Unknown |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | 92.5% | Unknown |
| CVE-2026-25108 | Soliton Systems K.K FileZen | 2026-02-24 | 5.1% | Unknown |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 90.8% | Known |
| CVE-2025-11953 | React Native Community CLI | 2026-02-05 | 93.9% | Unknown |
| CVE-2025-64328 | Sangoma FreePBX | 2026-02-03 | 84.6% | Unknown |
| CVE-2025-66644 | Array Networks ArrayOS AG | 2025-12-08 | 3.4% | Unknown |
| CVE-2025-58034 | Fortinet FortiWeb | 2025-11-18 | 55.5% | Unknown |
| CVE-2025-48703 | CWP Control Web Panel | 2025-11-04 | 99.6% | Unknown |
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 99.6% | Unknown |
| CVE-2025-9377 | TP-Link Multiple Routers | 2025-09-03 | 35.8% | Unknown |
| CVE-2025-54948 | Trend Micro Apex One | 2025-08-18 | 23.9% | Unknown |
| CVE-2023-39780 | ASUS RT-AX55 Routers | 2025-06-02 | 39.5% | Unknown |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 98.1% | Unknown |
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 10.0% | Unknown |
| CVE-2024-11120 | GeoVision Multiple Devices | 2025-05-07 | 28.3% | Unknown |
| CVE-2023-44221 | SonicWall SMA100 Appliances | 2025-05-01 | 76.2% | Unknown |
| CVE-2021-20035 | SonicWall SMA100 Appliances | 2025-04-16 | 4.1% | Unknown |
| CVE-2025-1316 | Edimax IC-7100 IP Camera | 2025-03-19 | 74.4% | Unknown |
| CVE-2024-40891 | Zyxel DSL CPE Devices | 2025-02-11 | 21.7% | Unknown |
| CVE-2024-40890 | Zyxel DSL CPE Devices | 2025-02-11 | 20.7% | Unknown |
| CVE-2018-9276 | Paessler PRTG Network Monitor | 2025-02-04 | 86.9% | Unknown |
| CVE-2024-50603 | Aviatrix Controllers | 2025-01-16 | 98.5% | Unknown |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2025-01-13 | 13.7% | Unknown |
| CVE-2021-40407 | Reolink RLC-410W IP Camera | 2024-12-18 | 47.6% | Unknown |
| CVE-2019-11001 | Reolink Multiple IP Cameras | 2024-12-18 | 37.5% | Unknown |
| CVE-2018-14933 | NUUO NVRmini Devices | 2024-12-18 | 94.8% | Unknown |
| CVE-2024-1212 | Progress Kemp LoadMaster | 2024-11-18 | 95.3% | Unknown |
| CVE-2024-9463 | Palo Alto Networks Expedition | 2024-11-14 | 98.5% | Unknown |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 79.7% | Unknown |
| CVE-2023-25280 | D-Link DIR-820 Router | 2024-09-30 | 97.8% | Unknown |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers | 2024-09-30 | 84.4% | Unknown |
| CVE-2024-8190 | Ivanti Cloud Services Appliance | 2024-09-13 | 88.5% | Unknown |
| CVE-2024-20399 | Cisco NX-OS | 2024-07-02 | 4.3% | Unknown |
| CVE-2024-4577 | PHP Group PHP | 2024-06-12 | 99.9% | Known |
| CVE-2017-3506 | Oracle WebLogic Server | 2024-06-03 | 96.2% | Unknown |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | 2024-03-25 | 97.0% | Unknown |
| CVE-2021-36380 | Sunhillo SureLine | 2024-03-05 | 97.6% | Unknown |
| CVE-2023-49897 | FXC AE1021, AE1021PE | 2023-12-21 | 50.4% | Unknown |
| CVE-2023-47565 | QNAP VioStor NVR | 2023-12-21 | 73.2% | Unknown |
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 2023-10-23 | 89.6% | Unknown |
| CVE-2017-6884 | Zyxel EMG2926 Routers | 2023-09-18 | 34.6% | Known |
| CVE-2017-18368 | Zyxel P660HN-T1A Routers | 2023-08-07 | 94.4% | Unknown |
| CVE-2022-29303 | SolarView Compact | 2023-07-13 | 97.9% | Unknown |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | 2023-06-29 | 96.7% | Unknown |
| CVE-2019-17621 | D-Link DIR-859 Router | 2023-06-29 | 89.6% | Unknown |
| CVE-2023-27992 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | 82.8% | Unknown |
| CVE-2020-12641 | Roundcube Roundcube Webmail | 2023-06-22 | 84.3% | Unknown |
| CVE-2023-28771 | Zyxel Multiple Firewalls | 2023-05-31 | 99.2% | Unknown |
| CVE-2022-33891 | Apache Spark | 2023-03-07 | 93.2% | Unknown |
| CVE-2022-28810 | Zoho ManageEngine | 2023-03-07 | 70.9% | Unknown |
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | 99.9% | Unknown |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.1% | Unknown |
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 91.9% | Unknown |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | 96.6% | Known |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.6% | Known |
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | 99.9% | Unknown |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | 86.4% | Known |
| CVE-2020-2509 | QNAP QNAP Network-Attached Storage (NAS) | 2022-04-11 | 33.9% | Unknown |
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | 97.8% | Unknown |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 99.9% | Known |
| CVE-2020-9377 | D-Link DIR-610 Devices | 2022-03-25 | 21.3% | Unknown |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | 99.9% | Unknown |
| CVE-2020-7247 | OpenBSD OpenSMTPD | 2022-03-25 | 98.9% | Unknown |
| CVE-2020-25223 | Sophos SG UTM | 2022-03-25 | 96.7% | Unknown |
| CVE-2020-1956 | Apache Kylin | 2022-03-25 | 97.3% | Unknown |
| CVE-2019-16920 | D-Link Multiple Routers | 2022-03-25 | 99.9% | Unknown |
| CVE-2019-15107 | Webmin Webmin | 2022-03-25 | 99.7% | Known |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | 2022-03-25 | 74.0% | Unknown |
| CVE-2018-6961 | VMware SD-WAN Edge | 2022-03-25 | 86.2% | Unknown |
| CVE-2018-14839 | LG N1A1 NAS | 2022-03-25 | 89.3% | Unknown |
| CVE-2018-11138 | Quest KACE System Management Appliance | 2022-03-25 | 91.7% | Known |
| CVE-2017-6334 | NETGEAR DGN2200 Devices | 2022-03-25 | 72.6% | Unknown |
| CVE-2016-11021 | D-Link DCS-930L Devices | 2022-03-25 | 68.8% | Unknown |
| CVE-2017-6077 | NETGEAR Wireless Router DGN2200 | 2022-03-07 | 68.7% | Unknown |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | Unknown |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | Unknown |
| CVE-2021-25298 | Nagios Nagios XI | 2022-01-18 | 73.6% | Unknown |
| CVE-2021-25297 | Nagios Nagios XI | 2022-01-18 | 56.6% | Unknown |
| CVE-2021-25296 | Nagios Nagios XI | 2022-01-18 | 71.9% | Unknown |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | 2022-01-18 | 90.6% | Unknown |
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | 99.1% | Unknown |
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | 99.8% | Unknown |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) | 2022-01-10 | 99.9% | Unknown |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 99.8% | Unknown |
| CVE-2020-8816 | Pi-hole AdminLTE | 2021-12-10 | 78.1% | Unknown |
| CVE-2021-27561 | Yealink Device Management | 2021-11-03 | 82.8% | Unknown |
| CVE-2021-27104 | Accellion FTA | 2021-11-03 | 56.6% | Known |
| CVE-2021-27102 | Accellion FTA | 2021-11-03 | 3.6% | Known |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | 2021-11-03 | 96.7% | Unknown |
| CVE-2021-1498 | Cisco HyperFlex HX | 2021-11-03 | 99.9% | Unknown |
| CVE-2021-1497 | Cisco HyperFlex HX | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-4428 | IBM Data Risk Manager | 2021-11-03 | 61.6% | Unknown |
| CVE-2020-4006 | VMware Multiple Products | 2021-11-03 | 17.3% | Unknown |
| CVE-2020-25506 | D-Link DNS-320 Device | 2021-11-03 | 99.9% | Unknown |
| CVE-2020-16846 | SaltStack Salt | 2021-11-03 | 99.5% | Unknown |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | 79.8% | Unknown |
| CVE-2020-10221 | rConfig rConfig | 2021-11-03 | 77.1% | Unknown |
| CVE-2019-19356 | Netis WF2419 Devices | 2021-11-03 | 28.1% | Unknown |
| CVE-2019-15949 | Nagios Nagios XI | 2021-11-03 | 77.0% | Unknown |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 98.5% | Known |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers | 2021-11-03 | 8.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
110 KEV entries are classified as CWE-78. CWE definition (MITRE)