Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-89
Entries32
Ransomware-linked11
Vendors24
By vendor
3
3
2
2
2
2
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-76461 | Cisco Secure Email Gateway | 2026-09-14 | 28.2% | Unknown |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | 18.9% | Unknown |
| CVE-2026-72898 | Metabase Metabase | 2026-08-11 | 19.0% | Unknown |
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 5.3% | Unknown |
| CVE-2026-9082 | Drupal Core | 2026-05-22 | 15.7% | Unknown |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | 5.7% | Unknown |
| CVE-2026-21643 | Fortinet FortiClient EMS | 2026-04-13 | 93.8% | Unknown |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 81.0% | Unknown |
| CVE-2025-57819 | Sangoma FreePBX | 2025-08-29 | 86.3% | Unknown |
| CVE-2025-25257 | Fortinet FortiWeb | 2025-07-18 | 99.8% | Unknown |
| CVE-2025-25181 | Advantive VeraCore | 2025-03-10 | 55.5% | Unknown |
| CVE-2020-29574 | Sophos CyberoamOS | 2025-02-06 | 4.6% | Known |
| CVE-2024-9465 | Palo Alto Networks Expedition | 2024-11-14 | 99.6% | Unknown |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 43.7% | Unknown |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | 2024-10-02 | 99.9% | Unknown |
| CVE-2024-6670 | Progress WhatsUp Gold | 2024-09-16 | 93.0% | Known |
| CVE-2023-48788 | Fortinet FortiClient EMS | 2024-03-25 | 98.4% | Known |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility | 2023-10-31 | 4.4% | Unknown |
| CVE-2021-44026 | Roundcube Roundcube Webmail | 2023-06-22 | 69.8% | Unknown |
| CVE-2023-34362 | Progress MOVEit Transfer | 2023-06-02 | 99.9% | Known |
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 71.5% | Unknown |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | 86.8% | Known |
| CVE-2018-7841 | Schneider Electric U.motion Builder | 2022-04-15 | 72.6% | Unknown |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | 2022-03-28 | 30.0% | Known |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | 94.9% | Unknown |
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | 84.4% | Unknown |
| CVE-2020-17463 | Fuel CMS Fuel CMS | 2021-12-10 | 89.6% | Unknown |
| CVE-2021-42258 | BQE BillQuick Web Suite | 2021-11-03 | 74.4% | Known |
| CVE-2021-27101 | Accellion FTA | 2021-11-03 | 5.9% | Known |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 2021-11-03 | 40.0% | Known |
| CVE-2020-12271 | Sophos SFOS | 2021-11-03 | 42.4% | Known |
| CVE-2019-7481 | SonicWall SMA100 | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
32 KEV entries are classified as CWE-89. CWE definition (MITRE)