Patchfirst
Patchfirst

Exploited and likely

9,988 CVEs ranked by : listing, ransomware use, , threat reports, and . 1,766 are in CISA KEV.
100 of 9,988
  1. CVE-2025-55182Meta React Server Components Remote Code Execution Vulnerability
    Meta · React Server ComponentsKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter5 reports
    99.8%Top 0.04%
    95.0priority
  2. CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1133External Remote Services4 reports
    95.0%Top 0.14%
    93.3priority
  3. CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
    BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    93.1%Top 0.17%
    91.0priority
  4. CVE-2021-44228Apache Log4j2 Remote Code Execution Vulnerability
    Apache · Log4j2KEVRansomwarePublic exploitCritical · 10.0T1608.001Upload MalwareT1190Exploit Public-Facing Application+3 more · 10 reports
    >99.9%Top 0.01%
    90.0priority
  5. CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
    Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1133External Remote ServicesT1059Command and Scripting Interpreter+2 more · 6 reports
    >99.9%Top 0.01%
    90.0priority
  6. CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow+2 more · 6 reports
    99.7%Top 0.05%
    89.9priority
  7. CVE-2020-5902F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
    F5 · BIG-IPKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1190Exploit Public-Facing Application+5 more · 5 reports
    >99.9%Top 0.01%
    89.9priority
  8. CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter+1 more · 8 reports
    >99.9%Top 0.01%
    89.9priority
  9. CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application5 reports
    >99.9%Top 0.01%
    89.9priority
  10. CVE-2026-63077JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    93.6%Top 0.16%
    89.8priority
  11. CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
    Collabora · Collabora Online – Built-in CODE ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    73.3%Top 0.54%
    89.4priority
  12. CVE-2021-34473Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1053.005Scheduled Task+3 more · 9 reports
    >99.9%Top 0.01%
    89.4priority
  13. CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.1T1133External Remote ServicesT1505.003Web Shell+2 more · 5 reports
    >99.9%Top 0.01%
    89.4priority
  14. CVE-2021-34523Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitCritical · 9.0T1190Exploit Public-Facing Application9 reports
    >99.9%Top 0.01%
    89.3priority
  15. CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
    Microsoft · MSCOMCTL.OCXKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution15 reports
    >99.9%Top 0.02%
    89.2priority
  16. CVE-2014-6332Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution5 reports
    94.9%Top 0.14%
    89.1priority
  17. CVE-2025-52691SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    85.7%Top 0.28%
    88.8priority
  18. CVE-2022-42475Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow+2 more · 4 reports
    99.5%Top 0.06%
    88.8priority
  19. CVE-2019-2725Oracle WebLogic Server, Injection
    Oracle · WebLogic ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports
    >99.9%Top 0.02%
    88.8priority
  20. CVE-2019-0604Microsoft SharePoint Remote Code Execution Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1608.001Upload MalwareT1190Exploit Public-Facing Application+3 more · 4 reports
    99.9%Top 0.03%
    88.8priority
  21. CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    98.7%Top 0.08%
    88.7priority
  22. CVE-2017-11882Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports
    99.9%Top 0.03%
    88.5priority
  23. CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more · 4 reports
    >99.9%Top 0.01%
    88.4priority
  24. CVE-2018-0802Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution8 reports
    93.3%Top 0.17%
    88.4priority
  25. CVE-2017-0199Microsoft Office and WordPad Remote Code Execution Vulnerability
    Microsoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution12 reports
    99.5%Top 0.06%
    88.4priority
  26. CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation4 reports
    99.8%Top 0.04%
    88.1priority
  27. CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports
    14.6%Top 3.3%
    88.0priority
  28. CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1090Proxy1 report
    6.8%Top 6%
    87.7priority
  29. CVE-2024-3400Palo Alto Networks PAN-OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter3 reports
    >99.9%Top 0.01%
    87.7priority
  30. CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more · 4 reports
    >99.9%Top 0.02%
    87.7priority
  31. CVE-2020-0796Microsoft SMBv3 Remote Code Execution Vulnerability
    Microsoft · SMBv3KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing Application3 reports
    99.8%Top 0.04%
    87.7priority
  32. CVE-2022-47966Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
    Zoho · ManageEngineKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1136.001Local Account+1 more · 3 reports
    99.8%Top 0.04%
    87.6priority
  33. CVE-2021-26084Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
    Atlassian · Confluence Server and Data CenterKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1496Resource Hijacking3 reports
    >99.9%Top 0.01%
    87.6priority
  34. CVE-2021-31207Microsoft Exchange Server Security Feature Bypass Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitMedium · 6.6T1548.002Bypass User Account ControlT1565Data Manipulation9 reports
    99.8%Top 0.04%
    87.6priority
  35. CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1105Ingress Tool Transfer4 reports
    99.2%Top 0.07%
    87.4priority
  36. CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 7.8T1505.003Web Shell4 reports
    99.9%Top 0.04%
    87.4priority
  37. CVE-2015-1641Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution4 reports
    97.2%Top 0.1%
    87.4priority
  38. CVE-2017-0213Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.3T1548Abuse Elevation Control MechanismT1068Exploitation for Privilege Escalation4 reports
    84.3%Top 0.3%
    87.0priority
  39. CVE-2026-59310Broadcom VMware vCenter Path Traversal Vulnerability
    Broadcom · VMware vCenterKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    2.6%Top 15%
    86.9priority
  40. CVE-2021-40444Microsoft MSHTML Remote Code Execution Vulnerability
    Microsoft · MSHTMLKEVRansomwarePublic exploitHigh · 8.8T1204.002Malicious FileT1203Exploitation for Client Execution3 reports
    97.8%Top 0.09%
    86.9priority
  41. CVE-2020-0688Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1505.003Web Shell+2 more · 3 reports
    >99.9%Top 0.03%
    86.9priority
  42. CVE-2017-0144Microsoft SMBv1 Remote Code Execution Vulnerability
    Microsoft · SMBv1KEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1210Exploitation of Remote Services3 reports
    99.2%Top 0.06%
    86.9priority
  43. CVE-2020-1472Microsoft Netlogon Privilege Escalation Vulnerability
    Microsoft · NetlogonKEVRansomwarePublic exploitMedium · 5.5T1133External Remote ServicesT1068Exploitation for Privilege Escalation+4 more · 8 reports
    99.4%Top 0.06%
    86.8priority
  44. CVE-2026-45321TanStack Unspecified Vulnerability
    TanStack · TanStackKEVRansomwarePublic exploitCritical · 9.6T1195.002Compromise Software Supply ChainT1528Steal Application Access Token1 report
    3.3%Top 12%
    86.3priority
  45. CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
    Red Hat · PolkitKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    94.9%Top 0.14%
    86.2priority
  46. CVE-2021-26857Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 7.8T1505.003Web Shell3 reports
    95.8%Top 0.13%
    86.2priority
  47. CVE-2018-20250WinRAR Absolute Path Traversal Vulnerability
    RARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1036Masquerading3 reports
    96.0%Top 0.12%
    86.2priority
  48. CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    11.8%Top 3.9%
    86.1priority
  49. CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation Vulnerability
    Cisco · IOS XE Web UIKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1136Create Account2 reports
    99.6%Top 0.05%
    86.1priority
  50. CVE-2021-1675Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1059Command and Scripting Interpreter3 reports
    85.3%Top 0.28%
    86.1priority
  51. CVE-2025-53770Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    >99.9%Top 0.01%
    86.0priority
  52. CVE-2023-34362Progress MOVEit Transfer SQL Injection Vulnerability
    Progress · MOVEit TransferKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+5 more · 2 reports
    99.9%Top 0.03%
    86.0priority
  53. CVE-2022-26134Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
    Atlassian · Confluence Server/Data CenterKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application2 reports
    >99.9%Top 0.01%
    86.0priority
  54. CVE-2022-30525Zyxel Multiple Firewalls OS Command Injection Vulnerability
    Zyxel · Multiple FirewallsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    99.9%Top 0.03%
    86.0priority
  55. CVE-2022-22965Spring Framework JDK 9+ Remote Code Execution Vulnerability
    VMware · Spring FrameworkKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    99.6%Top 0.05%
    86.0priority
  56. CVE-2019-0708Microsoft Remote Desktop Services Remote Code Execution Vulnerability
    Microsoft · Remote Desktop ServicesKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1498Network Denial of Service2 reports
    >99.9%Top 0.01%
    86.0priority
  57. CVE-2018-10561Dasan GPON Routers Authentication Bypass Vulnerability
    Dasan · Gigabit Passive Optical Network (GPON) RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts2 reports
    92.8%Top 0.17%
    86.0priority
  58. CVE-2016-3088Apache ActiveMQ Improper Input Validation Vulnerability
    Apache · ActiveMQKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    98.5%Top 0.08%
    86.0priority
  59. CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    55.9%Top 0.95%
    86.0priority
  60. CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1211Exploitation for Stealth+1 more · 2 reports
    98.2%Top 0.09%
    86.0priority
  61. CVE-2010-0840Oracle JRE Unspecified Vulnerability
    Oracle · Java Runtime Environment (JRE)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports
    96.3%Top 0.12%
    86.0priority
  62. CVE-2015-0311Adobe Flash Player Remote Code Execution Vulnerability
    Adobe · Flash PlayerKEVPublic exploitCritical · 9.82 reports
    85.6%Top 0.28%
    85.9priority
  63. CVE-2023-54391Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
    Proxmox Server Solutions GmbH · Proxmox Virtual Environment (VE)Public exploitCritical · 9.8
    3.0%Top 13%
    85.4priority
  64. CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
    Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysKEVRansomwarePublic exploitCritical · 9.0T1595Active ScanningT1190Exploit Public-Facing Application+4 more · 2 reports
    >99.9%Top 0.02%
    85.4priority
  65. CVE-2021-45046Apache Log4j2 Deserialization of Untrusted Data Vulnerability
    Apache · Log4j2KEVRansomwarePublic exploitCritical · 9.0T1059Command and Scripting InterpreterT1486Data Encrypted for Impact2 reports
    >99.9%Top 0.02%
    85.4priority
  66. CVE-2024-20353Cisco ASA and FTD Denial of Service Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitHigh · 8.6T1608.001Upload MalwareT1190Exploit Public-Facing Application+2 more · 2 reports
    69.8%Top 0.63%
    85.0priority
  67. CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
    Oracle · PeopleSoft Enterprise PeopleToolsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    96.7%Top 0.12%
    84.8priority
  68. CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    WebPros · cPanel & WHM and WP2 (WordPress Squared)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    98.5%Top 0.08%
    84.8priority
  69. CVE-2026-35616Fortinet FortiClient EMS Improper Access Control Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    94.0%Top 0.15%
    84.8priority
  70. CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management…
    Cisco · Secure Firewall Management Center (FMC)KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    44.4%Top 1.2%
    84.8priority
  71. CVE-2026-21643Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.7%Top 0.1%
    84.8priority
  72. CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    98.6%Top 0.08%
    84.8priority
  73. CVE-2026-24423SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    88.2%Top 0.23%
    84.8priority
  74. CVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    96.4%Top 0.12%
    84.8priority
  75. CVE-2026-24061GNU InetUtils Argument Injection Vulnerability
    GNU · InetUtilsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    99.0%Top 0.07%
    84.8priority
  76. CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
    Oracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    88.6%Top 0.23%
    84.8priority
  77. CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
    SolarWinds · Web Help DeskKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    90.1%Top 0.2%
    84.8priority
  78. CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    68.3%Top 0.67%
    84.7priority
  79. CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    41.7%Top 1.3%
    84.6priority
  80. CVE-2026-50751Check Point Security Gateway Improper Authentication Vulnerability
    Check Point · Security GatewayKEVRansomwarePublic exploitCritical · 9.3T1133External Remote ServicesT1078Valid Accounts
    85.3%Top 0.28%
    84.5priority
  81. CVE-2026-48027Nx Console Embedded Malicious Code Vulnerability
    Nx · Nx ConsoleKEVRansomwarePublic exploitCritical · 9.8T1195.002Compromise Software Supply ChainT1059Command and Scripting Interpreter1 report
    1.8%Top 21%
    84.5priority
  82. CVE-2019-1458Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    74.4%Top 0.51%
    84.5priority
  83. CVE-2010-0188Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
    Adobe · Reader and AcrobatKEVRansomwarePublic exploitHigh · 7.8T1189Drive-by CompromiseT1105Ingress Tool Transfer2 reports
    88.2%Top 0.23%
    84.5priority
  84. CVE-2017-10271Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
    Oracle · WebLogic ServerKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation2 reports
    >99.9%Top 0.01%
    84.4priority
  85. CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
    LiteSpeed · cPanel PluginKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    17.9%Top 2.8%
    84.3priority
  86. CVE-2018-8174Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter2 reports
    88.2%Top 0.23%
    84.3priority
  87. CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability
    Oracle · E-Business SuiteKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    12.3%Top 3.8%
    84.1priority
  88. CVE-2026-45659Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    80.2%Top 0.38%
    84.1priority
  89. CVE-2026-42271BerriAI LiteLLM Command Injection Vulnerability
    BerriAI · LiteLLMKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    91.4%Top 0.19%
    84.1priority
  90. CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
    Cisco · Catalyst SD-WANKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application4 reports
    91.8%Top 0.18%
    83.9priority
  91. CVE-2024-1709ConnectWise ScreenConnect Authentication Bypass Vulnerability
    ConnectWise · ScreenConnectKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    >99.9%Top 0.02%
    83.9priority
  92. CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall ManagementKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application1 report
    88.7%Top 0.23%
    83.8priority
  93. CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
    PaperCut · NG/MFKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1098Account Manipulation1 report
    84.7%Top 0.29%
    83.7priority
  94. CVE-2025-10035Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
    Fortra · GoAnywhere MFTKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    99.8%Top 0.04%
    83.7priority
  95. CVE-2025-31324SAP NetWeaver Unrestricted File Upload Vulnerability
    SAP · NetWeaverKEVRansomwarePublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1505.003Web Shell+2 more · 1 report
    99.5%Top 0.06%
    83.7priority
  96. CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
    Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    >99.9%Top 0.02%
    83.7priority
  97. CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+2 more · 1 report
    94.3%Top 0.15%
    83.7priority
  98. CVE-2024-55956Cleo Multiple Products Unauthenticated File Upload Vulnerability
    Cleo · Multiple ProductsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    94.0%Top 0.16%
    83.7priority
  99. CVE-2023-48788Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    98.4%Top 0.08%
    83.7priority
  100. CVE-2023-46747F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
    F5 · BIG-IP Configuration UtilityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    96.7%Top 0.11%
    83.7priority
j k move · Enter open · / search
↑ ↓ chooseEnter openEsc close