CVEs: Exploited in the wild, page 6
664 CVEs listed as exploited in the wild by CISA KEV or VulnCheck KEV, sorted by threat level then EPSS. Showing 601-664. Use search to combine filters.
HIGH 7.8
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-87886Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup · EPSS 0.23% · Threat 54MEDIUM 5.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet · FortiOS · EPSS 29.50% · Threat 53MEDIUM 6.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 24.61% · Threat 53MEDIUM 6.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-44309Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Apple · Multiple Products · EPSS 22.59% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-21287Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
Oracle · Agile Product Lifecycle Management (PLM) · EPSS 1.72% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2023-4346KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association · KNX Protocol Connection Authorization Option 1 · EPSS 1.29% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
Microsoft · Defender · EPSS 1.27% · Threat 53HIGH 7.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-27038Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Qualcomm · Multiple Chipsets · EPSS 1.02% · Threat 53MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
Cisco · Adaptive Security Appliance (ASA) · EPSS 22.56% · Threat 52MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 20.23% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-2749Kentico Xperience Path Traversal Vulnerability
Kentico · Kentico Xperience · EPSS 4.02% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-3935ConnectWise ScreenConnect Improper Authentication Vulnerability
ConnectWise · ScreenConnect · EPSS 3.54% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM) · EPSS 2.54% · Threat 52HIGH 7.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 · ThreatSonar Anti-Ransomware · EPSS 1.79% · Threat 52HIGH 7.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-43093Android Framework Privilege Escalation Vulnerability
Android · Framework · EPSS 0.71% · Threat 52MEDIUM 5.3
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-11182MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
MDaemon · Email Server · EPSS 33.26% · Threat 51HIGH 7
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2025-62215Microsoft Windows Race Condition Vulnerability
Microsoft · Windows · EPSS 4.46% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21391Microsoft Windows Storage Link Following Vulnerability
Microsoft · Windows · EPSS 2.28% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-0111Palo Alto Networks PAN-OS File Read Vulnerability
Palo Alto Networks · PAN-OS · EPSS 2.00% · Threat 51HIGH 7.1
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-53150Linux Kernel Out-of-Bounds Read Vulnerability
Linux · Kernel · EPSS 1.35% · Threat 51MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco · Catalyst SD-WAN Manger · EPSS 25.80% · Threat 50MEDIUM 6.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-48710Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex · Starlette · EPSS 7.06% · Threat 50HIGH 7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24983Microsoft Windows Win32k Use-After-Free Vulnerability
Microsoft · Windows · EPSS 1.38% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-35939Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
Craft CMS · Craft CMS · EPSS 1.35% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik · RouterOS · EPSS 1.05% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista · Extensible Operating System · EPSS 0.65% · Threat 50MEDIUM 6.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 50HIGH 7
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft · Windows Ancillary Function Driver for WinSock · EPSS 0.33% · Threat 50MEDIUM 6.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall · SMA100 Appliances · EPSS 4.41% · Threat 49MEDIUM 6.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall · SMA1000 appliance · EPSS 2.76% · Threat 49MEDIUM 6.7
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-21590Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Juniper · Junos OS · EPSS 1.74% · Threat 49MEDIUM 6.7
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro · Apex One · EPSS 0.54% · Threat 49MEDIUM 6.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability
Fortinet · Multiple Products · EPSS 1.08% · Threat 48MEDIUM 6.2
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-21525Microsoft Windows NULL Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 4.83% · Threat 47MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24200Apple iOS and iPadOS Incorrect Authorization Vulnerability
Apple · iOS and iPadOS · EPSS 4.42% · Threat 47MEDIUM 5.9
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-60137WordPress Core SQL Injection Vulnerability
WordPress · Core · EPSS 5.32% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-59689Libraesva Email Security Gateway Command Injection Vulnerability
Libraesva · Email Security Gateway · EPSS 1.86% · Threat 46MEDIUM 6
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-22226VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
VMware · ESXi, Workstation, and Fusion · EPSS 1.77% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 1.71% · Threat 46MEDIUM 6.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft · Microsoft · EPSS 0.52% · Threat 46LOW 2.7Ransomware
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-55550Mitel MiCollab Path Traversal Vulnerability
Mitel · MiCollab · EPSS 38.16% · Threat 45UNKNOWN
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-20481Cisco ASA and FTD Denial-of-Service Vulnerability
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · EPSS 15.87% · Threat 45MEDIUM 5.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Citrix · Session Recording · EPSS 14.64% · Threat 45MEDIUM 5.3
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-48927TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
TeleMessage · TM SGNL · EPSS 11.57% · Threat 45MEDIUM 5.5
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability
Microsoft · Windows · EPSS 7.46% · Threat 45MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability
Ahsay · AhsayCBS · EPSS 5.79% · Threat 44MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-55177Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Meta Platforms · WhatsApp · EPSS 4.73% · Threat 43MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 4.06% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24991Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Microsoft · Windows · EPSS 2.02% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-39964Linux Kernel Race Condition Vulnerability
Linux · Kernel · EPSS 1.36% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-50302Linux Kernel Use of Uninitialized Resource Vulnerability
Linux · Kernel · EPSS 0.81% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-43520Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple · Multiple Products · EPSS 0.43% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48633Android Framework Information Disclosure Vulnerability
Android · Framework · EPSS 0.26% · Threat 43MEDIUM 5.1
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2024-8068Citrix Session Recording Improper Privilege Management Vulnerability
Citrix · Session Recording · EPSS 3.48% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog · Artifactory · EPSS 0.66% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 42MEDIUM 5.3
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex · Media Server · EPSS 0.46% · Threat 42MEDIUM 4.9
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi · Strapi · EPSS 3.61% · Threat 41MEDIUM 4.9
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47729TeleMessage TM SGNL Hidden Functionality Vulnerability
TeleMessage · TM SGNL · EPSS 0.45% · Threat 40MEDIUM 4.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL · IGEL OS · EPSS 4.93% · Threat 39MEDIUM 4.6
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-24984Microsoft Windows NTFS Information Disclosure Vulnerability
Microsoft · Windows · EPSS 1.99% · Threat 39MEDIUM 4.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windows · EPSS 4.90% · Threat 38MEDIUM 4.2
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-43200Apple Multiple Products Unspecified Vulnerability
Apple · Multiple Products · EPSS 1.19% · Threat 36MEDIUM 4
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-48928