CVERadar

CVEs: Public PoC

907 CVEs with public proof-of-concept code on GitHub that meets the quality bar, sorted by threat level then EPSS. Showing 1-120. Use search to combine filters.

Public proof-of-concept code can be fake or malicious. Verify before running, and only in an isolated lab. A PoC means exploit code is public, not that the CVE is exploited in the wild.

CRITICAL 10RansomwareTop #29
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2019-11510

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Ivanti · Pulse Connect Secure · EPSS 100.00% · Threat 100
CRITICAL 10RansomwareTop #24
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

Apache · Log4j2 · EPSS 100.00% · Threat 100
CRITICAL 10RansomwareTop #5
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · EPSS 100.00% · Threat 100
CRITICAL 10RansomwareTop #75
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-1709

ConnectWise ScreenConnect Authentication Bypass Vulnerability

ConnectWise · ScreenConnect · EPSS 99.98% · Threat 100
CRITICAL 10Ransomware
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-55182

Meta React Server Components Remote Code Execution Vulnerability

Meta · React Server Components · EPSS 99.80% · Threat 100
CRITICAL 9.8RansomwareTop #26
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2017-5638

Apache Struts Remote Code Execution Vulnerability

Apache · Struts · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #27
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2018-13379

Fortinet FortiOS SSL VPN Path Traversal Vulnerability

Fortinet · FortiOS · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #28
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2019-0708

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft · Remote Desktop Services · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #30
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2019-19781

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability

Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #31
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2020-5902

F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability

F5 · BIG-IP · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #33
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2021-21985

VMware vCenter Server Improper Input Validation Vulnerability

VMware · vCenter Server · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #34
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2021-22005

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Server · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #35
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-26084

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Center · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #37
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-35464

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock · Access Management (AM) · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #18
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2022-26134

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian · Confluence Server/Data Center · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #20
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2022-29464

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 · Multiple Products · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #10
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-22518

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · Confluence Data Center and Server · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #16
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2023-27350

PaperCut MF/NG Improper Access Control Vulnerability

PaperCut · MF/NG · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #14
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2023-35078

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #4
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-23897

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Jenkins · Jenkins Command Line Interface (CLI) · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #1
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2025-53770

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #39
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2022-22954

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager · EPSS 100.00% · Threat 99
CRITICAL 9.8RansomwareTop #51
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2025-3248

Langflow Missing Authentication Vulnerability

Langflow · Langflow · EPSS 99.99% · Threat 99
CRITICAL 9.8RansomwareTop #55
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-41773

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server · EPSS 99.99% · Threat 99
CRITICAL 9.8RansomwareTop #58
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2018-7600

Drupal Core Remote Code Execution Vulnerability

Drupal · Drupal Core · EPSS 99.99% · Threat 99
CRITICAL 9.8RansomwareTop #63
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains · TeamCity · EPSS 99.99% · Threat 99
CRITICAL 9.8RansomwareTop #62
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2024-4577

PHP-CGI OS Command Injection Vulnerability

PHP Group · PHP · EPSS 99.99% · Threat 99
CRITICAL 9.8RansomwareTop #68
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2022-40684

Fortinet Multiple Products Authentication Bypass Vulnerability

Fortinet · Multiple Products · EPSS 99.98% · Threat 99
CRITICAL 9.8RansomwareTop #66
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-22527

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Atlassian · Confluence Data Center and Server · EPSS 99.98% · Threat 99
CRITICAL 9.8RansomwareTop #67
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2023-29357

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft · SharePoint Server · EPSS 99.98% · Threat 99
CRITICAL 9.8RansomwareTop #71
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2025-22457

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · EPSS 99.98% · Threat 99
CRITICAL 9.8RansomwareTop #79
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2019-2725

Oracle WebLogic Server, Injection

Oracle · WebLogic Server · EPSS 99.98% · Threat 99
CRITICAL 9.8RansomwareTop #87
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-31161

CrushFTP Authentication Bypass Vulnerability

CrushFTP · CrushFTP · EPSS 99.97% · Threat 99
CRITICAL 9.8RansomwareTop #89
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-42013

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server · EPSS 99.96% · Threat 99
CRITICAL 9.8RansomwareTop #96
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2022-1388

F5 BIG-IP Missing Authentication Vulnerability

F5 · BIG-IP · EPSS 99.95% · Threat 99
CRITICAL 9.8RansomwareTop #97
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-38035

Ivanti Sentry Authentication Bypass Vulnerability

Ivanti · Sentry · EPSS 99.95% · Threat 99
CRITICAL 9.8RansomwareTop #99
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2018-10562

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers · EPSS 99.95% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2024-27198

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains · TeamCity · EPSS 99.94% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-10035

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Fortra · GoAnywhere MFT · EPSS 99.80% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2025-61882

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite · EPSS 99.73% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-31324

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver · EPSS 99.49% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2024-23692

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Rejetto · HTTP File Server · EPSS 99.48% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2024-50623

Cleo Multiple Products Unrestricted File Upload Vulnerability

Cleo · Multiple Products · EPSS 98.61% · Threat 99
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-35273

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle · PeopleSoft Enterprise PeopleTools · EPSS 96.68% · Threat 98
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-53704

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall · SonicOS · EPSS 95.31% · Threat 98
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-51378

CyberPanel Incorrect Default Permissions Vulnerability

CyberPersons · CyberPanel · EPSS 94.75% · Threat 97
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-55591

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · EPSS 94.35% · Threat 97
CRITICAL 9.9Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-1731

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) · EPSS 92.46% · Threat 97
CRITICAL 9.3RansomwareTop #82
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-5777

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Citrix · NetScaler ADC and Gateway · EPSS 99.97% · Threat 96
CRITICAL 9.3Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-0012

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · EPSS 99.86% · Threat 96
CRITICAL 9.3Ransomware
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2026-41940

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros · cPanel & WHM and WP2 (WordPress Squared) · EPSS 98.53% · Threat 96
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-63077

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

JetBrains · TeamCity · EPSS 89.57% · Threat 96
CRITICAL 10Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2025-52691

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

SmarterTools · SmarterMail · EPSS 85.66% · Threat 96
CRITICAL 9.1RansomwareTop #36
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2021-34473

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · EPSS 100.00% · Threat 95
CRITICAL 9RansomwareTop #25
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2021-40438

Apache HTTP Server-Side Request Forgery (SSRF)

Apache · Apache · EPSS 100.00% · Threat 95
CRITICAL 9.1RansomwareTop #8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2024-21887

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

Ivanti · Connect Secure and Policy Secure · EPSS 100.00% · Threat 95
CRITICAL 9.1RansomwareTop #44
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2021-26855

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · EPSS 100.00% · Threat 95
CRITICAL 9RansomwareTop #59
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2021-34523

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server · EPSS 99.99% · Threat 95
CRITICAL 9RansomwareTop #72
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-0282

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · EPSS 99.98% · Threat 95
CRITICAL 9RansomwareTop #78
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2021-45046

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Apache · Log4j2 · EPSS 99.98% · Threat 95
CRITICAL 10
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-10520

Ivanti Sentry OS Command Injection Vulnerability

Ivanti · Sentry · EPSS 99.91% · Threat 95
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-32432

Craft CMS Code Injection Vulnerability

Craft CMS · Craft CMS · EPSS 99.79% · Threat 95
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2015-3306

ProFTPD Improper Access Control Vulnerability

ProFTPD · ProFTPD · EPSS 99.50% · Threat 95
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2025-32433

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Erlang · Erlang/OTP · EPSS 98.79% · Threat 95
CRITICAL 9.1Ransomware
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-41713

Mitel MiCollab Path Traversal Vulnerability

Mitel · MiCollab · EPSS 97.21% · Threat 95
CRITICAL 9.8Top #23
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2014-6271

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU · Bourne-Again Shell (Bash) · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #22
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2015-1635

Microsoft HTTP.sys Remote Code Execution Vulnerability

Microsoft · HTTP.sys · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #21
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2017-9841

PHPUnit Command Injection Vulnerability

PHPUnit · PHPUnit · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #9
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2023-1671

Sophos Web Appliance Command Injection Vulnerability

Sophos · Web Appliance · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #3
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-7593

Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

Ivanti · Virtual Traffic Manager · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #40
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2012-1823

PHP-CGI Query String Parameter Vulnerability

PHP · PHP · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #38
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2017-7921

Hikvision Multiple Products Improper Authentication Vulnerability

Hikvision · Multiple Products · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #42
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2020-14882

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #47
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2022-44877

CWP Control Web Panel OS Command Injection Vulnerability

CWP · Control Web Panel · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #46
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2024-3273

D-Link Multiple NAS Devices Command Injection Vulnerability

D-Link · Multiple NAS Devices · EPSS 100.00% · Threat 94
CRITICAL 9.8Top #48
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2024-34102

Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Adobe · Commerce and Magento Open Source · EPSS 99.99% · Threat 94
CRITICAL 9.8Top #53
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2020-8515

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek · Multiple Vigor Routers · EPSS 99.99% · Threat 94
CRITICAL 9.8Top #60
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2021-33044

Dahua IP Camera Authentication Bypass Vulnerability

Dahua · IP Camera Firmware · EPSS 99.99% · Threat 94
CRITICAL 9.8Top #65
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2019-9670

Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference

Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 99.99% · Threat 94
CRITICAL 9.8Top #74
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2025-59287

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Microsoft · Windows · EPSS 99.98% · Threat 94
HIGH 8.8RansomwareTop #91
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2020-0688

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Microsoft · Exchange Server · EPSS 99.96% · Threat 94
CRITICAL 9.8Top #92
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2019-10149

Exim Mail Transfer Agent (MTA) Improper Input Validation

Exim · Mail Transfer Agent (MTA) · EPSS 99.96% · Threat 94
CRITICAL 9.8Top #93
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2018-2628

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server · EPSS 99.96% · Threat 94
HIGH 8.8RansomwareTop #95
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-41040

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft · Exchange Server · EPSS 99.96% · Threat 94
CRITICAL 9.8Top #98
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2018-15961

Adobe ColdFusion Unrestricted File Upload Vulnerability

Adobe · ColdFusion · EPSS 99.95% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-24813

Apache Tomcat Path Equivalence Vulnerability

Apache · Tomcat · EPSS 99.93% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVExploit-DBPublic PoCCTID-mapped
CVE-2025-25257

Fortinet FortiWeb SQL Injection Vulnerability

Fortinet · FortiWeb · EPSS 99.92% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-24893

XWiki Platform Eval Injection Vulnerability

XWiki · Platform · EPSS 99.86% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2016-10033

PHPMailer Command Injection Vulnerability

PHP · PHPMailer · EPSS 99.71% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2017-1000353

Jenkins Remote Code Execution Vulnerability

Jenkins · Jenkins · EPSS 99.68% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-4885

Progress WhatsUp Gold Path Traversal Vulnerability

Progress · WhatsUp Gold · EPSS 99.29% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-27348

Apache HugeGraph-Server Improper Access Control Vulnerability

Apache · HugeGraph-Server · EPSS 99.21% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2019-16278

Nostromo nhttpd Directory Traversal Vulnerability

Nostromo · nhttpd · EPSS 99.03% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2026-24061

GNU InetUtils Argument Injection Vulnerability

GNU · InetUtils · EPSS 98.98% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2008-4250

Microsoft Windows Buffer Overflow Vulnerability

Microsoft · Windows · EPSS 98.75% · Threat 94
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-50603

Aviatrix Controllers OS Command Injection Vulnerability

Aviatrix · Controllers · EPSS 98.52% · Threat 94
CRITICAL 10
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2022-22536

SAP Multiple Products HTTP Request Smuggling Vulnerability

SAP · Multiple Products · EPSS 97.95% · Threat 94
CRITICAL 10
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-20281

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine · EPSS 97.60% · Threat 94
CRITICAL 10
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-72898

Metabase SQL Injection Vulnerability

Metabase · Metabase · EPSS 97.44% · Threat 94
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-57819

Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma · FreePBX · EPSS 95.02% · Threat 94
CRITICAL 9.8Ransomware
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-51567

CyberPanel Incorrect Default Permissions Vulnerability

CyberPersons · CyberPanel · EPSS 84.40% · Threat 94
HIGH 8.6RansomwareTop #77
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2024-24919

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point · Quantum Security Gateways · EPSS 99.98% · Threat 93
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2024-4358

Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

Progress · Telerik Report Server · EPSS 97.48% · Threat 93
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-20253

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk · Enterprise · EPSS 96.94% · Threat 93
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-1212

Progress Kemp LoadMaster OS Command Injection Vulnerability

Progress · Kemp LoadMaster · EPSS 95.39% · Threat 93
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCCTID-mapped
CVE-2025-47812

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Wing FTP Server · Wing FTP Server · EPSS 93.88% · Threat 93
CRITICAL 9.9
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2025-24016

Wazuh Server Deserialization of Untrusted Data Vulnerability

Wazuh · Wazuh Server · EPSS 93.84% · Threat 93
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-85706

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab · Community Edition and Enterprise Edition · EPSS 91.95% · Threat 93
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-20182

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco · Catalyst SD-WAN · EPSS 91.82% · Threat 93
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-47575

Fortinet FortiManager Missing Authentication Vulnerability

Fortinet · FortiManager · EPSS 94.77% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2024-21413

Microsoft Outlook Improper Input Validation Vulnerability

Microsoft · Office Outlook · EPSS 94.66% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2020-2883

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server · EPSS 94.58% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2025-30406

Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

Gladinet · CentreStack · EPSS 94.34% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-35616

Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet · FortiClient EMS · EPSS 93.98% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2025-11953

React Native Community CLI OS Command Injection Vulnerability

React Native Community · CLI · EPSS 93.98% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCATT&CK inferred
CVE-2026-21643

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMS · EPSS 93.87% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVPublic PoCCTID-mapped
CVE-2025-54309

CrushFTP Unprotected Alternate Channel Vulnerability

CrushFTP · CrushFTP · EPSS 93.47% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-64446

Fortinet FortiWeb Path Traversal Vulnerability

Fortinet · FortiWeb · EPSS 91.97% · Threat 92
CRITICAL 9.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-11680

ProjectSend Improper Authentication Vulnerability

ProjectSend · ProjectSend · EPSS 91.85% · Threat 92
CRITICAL 10
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-20127

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco · Catalyst SD-WAN Controller and Manager · EPSS 89.29% · Threat 92