| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2020-0796 Ransomware
Microsoft SMBv3 Remote Code Execution Vulnerability |
Microsoft · SMBv3 | Feb 10, 2022 | Aug 10, 2022 | 99.8% | — |
| CVE-2023-23752
Joomla! Improper Access Control Vulnerability |
Joomla! · Joomla! | Jan 8, 2024 | Jan 29, 2024 | 99.8% | — |
| CVE-2023-38205
Adobe ColdFusion Improper Access Control Vulnerability |
Adobe · ColdFusion | Jul 20, 2023 | Aug 10, 2023 | 99.8% | — |
| CVE-2016-6277
NETGEAR Multiple Routers Remote Code Execution Vulnerability |
NETGEAR · Multiple Routers | Mar 7, 2022 | Sep 7, 2022 | 99.8% | — |
| CVE-2022-1040
Sophos Firewall Authentication Bypass Vulnerability |
Sophos · Firewall | Mar 31, 2022 | Apr 21, 2022 | 99.8% | — |
| CVE-2026-8037
Progress LoadMaster Command Injection Vulnerability |
Progress · LoadMaster | Aug 7, 2026 | Aug 10, 2026 | 99.8% | — |
| CVE-2025-32432
Craft CMS Code Injection Vulnerability |
Craft CMS · Craft CMS | Mar 20, 2026 | Apr 3, 2026 | 99.8% | — |
| CVE-2021-34527 Ransomware
Microsoft Windows Print Spooler Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 99.8% | — |
| CVE-2023-29298
Adobe ColdFusion Improper Access Control Vulnerability |
Adobe · ColdFusion | Jul 20, 2023 | Aug 10, 2023 | 99.8% | — |
| CVE-2024-0012 Ransomware
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerabil… |
Palo Alto Networks · PAN-OS | Nov 18, 2024 | Dec 9, 2024 | 99.8% | — |
| CVE-2008-2992 Ransomware
Adobe Reader and Acrobat Input Validation Vulnerability |
Adobe · Acrobat and Reader | Mar 3, 2022 | Mar 24, 2022 | 99.8% | — |
| CVE-2019-11043 Ransomware
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability |
PHP · FastCGI Process Manager (FPM) | Mar 25, 2022 | Apr 15, 2022 | 99.8% | — |
| CVE-2021-31207 Ransomware
Microsoft Exchange Server Security Feature Bypass Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 99.8% | — |
| CVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability |
Cisco · IOS XE Web UI | Oct 16, 2023 | Oct 20, 2023 | 99.8% | — |
| CVE-2020-13927
Apache Airflow's Experimental API Authentication Bypass |
Apache · Airflow's Experimental API | Jan 18, 2022 | Jul 18, 2022 | 99.8% | — |
| CVE-2022-47966 Ransomware
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability |
Zoho · ManageEngine | Jan 23, 2023 | Feb 13, 2023 | 99.8% | — |
| CVE-2023-3519 Ransomware
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Jul 19, 2023 | Aug 9, 2023 | 99.7% | — |
| CVE-2010-2861 Ransomware
Adobe ColdFusion Directory Traversal Vulnerability |
Adobe · ColdFusion | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2026-39987
Marimo Remote Code Execution Vulnerability |
Marimo · Marimo | Apr 23, 2026 | May 7, 2026 | 99.7% | — |
| CVE-2014-6278
GNU Bash OS Command Injection Vulnerability |
GNU · GNU Bash | Oct 2, 2025 | Oct 23, 2025 | 99.7% | — |
| CVE-2020-15505
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability |
Ivanti · MobileIron Multiple Products | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2019-18935 Ransomware
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerab… |
Progress · Telerik UI for ASP.NET AJAX | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2025-55182 Ransomware
Meta React Server Components Remote Code Execution Vulnerability |
Meta · React Server Components | Dec 5, 2025 | Dec 12, 2025 | 99.7% | — |
| CVE-2021-22205 Ransomware
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability |
GitLab · Community and Enterprise Editions | Nov 3, 2021 | Nov 17, 2021 | 99.7% | — |
| CVE-2025-61882 Ransomware
Oracle E-Business Suite Unspecified Vulnerability |
Oracle · E-Business Suite | Oct 6, 2025 | Oct 27, 2025 | 99.7% | — |
| CVE-2019-16759
vBulletin PHP Module Remote Code Execution Vulnerability |
vBulletin · vBulletin | Nov 3, 2021 | May 3, 2022 | 99.7% | — |
| CVE-2016-10033
PHPMailer Command Injection Vulnerability |
PHP · PHPMailer | Jul 7, 2025 | Jul 28, 2025 | 99.7% | — |
| CVE-2019-15107 Ransomware
Webmin Command Injection Vulnerability |
Webmin · Webmin | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2017-12615 Ransomware
Apache Tomcat on Windows Remote Code Execution Vulnerability |
Apache · Tomcat | Mar 25, 2022 | Apr 15, 2022 | 99.7% | — |
| CVE-2017-0147 Ransomware
Microsoft Windows SMBv1 Information Disclosure Vulnerability |
Microsoft · SMBv1 server | May 24, 2022 | Jun 14, 2022 | 99.7% | — |
| CVE-2017-1000353
Jenkins Remote Code Execution Vulnerability |
Jenkins · Jenkins | Oct 2, 2025 | Oct 23, 2025 | 99.7% | — |
| CVE-2021-22054
Omnissa Workspace ONE Server-Side Request Forgery |
Omnissa · Workspace One UEM | Mar 9, 2026 | Mar 23, 2026 | 99.7% | — |
| CVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties… |
Atlassian · Multiple Products | Oct 15, 2026 | Oct 18, 2026 | 99.7% | 1 last Oct 12 |
| CVE-2025-48703
CWP Control Web Panel OS Command Injection Vulnerability |
CWP · Control Web Panel | Nov 4, 2025 | Nov 25, 2025 | 99.7% | — |
| CVE-2022-22965
Spring Framework JDK 9+ Remote Code Execution Vulnerability |
VMware · Spring Framework | Apr 4, 2022 | Apr 25, 2022 | 99.6% | — |
| CVE-2024-5217
ServiceNow Incomplete List of Disallowed Inputs Vulnerability |
ServiceNow · Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | 99.6% | — |
| CVE-2024-9465
Palo Alto Networks Expedition SQL Injection Vulnerability |
Palo Alto Networks · Expedition | Nov 14, 2024 | Dec 5, 2024 | 99.6% | — |
| CVE-2024-28995
SolarWinds Serv-U Path Traversal Vulnerability |
SolarWinds · Serv-U | Jul 17, 2024 | Aug 7, 2024 | 99.6% | — |
| CVE-2025-49113
RoundCube Webmail Deserialization of Untrusted Data Vulnerability |
Roundcube · Webmail | Feb 20, 2026 | Mar 13, 2026 | 99.6% | — |
| CVE-2021-33045
Dahua IP Camera Authentication Bypass Vulnerability |
Dahua · IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | 99.6% | — |
| CVE-2020-16846
SaltStack Salt Shell Injection Vulnerability |
SaltStack · Salt | Nov 3, 2021 | May 3, 2022 | 99.6% | — |
| CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability |
ISC · BIND | Oct 8, 2026 | Oct 11, 2026 | 99.6% | — |
| CVE-2024-4040
CrushFTP VFS Sandbox Escape Vulnerability |
CrushFTP · CrushFTP | Apr 24, 2024 | May 1, 2024 | 99.5% | — |
| CVE-2018-20062
ThinkPHP "noneCms" Remote Code Execution Vulnerability |
ThinkPHP · noneCms | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2015-3306
ProFTPD Improper Access Control Vulnerability |
ProFTPD · ProFTPD | Oct 8, 2026 | Oct 11, 2026 | 99.5% | — |
| CVE-2017-0199 Ransomware
Microsoft Office and WordPad Remote Code Execution Vulnerability |
Microsoft · Office and WordPad | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2025-31324 Ransomware
SAP NetWeaver Unrestricted File Upload Vulnerability |
SAP · NetWeaver | Apr 29, 2025 | May 20, 2025 | 99.5% | — |
| CVE-2024-23692 Ransomware
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a … |
Rejetto · HTTP File Server | Jul 9, 2024 | Jul 30, 2024 | 99.5% | — |
| CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability |
Cisco · IOS and IOS XE | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2022-42475 Ransomware
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability |
Fortinet · FortiOS | Dec 13, 2022 | Jan 3, 2023 | 99.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.