| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2025-54068
Laravel Livewire Code Injection Vulnerability |
Laravel · Livewire | Mar 20, 2026 | Apr 3, 2026 | 96.3% | — |
| CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 28, 2022 | Dec 19, 2022 | 96.3% | — |
| CVE-2020-17530
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 96.3% | — |
| CVE-2019-20085
TVT NVMS-1000 Directory Traversal Vulnerability |
TVT · NVMS-1000 | Nov 3, 2021 | May 3, 2022 | 96.1% | — |
| CVE-2022-24112
Apache APISIX Authentication Bypass Vulnerability |
Apache · APISIX | Aug 25, 2022 | Sep 15, 2022 | 96.1% | — |
| CVE-2018-20250 Ransomware
WinRAR Absolute Path Traversal Vulnerability |
RARLAB · WinRAR | Feb 15, 2022 | Aug 15, 2022 | 96.0% | — |
| CVE-2017-3506
Oracle WebLogic Server OS Command Injection Vulnerability |
Oracle · WebLogic Server | Jun 3, 2024 | Jun 24, 2024 | 96.0% | — |
| CVE-2018-14847
MikroTik Router OS Directory Traversal Vulnerability |
MikroTik · RouterOS | Dec 1, 2021 | Jun 1, 2022 | 96.0% | — |
| CVE-2019-1652
Cisco Small Business Routers Improper Input Validation Vulnerability |
Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Mar 3, 2022 | Mar 17, 2022 | 95.9% | — |
| CVE-2021-20124
Draytek VigorConnect Path Traversal Vulnerability |
DrayTek · VigorConnect | Sep 3, 2024 | Sep 24, 2024 | 95.9% | — |
| CVE-2025-61884 Ransomware
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability |
Oracle · E-Business Suite | Oct 20, 2025 | Nov 10, 2025 | 95.9% | — |
| CVE-2020-5847
Unraid Remote Code Execution Vulnerability |
Unraid · Unraid | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
| CVE-2020-1147
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution V… |
Microsoft · .NET Framework, SharePoint, Visual Studio | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
| CVE-2022-36537 Ransomware
ZK Framework AuUploader Unspecified Vulnerability |
ZK Framework · AuUploader | Feb 27, 2023 | Mar 20, 2023 | 95.8% | — |
| CVE-2026-87902
WordPress Core Remote File Inclusion Vulnerability |
WordPress · Core | Sep 25, 2026 | Sep 28, 2026 | 95.8% | — |
| CVE-2021-26857 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
| CVE-2025-12480
Gladinet Triofox Improper Access Control Vulnerability |
Gladinet · Triofox | Nov 12, 2025 | Dec 3, 2025 | 95.7% | — |
| CVE-2022-23131
Zabbix Frontend Authentication Bypass Vulnerability |
Zabbix · Frontend | Feb 22, 2022 | Mar 8, 2022 | 95.7% | — |
| CVE-2026-0257 Ransomware
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability |
Palo Alto Networks · PAN-OS | May 29, 2026 | Jun 1, 2026 | 95.6% | 1 last Nov 10 |
| CVE-2020-5410
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability |
VMware Tanzu · Spring Cloud Configuration (Config) Server | Mar 25, 2022 | Apr 15, 2022 | 95.6% | — |
| CVE-2016-0752
Ruby on Rails Directory Traversal Vulnerability |
Rails · Ruby on Rails | Mar 25, 2022 | Apr 15, 2022 | 95.5% | — |
| CVE-2025-54236
Adobe Commerce and Magento Improper Input Validation Vulnerability |
Adobe · Commerce and Magento | Oct 24, 2025 | Nov 14, 2025 | 95.5% | — |
| CVE-2022-41352 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Oct 20, 2022 | Nov 10, 2022 | 95.5% | — |
| CVE-2024-1708 Ransomware
ConnectWise ScreenConnect Path Traversal Vulnerability |
ConnectWise · ScreenConnect | Apr 28, 2026 | May 12, 2026 | 95.4% | — |
| CVE-2024-1212
Progress Kemp LoadMaster OS Command Injection Vulnerability |
Progress · Kemp LoadMaster | Nov 18, 2024 | Dec 9, 2024 | 95.4% | — |
| CVE-2019-11580 Ransomware
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability |
Atlassian · Crowd and Crowd Data Center | Nov 3, 2021 | May 3, 2022 | 95.4% | — |
| CVE-2015-0313
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 95.3% | — |
| CVE-2019-7609
Kibana Arbitrary Code Execution |
Elastic · Kibana | Jan 10, 2022 | Jul 10, 2022 | 95.3% | — |
| CVE-2024-53704 Ransomware
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability |
SonicWall · SonicOS | Feb 18, 2025 | Mar 11, 2025 | 95.3% | — |
| CVE-2022-23134
Zabbix Frontend Improper Access Control Vulnerability |
Zabbix · Frontend | Feb 22, 2022 | Mar 8, 2022 | 95.3% | — |
| CVE-2025-57819
Sangoma FreePBX Authentication Bypass Vulnerability |
Sangoma · FreePBX | Aug 29, 2025 | Sep 19, 2025 | 95.2% | — |
| CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 95.1% | — |
| CVE-2017-12637
SAP NetWeaver Directory Traversal Vulnerability |
SAP · NetWeaver | Mar 19, 2025 | Apr 9, 2025 | 95.1% | — |
| CVE-2019-10068
Kentico Xperience Deserialization of Untrusted Data Vulnerability |
Kentico · Xperience | Mar 25, 2022 | Apr 15, 2022 | 95.1% | — |
| CVE-2023-36845
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vu… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 95.1% | — |
| CVE-2015-4852
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 95.0% | — |
| CVE-2019-12989
Citrix SD-WAN and NetScaler SQL Injection Vulnerability |
Citrix · SD-WAN and NetScaler | Mar 25, 2022 | Apr 15, 2022 | 95.0% | — |
| CVE-2021-4034 Ransomware
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability |
Red Hat · Polkit | Jun 27, 2022 | Jul 18, 2022 | 94.9% | — |
| CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code… |
Microsoft · Windows | Mar 25, 2022 | Apr 15, 2022 | 94.9% | — |
| CVE-2026-63077 Ransomware
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability |
JetBrains · TeamCity | Aug 5, 2026 | Aug 8, 2026 | 94.9% | 1 last Nov 10 |
| CVE-2017-9822 Ransomware
DotNetNuke (DNN) Remote Code Execution Vulnerability |
DotNetNuke (DNN) · DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | 94.8% | — |
| CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability |
Fortinet · FortiManager | Oct 23, 2024 | Nov 13, 2024 | 94.8% | — |
| CVE-2018-14933
NUUO NVRmini Devices OS Command Injection Vulnerability |
NUUO · NVRmini Devices | Dec 18, 2024 | Jan 8, 2025 | 94.8% | — |
| CVE-2024-51378 Ransomware
CyberPanel Incorrect Default Permissions Vulnerability |
CyberPersons · CyberPanel | Dec 4, 2024 | Dec 25, 2024 | 94.7% | — |
| CVE-2025-30406
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerabil… |
Gladinet · CentreStack | Apr 8, 2025 | Apr 29, 2025 | 94.7% | — |
| CVE-2020-6287
SAP NetWeaver Missing Authentication for Critical Function Vulnerability |
SAP · NetWeaver | Nov 3, 2021 | May 3, 2022 | 94.7% | — |
| CVE-2024-21413
Microsoft Outlook Improper Input Validation Vulnerability |
Microsoft · Office Outlook | Feb 6, 2025 | Feb 27, 2025 | 94.7% | — |
| CVE-2020-2883
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Jan 7, 2025 | Jan 28, 2025 | 94.6% | — |
| CVE-2020-14644
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Sep 18, 2024 | Oct 9, 2024 | 94.5% | — |
| CVE-2017-18368
Zyxel P660HN-T1A Routers Command Injection Vulnerability |
Zyxel · P660HN-T1A Routers | Aug 7, 2023 | Aug 28, 2023 | 94.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.