위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 2시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,312
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2016-6277 | — T8.2 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | NETGEAR Multiple Routers |
| 100 | CVE-2025-55182 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Meta React Server Components 🦠 CVE-2025-55182 (Exploit); Unattributed (Ransomware); Weaxor (Ransomware); INTERLOCK (Ransomware); Qilin (Rans… |
| 100 | CVE-2025-10035 | 10.0 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Fortra GoAnywhere MFT 🦠 Unattributed (Ransomware); MedusaLocker (Ransomware); Medusa (Ransomware) |
| 100 | CVE-2022-1040 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Sophos Firewall 🦠 Ragnarok (Ransomware) |
| 100 | CVE-2021-31207 | — T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2019-11043 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | PHP FastCGI Process Manager (FPM) 🦠 Dirtelti (Backdoor); Heuristic (Backdoor); CVE-2020-3837 (Exploit); Deadbolt (Ransomware); NextCry (Ransomwar… |
| 100 | CVE-2019-15107 | — T9.6 | 100.0% | KEV랜섬실공격제로데이PoC기능적 EPSS 100%원격 | Webmin Webmin 🦠 Unattributed (Ransomware) |
| 100 | CVE-2023-29298 | — T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2022-47966 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Zoho ManageEngine 🦠 CVE-2022-47966 (Exploit); Unattributed (Ransomware); buhtiRansom (Ransomware) |
| 100 | CVE-2023-3519 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix NetScaler ADC and NetScaler Gateway 🦠 BlackCat (Ransomware); INC (Ransomware); LockBit (Ransomware); RansomHub (Ransomware); Unattributed (Ransomwa… |
| 100 | CVE-2023-38205 | — T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-15505 | — T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Ivanti MobileIron Multiple Products |
| 100 | CVE-2019-18935 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Progress Telerik UI for ASP.NET AJAX 🦠 Tiny (Trojan); Generic (Trojan); CVE-2019-18935 (Exploit); RevHellTedy (Trojan); Revsell (Exploit); Ryuk (Ran… |
| 100 | CVE-2021-22205 | — T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | GitLab Community and Enterprise Editions 🦠 CVE-2021-22205 (Exploit); CVE-2021-22204 (Exploit); Multiverze (Trojan); SshScan (Hacktool); Multiverze (PUA)… |
| 100 | CVE-2023-46604 | 10.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache ActiveMQ 🦠 HelloKitty (Ransomware); RansomHub (Ransomware); TellYouThePass (Ransomware); Unattributed (Ransomware); Maur… |
| 100 | CVE-2025-61882 | 9.8 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Oracle E-Business Suite 🦠 CVE-2025-61882 (Exploit); Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-0012 | 9.8 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 RA World (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2016-10033 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | PHP PHPMailer 🦠 CVE-2016-10033 (Exploit) |
| 100 | CVE-2017-0147 | — T8.4 | 100.0% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 server 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2022-22965 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | VMware Spring Framework 🦠 Multiverze (Trojan); Multiverze (Hacktool); CVE-2022-22965 (Exploit); Bitrep (Trojan); SpringShell (Exploit);… |
| 100 | CVE-2024-5217 | 9.8 | 100.0% | KEV EPSS 100% | ServiceNow Utah, Vancouver, and Washington DC Now Platform |
| 100 | CVE-2014-6278 | 8.8 T9.4 | 100.0% | KEV실공격PoC광범위 EPSS 100% | GNU GNU Bash 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2017-12615 | — T7.5 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache Tomcat 🦠 CVE-2017-12615 (Exploit); CVE-2017-12617 (Exploit); Lucky (Ransomware); Satan (Ransomware); Unattributed (Ran… |
| 100 | CVE-2020-16846 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | SaltStack Salt |
| 100 | CVE-2023-20198 | 10.0 T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco IOS XE Web UI 🦠 Black Basta (Ransomware) |
| 100 | CVE-2024-4040 | 7.7 T9.3 | 99.9% | KEV실공격익스공개기능적 EPSS 100%원격 | CrushFTP CrushFTP 🦠 Clop (Ransomware) |
| 100 | CVE-2025-31324 | 10.0 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SAP NetWeaver 🦠 CVE-2025-31324 (Exploit); Unattributed (Ransomware); BianLian (Ransomware); Qilin (Ransomware); RansomEXX (Ra… |
| 100 | CVE-2020-1472 | 5.5 T9.3 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Netlogon 🦠 Babuk (Ransomware); CryptoMix (Ransomware); Epsilon Red (Ransomware); Conti (Ransomware); DarkSide (Ransomwar… |
| 100 | CVE-2022-42475 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS 🦠 LockBit (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-23692 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Rejetto HTTP File Server 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-7494 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Samba Samba 🦠 StorageCrypt (Ransomware); Decryptiomega (Ransomware); NamPoHyu (Ransomware); QNAPCrypt (Ransomware); Unattri… |
| 100 | CVE-2017-9805 | — T7.5 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 Generic (Trojan); CVE-2017-9805 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2017-0148 | — T8.4 | 99.9% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 server 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2014-6287 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Rejetto HTTP File Server (HFS) 🦠 Lucifer (Ransomware) |
| 100 | CVE-2024-4885 | 9.8 T9.1 | 99.9% | KEV실공격익스공개기능적 EPSS 100%원격 | Progress WhatsUp Gold 🦠 Cactus (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-1938 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Apache Tomcat 🦠 CVE-2020-1938 (Exploit); CVE-2019-0199 (Exploit); Ravartar (Trojan) |
| 100 | CVE-2020-14750 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server |
| 100 | CVE-2017-0144 | — T8.4 | 99.9% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2023-22515 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 CVE-2023-22515 (Exploit); Cerber (Ransomware); RansomHub (Ransomware); Unattributed (Ransomware); Qilin (Rans… |
| 100 | CVE-2020-0618 | 8.8 T8.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft SQL Server 🦠 TargetCompany (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-40539 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Zoho ManageEngine 🦠 CVE-2021-40539 (Exploit); AvosLocker (Ransomware); Trigona (Ransomware); Hive (Ransomware); Unattributed (Ran… |
| 100 | CVE-2017-9791 | — T9.4 | 99.9% | KEV실공격PoC광범위 EPSS 100% | Apache Struts 1 🦠 Generic (Trojan); CVE-2017-9805 (Exploit); Lucifer (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-3236 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Sophos Firewall |
| 100 | CVE-2023-47246 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SysAid SysAid Server 🦠 Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-49706 | 6.3 T8.2 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100% | Microsoft SharePoint 🦠 Unattributed (Ransomware); Warlock (Ransomware); 4L4MD4r (Ransomware); X2ANYLOCK (Ransomware); LockBit (Ranso… |
| 100 | CVE-2022-27925 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) 🦠 BianLian (Ransomware); MalasLocker (Ransomware); Ryuk (Ransomware); Black Basta (Ransomware); Unattributed (R… |
| 100 | CVE-2024-8963 | 9.4 T8.2 | 99.9% | KEV익스공개 EPSS 100% | Ivanti Cloud Services Appliance (CSA) |
| 100 | CVE-2024-50623 | 8.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Cleo Multiple Products 🦠 Termite (Ransomware); Unattributed (Ransomware); Clop (Ransomware) |
| 100 | CVE-2025-32433 | — T9.7 | 99.9% | KEV실공격제로데이익스공개기능적 EPSS 100%원격 | Erlang Erlang/OTP 🦠 CVE-2025-32433 (Exploit); The Gentlemen (Ransomware) |
| 100 | CVE-2019-11539 | — T9.3 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Pulse Connect Secure and Pulse Policy Secure 🦠 Black Kingdom (Ransomware); Mailto (Ransomware); Maze (Ransomware); Sekhmet (Ransomware); Sodinokibi (Ransomw… |