위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 3시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,312
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2026-41940 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | WebPros cPanel & WHM and WP2 (WordPress Squared) 🦠 CVE-2026-41940 (Exploit); Sorry (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2016-3088 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Apache ActiveMQ 🦠 Xbash (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-0108 | 9.1 T9.4 | 99.9% | KEV실공격익스공개광범위 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 CVE-2024-9474 (Exploit); RA World (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-48788 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Fortinet FortiClient EMS 🦠 CVE-2023-48788 (Exploit); MedusaLocker (Ransomware); RansomHub (Ransomware); Unattributed (Ransomware); Akira… |
| 100 | CVE-2022-21587 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle E-Business Suite 🦠 Unattributed (Ransomware) |
| 100 | CVE-2018-1000861 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Jenkins Jenkins Stapler Web Framework 🦠 Lucifer (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-20887 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | VMware Aria Operations for Networks 🦠 CVE-2023-20887 (Exploit) |
| 100 | CVE-2024-55591 | 9.8 T9.3 | 99.9% | KEV랜섬실공격제로데이익스공개기능적 EPSS 100%원격 | Fortinet FortiOS and FortiProxy 🦠 SuperBlack (Ransomware); Unattributed (Ransomware); Hunters International (Ransomware); RansomHub (Ransomware… |
| 100 | CVE-2022-22947 | — T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100% | VMware Spring Cloud Gateway 🦠 CVE-2022-22947 (Exploit) |
| 100 | CVE-2022-26138 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence 🦠 AvosLocker (Ransomware); Cerber (Ransomware) |
| 100 | CVE-2021-39144 | — T8.4 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | XStream XStream |
| 100 | CVE-2024-41713 | 7.5 T8.4 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Mitel MiCollab 🦠 Unattributed (Ransomware) |
| 100 | CVE-2023-25717 | — T9.1 | 99.9% | KEV실공격익스공개기능적 EPSS 100%원격 | Ruckus Wireless Multiple Products |
| 100 | CVE-2020-14883 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Oracle WebLogic Server 🦠 CVE-2020-14882 (Exploit) |
| 100 | CVE-2021-42237 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Sitecore XP 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-25078 | 7.5 T8.2 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | D-Link DCS-2530L and DCS-2670L Devices 🦠 CVE-2020-25078 (Exploit) |
| 100 | CVE-2023-38831 | — T7.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | RARLAB WinRAR 🦠 CVE-2023-38831 (Exploit); Generic (Trojan); Generic (Exploit); Unattributed (Ransomware); Black Basta (Ransom… |
| 100 | CVE-2026-24061 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | GNU InetUtils 🦠 Qilin (Ransomware) |
| 100 | CVE-2020-11738 | — T7.0 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | WordPress Snap Creek Duplicator Plugin |
| 100 | CVE-2025-61884 | 7.5 T7.0 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Oracle E-Business Suite 🦠 CVE-2025-61882 (Exploit); Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2015-7450 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | IBM WebSphere Application Server and Server Hypervisor Edition 🦠 CVE-2015-7450 (Exploit) |
| 100 | CVE-2020-25213 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | WordPress File Manager Plugin 🦠 CVE-2020-25213 (Exploit) |
| 100 | CVE-2026-39987 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | Marimo Marimo |
| 100 | CVE-2017-8291 | 7.8 T7.2 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Artifex Ghostscript 🦠 Generic (Trojan); Donoff (Trojan); CVE-2017-8291 (Exploit); CVE-2017-11882 (Exploit); Hwpps (Exploit) |
| 100 | CVE-2019-5544 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | VMware VMware ESXi and Horizon DaaS 🦠 Babuk (Ransomware); DarkSide (Ransomware); REvil (Ransomware); RansomExx (Ransomware); Unattributed (Ransomwa… |
| 100 | CVE-2023-38203 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2011-3544 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Oracle Java SE JDK and JRE 🦠 Exxroute (Ransomware); Reveton (Ransomware); ASN1 (Ransomware); Alma Locker (Ransomware); AnteFrigus (Ransomw… |
| 100 | CVE-2018-6530 | — T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | D-Link Multiple Routers 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-11651 | — T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | SaltStack Salt 🦠 AvosLocker (Ransomware); BigBossHorse (Ransomware); BlackCat (Ransomware); Conti (Ransomware); LockBit (Ranso… |
| 100 | CVE-2023-46747 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | F5 BIG-IP Configuration Utility 🦠 RansomHub (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2017-17562 | — T7.5 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Embedthis GoAhead 🦠 ShadowBrokers (Exploit); CVE-2017-17562 (Exploit) |
| 100 | CVE-2018-20250 | — T7.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | RARLAB WinRAR 🦠 Generic (Trojan); GenAutorunLnkFile (Trojan); NetWired (Backdoor); Casdet (Trojan); Zegost (Backdoor); CVE-20… |
| 100 | CVE-2026-33017 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Langflow Langflow 🦠 CVE-2026-33017 (Exploit) |
| 100 | CVE-2019-1652 | — T7.0 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers |
| 100 | CVE-2021-26857 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2018-1273 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware Tanzu Spring Data Commons 🦠 Lucky (Ransomware); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-23760 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SmarterTools SmarterMail 🦠 Unattributed (Ransomware); Warlock (Ransomware); Qilin (Ransomware) |
| 100 | CVE-2024-1708 | 8.4 T9.3 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | ConnectWise ScreenConnect 🦠 Bl00dy Ransomware Gang (Ransomware); Black Basta (Ransomware); Cicada3301 (Ransomware); LockBit (Ransomware);… |
| 100 | CVE-2026-35273 | 9.8 | 99.9% | KEV랜섬 EPSS 100% | Oracle PeopleSoft Enterprise PeopleTools |
| 100 | CVE-2019-11580 | — T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Crowd and Crowd Data Center 🦠 CVE-2019-5786 (Exploit); CVE-2019-11580 (Exploit); Unattributed (Ransomware); 01flip (Ransomware) |
| 100 | CVE-2024-57727 | 7.5 T9.2 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SimpleHelp SimpleHelp 🦠 MedusaLocker (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware); Play (Ransomware); RansomHub … |
| 100 | CVE-2024-53704 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SonicWall SonicOS 🦠 Unattributed (Ransomware); Akira (Ransomware) |
| 100 | CVE-2018-0798 | — T8.4 | 99.9% | KEV실공격PoC광범위 EPSS 100% | Microsoft Office 🦠 Pederr (Trojan); Encdoc (Trojan); Tiggre (Trojan); RealProtect (Trojan); XLoader (Trojan); Ceevee (Trojan); F… |
| 100 | CVE-2023-36846 | 5.3 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Juniper Junos OS 🦠 Black Basta (Ransomware) |
| 100 | CVE-2019-10068 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100% | Kentico Xperience |
| 100 | CVE-2021-4034 | — T7.4 | 99.9% | KEV랜섬실공격제로데이PoC기능적 EPSS 100%원격 | Red Hat Polkit 🦠 Multiverze (Trojan); GetShell (Trojan); Mirai (Trojan); CVE-2021-4034 (Exploit); CVE-2022-0847 (Exploit); Gen… |
| 100 | CVE-2017-9822 | — T8.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | DotNetNuke (DNN) DotNetNuke (DNN) 🦠 Unattributed (Ransomware) |
| 100 | CVE-2024-51378 | 10.0 | 99.9% | KEV랜섬PoC EPSS 100% | CyberPersons CyberPanel |
| 100 | CVE-2020-6287 | — T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | SAP NetWeaver |
| 100 | CVE-2024-9474 | 7.2 T6.7 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 CVE-2024-9474 (Exploit); Unattributed (Ransomware) |