위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 3시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,312
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2025-8088 | 8.8 T8.2 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100% | RARLAB WinRAR 🦠 CVE-2025-8088 (Exploit); Generic (Trojan); WinLnk (Trojan); Egairtigado (Trojan); Gamaredon (Trojan); Ravarta… |
| 100 | CVE-2020-1147 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100% | Microsoft .NET Framework, SharePoint, Visual Studio 🦠 CVE-2023-44487 (Exploit) |
| 100 | CVE-2023-36845 | 5.3 T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Juniper Junos OS 🦠 Black Basta (Ransomware) |
| 100 | CVE-2026-21643 | 9.8 T9.1 | 99.8% | KEV실공격익스공개기능적 EPSS 100%원격 | Fortinet FortiClient EMS 🦠 Unattributed (Ransomware) |
| 100 | CVE-2016-0189 | — T7.2 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Internet Explorer 🦠 Heuristic (Trojan); Streamto (Downloader); Uwamson (PUA); Occamy (Trojan); Meterpreter (Backdoor); Ancalog (H… |
| 100 | CVE-2024-55956 | 9.8 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Cleo Multiple Products 🦠 Termite (Ransomware); Unattributed (Ransomware); Clop (Ransomware) |
| 100 | CVE-2025-11953 | 9.8 T9.1 | 99.8% | KEV실공격익스공개기능적 EPSS 100%원격 | React Native Community CLI 🦠 CVE-2025-11953 (Exploit) |
| 100 | CVE-2026-0257 | 9.1 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 Unattributed (Ransomware); Qilin (Ransomware) |
| 100 | CVE-2012-1723 | — T9.1 | 99.8% | KEV랜섬실공격PoC기능적 EPSS 100% | Oracle Java SE 🦠 Exxroute (Ransomware); Reveton (Ransomware); ASN1 (Ransomware); Alma Locker (Ransomware); AnteFrigus (Ransomw… |
| 100 | CVE-2021-26858 | — T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2017-0143 | — T8.4 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Windows 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2018-0802 | — T8.4 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Office 🦠 Pederr (Trojan); Encdoc (Trojan); Tiggre (Trojan); RealProtect (Trojan); XLoader (Trojan); Ceevee (Trojan); F… |
| 100 | CVE-2020-2551 | 9.8 | 99.8% | KEVPoC EPSS 100% | Oracle Fusion Middleware |
| 100 | CVE-2022-33891 | — T8.2 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Spark |
| 100 | CVE-2018-10561 | — T9.6 | 99.8% | KEV실공격제로데이PoC기능적 EPSS 100%원격 | Dasan Gigabit Passive Optical Network (GPON) Routers 🦠 PNScan (Trojan); Botenago (Trojan); CVE-2018-10561 (Exploit); CVE-2018-10562 (Exploit); Muhstik (Ransomware);… |
| 100 | CVE-2024-6670 | 9.8 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100% | Progress WhatsUp Gold 🦠 Unattributed (Ransomware) |
| 100 | CVE-2025-11371 | 6.1 T7.0 | 99.8% | KEV실공격익스공개기능적 EPSS 100% | Gladinet CentreStack and Triofox 🦠 Clop (Ransomware) |
| 100 | CVE-2020-10148 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | SolarWinds Orion |
| 100 | CVE-2022-37042 | — T9.1 | 99.8% | KEV랜섬실공격PoC기능적 EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) 🦠 BianLian (Ransomware); MalasLocker (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-64446 | 9.8 T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Fortinet FortiWeb 🦠 Sicarii (Ransomware); Qilin (Ransomware) |
| 100 | CVE-2022-26352 | — T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | dotCMS dotCMS 🦠 h0lygh0st (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-36844 | 5.3 T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Juniper Junos OS 🦠 Black Basta (Ransomware) |
| 100 | CVE-2026-35616 | 9.8 T9.1 | 99.8% | KEV실공격익스공개기능적 EPSS 100%원격 | Fortinet FortiClient EMS 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-12149 | — T9.1 | 99.8% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Red Hat JBoss Application Server 🦠 Lucky (Ransomware); STOP (Ransomware); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-40711 | 9.8 | 99.8% | KEV랜섬 EPSS 100% | Veeam Backup & Replication |
| 100 | CVE-2016-8735 | — T9.1 | 99.8% | KEV실공격익스공개기능적 EPSS 100%원격 | Apache Tomcat 🦠 AdWind (Trojan); CVE-2014-0114 (Exploit); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2017-8464 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 ServStart (Trojan); Meterpreter (Backdoor); CVE-2010-2568 (Exploit); CVE-2017-8464 (Exploit); WannamineEternb… |
| 100 | CVE-2017-0146 | — T8.4 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Windows 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2017-0145 | — T8.4 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2022-0847 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Linux Kernel 🦠 Multiverze (Trojan); CVE-2022-0847 (Exploit); CVE-2021-4034 (Exploit); CVE-2022-2639 (Exploit); Dirtypipe (Ex… |
| 100 | CVE-2019-7195 | — T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | QNAP Photo Station 🦠 eCh0raix (Ransomware); QNAPCrypt (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-20273 | 7.2 T9.5 | 99.8% | KEV실공격익스공개광범위 EPSS 100%원격 | Cisco Cisco IOS XE Web UI 🦠 Black Basta (Ransomware) |
| 100 | CVE-2025-26399 | 9.8 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SolarWinds Web Help Desk 🦠 Anubis (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-0601 | — T7.5 | 99.8% | KEV실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 Generic (Trojan); Generic (Ransomware); Generic (PUA); InstallCore (PUA); Alien (Trojan); Meterpreter (Backdo… |
| 100 | CVE-2026-1731 | 9.8 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) 🦠 Unattributed (Ransomware); Medusa (Ransomware) |
| 100 | CVE-2018-8174 | — T8.4 | 99.8% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Windows 🦠 Generic (Trojan); Siscos (Trojan); Wacatac (Trojan); GandCrab (Ransomware); Egregor (Ransomware); Magniber (R… |
| 100 | CVE-2020-8193 | — T8.2 | 99.8% | KEV실공격PoC기능적 EPSS 100% | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 🦠 Unattributed (Ransomware) |
| 100 | CVE-2019-7192 | — T9.1 | 99.8% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | QNAP Photo Station 🦠 eCh0raix (Ransomware); QNAPCrypt (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-27593 | — T8.4 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | QNAP Photo Station 🦠 DeadBolt (Ransomware); Qlocker (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-17496 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | vBulletin vBulletin |
| 100 | CVE-2026-24423 | 9.8 T9.1 | 99.8% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SmarterTools SmarterMail 🦠 Unattributed (Ransomware); Warlock (Ransomware); Qilin (Ransomware) |
| 100 | CVE-2021-21973 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server and Cloud Foundation 🦠 CVE-2021-21974 (Exploit); Memento (Ransomware); ESXiArgs (Ransomware); Akira (Ransomware); Conti (Ransomware)… |
| 100 | CVE-2023-2868 | — T9.1 | 99.8% | KEV실공격PoC기능적 EPSS 100%원격 | Barracuda Networks Email Security Gateway (ESG) Appliance 🦠 CVE-2023-2868 (Exploit) |
| 100 | CVE-2016-9079 | — T7.2 | 99.8% | KEV실공격PoC광범위 EPSS 100% | Mozilla Firefox, Firefox ESR, and Thunderbird 🦠 ShellCode (Trojan); WebShell (Trojan); Cryxos (Trojan); CVE-2019-8039 (Exploit); CVE-2016-9079 (Exploit); ISq… |
| 100 | CVE-2024-51567 | 10.0 | 99.7% | KEV랜섬 EPSS 100% | CyberPersons CyberPanel |
| 100 | CVE-2018-6961 | — T7.5 | 99.7% | KEV실공격PoC기능적 EPSS 100%원격 | VMware SD-WAN Edge |
| 100 | CVE-2026-1340 | 9.8 T9.1 | 99.7% | KEV실공격익스공개기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-11652 | — T9.1 | 99.7% | KEV실공격PoC기능적 EPSS 100% | SaltStack Salt 🦠 AvosLocker (Ransomware); BigBossHorse (Ransomware); BlackCat (Ransomware); Conti (Ransomware); LockBit (Ranso… |
| 100 | CVE-2023-36847 | 5.3 T9.1 | 99.7% | KEV실공격익스공개기능적 EPSS 100%원격 | Juniper Junos OS 🦠 Black Basta (Ransomware) |
| 100 | CVE-2021-30116 | — T9.1 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Kaseya Virtual System/Server Administrator (VSA) 🦠 REvil (Ransomware); Sodinokibi (Ransomware); Unattributed (Ransomware) |