위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 4시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,315
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2023-27997 | 9.8 T9.1 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS and FortiProxy SSL-VPN 🦠 CVE-2023-27997 (Exploit); RansomHub (Ransomware); Unattributed (Ransomware); Qilin (Ransomware); Ransomware I… |
| 100 | CVE-2025-52691 | 10.0 T9.3 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | SmarterTools SmarterMail 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-3580 | — T5.7 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) 🦠 Unattributed (Ransomware); Akira (Ransomware) |
| 100 | CVE-2022-27924 | 7.5 T9.1 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) 🦠 BianLian (Ransomware); MalasLocker (Ransomware); Ryuk (Ransomware); Black Basta (Ransomware); Unattributed (R… |
| 100 | CVE-2025-33053 | 8.8 T8.2 | 99.7% | KEV실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 CVE-2025-33053 (Exploit); The Gentlemen (Ransomware) |
| 100 | CVE-2023-41265 | 9.6 T9.2 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100% | Qlik Sense 🦠 Cactus (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-50522 | 9.8 T9.1 | 99.7% | KEV실공격익스공개기능적 EPSS 100% | Microsoft SharePoint |
| 100 | CVE-2026-60004 | 9.8 T8.8 | 99.7% | KEVPoC EPSS 100% | Gitea Gitea |
| 100 | CVE-2020-28949 | 7.8 T8.2 | 99.7% | KEV실공격익스공개기능적 EPSS 100% | PEAR Archive_Tar 🦠 Ryuk (Ransomware) |
| 100 | CVE-2024-21762 | 9.8 T9.1 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS 🦠 Black Basta (Ransomware); Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2017-11317 | — T9.1 | 99.7% | KEV실공격PoC기능적 EPSS 100% | Telerik User Interface (UI) for ASP.NET AJAX 🦠 Tiny (Trojan); Generic (Trojan); CVE-2019-18935 (Exploit); RevHellTedy (Trojan); Revsell (Exploit); Ryuk (Ran… |
| 100 | CVE-2020-11023 | 6.9 T9.1 | 99.7% | KEV실공격PoC기능적 EPSS 100% | JQuery JQuery 🦠 CVE-2024-4367 (Exploit) |
| 100 | CVE-2026-50751 | 9.3 T8.6 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100% | Check Point Security Gateway 🦠 Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-15409 | 10.0 T9.3 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | SonicWall SMA1000 Appliances 🦠 Ransomware Inc (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-23758 | 8.1 T8.8 | 99.7% | KEV익스공개 EPSS 100% | Ajax.NET Professional Ajax.NET Professional |
| 100 | CVE-2025-40551 | 9.8 T9.1 | 99.7% | KEV실공격익스공개기능적 EPSS 100%원격 | SolarWinds Web Help Desk 🦠 Qilin (Ransomware) |
| 100 | CVE-2022-24990 | 7.5 T7.0 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | TerraMaster TerraMaster OS 🦠 CVE-2022-24990 (Exploit); Maui (Ransomware); h0lygh0st (Ransomware); Babuk (Ransomware); Unattributed (Ransom… |
| 100 | CVE-2016-5195 | — T9.3 | 99.7% | KEV실공격PoC기능적 EPSS 100% | Linux Kernel 🦠 ANDROIDOS_HTBENEWS.A (Backdoor); ANDROIDOS_SHUAME.HRXA (Rootkit); ANDROIDOS_SHUAME.HRX (Rootkit); ANDROIDOS_S… |
| 100 | CVE-2019-7194 | — T9.1 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | QNAP Photo Station 🦠 eCh0raix (Ransomware); QNAPCrypt (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-43208 | 9.8 T9.1 | 99.7% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | NextGen Healthcare Mirth Connect 🦠 Unattributed (Ransomware) |
| 100 | CVE-2023-41266 | 8.2 T9.2 | 99.7% | KEV랜섬실공격익스공개기능적 EPSS 100% | Qlik Sense 🦠 Cactus (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2018-6789 | — T9.1 | 99.6% | KEV랜섬실공격PoC기능적 EPSS 100% | Exim Exim 🦠 STOP (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-1281 | 9.8 T9.1 | 99.6% | KEV실공격익스공개기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 Qilin (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-40536 | 8.1 T9.1 | 99.6% | KEV실공격PoC기능적 EPSS 100%원격 | SolarWinds Web Help Desk 🦠 Qilin (Ransomware) |
| 100 | CVE-2023-4911 | 7.8 T9.3 | 99.6% | KEV실공격PoC기능적 EPSS 100% | GNU GNU C Library 🦠 CVE-2023-4911 (Exploit); Multiverze (Trojan); LockBit (Ransomware) |
| 100 | CVE-2024-8957 | 7.2 T9.1 | 99.6% | KEV실공격익스공개기능적 EPSS 100%원격 | PTZOptics PT30X-SDI/NDI Cameras 🦠 Black Basta (Ransomware) |
| 100 | CVE-2025-33073 | 8.8 T8.2 | 99.6% | KEV실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 CVE-2025-33053 (Exploit); The Gentlemen (Ransomware) |
| 100 | CVE-2020-6418 | — T9.1 | 99.6% | KEV실공격PoC기능적 EPSS 100% | Google Chromium V8 🦠 CVE-2020-6418 (Exploit); CVE-2020-6507 (Exploit); CVE-2019-5825 (Exploit); CVE-2021-21220 (Exploit); CVE-2021… |
| 100 | CVE-2021-22555 | — T9.1 | 99.6% | KEV실공격PoC기능적 EPSS 100% | Linux Kernel 🦠 Generic (Trojan); CVE-2021-22555 (Exploit); Ryuk (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-21975 | — T7.0 | 99.6% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vRealize Operations Manager API 🦠 Unattributed (Ransomware) |
| 100 | CVE-2021-28799 | — T9.1 | 99.6% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | QNAP Network Attached Storage (NAS) 🦠 AgeLocker (Ransomware); Qlocker (Ransomware); eCh0raix (Ransomware); QNAPCrypt (Ransomware); Unattributed (Ra… |
| 100 | CVE-2023-27351 | 7.5 T9.1 | 99.5% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | PaperCut NG/MF 🦠 Clop (Ransomware); Lockbit (Ransomware); Bl00dy Ransomware Gang (Ransomware); Buhti (Ransomware); BianLian (R… |
| 100 | CVE-2022-41080 | 9.8 T9.1 | 99.5% | KEV랜섬실공격익스공개기능적 EPSS 100% | Microsoft Exchange Server 🦠 CVE-2022-41080 (Exploit); Play (Ransomware); Cuba (Ransomware); Hive (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2019-7238 | — T9.1 | 99.5% | KEV실공격PoC기능적 EPSS 100%원격 | Sonatype Nexus Repository Manager |
| 100 | CVE-2026-45659 | 8.8 T8.2 | 99.5% | KEV랜섬실공격익스공개기능적 EPSS 100% | Microsoft SharePoint Server 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-9248 | — T9.1 | 99.5% | KEV실공격PoC기능적 EPSS 99% | Progress ASP.NET AJAX and Sitefinity 🦠 Tiny (Trojan); Generic (Trojan); CVE-2019-18935 (Exploit); RevHellTedy (Trojan); Revsell (Exploit); Ryuk (Ran… |
| 100 | CVE-2019-1458 | — T8.2 | 99.5% | KEV랜섬실공격PoC기능적 EPSS 99% | Microsoft Win32k 🦠 Wacapew (PUA); Razy (Trojan); Emotet (Trojan); Meterpreter (Backdoor); CVE-2018-8120 (Exploit); CVE-2019-1458… |
| 100 | CVE-2017-8543 | — T9.1 | 99.5% | KEV실공격PoC기능적 EPSS 99% | Microsoft Windows 🦠 ServStart (Trojan); Meterpreter (Backdoor); CVE-2010-2568 (Exploit); CVE-2017-8464 (Exploit); WannamineEternb… |
| 100 | CVE-2018-8120 | — T8.4 | 99.5% | KEV랜섬실공격PoC광범위 EPSS 99% | Microsoft Win32k 🦠 Generic (Trojan); Siscos (Trojan); Wacatac (Trojan); GandCrab (Ransomware); Egregor (Ransomware); Magniber (R… |
| 100 | CVE-2018-0824 | 7.5 T8.4 | 99.4% | KEV실공격PoC광범위 EPSS 99% | Microsoft Windows 🦠 Generic (Trojan); Siscos (Trojan); Wacatac (Trojan); GandCrab (Ransomware); Egregor (Ransomware); Magniber (R… |
| 100 | CVE-2026-21509 | 7.8 T7.2 | 99.4% | KEV실공격익스공개기능적 EPSS 99% | Microsoft Office 🦠 Tudimons (Exploit); CVE-2026-21509 (Exploit); Egairtigado (Trojan) |
| 100 | CVE-2019-2215 | — T9.1 | 99.4% | KEV실공격PoC기능적 EPSS 99% | Android Android Kernel 🦠 CVE-2019-2215 (Exploit); MTKsu (Exploit) |
| 100 | CVE-2026-42897 | 8.1 T5.7 | 99.4% | KEV실공격익스공개기능적 EPSS 99%원격 | Microsoft Microsoft 🦠 CVE-2026-42897 (Exploit) |
| 100 | CVE-2022-2294 | 8.8 T8.2 | 99.4% | KEV랜섬실공격익스공개기능적 EPSS 99% | WebRTC WebRTC 🦠 Unattributed (Ransomware); MedusaLocker (Ransomware); Medusa (Ransomware) |
| 100 | CVE-2021-21220 | — T9.1 | 99.4% | KEV실공격PoC기능적 EPSS 99% | Google Chromium V8 🦠 CVE-2020-6418 (Exploit); CVE-2020-6507 (Exploit); CVE-2019-5825 (Exploit); CVE-2021-21220 (Exploit); CVE-2021… |
| 100 | CVE-2025-59718 | 9.8 T9.1 | 99.3% | KEV실공격PoC기능적 EPSS 99%원격 | Fortinet Multiple Products 🦠 Qilin (Ransomware) |
| 100 | CVE-2024-30088 | 7.0 T9.1 | 99.3% | KEV랜섬실공격PoC기능적 EPSS 99% | Microsoft Windows 🦠 CVE-2024-30088 (Exploit); CVE-2024-35250 (Exploit); CVE-2024-30085 (Exploit); Heuristic (Malware); Qilin (Ran… |
| 100 | CVE-2023-28461 | 9.8 | 99.3% | KEV랜섬 EPSS 99% | Array Networks AG/vxAG ArrayOS |
| 100 | CVE-2021-36934 | — T7.2 | 99.3% | KEV실공격제로데이PoC기능적 EPSS 99% | Microsoft Windows 🦠 SharpSecDump (Hacktool); Sharpkatz (Hacktool); HiveNightmare (Exploit); CVE-2021-36934 (Exploit); Hivenightma… |
| 100 | CVE-2024-57726 | 9.9 T9.2 | 99.3% | KEV랜섬실공격익스공개기능적 EPSS 99%원격 | SimpleHelp SimpleHelp 🦠 MedusaLocker (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware); Play (Ransomware); RansomHub … |