위협 인텔리전스 (3,953건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 1시간 전.
CISA KEV
1,760
실제 공격 중
1,943
랜섬웨어
361
익스플로잇 공개
3,499
악용확률 50%↑
906
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 1시간 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2026-109619 | — T9.3 | 100.0% | KEV실공격제로데이익스공개 EPSS 100%원격 | PHP Group PHP 🦠 CVE-2026-109618 (Exploit) |
| 100 | CVE-2026-109618 | — T9.3 | 100.0% | KEV실공격제로데이PoC EPSS 100%원격 | PHP Group PHP 🦠 CVE-2026-109618 (Exploit) |
| 100 | CVE-2025-53770 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft SharePoint 🦠 WebShell (Backdoor); CVE-2025-53770 (Exploit); Qilin (Ransomware); 4L4MD4r (Ransomware); Unattributed (Ransom… |
| 100 | CVE-2024-7593 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Ivanti Virtual Traffic Manager |
| 100 | CVE-2024-3400 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Palo Alto Networks PAN-OS 🦠 CVE-2024-3400 (Exploit); BianLian (Ransomware); BlackCat (Ransomware); NoEscape (Ransomware); RansomHouse (Ra… |
| 100 | CVE-2024-23897 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Jenkins Jenkins Command Line Interface (CLI) 🦠 CVE-2024-23897 (Exploit); Multiverze (Trojan); ZkarletFlash (Trojan); Unattributed (Ransomware); RansomEXX (R… |
| 100 | CVE-2024-21893 | 8.2 T8.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Connect Secure, Policy Secure, and Neurons 🦠 CVE-2024-21893 (Exploit); Black Basta (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-21887 | 9.1 T8.4 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Connect Secure and Policy Secure 🦠 CVE-2024-21887 (Exploit); Unattributed (Ransomware); Black Basta (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2023-4966 | 9.4 T7.0 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix NetScaler ADC and NetScaler Gateway 🦠 Black Basta (Ransomware); BlackCat (Ransomware); BlackSuit (Ransomware); Blackout (Ransomware); Clop (Ransomw… |
| 100 | CVE-2023-44487 | 7.5 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | IETF HTTP/2 🦠 CVE-2023-4911 (Exploit); CVE-2025-21756 (Exploit); CVE-2023-38545 (Exploit); CVE-2026-31431 (Exploit); Generi… |
| 100 | CVE-2023-35082 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core 🦠 Unattributed (Ransomware) |
| 100 | CVE-2023-35078 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 CVE-2023-35078 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-32315 | 8.6 T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Ignite Realtime Openfire 🦠 CVE-2023-32315 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-27350 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | PaperCut MF/NG 🦠 Clop (Ransomware); Lockbit (Ransomware); Bl00dy Ransomware Gang (Ransomware); Buhti (Ransomware); BianLian (R… |
| 100 | CVE-2023-22518 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 Cerber (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-1671 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Sophos Web Appliance |
| 100 | CVE-2023-0669 | 7.2 T6.7 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortra GoAnywhere MFT 🦠 clop (Ransomware); BlackCat (Ransomware); Chubby Scorpius (Ransomware); LockBit (Ransomware); Unattributed (R… |
| 100 | CVE-2022-29464 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | WSO2 Multiple Products 🦠 WebShell (Trojan); CVE-2022-29464 (Exploit); Multiverze (Trojan); Unattributed (Ransomware) |
| 100 | CVE-2022-26134 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Server/Data Center 🦠 CVE-2022-26134 (Exploit); Cerber (Ransomware); AvosLocker (Ransomware); Gandcrab (Ransomware); Unattributed (… |
| 100 | CVE-2021-44228 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Apache Log4j2 🦠 Malclass (Trojan); Generic (Trojan); AdWind (Trojan); Disco (Infostealer); NightSky (Ransomware); TellYouTheP… |
| 100 | CVE-2021-40438 | 9.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Apache Apache 🦠 Multiverze (Trojan); GetShell (Trojan); NightSky (Ransomware); TellYouThePass (Ransomware); Conti (Ransomware… |
| 100 | CVE-2021-35464 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | ForgeRock Access Management (AM) 🦠 Unattributed (Ransomware) |
| 100 | CVE-2021-34473 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2021-26084 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Server and Data Center 🦠 CVE-2021-26084 (Exploit); Atom Silo (Ransomware); Cerber (Ransomware); LockFile (Ransomware); Rook (Ransomwar… |
| 100 | CVE-2021-22005 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server 🦠 Conti (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-21985 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server 🦠 Conti (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-1498 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Cisco HyperFlex HX |
| 100 | CVE-2020-5902 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | F5 BIG-IP 🦠 CVE-2020-5902 (Exploit); Pay2Key (Ransomware); REvil (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2019-19781 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 🦠 Scaler (Trojan); FakeLogin (Phishing); Doppelpaymer (Ransomware); Maze (Ransomware); CryptoMix (Ransomware); … |
| 100 | CVE-2019-11510 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Pulse Connect Secure 🦠 Black Kingdom (Ransomware); Mailto (Ransomware); Maze (Ransomware); Sekhmet (Ransomware); Sodinokibi (Ransomw… |
| 100 | CVE-2019-0708 | 9.8 | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft Remote Desktop Services |
| 100 | CVE-2018-13379 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS 🦠 CVE-2018-13379 (Exploit); Conti (Ransomware); Pay2Key (Ransomware); REvil (Ransomware); Cring (Ransomware); B… |
| 100 | CVE-2017-9841 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | PHPUnit PHPUnit |
| 100 | CVE-2017-5638 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 Perseus (Trojan); ApacheStruts (Hacktool); CVE-2017-5638 (Exploit); Multiverze (Trojan); Cerber (Ransomware);… |
| 100 | CVE-2014-6271 | 9.8 T8.8 | 100.0% | KEV실공격제로데이PoC광범위 EPSS 100%원격 | GNU Bourne-Again Shell (Bash) 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2022-22954 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | VMware Workspace ONE Access and Identity Manager 🦠 WebShell (Trojan); Spring4shell (Hacktool); CVE-2022-22954 (Exploit); RemoteShell (Backdoor); Clop (Ransomwar… |
| 100 | CVE-2017-7921 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Hikvision Multiple Products |
| 100 | CVE-2013-2251 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Apache Struts |
| 100 | CVE-2012-1823 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | PHP PHP 🦠 CVE-2024-4577 (Exploit); Heuristic (Malware); TellYouThePass (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-14882 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server 🦠 CVE-2020-14882 (Exploit) |
| 100 | CVE-2021-26855 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2019-16920 | 9.8 T9.6 | 100.0% | KEV실공격제로데이PoC기능적 EPSS 100%원격 | D-Link Multiple Routers 🦠 Cyborg (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-49704 | 8.8 T8.2 | 100.0% | KEV랜섬기능적 EPSS 100%원격 | Microsoft SharePoint 🦠 Unattributed (Ransomware); Warlock (Ransomware); 4L4MD4r (Ransomware); X2ANYLOCK (Ransomware); LockBit (Ranso… |
| 100 | CVE-2024-3273 | 7.3 T9.3 | 100.0% | KEVPoC EPSS 100%원격 | D-Link Multiple NAS Devices |
| 100 | CVE-2022-44877 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | CWP Control Web Panel |
| 100 | CVE-2024-34102 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Adobe Commerce and Magento Open Source 🦠 CVE-2024-4367 (Exploit) |
| 100 | CVE-2018-11776 | 8.1 T7.5 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 CVE-2018-11776 (Exploit); Lucky (Ransomware); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2017-10271 | 7.5 T9.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server 🦠 Mirai (Trojan); RemoteShell (Backdoor); WebShell (Trojan); Lucifer (Ransomware); GandCrab (Ransomware); Lucky… |
| 100 | CVE-2025-3248 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Langflow Langflow 🦠 JADEPUFFER (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-8515 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | DrayTek Multiple Vigor Routers |