위협 인텔리전스 (4,030건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 28분 전.
CISA KEV
1,762
실제 공격 중
2,066
랜섬웨어
361
익스플로잇 공개
3,578
악용확률 50%↑
908
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 26분 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 92 | CVE-2023-28432 | 7.5 T7.0 | 99.7% | KEVPoC기능적 EPSS 100%원격 | MinIO MinIO |
| 92 | CVE-2025-22226 | 7.1 T7.6 | 78.0% | KEV실공격익스공개기능적 EPSS 78%원격 | VMware ESXi, Workstation, and Fusion 🦠 Akira (Ransomware); Helldown (Ransomware); Play (Ransomware); Unattributed (Ransomware) |
| 92 | CVE-2026-42897 | 8.1 T5.7 | 43.3% | KEV실공격PoC기능적 원격 | Microsoft Microsoft 🦠 CVE-2026-42897 (Exploit) |
| 91 | CVE-2025-21334 | 7.8 T9.4 | 75.2% | KEV실공격익스공개광범위 EPSS 75% | Microsoft Windows 🦠 CVE-2025-21298 (Exploit); CVE-2025-21333 (Exploit); Heuristic (Malware); HybridPetya (Ransomware); Petya (Ran… |
| 91 | CVE-2025-21335 | 7.8 T9.4 | 72.3% | KEV실공격익스공개광범위 EPSS 72% | Microsoft Windows 🦠 CVE-2025-21298 (Exploit); CVE-2025-21333 (Exploit); Heuristic (Malware); HybridPetya (Ransomware); Petya (Ran… |
| 90 | CVE-2015-1635 | 9.8 | 100.0% | KEVPoC EPSS 100% | Microsoft HTTP.sys |
| 90 | CVE-2024-4879 | 9.8 | 100.0% | KEVPoC EPSS 100% | ServiceNow Utah, Vancouver, and Washington DC Now Platform |
| 90 | CVE-2018-2628 | 9.8 | 100.0% | KEVPoC EPSS 100% | Oracle WebLogic Server |
| 90 | CVE-2024-38475 | 9.1 T8.8 | 100.0% | KEVPoC EPSS 100% | Apache HTTP Server |
| 90 | CVE-2021-26085 | 5.3 | 100.0% | KEV랜섬PoC EPSS 100% | Atlassian Confluence Server |
| 90 | CVE-2022-35405 | 9.8 | 100.0% | KEVPoC EPSS 100% | Zoho ManageEngine |
| 90 | CVE-2024-45519 | 10.0 | 100.0% | KEVPoC EPSS 100% | Synacor Zimbra Collaboration Suite (ZCS) |
| 90 | CVE-2014-0497 | 9.8 | 100.0% | KEVPoC EPSS 100% | Adobe Flash Player |
| 90 | CVE-2021-31166 | 9.8 | 100.0% | KEVPoC EPSS 100% | Microsoft HTTP Protocol Stack |
| 90 | CVE-2021-37415 | 9.8 | 100.0% | KEV EPSS 100% | Zoho ManageEngine ServiceDesk Plus (SDP) |
| 90 | CVE-2015-3113 | 9.8 | 100.0% | KEVPoC EPSS 100% | Adobe Flash Player |
| 90 | CVE-2020-13927 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100% | Apache Airflow's Experimental API |
| 90 | CVE-2019-16759 | 9.8 | 100.0% | KEVPoC EPSS 100% | vBulletin vBulletin |
| 90 | CVE-2017-1000353 | 9.8 | 100.0% | KEVPoC EPSS 100% | Jenkins Jenkins |
| 90 | CVE-2024-5217 | 9.8 | 100.0% | KEV EPSS 100% | ServiceNow Utah, Vancouver, and Washington DC Now Platform |
| 90 | CVE-2018-0171 | 9.8 | 99.9% | KEVPoC EPSS 100% | Cisco IOS and IOS XE |
| 90 | CVE-2023-34048 | 9.8 | 99.9% | KEV EPSS 100% | VMware vCenter Server |
| 90 | CVE-2022-0543 | 10.0 | 99.9% | KEVPoC EPSS 100% | Redis Debian-specific Redis Servers |
| 90 | CVE-2020-0646 | 9.8 | 99.9% | KEVPoC EPSS 100% | Microsoft .NET Framework |
| 90 | CVE-2022-24086 | 9.8 | 99.9% | KEVPoC EPSS 100% | Adobe Commerce and Magento Open Source |
| 90 | CVE-2025-68613 | 9.9 T7.9 | 99.9% | KEVPoC EPSS 100% | n8n n8n |
| 90 | CVE-2020-7247 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100% | OpenBSD OpenSMTPD |
| 90 | CVE-2017-3881 | 9.8 | 99.9% | KEVPoC EPSS 100% | Cisco IOS and IOS XE |
| 90 | CVE-2012-3152 | 9.1 | 99.9% | KEVPoC EPSS 100% | Oracle Fusion Middleware |
| 90 | CVE-2008-4250 | 9.8 | 99.9% | KEVPoC EPSS 100% | Microsoft Windows |
| 90 | CVE-2015-5119 | 9.8 | 99.9% | KEVPoC EPSS 100% | Adobe Flash Player |
| 90 | CVE-2024-8963 | 9.4 T8.2 | 99.9% | KEVPoC EPSS 100% | Ivanti Cloud Services Appliance (CSA) |
| 90 | CVE-2020-6207 | 9.8 | 99.9% | KEVPoC EPSS 100% | SAP Solution Manager |
| 90 | CVE-2023-25280 | 9.8 | 99.9% | KEV EPSS 100% | D-Link DIR-820 Router |
| 90 | CVE-2024-56145 | 9.8 | 99.9% | KEVPoC EPSS 100% | Craft CMS Craft CMS |
| 90 | CVE-2023-24489 | 9.8 | 99.9% | KEVPoC EPSS 100% | Citrix Content Collaboration |
| 90 | CVE-2020-2555 | 9.8 | 99.9% | KEVPoC EPSS 100% | Oracle Multiple Products |
| 90 | CVE-2019-1003030 | 9.9 T8.9 | 99.9% | KEVPoC EPSS 100% | Jenkins Matrix Project Plugin |
| 90 | CVE-2020-25223 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100% | Sophos SG UTM |
| 90 | CVE-2020-1350 | 10.0 | 99.9% | KEVPoC EPSS 100% | Microsoft Windows |
| 90 | CVE-2009-1151 | 9.8 | 99.9% | KEVPoC EPSS 100% | phpMyAdmin phpMyAdmin |
| 90 | CVE-2010-0840 | 9.8 | 99.9% | KEVPoC EPSS 100% | Oracle Java Runtime Environment (JRE) |
| 90 | CVE-2025-54068 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100% | Laravel Livewire |
| 90 | CVE-2018-14847 | 9.1 | 99.9% | KEVPoC EPSS 100% | MikroTik RouterOS |
| 90 | CVE-2025-12480 | 9.1 T8.2 | 99.9% | KEV익스공개 EPSS 100% | Gladinet Triofox |
| 90 | CVE-2019-7609 | 10.0 | 99.9% | KEVPoC EPSS 100% | Elastic Kibana |
| 90 | CVE-2015-0313 | 9.8 | 99.9% | KEVPoC EPSS 100% | Adobe Flash Player |
| 90 | CVE-2019-10068 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100% | Kentico Xperience |
| 90 | CVE-2015-4852 | 9.8 | 99.9% | KEVPoC EPSS 100% | Oracle WebLogic Server |
| 90 | CVE-2018-14933 | 9.8 | 99.9% | KEVPoC EPSS 100% | NUUO NVRmini Devices |