위협 인텔리전스 (3,952건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 50분 전.
CISA KEV
1,760
실제 공격 중
1,942
랜섬웨어
361
익스플로잇 공개
3,499
악용확률 50%↑
906
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 2시간 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2021-39226 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100% | Grafana Labs Grafana 🦠 CVE-2016-5195 (Exploit); CVE-2020-9856 (Exploit); CVE-2020-9850 (Exploit); CVE-2020-9802 (Exploit) |
| 100 | CVE-2021-38647 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Open Management Infrastructure (OMI) 🦠 CVE-2021-38647 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2021-1497 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Cisco HyperFlex HX |
| 100 | CVE-2025-24813 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Apache Tomcat 🦠 CVE-2025-21756 (Exploit) |
| 100 | CVE-2025-25257 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Fortinet FortiWeb |
| 100 | CVE-2024-32113 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Apache OFBiz |
| 100 | CVE-2026-10520 | 10.0 T9.0 | 100.0% | KEVPoC EPSS 100%원격 | Ivanti Sentry |
| 100 | CVE-2019-3396 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Server and Data Server 🦠 CVE-2019-3396 (Exploit); GandCrab (Ransomware); Lockergoga (Ransomware); Megacortex (Ransomware); REvil (Rans… |
| 100 | CVE-2019-0604 | 9.8 | 100.0% | KEV랜섬PoC EPSS 100% | Microsoft SharePoint |
| 100 | CVE-2021-20038 | 9.8 | 100.0% | KEV랜섬PoC EPSS 100% | SonicWall SMA 100 Appliances |
| 100 | CVE-2022-24816 | 10.0 T9.0 | 100.0% | KEV익스공개 EPSS 100%원격 | OSGeo JAI-EXT |
| 100 | CVE-2018-0296 | 7.5 T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Cisco Adaptive Security Appliance (ASA) |
| 100 | CVE-2019-7481 | 7.5 T7.0 | 100.0% | KEV랜섬기능적 EPSS 100%원격 | SonicWall SMA100 🦠 HelloKitty (Ransomware); BlackCat (Ransomware); ESXiArgs (Ransomware); LockBit (Ransomware); Unattributed (Ra… |
| 100 | CVE-2015-1427 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Elastic Elasticsearch 🦠 AdWind (Trojan); CVE-2014-0114 (Exploit); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-7961 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Liferay Liferay Portal 🦠 Black (Trojan); LINUXMiner (Trojan); Miner (Trojan); CVE-2020-7961 (Exploit) |
| 100 | CVE-2021-22986 | 9.8 T9.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | F5 BIG-IP and BIG-IQ Centralized Management 🦠 CVE-2021-22986 (Exploit); LockBit (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-46604 | 10.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache ActiveMQ 🦠 HelloKitty (Ransomware); RansomHub (Ransomware); TellYouThePass (Ransomware); Unattributed (Ransomware); Maur… |
| 100 | CVE-2021-35394 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Realtek Jungle Software Development Kit (SDK) |
| 100 | CVE-2021-27065 | 7.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2019-1653 | 7.5 T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco Small Business RV320 and RV325 Routers |
| 100 | CVE-2021-44515 | 9.8 T9.1 | 100.0% | KEV익스공개기능적 EPSS 100%원격 | Zoho Desktop Central |
| 100 | CVE-2021-36260 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Hikvision Security cameras web server 🦠 Multiverze (Hacktool); CVE-2021-36260 (Exploit); ZkarletFlash (Trojan); Multiverze (Trojan); Egairtigado (Tro… |
| 100 | CVE-2021-21972 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server 🦠 CVE-2021-21974 (Exploit); Memento (Ransomware); ESXiArgs (Ransomware); Akira (Ransomware); Conti (Ransomware)… |
| 100 | CVE-2025-24893 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | XWiki Platform |
| 100 | CVE-2024-0012 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 RA World (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2022-35914 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Teclib GLPI |
| 100 | CVE-2022-46169 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Cacti Cacti |
| 100 | CVE-2017-7269 | 9.8 T9.4 | 100.0% | KEV실공격PoC광범위 EPSS 100%원격 | Microsoft Internet Information Services (IIS) 🦠 Graftor (Trojan); Heuristic (Trojan); CVE-2017-7269 (Exploit) |
| 100 | CVE-2023-38831 | 7.8 T7.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | RARLAB WinRAR 🦠 CVE-2023-38831 (Exploit); Generic (Trojan); Generic (Exploit); Unattributed (Ransomware); Black Basta (Ransom… |
| 100 | CVE-2024-36401 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | OSGeo GeoServer |
| 100 | CVE-2020-0796 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft SMBv3 🦠 Bulz (Trojan); Mediyes (Trojan); ATPMiniDump (Hacktool); Boxter (Trojan); Meterpreter (Backdoor); CVE-2020-07… |
| 100 | CVE-2016-6277 | 8.8 T8.2 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | NETGEAR Multiple Routers |
| 100 | CVE-2025-55182 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Meta React Server Components 🦠 CVE-2025-55182 (Exploit); Unattributed (Ransomware); Weaxor (Ransomware); INTERLOCK (Ransomware); Qilin (Rans… |
| 100 | CVE-2025-10035 | 10.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortra GoAnywhere MFT 🦠 Unattributed (Ransomware); MedusaLocker (Ransomware); Medusa (Ransomware) |
| 100 | CVE-2022-1040 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Sophos Firewall 🦠 Ragnarok (Ransomware) |
| 100 | CVE-2025-32432 | 10.0 T9.0 | 100.0% | KEVPoC EPSS 100%원격 | Craft CMS Craft CMS |
| 100 | CVE-2021-31207 | 6.6 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2022-47966 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Zoho ManageEngine 🦠 CVE-2022-47966 (Exploit); Unattributed (Ransomware); buhtiRansom (Ransomware) |
| 100 | CVE-2023-3519 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix NetScaler ADC and NetScaler Gateway 🦠 BlackCat (Ransomware); INC (Ransomware); LockBit (Ransomware); RansomHub (Ransomware); Unattributed (Ransomwa… |
| 100 | CVE-2019-11043 | 8.7 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | PHP FastCGI Process Manager (FPM) 🦠 Dirtelti (Backdoor); Heuristic (Backdoor); CVE-2020-3837 (Exploit); Deadbolt (Ransomware); NextCry (Ransomwar… |
| 100 | CVE-2010-2861 | 9.8 | 100.0% | KEV랜섬PoC EPSS 100% | Adobe ColdFusion |
| 100 | CVE-2020-15505 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Ivanti MobileIron Multiple Products |
| 100 | CVE-2019-18935 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Progress Telerik UI for ASP.NET AJAX 🦠 Tiny (Trojan); Generic (Trojan); CVE-2019-18935 (Exploit); RevHellTedy (Trojan); Revsell (Exploit); Ryuk (Ran… |
| 100 | CVE-2021-22205 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | GitLab Community and Enterprise Editions 🦠 CVE-2021-22205 (Exploit); CVE-2021-22204 (Exploit); Multiverze (Trojan); SshScan (Hacktool); Multiverze (PUA)… |
| 100 | CVE-2025-61882 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle E-Business Suite 🦠 CVE-2025-61882 (Exploit); Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2016-10033 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | PHP PHPMailer 🦠 CVE-2016-10033 (Exploit) |
| 100 | CVE-2019-15107 | 9.8 T9.6 | 100.0% | KEV랜섬실공격제로데이PoC기능적 EPSS 100%원격 | Webmin Webmin 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-0147 | 7.5 T8.4 | 100.0% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft SMBv1 server 🦠 Lucifer (Ransomware); Conti (Ransomware); NotPetya (Ransomware); Petya (Ransomware); Ryuk (Ransomware); STOP … |
| 100 | CVE-2025-48703 | 9.0 T8.1 | 100.0% | KEVPoC EPSS 100%원격 | CWP Control Web Panel |
| 100 | CVE-2017-12615 | 8.1 T7.5 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache Tomcat 🦠 CVE-2017-12615 (Exploit); CVE-2017-12617 (Exploit); Lucky (Ransomware); Satan (Ransomware); Unattributed (Ran… |