위협 인텔리전스 (3,949건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 49분 전.
CISA KEV
1,762
실제 공격 중
1,944
랜섬웨어
361
익스플로잇 공개
3,495
악용확률 50%↑
906
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 47분 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2025-0108 | 9.1 T9.4 | 99.9% | KEV실공격PoC광범위 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 CVE-2024-9474 (Exploit); RA World (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-48788 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiClient EMS 🦠 CVE-2023-48788 (Exploit); MedusaLocker (Ransomware); RansomHub (Ransomware); Unattributed (Ransomware); Akira… |
| 100 | CVE-2022-21587 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle E-Business Suite 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-15944 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Palo Alto Networks PAN-OS |
| 100 | CVE-2018-1000861 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Jenkins Jenkins Stapler Web Framework 🦠 Lucifer (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2016-1555 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | NETGEAR Wireless Access Point (WAP) Devices |
| 100 | CVE-2023-20887 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | VMware Aria Operations for Networks 🦠 CVE-2023-20887 (Exploit) |
| 100 | CVE-2022-22947 | 10.0 T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100% | VMware Spring Cloud Gateway 🦠 CVE-2022-22947 (Exploit) |
| 100 | CVE-2022-26138 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence 🦠 AvosLocker (Ransomware); Cerber (Ransomware) |
| 100 | CVE-2012-0507 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Oracle Java SE |
| 100 | CVE-2021-33766 | 7.3 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Microsoft Exchange Server 🦠 Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Hive (Ransomware); BianLian (Ransomware); Entr… |
| 100 | CVE-2019-5544 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | VMware VMware ESXi and Horizon DaaS 🦠 Babuk (Ransomware); DarkSide (Ransomware); REvil (Ransomware); RansomExx (Ransomware); Unattributed (Ransomwa… |
| 100 | CVE-2021-39144 | 8.5 T8.4 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | XStream XStream |
| 100 | CVE-2024-3272 | 9.8 T9.3 | 99.9% | KEVPoC EPSS 100%원격 | D-Link Multiple NAS Devices |
| 100 | CVE-2021-35395 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | Realtek AP-Router SDK |
| 100 | CVE-2023-25717 | 9.8 T9.1 | 99.9% | KEV실공격익스공개기능적 EPSS 100%원격 | Ruckus Wireless Multiple Products |
| 100 | CVE-2022-29303 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | SolarView Compact |
| 100 | CVE-2022-22536 | 10.0 T9.0 | 99.9% | KEVPoC EPSS 100%원격 | SAP Multiple Products |
| 100 | CVE-2018-19410 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Paessler PRTG Network Monitor |
| 100 | CVE-2021-45382 | 9.8 T9.3 | 99.9% | KEV익스공개 EPSS 100%원격 | D-Link Multiple Routers |
| 100 | CVE-2021-36380 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | Sunhillo SureLine |
| 100 | CVE-2020-11738 | 7.5 T7.0 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | WordPress Snap Creek Duplicator Plugin |
| 100 | CVE-2015-7450 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | IBM WebSphere Application Server and Server Hypervisor Edition 🦠 CVE-2015-7450 (Exploit) |
| 100 | CVE-2020-14883 | 7.2 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Oracle WebLogic Server 🦠 CVE-2020-14882 (Exploit) |
| 100 | CVE-2025-34028 | 10.0 T9.0 | 99.9% | KEVPoC EPSS 100%원격 | Commvault Command Center |
| 100 | CVE-2025-20281 | 10.0 T9.0 | 99.9% | KEVPoC EPSS 100%원격 | Cisco Identity Services Engine |
| 100 | CVE-2021-42237 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Sitecore XP 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-25078 | 7.5 T8.2 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | D-Link DCS-2530L and DCS-2670L Devices 🦠 CVE-2020-25078 (Exploit) |
| 100 | CVE-2024-4358 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Progress Telerik Report Server |
| 100 | CVE-2026-72898 | 10.0 T9.0 | 99.9% | KEVPoC EPSS 100%원격 | Metabase Metabase |
| 100 | CVE-2007-3010 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Alcatel OmniPCX Enterprise |
| 100 | CVE-2020-25213 | 10.0 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | WordPress File Manager Plugin 🦠 CVE-2020-25213 (Exploit) |
| 100 | CVE-2024-41713 | 9.1 T8.4 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Mitel MiCollab 🦠 Unattributed (Ransomware) |
| 100 | CVE-2025-2747 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | Kentico Xperience CMS |
| 100 | CVE-2023-23397 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Microsoft Office 🦠 CVE-2023-23397 (Exploit); Black Basta (Ransomware); DevMan (Ransomware) |
| 100 | CVE-2017-17562 | 8.1 T7.5 | 99.9% | KEV실공격PoC기능적 EPSS 100%원격 | Embedthis GoAhead 🦠 ShadowBrokers (Exploit); CVE-2017-17562 (Exploit) |
| 100 | CVE-2019-7256 | 9.8 T9.0 | 99.9% | KEVPoC EPSS 100%원격 | Nice Linear eMerge E3-Series |
| 100 | CVE-2023-38203 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2013-0422 | 9.8 | 99.9% | KEV랜섬PoC EPSS 100% | Oracle Java Runtime Environment (JRE) |
| 100 | CVE-2017-8291 | 7.8 T7.2 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Artifex Ghostscript 🦠 Generic (Trojan); Donoff (Trojan); CVE-2017-8291 (Exploit); CVE-2017-11882 (Exploit); Hwpps (Exploit) |
| 100 | CVE-2018-1273 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware Tanzu Spring Data Commons 🦠 Lucky (Ransomware); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2026-20253 | 9.8 T8.8 | 99.9% | KEVPoC EPSS 100%원격 | Splunk Enterprise |
| 100 | CVE-2025-5086 | 9.0 T8.1 | 99.9% | KEV익스공개 EPSS 100%원격 | Dassault Systèmes DELMIA Apriso |
| 100 | CVE-2026-0257 | 9.1 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Palo Alto Networks PAN-OS 🦠 Unattributed (Ransomware); Qilin (Ransomware); Ransomware Inc (Ransomware) |
| 100 | CVE-2024-57727 | 7.5 T9.2 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | SimpleHelp SimpleHelp 🦠 MedusaLocker (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware); Play (Ransomware); RansomHub … |
| 100 | CVE-2021-22502 | 9.8 T8.8 | 99.9% | KEV익스공개 EPSS 100%원격 | Micro Focus Operation Bridge Reporter (OBR) |
| 100 | CVE-2018-6530 | 9.8 T9.1 | 99.9% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | D-Link Multiple Routers 🦠 Unattributed (Ransomware) |
| 100 | CVE-2026-35273 | 9.8 T9.1 | 99.9% | KEV랜섬실공격PoC기능적 EPSS 100% | Oracle PeopleSoft Enterprise PeopleTools 🦠 Unattributed (Ransomware) |
| 100 | CVE-2011-3544 | 9.8 T9.1 | 99.9% | KEV실공격PoC기능적 EPSS 100% | Oracle Java SE JDK and JRE 🦠 Exxroute (Ransomware); Reveton (Ransomware); ASN1 (Ransomware); Alma Locker (Ransomware); AnteFrigus (Ransomw… |
| 100 | CVE-2020-11651 | 9.8 T9.3 | 99.9% | KEV실공격PoC기능적 EPSS 100% | SaltStack Salt 🦠 Multiverze (Trojan); GetShell (Trojan); NightSky (Ransomware); TellYouThePass (Ransomware); Conti (Ransomware… |