|
CVE-2026-23760
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Warlock
|
|
CVE-2026-33017
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Opportunistic Actors
|
|
CVE-2025-61884
|
HIGH
|
7.5
|
|
KEV
Weaponized
|
CLOP
FIN11
UNC3886
UNC5221
|
|
CVE-2021-26857
|
HIGH
|
7.8
|
|
KEV
Weaponized
Ransomware
|
Silk Typhoon
|
|
CVE-2024-1708
|
HIGH
|
8.4
|
|
KEV
Weaponized
|
APT28
LockBit
Storm-1175
|
|
CVE-2026-35273
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
LAPSUS$
UNC6240
|
|
CVE-2026-0257
|
CRITICAL
|
9.1
|
|
KEV
Weaponized
|
APT29
Qilin ransomware
|
|
CVE-2026-72898
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
Gunra
ShinyHunters
|
|
CVE-2026-21643
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT28
Storm-1175
Unknown
Unknown/Unattributed
Volt Typhoon
|
|
CVE-2025-11953
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Metro4Shell
|
|
CVE-2025-8088
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
APT41
APT44
Akira
Amaranth Dragon
Amaranth Dragon (APT41 nexus)
Amarth Dragon
Armageddon
Black Basta
BlackCat
CARPATHIAN
Earth Dahu
FROZENBARENTS
Gamaredon
GopherWhisper
LockBit
Qilin ransomware
RansomHub
RomCom
SHADOW-EARTH-066
SUMMIT
Sandworm
Turla
UNC2596
UNC3886
UNC4895
UNC5221
|
|
CVE-2021-26858
|
HIGH
|
7.8
|
|
KEV
Weaponized
Ransomware
|
Silk Typhoon
|
|
CVE-2026-43284
|
HIGH
|
8.8
|
|
KEV
PoC
|
Volt Typhoon
|
|
CVE-2026-43500
|
HIGH
|
7.8
|
|
KEV
PoC
|
Volt Typhoon
|
|
CVE-2026-39808
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown
|
|
CVE-2024-7399
|
HIGH
|
8.8
|
|
KEV
PoC
|
Mirai
|
|
CVE-2010-0249
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-20182
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
UAT-8616
|
|
CVE-2026-35616
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Bitter
Unknown
|
|
CVE-2025-6218
|
HIGH
|
7.8
|
|
KEV
PoC
|
Bitter
Gamaredon
Goffee
|
|
CVE-2025-12480
|
CRITICAL
|
9.1
|
|
KEV
PoC
|
UNC6485
|
|
CVE-2025-26399
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Russian hackers
|
|
CVE-2026-1731
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
Ransomware
|
Silk Typhoon
|
|
CVE-2026-42208
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
TeamPCP
Vect
|
|
CVE-2026-20127
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
UAT-8616
|
|
CVE-2026-20230
|
HIGH
|
8.6
|
|
KEV
PoC
|
Threat Actors Exploiting CVE-2026-20230
|
|
CVE-2024-12356
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Silk Typhoon
|
|
CVE-2026-24423
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Warlock
|
|
CVE-2025-29635
|
HIGH
|
7.2
|
|
KEV
PoC
|
Mirai
Unknown
|
|
CVE-2026-3055
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Threat Actors (Active Exploitation)
knaithe
|
|
CVE-2025-20362
|
MEDIUM
|
6.5
|
|
KEV
PoC
|
APT
UAT-4356
Volt Typhoon
|
|
CVE-2026-60004
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Actor (Cryptojacking Campaign)
Unknown Mining Operator
|
|
CVE-2009-3459
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-63077
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Unknown/Undetermined
|
|
CVE-2024-3721
|
MEDIUM
|
6.3
|
|
KEV
PoC
|
Nexcorium
|
|
CVE-2025-59528
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
Unknown
|
|
CVE-2026-1340
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Prometei
|
|
CVE-2023-27997
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
Ransomware
|
Volt Typhoon
|
|
CVE-2026-50522
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown / Opportunistic Adversaries
|
|
CVE-2026-15409
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
INC Ransomware
UTA0533
Unknown Adversary
|
|
CVE-2024-21762
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
Unknown (3BB-specific)
|
|
CVE-2024-38077
|
CRITICAL
|
9.8
|
|
|
CL-STA-1062
|
|
CVE-2026-50751
|
CRITICAL
|
9.3
|
|
KEV
Weaponized
|
Qilin ransomware
|
|
CVE-2025-34291
|
HIGH
|
8.8
|
|
KEV
PoC
|
MUSTANG PANDA
MuddyWater
|
|
CVE-2025-40551
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
INJ3CTOR3
|
|
CVE-2026-42271
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
Qilin ransomware
|
|
CVE-2024-42009
|
CRITICAL
|
9.3
|
|
KEV
Weaponized
|
UNK_MassTraction
|
|
CVE-2025-8110
|
HIGH
|
8.8
|
|
KEV
PoC
|
Chinese hacking groups
|
|
CVE-2010-0806
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-60137
|
MEDIUM
|
5.9
|
|
KEV
Weaponized
|
Unknown (Mass Exploitation Campaign)
|