|
CVE-2026-48907
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
APT29
Turkish-speaking threat actor
|
|
CVE-2023-27351
|
HIGH
|
7.5
|
|
KEV
Weaponized
|
Lace Tempest
Salt Typhoon
UAC-0250
|
|
CVE-2023-27532
|
HIGH
|
7.5
|
|
KEV
Weaponized
Ransomware
|
BlackCat
|
|
CVE-2026-6875
|
UNKNOWN
|
—
|
|
KEV
PoC
|
Defuncers/Unattributed Group
|
|
CVE-2026-25089
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown
|
|
CVE-2026-45659
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
APT29
Miasma/Shai-Hulud
Storm-2603
UNC3753
|
|
CVE-2021-30860
|
HIGH
|
7.8
|
|
KEV
Weaponized
|
NSO Group
|
|
CVE-2026-20079
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
Fire Ant
PivotC2 operator
Qilin ransomware
Sandworm
Unknown
|
|
CVE-2024-21182
|
HIGH
|
7.5
|
|
KEV
PoC
|
APT29
|
|
CVE-2024-37383
|
MEDIUM
|
6.1
|
|
KEV
Weaponized
|
APT28
|
|
CVE-2026-21509
|
HIGH
|
7.8
|
|
KEV
PoC
|
APT28
UAC-0001
|
|
CVE-2026-16232
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unattributed Adversaries
|
|
CVE-2026-42897
|
HIGH
|
8.1
|
|
KEV
PoC
|
APT28
|
|
CVE-2025-20333
|
CRITICAL
|
9.9
|
|
KEV
PoC
|
APT
UAT-4356
Volt Typhoon
|
|
CVE-2026-26980
|
CRITICAL
|
9.4
|
|
KEV
PoC
|
ClickFix
|
|
CVE-2025-9491
|
HIGH
|
7.8
|
|
KEV
PoC
|
XDSpy
|
|
CVE-2026-42945
|
HIGH
|
8.1
|
|
KEV
PoC
|
Volt Typhoon
|
|
CVE-2009-0556
|
HIGH
|
8.8
|
|
KEV
PoC
|
RondoDox
|
|
CVE-2025-55184
|
HIGH
|
7.5
|
|
KEV
PoC
|
Earth Lamia
Jackpot Panda
UNC5454
UNC6586
UNC6600
|
|
CVE-2024-57726
|
CRITICAL
|
9.9
|
|
KEV
Weaponized
Ransomware
|
DragonForce
Mirai
|
|
CVE-2021-27877
|
HIGH
|
8.2
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
|
|
CVE-2026-48558
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
unidentified threat actor
|
|
CVE-2025-55183
|
MEDIUM
|
5.3
|
|
|
Earth Lamia
Jackpot Panda
UNC5454
UNC6586
UNC6600
|
|
CVE-2026-32202
|
MEDIUM
|
4.3
|
|
KEV
PoC
|
APT28
Unknown Threat Actors
|
|
CVE-2021-22681
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
CyberAv3ngers
Iranian-Affiliated APT
Shahid Kaveh Group
|
|
CVE-2023-21529
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
APT41
Storm-1175
|
|
CVE-2026-9198
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
knaithe
knaithe (alias KnYuan)
unknown threat actors
|
|
CVE-2026-33634
|
HIGH
|
8.8
|
|
KEV
PoC
|
TeamPCP
|
|
CVE-2025-24054
|
MEDIUM
|
6.5
|
|
KEV
Weaponized
|
APT28
|
|
CVE-2026-18577
|
HIGH
|
8.1
|
|
KEV
Weaponized
|
Lazarus Group
Mabna Institute
N/A
Storm-1175
Unknown Actor Group
Unknown Threat Actor Group
Unknown/Unattributed
|
|
CVE-2019-1068
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
UAT-10147
Unknown Actor(s)
|
|
CVE-2023-32434
|
HIGH
|
7.8
|
|
KEV
PoC
|
Operation Triangulation (original developers)
UNC6353
UNC6691
|
|
CVE-2009-1537
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-55040
|
CRITICAL
|
9.1
|
|
KEV
PoC
|
Unattributed Adversarial Actors
|
|
CVE-2020-9715
|
HIGH
|
7.8
|
|
KEV
PoC
|
Kimsuky
Unattributed opportunistic actors
|
|
CVE-2021-26829
|
MEDIUM
|
5.4
|
|
KEV
PoC
|
TwoNet
|
|
CVE-2026-59310
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT (Unattributed)
Babuk-Derived Actor
China-Nexus APT
Suspected China-Nexus Actor
UNC5174
|
|
CVE-2026-32201
|
MEDIUM
|
6.5
|
|
KEV
PoC
|
APT28 (Forest Blizzard / Fancy Bear)
|
|
CVE-2009-0238
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
Trojan.Mdropper.AC operators
|
|
CVE-2023-49105
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unattributed Chinese-speaking threat actor
|
|
CVE-2026-48282
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
45.207.216[.]55
APT29
|
|
CVE-2026-21962
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
China-linked threat actor
Unknown threat actor
|
|
CVE-2023-33538
|
HIGH
|
8.8
|
|
KEV
PoC
|
Mirai
|
|
CVE-2023-4762
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2023-2033
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-12569
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT29
CLOP
|
|
CVE-2026-18556
|
HIGH
|
7.4
|
|
KEV
Weaponized
|
Unattributed Threat Actors
Unknown Threat Actor Group
Unknown/Unattributed
|
|
CVE-2026-3854
|
HIGH
|
8.8
|
|
|
Lazarus Group
|
|
CVE-2021-38003
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-33032
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
APT41
|