|
CVE-2026-5027
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT29
MuddyWater
|
|
CVE-2026-6973
|
HIGH
|
7.2
|
|
KEV
PoC
|
Prometei
null
|
|
CVE-2026-20131
|
CRITICAL
|
10.0
|
|
KEV
Weaponized
|
Interlock
|
|
CVE-2025-21042
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-73570
|
HIGH
|
8.9
|
|
KEV
PoC
|
APT29
Laundry Bear
Unknown / Unattributed
|
|
CVE-2023-3079
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-0300
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT41 / Silver Dragon
CL-STA-1132
null
unnamed state-sponsored group
|
|
CVE-2026-20133
|
MEDIUM
|
6.5
|
|
KEV
PoC
|
Salt Typhoon
|
|
CVE-2025-26633
|
HIGH
|
7.0
|
|
KEV
Weaponized
Ransomware
|
APT28
|
|
CVE-2025-20393
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
UAT-9686
|
|
CVE-2023-41993
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
Intellexa
|
|
CVE-2026-20262
|
MEDIUM
|
6.5
|
|
KEV
PoC
|
APT29
UAT-8616
|
|
CVE-2026-45247
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
FIN7
|
|
CVE-2018-4063
|
HIGH
|
8.8
|
|
KEV
PoC
|
Chaya_005
|
|
CVE-2024-37085
|
MEDIUM
|
6.8
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
|
|
CVE-2026-56164
|
MEDIUM
|
5.3
|
|
KEV
PoC
|
LockBit
|
|
CVE-2020-17103
|
HIGH
|
7.0
|
|
KEV
PoC
|
Chaotic Eclipse
|
|
CVE-2026-21510
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT28
|
|
CVE-2026-20245
|
HIGH
|
7.8
|
|
KEV
Weaponized
|
Lazarus Group
|
|
CVE-2026-20122
|
MEDIUM
|
5.4
|
|
KEV
PoC
|
Salt Typhoon
UAT-8616
UAT-9686
|
|
CVE-2026-71362
|
CRITICAL
|
9.1
|
|
KEV
PoC
|
Unknown Threat Actor(s)
|
|
CVE-2021-27878
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
|
|
CVE-2025-23006
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
UNC3886
UNC5221
|
|
CVE-2023-32435
|
HIGH
|
8.8
|
|
KEV
Weaponized
|
Operation Triangulation (original developers)
|
|
CVE-2025-14174
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
UNC6353
UNC6748
|
|
CVE-2026-39813
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown
|
|
CVE-2025-43300
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2012-1854
|
HIGH
|
7.8
|
|
KEV
PoC
|
Unattributed opportunistic actors
|
|
CVE-2026-22679
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
APT41 / Silver Dragon
|
|
CVE-2026-48939
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Automated Scanner (icagenda-batch/1.0)
malicious cyber actors
|
|
CVE-2025-67779
|
HIGH
|
7.5
|
|
|
Earth Lamia
Jackpot Panda
UNC5454
UNC6586
UNC6600
|
|
CVE-2021-37976
|
MEDIUM
|
6.5
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2025-66376
|
HIGH
|
7.2
|
|
KEV
PoC
|
Laundry Bear
Laundry Bear (Void Blizzard)
suspected Russian state-sponsored intrusion set
|
|
CVE-2026-48172
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
APT41
|
|
CVE-2024-40766
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
|
|
CVE-2024-21626
|
HIGH
|
8.6
|
|
KEV
PoC
|
LAPSUS$
RansomHouse
|
|
CVE-2023-32409
|
HIGH
|
8.6
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2020-27950
|
MEDIUM
|
5.5
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2023-6345
|
CRITICAL
|
9.6
|
|
KEV
Weaponized
|
UNC3886
UNC5221
|
|
CVE-2026-58644
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Active Exploiters
|
|
CVE-2026-21513
|
HIGH
|
8.8
|
|
KEV
PoC
|
APT28
|
|
CVE-2026-22769
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
BRICKSTORM
UNC5221
UNC6201
Warp Panda
|
|
CVE-2026-46817
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
CLOP
LAPSUS$
|
|
CVE-2025-6554
|
HIGH
|
8.1
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-34926
|
MEDIUM
|
6.7
|
|
KEV
PoC
|
MuddyWater
|
|
CVE-2024-21410
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Laundry Bear
|
|
CVE-2023-36424
|
HIGH
|
7.8
|
|
KEV
PoC
|
APT41
|
|
CVE-2026-9586
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Unknown Threat Actors
|
|
CVE-2026-15410
|
HIGH
|
7.2
|
|
KEV
Weaponized
|
INC Ransomware
UTA0533
Unknown Adversary
|
|
CVE-2021-37973
|
CRITICAL
|
9.6
|
|
KEV
PoC
|
Intellexa
UNC3886
UNC5221
|