|
CVE-2026-50656
|
HIGH
|
7.8
|
|
|
Chaotic Eclipse
Nightmare Eclipse
|
|
CVE-2026-40372
|
CRITICAL
|
9.1
|
|
|
APT29
Unknown / Unattributed
|
|
CVE-2026-20316
|
MEDIUM
|
5.3
|
|
KEV
Weaponized
|
Unknown APT/CRIM group
|
|
CVE-2019-8937
|
MEDIUM
|
6.1
|
|
|
QTFY
|
|
CVE-2024-23222
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2020-27932
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2026-65400
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Babuk
Cryptomining Criminals
Cryptomining Operator
|
|
CVE-2017-15361
|
MEDIUM
|
5.9
|
|
|
QTFY
|
|
CVE-2025-6558
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-46300
|
HIGH
|
7.8
|
|
KEV
PoC
|
berz0k
|
|
CVE-2025-2783
|
HIGH
|
8.3
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2025-43529
|
HIGH
|
8.8
|
|
KEV
PoC
|
DarkSword
UNC6353
UNC6748
|
|
CVE-2022-42856
|
HIGH
|
8.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-83549
|
HIGH
|
7.8
|
|
KEV
PoC
|
Qilin ransomware
UTA0533
|
|
CVE-2026-59309
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Babuk-Derived Actor
|
|
CVE-2025-5419
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-82329
|
CRITICAL
|
9.8
|
|
KEV
Weaponized
|
Anonymous Threat Actors
Unattributed Adversaries
Unknown (Commercial/Cybercriminal)
Unknown/Nation-agnostic
|
|
CVE-2025-24472
|
HIGH
|
8.1
|
|
KEV
Weaponized
Ransomware
|
Lazarus Group
|
|
CVE-2026-34621
|
HIGH
|
8.6
|
|
KEV
PoC
|
APT28
APT41
Unknown / Attribution Pending
Unknown/Unattributed
|
|
CVE-2024-57728
|
HIGH
|
7.2
|
|
KEV
Weaponized
|
Mirai
|
|
CVE-2021-30952
|
HIGH
|
7.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2026-20128
|
HIGH
|
7.5
|
|
KEV
PoC
|
Salt Typhoon
UAT-8616
UAT-9686
|
|
CVE-2026-33825
|
HIGH
|
7.8
|
|
KEV
Weaponized
|
Lazarus Group
|
|
CVE-2026-3051
|
MEDIUM
|
6.3
|
|
|
LAPSUS$
SideCopy
|
|
CVE-2026-68820
|
HIGH
|
7.0
|
|
KEV
PoC
|
Lazarus
Lazarus Group
|
|
CVE-2026-3502
|
HIGH
|
7.8
|
|
KEV
PoC
|
Amaranth Dragon
Silver Dragon
Unknown (Chinese-Nexus APT / TrueChaos Operator)
|
|
CVE-2023-2136
|
CRITICAL
|
9.6
|
|
KEV
PoC
|
Intellexa
UNC3886
UNC5221
|
|
CVE-2019-6693
|
MEDIUM
|
6.5
|
|
KEV
Weaponized
|
Akira
Black Basta
BlackCat
LockBit
Qilin ransomware
RansomHub
|
|
CVE-2026-19490
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
LockBit
|
|
CVE-2021-38000
|
MEDIUM
|
6.1
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-83548
|
CRITICAL
|
10.0
|
|
KEV
PoC
|
Qilin ransomware
UTA0533
|
|
CVE-2025-60710
|
HIGH
|
7.8
|
|
KEV
Weaponized
|
APT41
|
|
CVE-2023-41991
|
MEDIUM
|
5.5
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2026-42533
|
HIGH
|
8.1
|
|
|
Unknown
|
|
CVE-2024-20399
|
MEDIUM
|
6.0
|
|
KEV
Weaponized
|
Volt Typhoon
|
|
CVE-2026-55200
|
HIGH
|
8.1
|
|
|
APT29
|
|
CVE-2024-39717
|
HIGH
|
7.2
|
|
KEV
Weaponized
|
Volt Typhoon
|
|
CVE-2025-2749
|
HIGH
|
7.2
|
|
KEV
PoC
|
Salt Typhoon
|
|
CVE-2023-43000
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2024-0519
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC3886
UNC5221
|
|
CVE-2026-82078
|
CRITICAL
|
9.1
|
|
KEV
PoC
|
Arctic Wolf Adversary Research Team
Unknown/Opportunistic
|
|
CVE-2026-81578
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Arctic Wolf Adversary Research Team
Unknown/Opportunistic
|
|
CVE-2022-48503
|
HIGH
|
8.8
|
|
KEV
PoC
|
UNC6353
UNC6691
|
|
CVE-2021-31886
|
CRITICAL
|
9.8
|
|
|
Vedere Labs
|
|
CVE-2023-41992
|
HIGH
|
7.8
|
|
KEV
PoC
|
Intellexa
|
|
CVE-2023-38606
|
MEDIUM
|
5.5
|
|
KEV
PoC
|
Operation Triangulation (original developers)
UNC6353
UNC6691
|
|
CVE-2026-63520
|
HIGH
|
8.1
|
|
KEV
PoC
|
Unattributed Adversarial Actors
|
|
CVE-2026-20896
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
APT29
|
|
CVE-2026-74233
|
CRITICAL
|
9.8
|
|
KEV
PoC
|
Fire Ant
|
|
CVE-2025-25249
|
HIGH
|
8.1
|
|
KEV
PoC
|
PivotC2 Operators
Unknown
|