| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2020-25078
D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability |
D-Link · DCS-2530L and DCS-2670L Devices | Aug 5, 2025 | Aug 26, 2025 | 97.5% | — |
| CVE-2016-3714
ImageMagick Improper Input Validation Vulnerability |
ImageMagick · ImageMagick | Sep 9, 2024 | Sep 30, 2024 | 97.5% | — |
| CVE-2024-56145
Craft CMS Code Injection Vulnerability |
Craft CMS · Craft CMS | Jun 2, 2025 | Jun 23, 2025 | 97.5% | — |
| CVE-2024-4358
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability |
Progress · Telerik Report Server | Jun 13, 2024 | Jul 4, 2024 | 97.5% | — |
| CVE-2019-9082
ThinkPHP Remote Code Execution Vulnerability |
ThinkPHP · ThinkPHP | Nov 3, 2021 | May 3, 2022 | 97.4% | — |
| CVE-2021-42237 Ransomware
Sitecore XP Remote Command Execution Vulnerability |
Sitecore · XP | Mar 25, 2022 | Apr 15, 2022 | 97.4% | — |
| CVE-2007-3010
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability |
Alcatel · OmniPCX Enterprise | Apr 15, 2022 | May 6, 2022 | 97.4% | — |
| CVE-2026-85706
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability |
GitLab · Community Edition and Enterprise Edition | Sep 11, 2026 | Sep 14, 2026 | 97.4% | — |
| CVE-2023-24489
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability |
Citrix · Content Collaboration | Aug 16, 2023 | Sep 6, 2023 | 97.3% | — |
| CVE-2023-26360
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Mar 15, 2023 | Apr 5, 2023 | 97.3% | — |
| CVE-2020-25213
WordPress File Manager Plugin Remote Code Execution Vulnerability |
WordPress · File Manager Plugin | Nov 3, 2021 | May 3, 2022 | 97.3% | — |
| CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 97.2% | — |
| CVE-2020-14864
Oracle Business Intelligence Enterprise Edition Path Transversal |
Oracle · Intelligence Enterprise Edition | Jan 18, 2022 | Jul 18, 2022 | 97.2% | — |
| CVE-2024-41713 Ransomware
Mitel MiCollab Path Traversal Vulnerability |
Mitel · MiCollab | Jan 7, 2025 | Jan 28, 2025 | 97.2% | — |
| CVE-2021-41277
Metabase GeoJSON API Local File Inclusion Vulnerability |
Metabase · Metabase | Nov 12, 2024 | Dec 3, 2024 | 97.2% | — |
| CVE-2025-2747
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel … |
Kentico · Xperience CMS | Oct 20, 2025 | Nov 10, 2025 | 97.2% | — |
| CVE-2023-23397
Microsoft Office Outlook Privilege Escalation Vulnerability |
Microsoft · Office | Mar 14, 2023 | Apr 4, 2023 | 97.2% | — |
| CVE-2025-5086
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability |
Dassault Systèmes · DELMIA Apriso | Sep 11, 2025 | Oct 2, 2025 | 97.2% | — |
| CVE-2017-17562
Embedthis GoAhead Remote Code Execution Vulnerability |
Embedthis · GoAhead | Dec 10, 2021 | Jun 10, 2022 | 97.1% | — |
| CVE-2020-2555
Oracle Multiple Products Remote Code Execution Vulnerability |
Oracle · Multiple Products | Nov 3, 2021 | May 3, 2022 | 97.1% | — |
| CVE-2023-52163
Digiever DS-2105 Pro Missing Authorization Vulnerability |
Digiever · DS-2105 Pro | Dec 22, 2025 | Jan 12, 2026 | 97.1% | — |
| CVE-2015-2051
D-Link DIR-645 Router Remote Code Execution Vulnerability |
D-Link · DIR-645 Router | Feb 10, 2022 | Aug 10, 2022 | 97.1% | — |
| CVE-2024-20439
Cisco Smart Licensing Utility Static Credential Vulnerability |
Cisco · Smart Licensing Utility | Mar 31, 2025 | Apr 21, 2025 | 97.1% | — |
| CVE-2019-7256
Nice Linear eMerge E3-Series OS Command Injection Vulnerability |
Nice · Linear eMerge E3-Series | Mar 25, 2024 | Apr 15, 2024 | 97.1% | — |
| CVE-2013-0422 Ransomware
Oracle JRE Remote Code Execution Vulnerability |
Oracle · Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | 97.1% | — |
| CVE-2023-38203 Ransomware
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Jan 8, 2024 | Jan 29, 2024 | 97.1% | — |
| CVE-2019-1003030
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability |
Jenkins · Matrix Project Plugin | Mar 25, 2022 | Apr 15, 2022 | 97.1% | — |
| CVE-2019-3398
Atlassian Confluence Server and Data Center Path Traversal Vulnerability |
Atlassian · Confluence Server and Data Center | Nov 3, 2021 | May 3, 2022 | 97.0% | — |
| CVE-2017-8291
Artifex Ghostscript Type Confusion Vulnerability |
Artifex · Ghostscript | May 24, 2022 | Jun 14, 2022 | 97.0% | — |
| CVE-2018-1273 Ransomware
VMware Tanzu Spring Data Commons Property Binder Vulnerability |
VMware Tanzu · Spring Data Commons | Mar 25, 2022 | Apr 15, 2022 | 97.0% | — |
| CVE-2026-20253
Splunk Enterprise Missing Authentication for Critical Function Vulnerability |
Splunk · Enterprise | Jun 18, 2026 | Jun 21, 2026 | 96.9% | — |
| CVE-2016-3081
Apache Struts Command Injection Vulnerability |
Apache · Struts | Oct 8, 2026 | Oct 11, 2026 | 96.9% | — |
| CVE-2024-57727 Ransomware
SimpleHelp Path Traversal Vulnerability |
SimpleHelp · SimpleHelp | Feb 13, 2025 | Mar 6, 2025 | 96.8% | — |
| CVE-2010-3962
Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Oct 6, 2025 | Oct 27, 2025 | 96.8% | — |
| CVE-2020-25223
Sophos SG UTM Remote Code Execution Vulnerability |
Sophos · SG UTM | Mar 25, 2022 | Apr 15, 2022 | 96.8% | — |
| CVE-2021-22502
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability |
Micro Focus · Operation Bridge Reporter (OBR) | Nov 3, 2021 | Nov 17, 2021 | 96.7% | — |
| CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 96.7% | — |
| CVE-2023-46747 Ransomware
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability |
F5 · BIG-IP Configuration Utility | Oct 31, 2023 | Nov 21, 2023 | 96.7% | — |
| CVE-2019-20500
D-Link DWL-2600AP Access Point Command Injection Vulnerability |
D-Link · DWL-2600AP Access Point | Jun 29, 2023 | Jul 20, 2023 | 96.7% | — |
| CVE-2018-6530 Ransomware
D-Link Multiple Routers OS Command Injection Vulnerability |
D-Link · Multiple Routers | Sep 8, 2022 | Sep 29, 2022 | 96.7% | — |
| CVE-2026-35273 Ransomware
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Fu… |
Oracle · PeopleSoft Enterprise PeopleTools | Jun 12, 2026 | Jun 15, 2026 | 96.7% | 1 last Sep 28 |
| CVE-2011-3544
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
Oracle · Java SE JDK and JRE | Mar 3, 2022 | Mar 24, 2022 | 96.7% | — |
| CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability |
Adobe · Reader and Acrobat | Mar 25, 2022 | Apr 15, 2022 | 96.6% | — |
| CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability |
SaltStack · Salt | Nov 3, 2021 | May 3, 2022 | 96.6% | — |
| CVE-2023-33246
Apache RocketMQ Command Execution Vulnerability |
Apache · RocketMQ | Sep 6, 2023 | Sep 27, 2023 | 96.6% | — |
| CVE-2009-1151
phpMyAdmin Remote Code Execution Vulnerability |
phpMyAdmin · phpMyAdmin | Mar 25, 2022 | Apr 15, 2022 | 96.6% | — |
| CVE-2020-8260
Ivanti Pulse Connect Secure Code Execution Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 96.5% | — |
| CVE-2026-23760 Ransomware
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Chann… |
SmarterTools · SmarterMail | Jan 26, 2026 | Feb 16, 2026 | 96.4% | — |
| CVE-2026-33017
Langflow Code Injection Vulnerability |
Langflow · Langflow | Mar 25, 2026 | Apr 8, 2026 | 96.4% | — |
| CVE-2010-0840
Oracle JRE Unspecified Vulnerability |
Oracle · Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | 96.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.