| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-7028
GitLab Community and Enterprise Editions Improper Access Control Vulnerability |
GitLab · GitLab CE/EE | May 1, 2024 | May 22, 2024 | 94.5% | — |
| CVE-2024-48248
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability |
NAKIVO · Backup and Replication | Mar 19, 2025 | Apr 9, 2025 | 94.4% | — |
| CVE-2024-55591 Ransomware
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
Fortinet · FortiOS and FortiProxy | Jan 14, 2025 | Jan 21, 2025 | 94.3% | — |
| CVE-2025-8088 Ransomware
RARLAB WinRAR Path Traversal Vulnerability |
RARLAB · WinRAR | Aug 12, 2025 | Sep 2, 2025 | 94.3% | 2 last Oct 19 |
| CVE-2016-4117 Ransomware
Adobe Flash Player Arbitrary Code Execution Vulnerability |
Adobe · Flash Player | Mar 3, 2022 | Mar 24, 2022 | 94.3% | — |
| CVE-2017-1000486
Primetek Primefaces Remote Code Execution Vulnerability |
Primetek · Primefaces Application | Jan 10, 2022 | Jul 10, 2022 | 94.1% | — |
| CVE-2016-0189 Ransomware
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | 94.1% | — |
| CVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability |
Fortinet · FortiClient EMS | Apr 6, 2026 | Apr 9, 2026 | 94.0% | — |
| CVE-2025-11953
React Native Community CLI OS Command Injection Vulnerability |
React Native Community · CLI | Feb 5, 2026 | Feb 26, 2026 | 94.0% | — |
| CVE-2024-55956 Ransomware
Cleo Multiple Products Unauthenticated File Upload Vulnerability |
Cleo · Multiple Products | Dec 17, 2024 | Jan 7, 2025 | 94.0% | — |
| CVE-2022-27924 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 4, 2022 | Aug 25, 2022 | 93.9% | — |
| CVE-2025-47812
Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerabi… |
Wing FTP Server · Wing FTP Server | Jul 14, 2025 | Aug 4, 2025 | 93.9% | — |
| CVE-2026-1731 Ransomware
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command I… |
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) | Feb 13, 2026 | Feb 16, 2026 | 93.9% | — |
| CVE-2025-24016
Wazuh Server Deserialization of Untrusted Data Vulnerability |
Wazuh · Wazuh Server | Jun 10, 2025 | Jul 1, 2025 | 93.8% | — |
| CVE-2024-9474 Ransomware
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerabili… |
Palo Alto Networks · PAN-OS | Nov 18, 2024 | Dec 9, 2024 | 93.8% | — |
| CVE-2013-0625
Adobe ColdFusion Authentication Bypass Vulnerability |
Adobe · ColdFusion | Mar 7, 2022 | Sep 7, 2022 | 93.8% | — |
| CVE-2021-26858 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 93.7% | — |
| CVE-2020-7796
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerabil… |
Synacor · Zimbra Collaboration Suite | Feb 17, 2026 | Mar 10, 2026 | 93.6% | — |
| CVE-2012-1723 Ransomware
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
Oracle · Java SE | Mar 3, 2022 | Mar 24, 2022 | 93.6% | — |
| CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability |
Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Dec 1, 2021 | Dec 15, 2021 | 93.5% | — |
| CVE-2025-54309
CrushFTP Unprotected Alternate Channel Vulnerability |
CrushFTP · CrushFTP | Jul 22, 2025 | Aug 12, 2025 | 93.5% | — |
| CVE-2023-36846
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulner… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 93.5% | — |
| CVE-2025-4008
Smartbedded Meteobridge Command Injection Vulnerability |
Smartbedded · Meteobridge | Oct 2, 2025 | Oct 23, 2025 | 93.4% | — |
| CVE-2017-0143 Ransomware
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerabil… |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 93.3% | — |
| CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability |
SolarWinds · Web Help Desk | Oct 15, 2024 | Nov 5, 2024 | 93.3% | — |
| CVE-2018-0802 Ransomware
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 93.3% | — |
| CVE-2022-33891
Apache Spark Command Injection Vulnerability |
Apache · Spark | Mar 7, 2023 | Mar 28, 2023 | 93.2% | — |
| CVE-2020-5849
Unraid Authentication Bypass Vulnerability |
Unraid · Unraid | Nov 3, 2021 | May 3, 2022 | 93.2% | — |
| CVE-2025-34291
Langflow Origin Validation Error Vulnerability |
Langflow · Langflow | May 21, 2026 | Jun 4, 2026 | 93.2% | — |
| CVE-2026-39808
Fortinet FortiSandbox OS Command Injection Vulnerability |
Fortinet · FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | 93.2% | — |
| CVE-2013-0632
Adobe ColdFusion Authentication Bypass Vulnerability |
Adobe · ColdFusion | Mar 3, 2022 | Mar 24, 2022 | 93.1% | — |
| CVE-2016-4437
Apache Shiro Code Execution Vulnerability |
Apache · Shiro | Nov 3, 2021 | May 3, 2022 | 93.0% | — |
| CVE-2021-40870
Aviatrix Controller Unrestricted Upload of File |
Aviatrix · Aviatrix Controller | Jan 18, 2022 | Feb 1, 2022 | 93.0% | — |
| CVE-2023-20273
Cisco IOS XE Web UI Command Injection Vulnerability |
Cisco · Cisco IOS XE Web UI | Oct 23, 2023 | Oct 27, 2023 | 92.9% | — |
| CVE-2024-6670 Ransomware
Progress WhatsUp Gold SQL Injection Vulnerability |
Progress · WhatsUp Gold | Sep 16, 2024 | Oct 7, 2024 | 92.9% | — |
| CVE-2018-10561
Dasan GPON Routers Authentication Bypass Vulnerability |
Dasan · Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | 92.8% | — |
| CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 16, 2023 | Dec 7, 2023 | 92.8% | — |
| CVE-2022-0847
Linux Kernel Privilege Escalation Vulnerability |
Linux · Kernel | Apr 25, 2022 | May 16, 2022 | 92.8% | — |
| CVE-2022-24706
Apache CouchDB Insecure Default Initialization of Resource Vulnerability |
Apache · CouchDB | Aug 25, 2022 | Sep 15, 2022 | 92.5% | — |
| CVE-2023-38950
ZKTeco BioTime Path Traversal Vulnerability |
ZKTeco · BioTime | May 19, 2025 | Jun 9, 2025 | 92.5% | — |
| CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability |
Oracle · Java SE and JRockit | May 12, 2023 | Jun 2, 2023 | 92.3% | — |
| CVE-2022-43939
Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability |
Hitachi Vantara · Pentaho Business Analytics (BA) Server | Mar 3, 2025 | Mar 24, 2025 | 92.3% | — |
| CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability |
WatchGuard · Firebox | Nov 12, 2025 | Dec 3, 2025 | 92.2% | — |
| CVE-2017-5689
Intel Active Management Technology (AMT), Small Business Technology (SBT), and … |
Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Jan 28, 2022 | Jul 28, 2022 | 92.2% | — |
| CVE-2019-2616
Oracle BI Publisher Unauthorized Access Vulnerability |
Oracle · BI Publisher (Formerly XML Publisher) | Mar 25, 2022 | Apr 15, 2022 | 92.2% | — |
| CVE-2025-11371
Gladinet CentreStack and Triofox Files or Directories Accessible to External Pa… |
Gladinet · CentreStack and Triofox | Nov 4, 2025 | Nov 25, 2025 | 92.1% | — |
| CVE-2022-37042 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Sep 1, 2022 | 92.1% | — |
| CVE-2019-6340
Drupal Core Remote Code Execution Vulnerability |
Drupal · Core | Mar 25, 2022 | Apr 15, 2022 | 92.0% | — |
| CVE-2020-10148
SolarWinds Orion Authentication Bypass Vulnerability |
SolarWinds · Orion | Nov 3, 2021 | May 3, 2022 | 92.0% | — |
| CVE-2024-7399
Samsung MagicINFO 9 Server Path Traversal Vulnerability |
Samsung · MagicINFO 9 Server | Apr 24, 2026 | May 8, 2026 | 91.9% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.