| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2026-109618
PHP Memory Corruption Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2026-109619
PHP Stale Internal Request-State Vulnerability |
PHP Group · PHP | Oct 26, 2026 | Oct 29, 2026 | 100.0% | 4 last Nov 12 |
| CVE-2025-53770 Ransomware
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint | Jul 20, 2025 | Jul 21, 2025 | 100.0% | — |
| CVE-2021-26086
Atlassian Jira Server and Data Center Path Traversal Vulnerability |
Atlassian · Jira Server and Data Center | Nov 12, 2024 | Dec 3, 2024 | 100.0% | — |
| CVE-2024-7593
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability |
Ivanti · Virtual Traffic Manager | Sep 24, 2024 | Oct 15, 2024 | 100.0% | — |
| CVE-2024-23897 Ransomware
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability |
Jenkins · Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Sep 9, 2024 | 100.0% | — |
| CVE-2024-3400 Ransomware
Palo Alto Networks PAN-OS Command Injection Vulnerability |
Palo Alto Networks · PAN-OS | Apr 12, 2024 | Apr 19, 2024 | 100.0% | — |
| CVE-2024-21893 Ransomware
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (… |
Ivanti · Connect Secure, Policy Secure, and Neurons | Jan 31, 2024 | Feb 2, 2024 | 100.0% | — |
| CVE-2023-35082 Ransomware
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass… |
Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core | Jan 18, 2024 | Feb 8, 2024 | 100.0% | — |
| CVE-2024-21887 Ransomware
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2023-1671
Sophos Web Appliance Command Injection Vulnerability |
Sophos · Web Appliance | Nov 16, 2023 | Dec 7, 2023 | 100.0% | — |
| CVE-2023-22518 Ransomware
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability |
Atlassian · Confluence Data Center and Server | Nov 7, 2023 | Nov 28, 2023 | 100.0% | — |
| CVE-2023-4966 Ransomware
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Oct 18, 2023 | Nov 8, 2023 | 100.0% | — |
| CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability |
IETF · HTTP/2 | Oct 10, 2023 | Oct 31, 2023 | 100.0% | — |
| CVE-2023-32315
Ignite Realtime Openfire Path Traversal Vulnerability |
Ignite Realtime · Openfire | Aug 24, 2023 | Sep 14, 2023 | 100.0% | — |
| CVE-2023-35078 Ransomware
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Jul 25, 2023 | Aug 15, 2023 | 100.0% | — |
| CVE-2023-1389
TP-Link Archer AX-21 Command Injection Vulnerability |
TP-Link · Archer AX21 | May 1, 2023 | May 22, 2023 | 100.0% | — |
| CVE-2023-27350 Ransomware
PaperCut MF/NG Improper Access Control Vulnerability |
PaperCut · MF/NG | Apr 21, 2023 | May 12, 2023 | 100.0% | — |
| CVE-2023-0669 Ransomware
Fortra GoAnywhere MFT Remote Code Execution Vulnerability |
Fortra · GoAnywhere MFT | Feb 10, 2023 | Mar 3, 2023 | 100.0% | — |
| CVE-2022-26134 Ransomware
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability |
Atlassian · Confluence Server/Data Center | Jun 2, 2022 | Jun 6, 2022 | 100.0% | — |
| CVE-2014-0160
OpenSSL Information Disclosure Vulnerability |
OpenSSL · OpenSSL | May 4, 2022 | May 25, 2022 | 100.0% | — |
| CVE-2022-29464 Ransomware
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability |
WSO2 · Multiple Products | Apr 25, 2022 | May 16, 2022 | 100.0% | — |
| CVE-2017-9841
PHPUnit Command Injection Vulnerability |
PHPUnit · PHPUnit | Feb 15, 2022 | Aug 15, 2022 | 100.0% | — |
| CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability |
Microsoft · HTTP.sys | Feb 10, 2022 | Aug 10, 2022 | 100.0% | — |
| CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability |
GNU · Bourne-Again Shell (Bash) | Jan 28, 2022 | Jul 28, 2022 | 100.0% | — |
| CVE-2021-44228 Ransomware
Apache Log4j2 Remote Code Execution Vulnerability |
Apache · Log4j2 | Dec 10, 2021 | Dec 24, 2021 | 100.0% | — |
| CVE-2021-40438 Ransomware
Apache HTTP Server-Side Request Forgery (SSRF) |
Apache · Apache | Dec 1, 2021 | Dec 15, 2021 | 100.0% | — |
| CVE-2017-5638 Ransomware
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-26084 Ransomware
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (O… |
Atlassian · Confluence Server and Data Center | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-1498
Cisco HyperFlex HX Data Platform Command Injection Vulnerability |
Cisco · HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2019-19781 Ransomware
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability |
Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2020-5902 Ransomware
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulner… |
F5 · BIG-IP | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-35464 Ransomware
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability |
ForgeRock · Access Management (AM) | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2018-13379 Ransomware
Fortinet FortiOS SSL VPN Path Traversal Vulnerability |
Fortinet · FortiOS | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2019-0708 Ransomware
Microsoft Remote Desktop Services Remote Code Execution Vulnerability |
Microsoft · Remote Desktop Services | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-34473 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2019-11510 Ransomware
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-22005 Ransomware
VMware vCenter Server File Upload Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-21985 Ransomware
VMware vCenter Server Improper Input Validation Vulnerability |
VMware · vCenter Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2017-7921
Hikvision Multiple Products Improper Authentication Vulnerability |
Hikvision · Multiple Products | Mar 5, 2026 | Mar 26, 2026 | 100.0% | — |
| CVE-2022-22954 Ransomware
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection… |
VMware · Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | 100.0% | — |
| CVE-2013-2251
Apache Struts Improper Input Validation Vulnerability |
Apache · Struts | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability |
PHP · PHP | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2020-14882
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2025-49704 Ransomware
Microsoft SharePoint Code Injection Vulnerability |
Microsoft · SharePoint | Jul 22, 2025 | Jul 23, 2025 | 100.0% | — |
| CVE-2019-16920
D-Link Multiple Routers Command Injection Vulnerability |
D-Link · Multiple Routers | Mar 25, 2022 | Apr 15, 2022 | 100.0% | — |
| CVE-2018-11776
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-26855 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2024-3273
D-Link Multiple NAS Devices Command Injection Vulnerability |
D-Link · Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | 100.0% | — |
| CVE-2022-44877
CWP Control Web Panel OS Command Injection Vulnerability |
CWP · Control Web Panel | Jan 17, 2023 | Feb 7, 2023 | 100.0% | — |
1 / 10
Next →
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.