악용이 확인된 취약점
미국 CISA 가 실제 악용 정황을 확인해 등재한 목록입니다. CVSS 점수가 높다고 악용되는 것이 아니고, 낮다고 안전한 것도 아닙니다 — 이 목록에 있다는 것은 이미 쓰이고 있다는 뜻입니다.
최근 악용이 확인된 취약점
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability미평가● 실제 악용이 확인됨CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability0.5%높음7.0● 실제 악용이 확인됨CVE-2026-97229GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability27.3%심각10.0● 실제 악용이 확인됨CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL…0.8%높음8.6● 실제 악용이 확인됨CVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability16.1%높음7.8● 실제 악용이 확인됨CVE-2026-41709Broadcom VMWare ESX Insufficient Logging Vulnerability0.7%낮음2.7● 실제 악용이 확인됨CVE-2026-48356Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability44.6%심각9.3● 실제 악용이 확인됨CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability82.6%심각9.2
전체 목록
등재일 최신순 · 최대 200건
| CVE | 등재일 | 공급사 · 제품 | 취약점 이름 | 악용 확률 | 심각도 | 한국어 권고 |
|---|---|---|---|---|---|---|
| CVE-2026-109619 | 2026-10-26 | PHP Group | PHP Stale Internal Request-State Vulnerability | 100.0% | 심각9.2 | 5건 |
| CVE-2026-109618 | 2026-10-26 | PHP Group | PHP Memory Corruption Vulnerability | 100.0% | 심각9.2 | 4건 |
| CVE-2026-114625 | 2026-10-23 | Arista | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 1.0% | 심각9.4 | |
| CVE-2026-110447 | 2026-10-23 | Collabora | Collabora Online – Built-in CODE Server OS Command Injection Vulnerabi… | 73.3% | 심각9.2 | |
| CVE-2026-96656 | 2026-10-20 | Plex | Plex Media Server External Control of File Name or Path Vulnerability | 1.8% | 높음8.6 | 1건 |
| CVE-2026-96655 | 2026-10-20 | Plex | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 1.6% | 보통5.3 | 1건 |
| CVE-2026-96654 | 2026-10-20 | Plex | Plex Media Server Improper Neutralization of Encoded URI Schemes in a … | 1.9% | 보통6.9 | 1건 |
| CVE-2026-96652 | 2026-10-20 | Plex | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 1.8% | 보통5.3 | 1건 |
| CVE-2026-110936 | 2026-10-20 | Siemens | Siemens Software Center Uncontrolled Search Path Element Vulnerability | 1.0% | 높음8.4 | |
| CVE-2026-106931 | 2026-10-20 | EG Secure Solutions | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vuln… | 2.5% | 높음8.5 | |
| CVE-2026-102764 | 2026-10-16 | BeyondTrust | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerabi… | 18.9% | 심각9.3 | |
| CVE-2025-61624 | 2026-10-16 | Fortinet | Fortinet Multiple Products Path Traversal Vulnerability | 1.3% | 보통6.5 | |
| CVE-2026-21589 | 2026-10-15 | Atlassian | Atlassian Multiple Products Files or Directories Accessible to Externa… | 99.5% | 심각9.3 | 1건 |
| CVE-2026-76519 | 2026-10-14 | Cisco | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2.2% | 심각9.8 | 1건 |
| CVE-2026-105134 | 2026-10-14 | Ahsay | Ahsay AhsayCBS Command Injection Vulnerability | 81.8% | 심각9.3 | 1건 |
| CVE-2026-105133 | 2026-10-14 | Ahsay | Ahsay AhsayCBS Improper Authentication Vulnerability | 79.5% | 보통5.5 | 1건 |
| CVE-2026-0322 | 2026-10-14 | Palo Alto Networks | Palo Alto Networks PAN-OS Code Injection Vulnerability | 1.7% | 높음8.6 | 1건 |
| CVE-2026-96951 | 2026-10-13 | Microsoft | Microsoft Windows Command Injection Vulnerability | 9.8% | 높음8.8 | 1건 |
| CVE-2026-104935 | 2026-10-13 | Ivanti | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 86.8% | 높음8.6 | 2건 |
| CVE-2023-22894 | 2026-10-08 | Strapi | Strapi Cleartext Storage of Sensitive Information Vulnerability | 4.1% | 보통4.9 | |
| CVE-2021-3199 | 2026-10-08 | ONLYOFFICE | ONLYOFFICE Docs Server Path Traversal Vulnerability | 30.2% | 심각9.8 | |
| CVE-2016-3081 | 2026-10-08 | Apache | Apache Struts Command Injection Vulnerability | 96.5% | 높음8.1 | |
| CVE-2015-5477 | 2026-10-08 | ISC | ISC BIND Data Processing Errors Vulnerability | 99.6% | 높음7.5 | |
| CVE-2015-3306 | 2026-10-08 | ProFTPD | ProFTPD Improper Access Control Vulnerability | 99.5% | 심각10.0 | |
| CVE-2026-88779 | 2026-10-04 | Citrix | Citrix NetScaler Improper Restriction of Operations within the Bounds … | 11.4% | 높음8.7 | 1건 |
| CVE-2026-102490 | 2026-10-02 | Zammad GmbH | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 10.9% | 심각9.4 | |
| CVE-2026-102489 | 2026-10-02 | Zammad GmbH | Zammad GmbH Zammad Session Fixation Vulnerability | 22.5% | 심각9.4 | |
| CVE-2026-104286 | 2026-10-01 | Fortinet | Fortinet FortiMail Path Traversal Vulnerability | 4.6% | 심각9.8 | |
| CVE-2026-76504 | 2026-09-30 | Cisco | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 38.9% | 심각9.8 | 1건 |
| CVE-2026-86950 | 2026-09-29 | Apple | Apple Multiple Products Out-of-Bounds Write Vulnerability | 26.2% | 높음8.8 | |
| CVE-2026-88772 | 2026-09-27 | Citrix | Citrix NetScaler Improper Restriction of Operations within the Bounds … | 78.2% | 심각9.5 | 1건 |
| CVE-2026-88771 | 2026-09-27 | Citrix | Citrix NetScaler Improper Input Validation Vulnerability | 82.2% | 심각9.5 | 1건 |
| CVE-2026-87902 | 2026-09-25 | WordPress | WordPress Core Remote File Inclusion Vulnerability | 95.8% | 높음8.1 | 1건 |
| CVE-2026-67279 | 2026-09-25 | MikroTik | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerab… | 2.3% | 보통6.9 | |
| CVE-2026-65660 | 2026-09-25 | Microsoft | Microsoft SharePoint Code Injection Vulnerability | 8.2% | 높음8.8 | |
| CVE-2026-71362 | 2026-09-24 | Adobe | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 90.5% | 심각9.1 | 1건 |
| CVE-2026-5430 | 2026-09-24 | WSO2 | WSO2 Multiple Products Path Traversal Vulnerability | 22.4% | 심각10.0 | |
| CVE-2026-94127 | 2026-09-22 | F5 | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 26.6% | 심각9.3 | |
| CVE-2026-93952 | 2026-09-22 | Arista | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 1.4% | 심각9.5 | |
| CVE-2026-93616 | 2026-09-22 | Check Point | Check Point Multiple Products Path Traversal Vulnerability | 91.6% | 심각9.8 | 1건 |
| CVE-2026-85102 | 2026-09-22 | Check Point | Check Point Multiple Products Improper Certificate Validation Vulnerab… | 54.1% | 심각9.8 | 1건 |
| CVE-2026-7273 | 2026-09-21 | Zyxel | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 2.8% | 높음8.8 | |
| CVE-2026-53266 | 2026-09-18 | Linux | Linux Kernel Out-of-Bounds Write Vulnerability | 0.9% | 높음8.8 | 1건 |
| CVE-2025-39964 | 2026-09-18 | Linux | Linux Kernel Race Condition Vulnerability | 1.6% | 보통5.5 | 1건 |
| CVE-2025-39682 | 2026-09-18 | Linux | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vuln… | 3.3% | 높음7.1 | 1건 |
| CVE-2026-87886 | 2026-09-16 | Acronis | Acronis Backup Incorrect Default Permissions Vulnerability | 0.2% | 높음7.8 | |
| CVE-2026-76460 | 2026-09-16 | Cisco | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulner… | 75.6% | 심각10.0 | 1건 |
| CVE-2026-58704 | 2026-09-16 | Google | Google Pixel Improper Authorization Vulnerability | 0.6% | 높음8.8 | |
| CVE-2026-76461 | 2026-09-14 | Cisco | Cisco Secure Email Gateway SQL Injection Vulnerability | 29.5% | 심각9.8 | 1건 |
| CVE-2026-85706 | 2026-09-11 | GitLab | GitLab Community Edition and Enterprise Edition Path Traversal Vulnera… | 97.4% | 심각10.0 | 1건 |
| CVE-2026-84869 | 2026-09-11 | ConnectWise | ConnectWise ScreenConnect Improper Privilege Management and Missing Au… | 0.9% | 심각9.9 | |
| CVE-2026-42018 | 2026-09-11 | JFrog | JFrog Artifactory Improper Authentication Vulnerability | 9.8% | 높음7.5 | |
| CVE-2026-42016 | 2026-09-11 | JFrog | JFrog Artifactory Incorrect Authorization Vulnerability | 8.6% | 높음8.8 | |
| CVE-2026-86060 | 2026-09-10 | MikroTik | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a … | 6.4% | 심각9.2 | |
| CVE-2026-67277 | 2026-09-10 | MikroTik | MikroTik RouterOS Missing Authentication for Critical Function Vulnera… | 1.6% | 높음8.8 | |
| CVE-2026-87491 | 2026-09-09 | Google | Google Chromium V8 Out of Bounds Write Vulnerability | 3.5% | 높음8.8 | |
| CVE-2026-20079 | 2026-09-09 | Cisco | Cisco Firewall Management Center Authentication Bypass Using an Altern… | 88.7% | 심각10.0 | |
| CVE-2026-19490 | 2026-09-09 | Citrix | Citrix NetScaler Authentication Bypass Using an Alternate Path or Chan… | 32.7% | 심각9.3 | |
| CVE-2025-25249 | 2026-09-09 | Fortinet | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 3.7% | 심각9.8 | 1건 |
| CVE-2026-86218 | 2026-09-08 | N-able | N-able N-central Static Code Injection Vulnerability | 15.4% | 심각10.0 | |
| CVE-2026-85880 | 2026-09-08 | Microsoft | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 0.4% | 높음7.8 | 1건 |
| CVE-2026-81963 | 2026-09-08 | Microsoft | Microsoft Windows Link Following Vulnerability | 0.4% | 높음7.8 | 1건 |
| CVE-2026-75650 | 2026-09-08 | Adobe | Adobe Commerce and Magento Improper Neutralization of Special Elements… | 3.9% | 심각10.0 | 1건 |
| CVE-2026-85046 | 2026-09-04 | Google | Google Chromium V8 Type Confusion Vulnerability | 1.8% | 높음8.8 | |
| CVE-2026-9586 | 2026-09-02 | Sangoma | Sangoma Switchvox SQL Injection Vulnerability | 19.0% | 심각9.3 | |
| CVE-2026-83549 | 2026-09-02 | SonicWall | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 9.9% | 높음7.8 | |
| CVE-2026-83548 | 2026-09-02 | SonicWall | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 8.0% | 심각10.0 | |
| CVE-2026-82329 | 2026-09-02 | JFrog | JFrog Artifactory Improper Authentication Vulnerability | 14.4% | 심각9.8 | 1건 |
| CVE-2026-59822 | 2026-09-02 | BerriAI | BerriAI LiteLLM Improper Authentication Vulnerability | 0.8% | 높음8.8 | |
| CVE-2026-49869 | 2026-09-02 | Kestra | Kestra OSS OS Command Injection Vulnerability | 2.1% | 심각10.0 | |
| CVE-2026-48710 | 2026-09-02 | Kludex | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 70.3% | 보통6.5 | |
| CVE-2026-82078 | 2026-08-31 | PaperCut | PaperCut NG/MF Unsafe Reflection Vulnerability | 63.0% | 심각9.4 | |
| CVE-2026-81578 | 2026-08-31 | PaperCut | PaperCut NG/MF Missing Authentication for Critical Function Vulnerabil… | 84.7% | 높음8.8 | |
| CVE-2026-66384 | 2026-08-27 | JFrog | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Di… | 0.7% | 보통5.3 | |
| CVE-2026-53362 | 2026-08-27 | Linux | Linux Kernel Unspecified Vulnerability | 0.7% | 높음7.8 | 1건 |
| CVE-2023-49105 | 2026-08-27 | ownCloud | ownCloud Improper Authentication Vulnerability | 43.2% | 심각9.8 | |
| CVE-2026-8452 | 2026-08-26 | Citrix | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Ope… | 1.0% | 높음8.8 | 1건 |
| CVE-2022-0995 | 2026-08-26 | Linux | Linux Kernel Out-of-Bounds Write Vulnerability | 8.9% | 높음7.8 | |
| CVE-2021-23758 | 2026-08-26 | Ajax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 82.6% | 심각9.8 | |
| CVE-2019-1068 | 2026-08-26 | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability | 57.3% | 높음8.8 | |
| CVE-2015-5287 | 2026-08-26 | Red Hat | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerabilit… | 5.0% | 높음7.8 | |
| CVE-2015-3246 | 2026-08-26 | Red Hat | Red Hat Libuser Race Condition Vulnerability | 8.5% | 보통5.1 | |
| CVE-2026-60004 | 2026-08-25 | Gitea | Gitea Code Injection Vulnerability | 24.0% | 심각9.8 | 2건 |
| CVE-2026-21962 | 2026-08-24 | Oracle | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper A… | 73.2% | 심각10.0 | |
| CVE-2026-73570 | 2026-08-21 | Synacor | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 71.7% | 높음8.9 | |
| CVE-2026-72530 | 2026-08-20 | TrueConf | TrueConf Server Code Injection Vulnerability | 1.7% | 심각9.5 | |
| CVE-2026-72529 | 2026-08-20 | TrueConf | TrueConf Server Missing Authentication for Critical Function Vulnerabi… | 1.5% | 심각9.3 | |
| CVE-2026-64849 | 2026-08-19 | MLflow | MLflow Server-Side Request Forgery Vulnerability | 10.0% | 심각9.3 | |
| CVE-2026-65400 | 2026-08-18 | Apple | Apple macOS Improper Authentication Vulnerability | 1.7% | 심각9.8 | |
| CVE-2026-59310 랜섬웨어 악용 | 2026-08-18 | Broadcom | Broadcom VMware vCenter Path Traversal Vulnerability | 2.6% | 심각9.8 | |
| CVE-2026-55040 | 2026-08-18 | Microsoft | Microsoft SharePoint Weak Authentication Vulnerability | 69.5% | 심각9.1 | |
| CVE-2026-33824 | 2026-08-18 | Microsoft | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free V… | 77.1% | 심각9.8 | |
| CVE-2025-62593 | 2026-08-17 | Ray-Project | Ray-Project Ray Code Injection Vulnerability | 60.2% | 심각9.4 | |
| CVE-2026-72898 | 2026-08-11 | Metabase | Metabase SQL Injection Vulnerability | 98.8% | 심각10.0 | 1건 |
| CVE-2026-68820 | 2026-08-11 | Microsoft | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free… | 8.6% | 높음7.0 | |
| CVE-2026-20349 | 2026-08-11 | Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Fir… | 1.0% | 높음8.6 | |
| CVE-2026-8037 | 2026-08-07 | Progress | Progress LoadMaster Command Injection Vulnerability | 99.8% | 심각9.8 | |
| CVE-2026-63077 랜섬웨어 악용 | 2026-08-05 | JetBrains | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 93.6% | 심각9.8 | |
| CVE-2026-9198 | 2026-08-04 | IBM | IBM Langflow Code Injection Vulnerability | 28.7% | 심각9.8 | |
| CVE-2026-34486 | 2026-08-04 | Apache | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 98.5% | 높음7.5 | |
| CVE-2026-18556 | 2026-08-04 | N-able | N-able N-central Authentication Bypass Using an Alternate Path or Chan… | 7.9% | 높음8.2 | |
| CVE-2026-18577 | 2026-08-03 | N-able | N-able N-central Authentication Bypass Using an Alternate Path or Chan… | 14.6% | 높음8.2 | |
| CVE-2026-20316 랜섬웨어 악용 | 2026-07-29 | Cisco | Cisco Secure Firewall Management Center Use of Hard-coded Password Vul… | 35.1% | 보통5.3 | |
| CVE-2026-16812 | 2026-07-27 | Arista | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabili… | 1.8% | 심각10.0 | |
| CVE-2025-68686 | 2026-07-27 | Fortinet | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized … | 29.5% | 보통5.9 | |
| CVE-2026-50522 | 2026-07-22 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 3.0% | 심각9.8 | |
| CVE-2026-16232 | 2026-07-22 | Check Point | Check Point SmartConsole Improper Authentication Vulnerability | 3.5% | 심각9.3 | 1건 |
| CVE-2026-63030 | 2026-07-21 | WordPress | WordPress Core Interpretation Conflict Vulnerability | 10.6% | 심각9.8 | |
| CVE-2026-60137 | 2026-07-21 | WordPress | WordPress Core SQL Injection Vulnerability | 5.3% | 보통5.9 | 1건 |
| CVE-2026-0770 | 2026-07-21 | Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vuln… | 62.6% | 심각9.8 | |
| CVE-2021-27137 | 2026-07-21 | DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | 4.0% | 높음8.1 | |
| CVE-2026-58644 | 2026-07-16 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 15.9% | 심각9.8 | |
| CVE-2026-39808 | 2026-07-16 | Fortinet | Fortinet FortiSandbox OS Command Injection Vulnerability | 93.2% | 심각9.8 | |
| CVE-2026-25089 | 2026-07-16 | Fortinet | Fortinet FortiSandbox OS Command Injection Vulnerability | 76.1% | 심각9.8 | |
| CVE-2026-46817 | 2026-07-15 | Oracle | Oracle E-Business Suite Improper Privilege Management Vulnerability | 12.3% | 심각9.8 | 1건 |
| CVE-2023-4346 | 2026-07-15 | KNX Association | KNX Association KNX Protocol Connection Authorization Option 1 Overly … | 1.4% | 높음7.5 | |
| CVE-2026-56164 | 2026-07-14 | Microsoft | Microsoft SharePoint Server Missing Authentication for Critical Functi… | 1.0% | 심각9.8 | |
| CVE-2026-56155 | 2026-07-14 | Microsoft | Microsoft Active Directory Federation Services Insufficient Granularit… | 0.3% | 높음7.8 | |
| CVE-2026-15410 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Code Injection Vulnerability | 11.8% | 높음7.2 | |
| CVE-2026-15409 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 6.8% | 심각10.0 | |
| CVE-2008-4128 | 2026-07-13 | Cisco | Cisco IOS Cross-Site Request Forgery Vulnerability | 33.9% | 보통4.3 | |
| CVE-2026-56291 | 2026-07-10 | Balbooa | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerab… | 14.9% | 심각10.0 | |
| CVE-2026-48939 | 2026-07-10 | iCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 20.1% | 심각10.0 | |
| CVE-2026-56290 | 2026-07-07 | Joomlack | Joomlack Page Builder Improper Access Control Vulnerability | 30.9% | 심각10.0 | |
| CVE-2026-55255 | 2026-07-07 | Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerabilit… | 0.9% | 높음8.4 | |
| CVE-2026-48908 | 2026-07-07 | JoomShaper | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous … | 88.5% | 심각10.0 | |
| CVE-2026-48282 | 2026-07-07 | Adobe | Adobe ColdFusion Path Traversal Vulnerability | 42.4% | 심각10.0 | |
| CVE-2026-45659 랜섬웨어 악용 | 2026-07-01 | Microsoft | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerab… | 80.2% | 높음8.8 | |
| CVE-2026-48558 | 2026-06-29 | SimpleHelp | SimpleHelp Authentication Bypass Vulnerability | 77.7% | 심각9.5 | |
| CVE-2026-20230 | 2026-06-25 | Cisco | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF… | 88.5% | 높음8.6 | |
| CVE-2026-12569 랜섬웨어 악용 | 2026-06-25 | PTC | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 46.0% | 심각9.3 | |
| CVE-2026-34910 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 90.0% | 심각10.0 | |
| CVE-2026-34909 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Path Traversal Vulnerability | 68.0% | 심각10.0 | |
| CVE-2026-34908 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Improper Access Control Vulnerability | 88.3% | 심각10.0 | |
| CVE-2025-67038 | 2026-06-23 | Lantronix | Lantronix EDS5000 Code Injection Vulnerability | 20.3% | 심각9.8 | |
| CVE-2026-20253 | 2026-06-18 | Splunk | Splunk Enterprise Missing Authentication for Critical Function Vulnera… | 96.9% | 심각9.8 | |
| CVE-2026-48907 | 2026-06-16 | Widget Factory | Widget Factory Joomla Content Editor Improper Access Control Vulnerabi… | 85.4% | 심각10.0 | |
| CVE-2026-54420 | 2026-06-15 | LiteSpeed | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnera… | 1.4% | 높음8.5 | |
| CVE-2026-20262 | 2026-06-15 | Cisco | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerabilit… | 29.1% | 보통6.5 | |
| CVE-2026-35273 랜섬웨어 악용 | 2026-06-12 | Oracle | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Cr… | 96.7% | 심각9.8 | |
| CVE-2026-10520 | 2026-06-11 | Ivanti | Ivanti Sentry OS Command Injection Vulnerability | 99.9% | 심각10.0 | |
| CVE-2026-7473 | 2026-06-09 | Arista | Arista Extensible Operating System Incomplete Comparison with Missing … | 1.1% | 보통6.9 | |
| CVE-2026-20245 | 2026-06-09 | Cisco | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output … | 25.3% | 높음7.8 | |
| CVE-2026-11645 | 2026-06-09 | Google | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2.4% | 높음8.8 | |
| CVE-2026-50751 랜섬웨어 악용 | 2026-06-08 | Check Point | Check Point Security Gateway Improper Authentication Vulnerability | 85.3% | 심각9.3 | |
| CVE-2026-42271 | 2026-06-08 | BerriAI | BerriAI LiteLLM Command Injection Vulnerability | 91.4% | 높음8.7 | |
| CVE-2026-28318 | 2026-06-05 | SolarWinds | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 43.7% | 높음7.5 | |
| CVE-2026-45247 | 2026-06-03 | Mirasvit | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vuln… | 26.2% | 심각9.3 | |
| CVE-2025-48595 | 2026-06-02 | Android | Android Framework Integer Overflow Vulnerability | 1.9% | 높음8.4 | |
| CVE-2022-0492 | 2026-06-02 | Linux | Linux Kernel Improper Authentication Vulnerability | 5.5% | 높음7.8 | |
| CVE-2024-21182 | 2026-06-01 | Oracle | Oracle WebLogic Server Unspecified Vulnerability | 74.2% | 높음7.5 | |
| CVE-2026-0257 랜섬웨어 악용 | 2026-05-29 | Palo Alto Networks | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 95.6% | 높음7.8 | |
| CVE-2026-8398 | 2026-05-27 | Daemon | Daemon Tools Lite Embedded Malicious Code Vulnerability | 1.5% | 심각9.3 | |
| CVE-2026-48027 랜섬웨어 악용 | 2026-05-27 | Nx | Nx Console Embedded Malicious Code Vulnerability | 1.8% | 심각9.3 | |
| CVE-2026-45321 랜섬웨어 악용 | 2026-05-27 | TanStack | TanStack Unspecified Vulnerability | 3.3% | 심각9.6 | |
| CVE-2026-48172 | 2026-05-26 | LiteSpeed | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 17.9% | 심각10.0 | |
| CVE-2026-9082 | 2026-05-22 | Drupal | Drupal Core SQL Injection Vulnerability | 89.4% | 심각9.8 | |
| CVE-2026-34926 | 2026-05-21 | Trend Micro | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 13.4% | 보통6.7 | |
| CVE-2025-34291 | 2026-05-21 | Langflow | Langflow Origin Validation Error Vulnerability | 92.8% | 심각9.4 | |
| CVE-2026-45498 | 2026-05-20 | Microsoft | Microsoft Defender Denial of Service Vulnerability | 63.1% | 높음7.5 | |
| CVE-2026-41091 | 2026-05-20 | Microsoft | Microsoft Defender Link Following Vulnerability | 8.2% | 높음7.8 | |
| CVE-2010-0806 | 2026-05-20 | Microsoft | Microsoft Internet Explorer Use-After-Free Vulnerability | 82.2% | 높음8.8 | |
| CVE-2010-0249 | 2026-05-20 | Microsoft | Microsoft Internet Explorer Use-After-Free Vulnerability | 91.9% | 높음8.8 | |
| CVE-2009-3459 | 2026-05-20 | Adobe | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 86.6% | 높음8.8 | |
| CVE-2009-1537 | 2026-05-20 | Microsoft | Microsoft DirectX NULL Byte Overwrite Vulnerability | 51.4% | 높음8.8 | |
| CVE-2008-4250 | 2026-05-20 | Microsoft | Microsoft Windows Buffer Overflow Vulnerability | 98.8% | 심각9.8 | |
| CVE-2026-42897 | 2026-05-15 | Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 70.7% | 보통6.1 | |
| CVE-2026-20182 | 2026-05-14 | Cisco | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 91.8% | 심각10.0 | |
| CVE-2026-42208 | 2026-05-08 | BerriAI | BerriAI LiteLLM SQL Injection Vulnerability | 89.4% | 심각9.3 | |
| CVE-2026-6973 | 2026-05-07 | Ivanti | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulner… | 34.5% | 높음7.2 | |
| CVE-2026-0300 | 2026-05-06 | Palo Alto Networks | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 41.7% | 심각9.3 | |
| CVE-2026-31431 | 2026-05-01 | Linux | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 98.1% | 높음7.8 | |
| CVE-2026-41940 랜섬웨어 악용 | 2026-04-30 | WebPros | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authenticatio… | 98.5% | 심각9.3 | |
| CVE-2026-32202 | 2026-04-28 | Microsoft | Microsoft Windows Protection Mechanism Failure Vulnerability | 70.9% | 보통4.3 | |
| CVE-2024-1708 랜섬웨어 악용 | 2026-04-28 | ConnectWise | ConnectWise ScreenConnect Path Traversal Vulnerability | 95.4% | 높음8.4 | |
| CVE-2025-29635 | 2026-04-24 | D-Link | D-Link DIR-823X Command Injection Vulnerability | 87.9% | 높음7.2 | |
| CVE-2024-7399 | 2026-04-24 | Samsung | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 91.9% | 심각9.8 | |
| CVE-2024-57728 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Path Traversal Vulnerability | 64.5% | 높음7.2 | |
| CVE-2024-57726 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Missing Authorization Vulnerability | 66.4% | 심각9.9 | |
| CVE-2026-39987 | 2026-04-23 | Marimo | Marimo Remote Code Execution Vulnerability | 99.6% | 심각9.3 | |
| CVE-2026-33825 랜섬웨어 악용 | 2026-04-22 | Microsoft | Microsoft Defender Insufficient Granularity of Access Control Vulnerab… | 6.7% | 높음7.8 | |
| CVE-2026-20133 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an … | 31.5% | 높음7.5 | |
| CVE-2026-20128 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Forma… | 7.3% | 높음7.5 | |
| CVE-2026-20122 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnera… | 25.8% | 보통5.4 | |
| CVE-2025-48700 | 2026-04-20 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerab… | 1.7% | 보통6.1 | |
| CVE-2025-32975 | 2026-04-20 | Quest | Quest KACE Systems Management Appliance (SMA) Improper Authentication … | 2.5% | 심각10.0 | |
| CVE-2025-2749 | 2026-04-20 | Kentico | Kentico Xperience Path Traversal Vulnerability | 4.0% | 높음7.2 | |
| CVE-2024-27199 랜섬웨어 악용 | 2026-04-20 | JetBrains | JetBrains TeamCity Relative Path Traversal Vulnerability | 100.0% | 높음7.3 | |
| CVE-2023-27351 랜섬웨어 악용 | 2026-04-20 | PaperCut | PaperCut NG/MF Improper Authentication Vulnerability | 78.1% | 높음7.5 | |
| CVE-2026-34197 | 2026-04-16 | Apache | Apache ActiveMQ Improper Input Validation Vulnerability | 98.3% | 높음8.8 | |
| CVE-2026-32201 | 2026-04-14 | Microsoft | Microsoft SharePoint Server Improper Input Validation Vulnerability | 43.4% | 보통6.5 | |
| CVE-2009-0238 | 2026-04-14 | Microsoft | Microsoft Office Remote Code Execution | 42.9% | 높음8.8 |