악용이 확인된 취약점
미국 CISA 가 실제 악용 정황을 확인해 등재한 목록입니다. CVSS 점수가 높다고 악용되는 것이 아니고, 낮다고 안전한 것도 아닙니다 — 이 목록에 있다는 것은 이미 쓰이고 있다는 뜻입니다.
악용 확인 목록
| CVE | 등재일 | 공급사 · 제품 | 취약점 이름 | 악용 확률 | 심각도 | 한국어 권고 |
|---|---|---|---|---|---|---|
| CVE-2026-85046 | 2026-09-04 | Google | Google Chromium V8 Type Confusion Vulnerability | 0.5% | 높음8.8 | |
| CVE-2026-9586 | 2026-09-02 | Sangoma | Sangoma Switchvox SQL Injection Vulnerability | 11.8% | 심각9.3 | |
| CVE-2026-83549 | 2026-09-02 | SonicWall | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 1.6% | 높음7.8 | |
| CVE-2026-83548 | 2026-09-02 | SonicWall | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.7% | 심각10.0 | |
| CVE-2026-82329 | 2026-09-02 | JFrog | JFrog Artifactory Improper Authentication Vulnerability | 7.7% | 심각9.8 | |
| CVE-2026-59822 | 2026-09-02 | BerriAI | BerriAI LiteLLM Improper Authentication Vulnerability | 0.9% | 높음8.8 | |
| CVE-2026-49869 | 2026-09-02 | Kestra | Kestra OSS OS Command Injection Vulnerability | 1.9% | 심각10.0 | |
| CVE-2026-48710 | 2026-09-02 | Kludex | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 36.3% | 보통6.5 | |
| CVE-2026-82078 | 2026-08-31 | PaperCut | PaperCut NG/MF Unsafe Reflection Vulnerability | 1.7% | 심각9.4 | |
| CVE-2026-81578 | 2026-08-31 | PaperCut | PaperCut NG/MF Missing Authentication for Critical Function Vulnerabil… | 1.6% | 높음8.8 | |
| CVE-2026-66384 | 2026-08-27 | JFrog | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Di… | 0.6% | 보통5.3 | |
| CVE-2026-53362 | 2026-08-27 | Linux | Linux Kernel Unspecified Vulnerability | 0.5% | 높음7.8 | 1건 |
| CVE-2023-49105 | 2026-08-27 | ownCloud | ownCloud Improper Authentication Vulnerability | 43.2% | 심각9.8 | |
| CVE-2026-8452 | 2026-08-26 | Citrix | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Ope… | 1.6% | 높음8.8 | 1건 |
| CVE-2022-0995 | 2026-08-26 | Linux | Linux Kernel Out-of-Bounds Write Vulnerability | 9.5% | 높음7.8 | |
| CVE-2021-23758 | 2026-08-26 | Ajax.NET Professional | Ajax.NET Professional Deserialization of Untrusted Data Vulnerability | 83.6% | 심각9.8 | |
| CVE-2019-1068 | 2026-08-26 | Microsoft | Microsoft SQL Server Remote Code Execution Vulnerability | 52.8% | 높음8.8 | |
| CVE-2015-5287 | 2026-08-26 | Red Hat | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerabilit… | 5.0% | 높음7.8 | |
| CVE-2015-3246 | 2026-08-26 | Red Hat | Red Hat Libuser Race Condition Vulnerability | 8.8% | 보통5.1 | |
| CVE-2026-60004 | 2026-08-25 | Gitea | Gitea Code Injection Vulnerability | 86.8% | 심각9.8 | 1건 |
| CVE-2026-21962 | 2026-08-24 | Oracle | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper A… | 42.0% | 심각10.0 | |
| CVE-2026-73570 | 2026-08-21 | Synacor | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 32.4% | 높음8.9 | |
| CVE-2026-72530 | 2026-08-20 | TrueConf | TrueConf Server Code Injection Vulnerability | 1.8% | 심각9.5 | |
| CVE-2026-72529 | 2026-08-20 | TrueConf | TrueConf Server Missing Authentication for Critical Function Vulnerabi… | 1.6% | 심각9.3 | |
| CVE-2026-64849 | 2026-08-19 | MLflow | MLflow Server-Side Request Forgery Vulnerability | 16.4% | 심각9.3 | |
| CVE-2026-65400 | 2026-08-18 | Apple | Apple macOS Improper Authentication Vulnerability | 9.9% | 심각9.8 | |
| CVE-2026-59310 | 2026-08-18 | Broadcom | Broadcom VMware vCenter Path Traversal Vulnerability | 45.9% | 심각9.8 | |
| CVE-2026-55040 | 2026-08-18 | Microsoft | Microsoft SharePoint Weak Authentication Vulnerability | 39.7% | 심각9.1 | |
| CVE-2026-33824 | 2026-08-18 | Microsoft | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free V… | 72.7% | 심각9.8 | |
| CVE-2025-62593 | 2026-08-17 | Ray-Project | Ray-Project Ray Code Injection Vulnerability | 16.9% | 심각9.4 | |
| CVE-2026-72898 | 2026-08-11 | Metabase | Metabase SQL Injection Vulnerability | 82.3% | 심각10.0 | 1건 |
| CVE-2026-68820 | 2026-08-11 | Microsoft | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free… | 6.2% | 높음7.0 | |
| CVE-2026-20349 | 2026-08-11 | Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Fir… | 2.2% | 높음8.6 | |
| CVE-2026-8037 | 2026-08-07 | Progress | Progress LoadMaster Command Injection Vulnerability | 99.6% | 심각9.8 | |
| CVE-2026-63077 | 2026-08-05 | JetBrains | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 86.5% | 심각9.8 | |
| CVE-2026-9198 | 2026-08-04 | IBM | IBM Langflow Code Injection Vulnerability | 57.0% | 심각9.8 | |
| CVE-2026-34486 | 2026-08-04 | Apache | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 98.6% | 높음7.5 | |
| CVE-2026-18556 | 2026-08-04 | N-able | N-able N-central Authentication Bypass Using an Alternate Path or Chan… | 40.2% | 높음8.2 | |
| CVE-2026-18577 | 2026-08-03 | N-able | N-able N-central Authentication Bypass Using an Alternate Path or Chan… | 54.1% | 높음8.2 | |
| CVE-2026-20316 | 2026-07-29 | Cisco | Cisco Secure Firewall Management Center Use of Hard-coded Password Vul… | 9.8% | 보통5.3 | |
| CVE-2026-16812 | 2026-07-27 | Arista | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabili… | 1.6% | 심각10.0 | |
| CVE-2025-68686 | 2026-07-27 | Fortinet | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized … | 29.1% | 보통5.9 | |
| CVE-2026-50522 | 2026-07-22 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 84.6% | 심각9.8 | |
| CVE-2026-16232 | 2026-07-22 | Check Point | Check Point SmartConsole Improper Authentication Vulnerability | 72.1% | 심각9.3 | |
| CVE-2026-63030 | 2026-07-21 | WordPress | WordPress Core Interpretation Conflict Vulnerability | 97.3% | 심각9.8 | |
| CVE-2026-60137 | 2026-07-21 | WordPress | WordPress Core SQL Injection Vulnerability | 78.3% | 보통5.9 | |
| CVE-2026-0770 | 2026-07-21 | Langflow | Langflow Inclusion of Functionality from Untrusted Control Sphere Vuln… | 63.4% | 심각9.8 | |
| CVE-2021-27137 | 2026-07-21 | DD-WRT | DD-WRT Stack-Based Buffer Overflow Vulnerability | 4.0% | 높음8.1 | |
| CVE-2026-58644 | 2026-07-16 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 15.9% | 심각9.8 | |
| CVE-2026-39808 | 2026-07-16 | Fortinet | Fortinet FortiSandbox OS Command Injection Vulnerability | 92.8% | 심각9.8 | |
| CVE-2026-25089 | 2026-07-16 | Fortinet | Fortinet FortiSandbox OS Command Injection Vulnerability | 76.1% | 심각9.8 | |
| CVE-2026-46817 | 2026-07-15 | Oracle | Oracle E-Business Suite Improper Privilege Management Vulnerability | 13.0% | 심각9.8 | |
| CVE-2023-4346 | 2026-07-15 | KNX Association | KNX Association KNX Protocol Connection Authorization Option 1 Overly … | 1.3% | 높음7.5 | |
| CVE-2026-56164 | 2026-07-14 | Microsoft | Microsoft SharePoint Server Missing Authentication for Critical Functi… | 26.6% | 심각9.8 | |
| CVE-2026-56155 | 2026-07-14 | Microsoft | Microsoft Active Directory Federation Services Insufficient Granularit… | 0.3% | 높음7.8 | |
| CVE-2026-15410 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Code Injection Vulnerability | 11.8% | 높음7.2 | |
| CVE-2026-15409 랜섬웨어 악용 | 2026-07-14 | SonicWall | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 83.7% | 심각10.0 | |
| CVE-2008-4128 | 2026-07-13 | Cisco | Cisco IOS Cross-Site Request Forgery Vulnerability | 33.7% | 보통4.3 | |
| CVE-2026-56291 | 2026-07-10 | Balbooa | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerab… | 14.6% | 심각10.0 | |
| CVE-2026-48939 | 2026-07-10 | iCagenda | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 19.7% | 심각10.0 | |
| CVE-2026-56290 | 2026-07-07 | Joomlack | Joomlack Page Builder Improper Access Control Vulnerability | 30.4% | 심각10.0 | |
| CVE-2026-55255 | 2026-07-07 | Langflow | Langflow Authorization Bypass Through User-Controlled Key Vulnerabilit… | 0.9% | 높음8.4 | |
| CVE-2026-48908 | 2026-07-07 | JoomShaper | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous … | 14.8% | 심각10.0 | |
| CVE-2026-48282 | 2026-07-07 | Adobe | Adobe ColdFusion Path Traversal Vulnerability | 42.4% | 심각10.0 | |
| CVE-2026-45659 랜섬웨어 악용 | 2026-07-01 | Microsoft | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerab… | 76.1% | 높음8.8 | |
| CVE-2026-48558 | 2026-06-29 | SimpleHelp | SimpleHelp Authentication Bypass Vulnerability | 30.0% | 심각9.5 | |
| CVE-2026-20230 | 2026-06-25 | Cisco | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF… | 88.2% | 높음8.6 | |
| CVE-2026-12569 랜섬웨어 악용 | 2026-06-25 | PTC | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 40.6% | 심각9.3 | |
| CVE-2026-34910 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 87.5% | 심각10.0 | |
| CVE-2026-34909 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Path Traversal Vulnerability | 63.9% | 심각10.0 | |
| CVE-2026-34908 | 2026-06-23 | Ubiquiti | Ubiquiti UniFi OS Improper Access Control Vulnerability | 85.2% | 심각10.0 | |
| CVE-2025-67038 | 2026-06-23 | Lantronix | Lantronix EDS5000 Code Injection Vulnerability | 15.7% | 심각9.8 | |
| CVE-2026-20253 | 2026-06-18 | Splunk | Splunk Enterprise Missing Authentication for Critical Function Vulnera… | 96.9% | 심각9.8 | |
| CVE-2026-48907 | 2026-06-16 | Widget Factory | Widget Factory Joomla Content Editor Improper Access Control Vulnerabi… | 78.1% | 심각10.0 | |
| CVE-2026-54420 | 2026-06-15 | LiteSpeed | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnera… | 1.4% | 높음8.5 | |
| CVE-2026-20262 | 2026-06-15 | Cisco | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerabilit… | 28.2% | 보통6.5 | |
| CVE-2026-35273 랜섬웨어 악용 | 2026-06-12 | Oracle | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Cr… | 95.5% | 심각9.8 | |
| CVE-2026-10520 | 2026-06-11 | Ivanti | Ivanti Sentry OS Command Injection Vulnerability | 99.9% | 심각10.0 | |
| CVE-2026-7473 | 2026-06-09 | Arista | Arista Extensible Operating System Incomplete Comparison with Missing … | 1.1% | 보통6.9 | |
| CVE-2026-20245 | 2026-06-09 | Cisco | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output … | 25.3% | 높음7.8 | |
| CVE-2026-11645 | 2026-06-09 | Google | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2.2% | 높음8.8 | |
| CVE-2026-50751 랜섬웨어 악용 | 2026-06-08 | Check Point | Check Point Security Gateway Improper Authentication Vulnerability | 83.8% | 심각9.3 | |
| CVE-2026-42271 | 2026-06-08 | BerriAI | BerriAI LiteLLM Command Injection Vulnerability | 83.6% | 높음8.7 | |
| CVE-2026-28318 | 2026-06-05 | SolarWinds | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 40.0% | 높음7.5 | |
| CVE-2026-45247 | 2026-06-03 | Mirasvit | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vuln… | 27.5% | 심각9.3 | |
| CVE-2025-48595 | 2026-06-02 | Android | Android Framework Integer Overflow Vulnerability | 1.7% | 높음8.4 | |
| CVE-2022-0492 | 2026-06-02 | Linux | Linux Kernel Improper Authentication Vulnerability | 5.5% | 높음7.8 | |
| CVE-2024-21182 | 2026-06-01 | Oracle | Oracle WebLogic Server Unspecified Vulnerability | 74.2% | 높음7.5 | |
| CVE-2026-0257 랜섬웨어 악용 | 2026-05-29 | Palo Alto Networks | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 93.9% | 높음7.8 | |
| CVE-2026-8398 | 2026-05-27 | Daemon | Daemon Tools Lite Embedded Malicious Code Vulnerability | 1.5% | 심각9.3 | |
| CVE-2026-48027 랜섬웨어 악용 | 2026-05-27 | Nx | Nx Console Embedded Malicious Code Vulnerability | 1.8% | 심각9.3 | |
| CVE-2026-45321 랜섬웨어 악용 | 2026-05-27 | TanStack | TanStack Unspecified Vulnerability | 2.3% | 심각9.6 | |
| CVE-2026-48172 | 2026-05-26 | LiteSpeed | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 18.9% | 심각10.0 | |
| CVE-2026-9082 | 2026-05-22 | Drupal | Drupal Core SQL Injection Vulnerability | 87.9% | 심각9.8 | |
| CVE-2026-34926 | 2026-05-21 | Trend Micro | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 12.7% | 보통6.7 | |
| CVE-2025-34291 | 2026-05-21 | Langflow | Langflow Origin Validation Error Vulnerability | 83.6% | 심각9.4 | |
| CVE-2026-45498 | 2026-05-20 | Microsoft | Microsoft Defender Denial of Service Vulnerability | 63.1% | 높음7.5 | |
| CVE-2026-41091 | 2026-05-20 | Microsoft | Microsoft Defender Link Following Vulnerability | 8.2% | 높음7.8 | |
| CVE-2010-0806 | 2026-05-20 | Microsoft | Microsoft Internet Explorer Use-After-Free Vulnerability | 82.2% | 높음8.8 | |
| CVE-2010-0249 | 2026-05-20 | Microsoft | Microsoft Internet Explorer Use-After-Free Vulnerability | 91.9% | 높음8.8 | |
| CVE-2009-3459 | 2026-05-20 | Adobe | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 86.6% | 높음8.8 | |
| CVE-2009-1537 | 2026-05-20 | Microsoft | Microsoft DirectX NULL Byte Overwrite Vulnerability | 51.2% | 높음8.8 | |
| CVE-2008-4250 | 2026-05-20 | Microsoft | Microsoft Windows Buffer Overflow Vulnerability | 98.8% | 심각9.8 | |
| CVE-2026-42897 | 2026-05-15 | Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 71.2% | 보통6.1 | |
| CVE-2026-20182 | 2026-05-14 | Cisco | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 91.5% | 심각10.0 | |
| CVE-2026-42208 | 2026-05-08 | BerriAI | BerriAI LiteLLM SQL Injection Vulnerability | 89.4% | 심각9.3 | |
| CVE-2026-6973 | 2026-05-07 | Ivanti | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulner… | 34.5% | 높음7.2 | |
| CVE-2026-0300 | 2026-05-06 | Palo Alto Networks | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 31.7% | 심각9.3 | |
| CVE-2026-31431 | 2026-05-01 | Linux | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 99.9% | 높음7.8 | |
| CVE-2026-41940 랜섬웨어 악용 | 2026-04-30 | WebPros | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authenticatio… | 98.5% | 심각9.3 | |
| CVE-2026-32202 | 2026-04-28 | Microsoft | Microsoft Windows Protection Mechanism Failure Vulnerability | 63.7% | 보통4.3 | |
| CVE-2024-1708 랜섬웨어 악용 | 2026-04-28 | ConnectWise | ConnectWise ScreenConnect Path Traversal Vulnerability | 95.5% | 높음8.4 | |
| CVE-2025-29635 | 2026-04-24 | D-Link | D-Link DIR-823X Command Injection Vulnerability | 87.9% | 높음7.2 | |
| CVE-2024-7399 | 2026-04-24 | Samsung | Samsung MagicINFO 9 Server Path Traversal Vulnerability | 91.9% | 심각9.8 | |
| CVE-2024-57728 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Path Traversal Vulnerability | 7.0% | 높음7.2 | |
| CVE-2024-57726 랜섬웨어 악용 | 2026-04-24 | SimpleHelp | SimpleHelp Missing Authorization Vulnerability | 66.6% | 심각9.9 | |
| CVE-2026-39987 | 2026-04-23 | Marimo | Marimo Remote Code Execution Vulnerability | 98.9% | 심각9.3 | |
| CVE-2026-33825 랜섬웨어 악용 | 2026-04-22 | Microsoft | Microsoft Defender Insufficient Granularity of Access Control Vulnerab… | 6.7% | 높음7.8 | |
| CVE-2026-20133 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an … | 31.4% | 높음7.5 | |
| CVE-2026-20128 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Forma… | 6.9% | 높음7.5 | |
| CVE-2026-20122 | 2026-04-20 | Cisco | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnera… | 24.6% | 보통5.4 | |
| CVE-2025-48700 | 2026-04-20 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerab… | 1.7% | 보통6.1 | |
| CVE-2025-32975 | 2026-04-20 | Quest | Quest KACE Systems Management Appliance (SMA) Improper Authentication … | 2.4% | 심각10.0 | |
| CVE-2025-2749 | 2026-04-20 | Kentico | Kentico Xperience Path Traversal Vulnerability | 4.0% | 높음7.2 | |
| CVE-2024-27199 랜섬웨어 악용 | 2026-04-20 | JetBrains | JetBrains TeamCity Relative Path Traversal Vulnerability | 100.0% | 높음7.3 | |
| CVE-2023-27351 랜섬웨어 악용 | 2026-04-20 | PaperCut | PaperCut NG/MF Improper Authentication Vulnerability | 78.1% | 높음7.5 | |
| CVE-2026-34197 | 2026-04-16 | Apache | Apache ActiveMQ Improper Input Validation Vulnerability | 97.2% | 높음8.8 | |
| CVE-2026-32201 | 2026-04-14 | Microsoft | Microsoft SharePoint Server Improper Input Validation Vulnerability | 42.8% | 보통6.5 | |
| CVE-2009-0238 | 2026-04-14 | Microsoft | Microsoft Office Remote Code Execution | 43.1% | 높음8.8 | |
| CVE-2026-34621 | 2026-04-13 | Adobe | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 7.1% | 높음8.6 | |
| CVE-2026-21643 | 2026-04-13 | Fortinet | Fortinet FortiClient EMS SQL Injection Vulnerability | 94.1% | 심각9.8 | |
| CVE-2025-60710 랜섬웨어 악용 | 2026-04-13 | Microsoft | Microsoft Windows Link Following Vulnerability | 4.6% | 높음7.8 | |
| CVE-2023-36424 | 2026-04-13 | Microsoft | Microsoft Windows Out-of-Bounds Read Vulnerability | 12.2% | 높음7.8 | |
| CVE-2023-21529 랜섬웨어 악용 | 2026-04-13 | Microsoft | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerabil… | 62.1% | 높음8.8 | |
| CVE-2020-9715 | 2026-04-13 | Adobe | Adobe Acrobat Use-After-Free Vulnerability | 48.4% | 높음7.8 | |
| CVE-2012-1854 | 2026-04-13 | Microsoft | Microsoft Visual Basic for Applications Insecure Library Loading Vulne… | 21.0% | 높음7.8 | |
| CVE-2026-1340 | 2026-04-08 | Ivanti | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 86.2% | 심각9.8 | |
| CVE-2026-35616 | 2026-04-06 | Fortinet | Fortinet FortiClient EMS Improper Access Control Vulnerability | 90.7% | 심각9.8 | |
| CVE-2026-3502 | 2026-04-02 | TrueConf | TrueConf Client Download of Code Without Integrity Check Vulnerability | 5.7% | 높음7.8 | |
| CVE-2026-5281 | 2026-04-01 | Google | Google Dawn Use-After-Free Vulnerability | 4.9% | 높음8.8 | |
| CVE-2026-3055 | 2026-03-30 | Citrix | Citrix NetScaler Out-of-Bounds Read Vulnerability | 87.2% | 심각9.3 | |
| CVE-2025-53521 | 2026-03-27 | F5 | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | 2.2% | 심각9.3 | |
| CVE-2026-33634 | 2026-03-26 | Aquasecurity | Aquasecurity Trivy Embedded Malicious Code Vulnerability | 59.2% | 심각9.4 | |
| CVE-2026-33017 | 2026-03-25 | Langflow | Langflow Code Injection Vulnerability | 96.2% | 심각9.3 | |
| CVE-2025-54068 | 2026-03-20 | Laravel | Laravel Livewire Code Injection Vulnerability | 96.5% | 심각9.2 | |
| CVE-2025-43520 | 2026-03-20 | Apple | Apple Multiple Products Classic Buffer Overflow Vulnerability | 0.4% | 보통5.5 | |
| CVE-2025-43510 | 2026-03-20 | Apple | Apple Multiple Products Improper Locking Vulnerability | 0.4% | 높음7.8 | |
| CVE-2025-32432 | 2026-03-20 | Craft CMS | Craft CMS Code Injection Vulnerability | 99.8% | 심각10.0 | |
| CVE-2025-31277 | 2026-03-20 | Apple | Apple Multiple Products Buffer Overflow Vulnerability | 1.5% | 높음8.8 | |
| CVE-2026-20131 랜섬웨어 악용 | 2026-03-19 | Cisco | Cisco Secure Firewall Management Center (FMC) Software and Cisco Secur… | 31.2% | 심각10.0 | |
| CVE-2026-20963 | 2026-03-18 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 31.6% | 심각9.8 | |
| CVE-2025-66376 | 2026-03-18 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerab… | 19.6% | 보통6.1 | |
| CVE-2025-47813 | 2026-03-16 | Wing FTP Server | Wing FTP Server Information Disclosure Vulnerability | 59.4% | 보통4.3 | |
| CVE-2026-3910 | 2026-03-13 | Google | Google Chromium V8 Improper Restriction of Operations Within the Bound… | 2.0% | 높음8.8 | |
| CVE-2026-3909 | 2026-03-13 | Google | Google Skia Out-of-Bounds Write Vulnerability | 1.6% | 높음8.8 | |
| CVE-2025-68613 | 2026-03-11 | n8n | n8n Improper Control of Dynamically-Managed Code Resources Vulnerabili… | 99.1% | 높음8.8 | |
| CVE-2026-1603 | 2026-03-09 | Ivanti | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 80.6% | 높음7.5 | |
| CVE-2025-26399 랜섬웨어 악용 | 2026-03-09 | SolarWinds | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 89.5% | 심각9.8 | |
| CVE-2021-22054 | 2026-03-09 | Omnissa | Omnissa Workspace ONE Server-Side Request Forgery | 97.4% | 높음7.5 | |
| CVE-2023-43000 | 2026-03-05 | Apple | Apple Multiple products Use-After-Free Vulnerability | 3.9% | 높음8.8 | |
| CVE-2023-41974 | 2026-03-05 | Apple | Apple iOS and iPadOS Use-After-Free Vulnerability | 1.4% | 높음7.8 | |
| CVE-2021-30952 | 2026-03-05 | Apple | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | 7.0% | 높음7.8 | |
| CVE-2021-22681 | 2026-03-05 | Rockwell | Rockwell Multiple Products Insufficient Protected Credentials Vulnerab… | 63.6% | 심각9.8 | |
| CVE-2017-7921 | 2026-03-05 | Hikvision | Hikvision Multiple Products Improper Authentication Vulnerability | 100.0% | 심각9.8 | |
| CVE-2026-22719 | 2026-03-03 | Broadcom | Broadcom VMware Aria Operations Command Injection Vulnerability | 17.4% | 높음8.1 | |
| CVE-2026-21385 | 2026-03-03 | Qualcomm | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 1.1% | 높음7.8 | |
| CVE-2026-20127 | 2026-02-25 | Cisco | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vul… | 88.2% | 심각10.0 | |
| CVE-2022-20775 | 2026-02-25 | Cisco | Cisco SD-WAN Path Traversal Vulnerability | 12.5% | 높음7.8 | |
| CVE-2026-25108 | 2026-02-24 | Soliton Systems K.K | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 5.0% | 높음8.7 | |
| CVE-2025-68461 | 2026-02-20 | Roundcube | RoundCube Webmail Cross-site Scripting Vulnerability | 26.8% | 보통6.1 | |
| CVE-2025-49113 | 2026-02-20 | Roundcube | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | 98.9% | 높음8.8 | |
| CVE-2026-22769 | 2026-02-18 | Dell | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Cred… | 13.1% | 심각10.0 | |
| CVE-2021-22175 | 2026-02-18 | GitLab | GitLab Server-Side Request Forgery (SSRF) Vulnerability | 53.4% | 심각9.8 | |
| CVE-2026-2441 | 2026-02-17 | Google | Google Chromium CSS Use-After-Free Vulnerability | 22.0% | 높음8.8 | |
| CVE-2024-7694 | 2026-02-17 | TeamT5 | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Da… | 1.8% | 높음7.2 | |
| CVE-2020-7796 | 2026-02-17 | Synacor | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery V… | 84.4% | 심각9.8 | |
| CVE-2008-0015 | 2026-02-17 | Microsoft | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerab… | 76.7% | 높음8.8 | |
| CVE-2026-1731 랜섬웨어 악용 | 2026-02-13 | BeyondTrust | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS … | 90.3% | 심각9.9 | |
| CVE-2026-20700 | 2026-02-12 | Apple | Apple Multiple Buffer Overflow Vulnerability | 1.3% | 높음7.8 | |
| CVE-2025-40536 | 2026-02-12 | SolarWinds | SolarWinds Web Help Desk Security Control Bypass Vulnerability | 81.6% | 심각9.8 | |
| CVE-2025-15556 | 2026-02-12 | Notepad++ | Notepad++ Download of Code Without Integrity Check Vulnerability | 1.7% | 높음7.7 | |
| CVE-2024-43468 | 2026-02-12 | Microsoft | Microsoft Configuration Manager SQL Injection Vulnerability | 82.0% | 심각9.8 | |
| CVE-2026-21533 | 2026-02-10 | Microsoft | Microsoft Windows Improper Privilege Management Vulnerability | 3.8% | 높음7.8 | |
| CVE-2026-21525 | 2026-02-10 | Microsoft | Microsoft Windows NULL Pointer Dereference Vulnerability | 5.0% | 보통6.2 | |
| CVE-2026-21519 | 2026-02-10 | Microsoft | Microsoft Windows Type Confusion Vulnerability | 2.4% | 높음7.8 | |
| CVE-2026-21514 | 2026-02-10 | Microsoft | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decis… | 1.5% | 높음7.8 | |
| CVE-2026-21513 | 2026-02-10 | Microsoft | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 15.4% | 높음8.8 | |
| CVE-2026-21510 | 2026-02-10 | Microsoft | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 25.8% | 높음8.8 | |
| CVE-2026-24423 랜섬웨어 악용 | 2026-02-05 | SmarterTools | SmarterTools SmarterMail Missing Authentication for Critical Function … | 87.7% | 심각9.3 | |
| CVE-2025-11953 | 2026-02-05 | React Native Community | React Native Community CLI OS Command Injection Vulnerability | 94.0% | 심각9.8 | |
| CVE-2025-64328 | 2026-02-03 | Sangoma | Sangoma FreePBX OS Command Injection Vulnerability | 84.6% | 높음8.6 | |
| CVE-2025-40551 | 2026-02-03 | SolarWinds | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerabili… | 83.6% | 심각9.8 | |
| CVE-2021-39935 | 2026-02-03 | GitLab | GitLab Community and Enterprise Editions Server-Side Request Forgery (… | 35.6% | 높음7.5 | |
| CVE-2019-19006 | 2026-02-03 | Sangoma | Sangoma FreePBX Improper Authentication Vulnerability | 36.6% | 심각9.8 | |
| CVE-2026-1281 | 2026-01-29 | Ivanti | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 81.8% | 심각9.8 | |
| CVE-2026-24858 | 2026-01-27 | Fortinet | Fortinet Multiple Products Authentication Bypass Using an Alternate Pa… | 86.1% | 심각9.8 | |
| CVE-2026-24061 | 2026-01-26 | GNU | GNU InetUtils Argument Injection Vulnerability | 97.9% | 심각9.8 | |
| CVE-2026-23760 랜섬웨어 악용 | 2026-01-26 | SmarterTools | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path… | 96.3% | 심각9.3 | |
| CVE-2026-21509 | 2026-01-26 | Microsoft | Microsoft Office Security Feature Bypass Vulnerability | 72.6% | 높음7.8 | |
| CVE-2025-52691 랜섬웨어 악용 | 2026-01-26 | SmarterTools | SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Ty… | 85.7% | 심각10.0 |
출처: CISA KEV Catalog (미국 국토안보부 산하 CISA, 공개자료). 등재·해제 판단은 CISA 가 합니다.
심각도가 비어 있는 행이 있습니다. KEV 는 CVE 번호만 주고 점수를 주지 않으므로, 점수는 NVD 원장에서 따로 채웁니다. 아직 채워지지 않았거나 NVD 가 아직 분석하지 않은 경우 미평가 로 남습니다 — 0점이라는 뜻이 아닙니다.