// THREAT RADAR

📡 The most dangerous CVEs right now

A self-updating ranking that combines three signals: whether it is actively exploited (CISA KEV), the exploit probability (EPSS) and the severity (CVSS). Not "the latest published", but what actually matters to prioritize.

On radar40
Exploited (KEV)3
Updated7h ago
🎯 How it is ranked: score = EPSS + CVSS + KEV + recency. The KEV badge means active exploitation confirmed by CISA. Each CVE links to its NVD record and to the CVSS and patch prioritization tools.

📬 This week in exploited CVEs, every Monday by email · 📡 Subscribe via RSS · 🧩 Embed the “CVE of the day” on your site · 🌉 Turn a CVE into detection

Filter
#1
CVE-2021-23758 High 8.1 Exploited (KEV)
n/a AjaxPro.2
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
Analysis

🔴 Critical — actively exploited

Weakness: Insecure Deserialization (CWE-502). Untrusted serialized data leads to code execution.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, with high complexity.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Active exploitation confirmed by CISA (KEV).

How to defend:
  • Patch now: it is in CISA's actively-exploited catalog (KEV), with a deadline.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

83%EPSS
8.1CVSS
#2
CVE-2023-22518 Critical 10.0
Atlassian Confluence Data Center
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrat…
Analysis

🟠 High — imminent exploitation

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity. The flaw can pivot to other components (scope changed).

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
10.0CVSS
#3
CVE-2021-44228 Critical 10.0
Apache Software Foundation Apache Log4j2
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoin…
Analysis

🟠 High — imminent exploitation

Weakness: Insecure Deserialization (CWE-502). Untrusted serialized data leads to code execution.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity. The flaw can pivot to other components (scope changed).

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
10.0CVSS
#4
CVE-2019-11510 Critical 10.0
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity. The flaw can pivot to other components (scope changed).

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
10.0CVSS
#5
CVE-2024-23897 Critical 9.8
Jenkins Project Jenkins
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to r…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#6
CVE-2023-35082 Critical 9.8
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-350…
Analysis

🟠 High — imminent exploitation

Weakness: Improper Authentication (CWE-287). Allows impersonation or login bypass.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#7
CVE-2023-35078 Critical 9.8
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
Analysis

🟠 High — imminent exploitation

Weakness: Improper Authentication (CWE-287). Allows impersonation or login bypass.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#8
CVE-2023-29300 Critical 9.8
Adobe ColdFusion
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this i…
Analysis

🟠 High — imminent exploitation

Weakness: Insecure Deserialization (CWE-502). Untrusted serialized data leads to code execution.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#9
CVE-2023-27350 Critical 9.8
PaperCut NG
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompl…
Analysis

🟠 High — imminent exploitation

Weakness: Improper Access Control (CWE-284). Fails to properly restrict who can do what.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#10
CVE-2023-1671 Critical 9.8
Sophos Sophos Web Appliance
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Analysis

🟠 High — imminent exploitation

Weakness: Command Injection (CWE-77). Runs commands via unsanitized input.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#11
CVE-2022-26134 Critical 9.8
Atlassian Confluence Data Center
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions…
Analysis

🟠 High — imminent exploitation

Weakness: Expression Language Injection (CWE-917). Injects expressions the server evaluates (Log4Shell-style).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#12
CVE-2022-29464 Critical 9.8
n/a n/a
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such a…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#13
CVE-2021-41773 Critical 9.8
Apache Software Foundation Apache HTTP Server
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#14
CVE-2021-22005 Critical 9.8
n/a VMware vCenter Server, VMware Cloud Foundation
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specia…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#15
CVE-2021-26084 Critical 9.8
Atlassian Confluence Server
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions…
Analysis

🟠 High — imminent exploitation

Weakness: Expression Language Injection (CWE-917). Injects expressions the server evaluates (Log4Shell-style).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#16
CVE-2021-35464 Critical 9.8
n/a n/a
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single c…
Analysis

🟠 High — imminent exploitation

Weakness: Insecure Deserialization (CWE-502). Untrusted serialized data leads to code execution.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#17
CVE-2021-21985 Critical 9.8
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port…
Analysis

🟠 High — imminent exploitation

Weakness: Server-Side Request Forgery (SSRF) (CWE-918). Forces the server to make requests to internal targets.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#18
CVE-2021-1498 Critical 9.8
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerab…
Analysis

🟠 High — imminent exploitation

Weakness: OS Command Injection (CWE-78). Runs operating-system commands via unsanitized input.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#19
CVE-2020-5902 Critical 9.8
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vuln…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#20
CVE-2019-19781 Critical 9.8
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#21
CVE-2019-0708 Critical 9.8
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop…
Analysis

🟠 High — imminent exploitation

Weakness: Use After Free (CWE-416). Uses freed memory; can lead to code execution.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
9.8CVSS
#22
CVE-2017-9841 Critical 9.8
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "
Analysis

🟠 High — imminent exploitation

Weakness: Code Injection (CWE-94). Executes arbitrary code injected into the app.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#23
CVE-2017-7921 Critical 9.8
n/a Hikvision Cameras
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4…
Analysis

🟠 High — imminent exploitation

Weakness: Improper Authentication (CWE-287). Allows impersonation or login bypass.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.8CVSS
#24
CVE-2014-6271 Critical 9.8
n/a n/a
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the…
Analysis

🟠 High — imminent exploitation

Weakness: OS Command Injection (CWE-78). Runs operating-system commands via unsanitized input.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.8CVSS
#25
CVE-2023-42793 Critical 9.8
JetBrains TeamCity
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Analysis

🟠 High — imminent exploitation

Weakness: CWE-288.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
9.8CVSS
#26
CVE-2023-4966 Critical 9.4
Citrix NetScaler ADC
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.
Analysis

🟠 High — imminent exploitation

Weakness: Buffer Overflow (CWE-119). Writes past the buffer; memory corruption or RCE.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity high · Availability partial.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
9.4CVSS
#27
CVE-2024-21887 Critical 9.1
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the ap…
Analysis

🟠 High — imminent exploitation

Weakness: Command Injection (CWE-77). Runs commands via unsanitized input.

How it's exploited: Exploitable over the network (internet-reachable), with high privileges, no user interaction, and with low complexity. The flaw can pivot to other components (scope changed).

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
9.1CVSS
#28
CVE-2021-34473 Critical 9.1
Microsoft Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server Remote Code Execution Vulnerability
Analysis

🟠 High — imminent exploitation

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity high · Availability none.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
9.1CVSS
#29
CVE-2018-13379 Critical 9.1
Fortinet Fortinet FortiOS, FortiProxy
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity none · Availability high.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.1CVSS
#30
CVE-2021-40438 Critical 9.0
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Analysis

🟠 High — imminent exploitation

Weakness: Server-Side Request Forgery (SSRF) (CWE-918). Forces the server to make requests to internal targets.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, with high complexity. The flaw can pivot to other components (scope changed).

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
9.0CVSS
#31
CVE-2019-1068 High 8.8 Exploited (KEV)
Microsoft Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.
Analysis

🔴 Critical — actively exploited

Weakness: Improper Input Validation (CWE-20). Fails to validate input before using it.

How it's exploited: Exploitable over the network (internet-reachable), with low privileges, no user interaction, and with low complexity.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Active exploitation confirmed by CISA (KEV).

How to defend:
  • Patch now: it is in CISA's actively-exploited catalog (KEV), with a deadline.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
58%EPSS
8.8CVSS
#32
CVE-2023-1389 High 8.8
n/a TP-Link Archer AX21 (AX1800)
TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the countr…
Analysis

🟠 High — imminent exploitation

Weakness: Command Injection (CWE-77). Runs commands via unsanitized input.

How it's exploited: Exploitable from the local network (adjacent), unauthenticated, no user interaction, and with low complexity.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
8.8CVSS
#33
CVE-2024-21182 High 7.5 Exploited (KEV)
Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with ne…
Analysis

🔴 Critical — actively exploited

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity none · Availability none.

Status: Active exploitation confirmed by CISA (KEV).

How to defend:
  • Patch now: it is in CISA's actively-exploited catalog (KEV), with a deadline.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
74%EPSS
7.5CVSS
#34
CVE-2023-32315 High 8.6
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauth…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity partial · Availability partial.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
8.6CVSS
#35
CVE-2024-21893 High 8.2
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authen…
Analysis

🟠 High — imminent exploitation

Weakness: Server-Side Request Forgery (SSRF) (CWE-918). Forces the server to make requests to internal targets.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality high · Integrity partial · Availability none.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
8.2CVSS
#36
CVE-2023-44487 High 7.5
n/a n/a
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Analysis

🟠 High — imminent exploitation

Weakness: Uncontrolled Resource Consumption (CWE-400). Exhausts system resources (denial of service).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality none · Integrity none · Availability high.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
7.5CVSS
#37
CVE-2024-27199 High 7.3
JetBrains TeamCity
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
Analysis

🟠 High — imminent exploitation

Weakness: CWE-23.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality partial · Integrity partial · Availability partial.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
7.3CVSS
#38
CVE-2023-0669 High 7.2
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version…
Analysis

🟠 High — imminent exploitation

Weakness: Insecure Deserialization (CWE-502). Untrusted serialized data leads to code execution.

How it's exploited: Exploitable over the network (internet-reachable), with high privileges, no user interaction, and with low complexity.

Impact: Full compromise (confidentiality, integrity and availability).

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application · T1059 · Command and Scripting Interpreter

Practice it in the arsenal: WAF Bypass · PowerShell Decoder · Reverse Shells

100%EPSS
7.2CVSS
#39
CVE-2021-45105 Medium 5.9
Apache Software Foundation Apache Log4j2
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of…
Analysis

🟠 High — imminent exploitation

Weakness: Improper Input Validation (CWE-20). Fails to validate input before using it.

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, with high complexity.

Impact: Confidentiality none · Integrity none · Availability high.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.
100%EPSS
5.9CVSS
#40
CVE-2021-26086 Medium 5.3
Atlassian Jira Server
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8…
Analysis

🟠 High — imminent exploitation

Weakness: Path Traversal (CWE-22). Accesses files outside the intended directory (../).

How it's exploited: Exploitable over the network (internet-reachable), unauthenticated, no user interaction, and with low complexity.

⚠️ Critical combo: remote, unauthenticated and no interaction → trivial to automate.

Impact: Confidentiality partial · Integrity none · Availability none.

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:
  • Apply the vendor patch according to risk priority.
  • Reduce exposure: keep it off the internet; firewall, VPN or network segmentation.
  • Detect: turn this CVE into detection rules.

MITRE ATT&CK technique: T1190 · Exploit Public-Facing Application

Practice it in the arsenal: WAF Bypass

100%EPSS
5.3CVSS

Sources: CISA KEV · EPSS · FIRST.org · CIRCL · NVD. Data is informational only; always verify against the vendor's official advisory.