악용된 취약점 라이브러리
미국 사이버보안·기반시설보안청(CISA)이 2021년 11월부터 관리하는 목록에서, 공격자들이 사용한 것으로 알려진 모든 소프트웨어 결함. 매시간 업데이트됩니다.
- 1,758악용된 취약점
- 361랜섬웨어에 사용됨
- 291제조사
취약점 1,758개
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 26. | Stale Internal Request-State | PHP Group PHP | 치명적 9.2 | >99.9% |
| 2026. 10. 26. | Memory Corruption | PHP Group PHP | 치명적 9.2 | >99.9% |
| 2026. 10. 23. | SQL Injection | Arista VeloCloud Orchestrator | 치명적 9.4 | 1.0% |
| 2026. 10. 23. | Online – Built-in CODE Server OS Command Injection | Collabora Collabora Online – Built-in CODE Server | 치명적 9.2 | 12% |
| 2026. 10. 20. | External Control of File Name or Path | Plex Media Server | 높음 8.6 | 1.8% |
| 2026. 10. 20. | Server-Side Request Forgery (SSRF) | Plex Media Server | 보통 5.3 | 1.6% |
| 2026. 10. 20. | Improper Neutralization of Encoded URI Schemes in a Web Page | Plex Media Server | 보통 6.9 | 1.9% |
| 2026. 10. 20. | Server-Side Request Forgery (SSRF) | Plex Media Server | 보통 5.3 | 1.8% |
| 2026. 10. 20. | Uncontrolled Search Path Element | Siemens Software Center | 높음 8.4 | 1.0% |
| 2026. 10. 20. | OS Command Injection | EG Secure Solutions SiteGuard Server Edition | 높음 8.5 | 2.5% |
| 2026. 10. 16. | Authentication Bypass by Spoofing | BeyondTrust Remote Support | 치명적 9.3 | 20% |
| 2026. 10. 16. | Path Traversal | Fortinet Multiple Products | 보통 5.4 | 1.3% |
| 2026. 10. 15. | Files or Directories Accessible to External Parties | Atlassian Multiple Products | 치명적 9.3 | 99.5% |
| 2026. 10. 14. | Relative Path Traversal | Cisco Secure Email Gateway | 치명적 9.8 | 2.2% |
| 2026. 10. 14. | Command Injection | Ahsay AhsayCBS | 치명적 10.0 | 86% |
| 2026. 10. 14. | Improper Authentication | Ahsay AhsayCBS | 보통 6.9 | 79% |
| 2026. 10. 14. | Code Injection | Palo Alto Networks PAN-OS | 높음 8.6 | 1.7% |
| 2026. 10. 13. | Command Injection | Microsoft Windows | 높음 8.8 | 9.8% |
| 2026. 10. 13. | Authentication Bypass by Spoofing | Ivanti Connect Secure | 높음 8.6 | 87% |
| 2026. 10. 8. | Cleartext Storage of Sensitive Information | Strapi Strapi | 높음 7.2 | 4.1% |
| 2026. 10. 8. | Server Path Traversal | ONLYOFFICE Docs | 치명적 9.8 | 30% |
| 2026. 10. 8. | Command Injection | Apache Struts | 높음 8.1 | 97% |
| 2026. 10. 8. | ISC BIND Data Processing Errors | ISC BIND | 높음 7.5 | 99.6% |
| 2026. 10. 8. | Improper Access Control | ProFTPD ProFTPD | 치명적 10.0 | 99.5% |
| 2026. 10. 4. | Improper Restriction of Operations within the Bounds of a Memory Buffer | Citrix NetScaler | 높음 8.7 | 11% |
| 2026. 10. 2. | Improper Privilege Management | Zammad GmbH Zammad | 높음 8.5 | 0.9% |
| 2026. 10. 2. | Session Fixation | Zammad GmbH Zammad | 높음 8.7 | 2.0% |
| 2026. 10. 1. | Path Traversal | Fortinet FortiMail | 치명적 9.8 | 4.6% |
| 2026. 9. 30. | Hex Encoding | Cisco Catalyst SD-WAN Manager | 치명적 9.8 | 39% |
| 2026. 9. 29. | Out-of-Bounds Write | Apple Multiple Products | 높음 8.8 | 26% |
| 2026. 9. 27. | Improper Restriction of Operations within the Bounds of a Memory Buffer | Citrix NetScaler | 치명적 9.5 | 78% |
| 2026. 9. 27. | Improper Input Validation | Citrix NetScaler | 치명적 9.5 | 82% |
| 2026. 9. 25. | Remote File Inclusion | WordPress Core | 높음 8.1 | 96% |
| 2026. 9. 25. | Improper Enforcement of Behavioral Workflow | MikroTik RouterOS | 보통 6.9 | 2.3% |
| 2026. 9. 25. | Code Injection | Microsoft SharePoint | 높음 8.8 | 8.2% |
| 2026. 9. 24. | Commerce and Magento Incorrect Authorization Vulnerability | Adobe Commerce and Magento | 치명적 9.1 | 90% |
| 2026. 9. 24. | Path Traversal Vulnerability | WSO2 Multiple Products | 치명적 10.0 | 22% |
| 2026. 9. 22. | Heap-based Buffer Overflow | F5 BIG-IP APM | 치명적 9.3 | 25% |
| 2026. 9. 22. | Improper Input Validation | Arista VeloCloud Orchestrator | 치명적 9.5 | 1.4% |
| 2026. 9. 22. | Path Traversal | Check Point Multiple Products | 치명적 9.8 | 92% |
| 2026. 9. 22. | Improper Certificate Validation | Check Point Multiple Products | 치명적 9.8 | 54% |
| 2026. 9. 21. | Stack-Based Buffer Overflow | Zyxel GS1900 Series Switches | 높음 8.8 | 2.8% |
| 2026. 9. 18. | Out-of-Bounds Write | Linux Kernel | 높음 8.8 | 0.9% |
| 2026. 9. 18. | Race Condition | Linux Kernel | 높음 7.8 | 1.6% |
| 2026. 9. 18. | Improper Check for Unusual or Exceptional Conditions | Linux Kernel | 치명적 9.8 | 3.3% |
| 2026. 9. 16. | Incorrect Default Permissions | Acronis Backup | 높음 7.8 | 0.2% |
| 2026. 9. 16. | Incorrect Use of Privileged APIs | Cisco Identity Services Engine | 치명적 10.0 | 76% |
| 2026. 9. 16. | Improper Authorization | Google Pixel | 높음 8.8 | 0.6% |
| 2026. 9. 14. | SQL Injection | Cisco Secure Email Gateway | 치명적 9.8 | 30% |
| 2026. 9. 11. | Path Traversal | GitLab Community Edition and Enterprise Edition | 치명적 10.0 | 97% |
가장 많이 노려진 제조사
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 82
- Google 75
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 31
- Citrix 27
- VMware 26
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.