目前 EPSS 最高的漏洞
訂閱 RSS依最新一次 EPSS 模型的 30 天內被利用機率排序的 CVE。
最後更新 2026/7/21 下午1:03:41
- EPSS 100.0%—CVE-2021-21985⚠ KEVVMware vCenter Server Improper Input Validation Vulnerability
- EPSS 100.0%—CVE-2021-22005⚠ KEVVMware vCenter Server File Upload Vulnerability
- EPSS 100.0%—CVE-2019-11510⚠ KEVIvanti Pulse Connect Secure Arbitrary File Read Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft Exchange Server Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft Exchange Server Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft Remote Desktop Services Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVFortinet FortiOS SSL VPN Path Traversal Vulnerability
- EPSS 100.0%—⚠ KEVForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVF5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVCitrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVCisco HyperFlex HX Data Platform Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft HTTP.sys Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVWSO2 Multiple Products Unrestrictive Upload of File Vulnerability
- EPSS 100.0%—⚠ KEVAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVFortra GoAnywhere MFT Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVPaperCut MF/NG Improper Access Control Vulnerability
- EPSS 100.0%—⚠ KEVTP-Link Archer AX-21 Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Endpoint Manager Mobile Authentication Bypass Vulnerability
- EPSS 100.0%—⚠ KEVCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
- EPSS 100.0%—⚠ KEVAtlassian Confluence Data Center and Server Improper Authorization Vulnerability
- EPSS 100.0%—⚠ KEVSophos Web Appliance Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Connect Secure and Policy Secure Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
- EPSS 100.0%—⚠ KEVAtlassian Jira Server and Data Center Path Traversal Vulnerability
- EPSS 100.0%CRITICAL9.0⚠ KEVmod_proxy SSRF
- EPSS 100.0%CRITICAL9.8⚠ KEVbash - security update
- EPSS 100.0%LOW3.4lighttpd - security update
- EPSS 100.0%HIGH7.5⚠ KEVopenssl - security update
- EPSS 100.0%CRITICAL9.8⚠ KEVCode Injection in PHPUnit
- EPSS 100.0%—⚠ KEVWITHDRAWN: Directory traversal in FilesystemStore in github.com/gorilla/sessions
- EPSS 100.0%HIGH7.5⚠ KEVnghttp2 - security update
- EPSS 100.0%HIGH8.6apache-log4j2 - security update
- EPSS 100.0%CRITICAL10.0⚠ KEVapache-log4j2 - security update
- EPSS 100.0%CRITICAL10.0⚠ KEVApache Struts vulnerable to remote arbitrary command execution due to improper input validation
- EPSS 100.0%HIGH8.6⚠ KEVAdministration Console authentication bypass in openfire xmppserver
- EPSS 100.0%CRITICAL9.8⚠ KEVArbitrary file read vulnerability through the Jenkins CLI can lead to RCE
- EPSS 100.0%—⚠ KEVPHP-CGI Query String Parameter Vulnerability
- EPSS 100.0%—⚠ KEVHikvision Multiple Products Improper Authentication Vulnerability
- EPSS 100.0%CRITICAL9.8⚠ KEVCode injection in Apache Struts
- EPSS 100.0%—⚠ KEVOracle WebLogic Server Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
- EPSS 100.0%—⚠ KEVD-Link Multiple NAS Devices Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVD-Link Multiple Routers Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVCWP Control Web Panel OS Command Injection Vulnerability
- EPSS 100.0%HIGH7.5pdns-recursor - security update
- EPSS 100.0%CRITICAL9.8⚠ KEVMagento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
- EPSS 100.0%—⚠ KEVMultiple DrayTek Vigor Routers Web Management Page Vulnerability
- EPSS 100.0%—⚠ KEVOracle Corporation WebLogic Server Remote Code Execution Vulnerability
- EPSS 100.0%CRITICAL9.8⚠ KEVdrupal7 - security update
- EPSS 100.0%HIGH8.1⚠ KEVApache Struts vulnerable to remote command execution (RCE) due to improper input validation
- EPSS 100.0%—⚠ KEVCisco ASA and FTD Read-Only Path Traversal Vulnerability
- EPSS 100.0%CRITICAL9.8⚠ KEVPath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
- EPSS 100.0%—⚠ KEVJetBrains TeamCity Relative Path Traversal Vulnerability
- EPSS 100.0%—⚠ KEVLangflow Unauth RCE
- EPSS 100.0%—⚠ KEVZyxel Multiple NAS Devices OS Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
- EPSS 100.0%HIGH8.1⚠ KEVtomcat7 - security update
- EPSS 100.0%—⚠ KEVMicrosoft Exchange Server Privilege Escalation Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
- EPSS 100.0%CRITICAL9.8⚠ KEVArgument Injection in PHP-CGI
- EPSS 100.0%—⚠ KEVSynacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
- EPSS 100.0%—⚠ KEVIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
- EPSS 100.0%—⚠ KEVFortinet Multiple Products Authentication Bypass Vulnerability
- EPSS 100.0%—⚠ KEVAtlassian Confluence Data Center and Server Template Injection Vulnerability
- EPSS 100.0%—⚠ KEVArcadyan Buffalo Firmware Path Traversal Vulnerability
- EPSS 100.0%—⚠ KEVApache OFBiz Forced Browsing Vulnerability
- EPSS 100.0%HIGH7.8⚠ KEVlibimage-exiftool-perl - security update
- EPSS 100.0%—⚠ KEVJetBrains TeamCity Authentication Bypass Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability
- EPSS 100.0%—⚠ KEVCheck Point Quantum Security Gateways Information Disclosure Vulnerability
- EPSS 100.0%—openssl - security update
- EPSS 100.0%CRITICAL9.0⚠ KEVapache-log4j2 - security update
- EPSS 100.0%—⚠ KEVServiceNow Improper Input Validation Vulnerability
- EPSS 100.0%—⚠ KEVRealtek SDK Improper Input Validation Vulnerability
- EPSS 100.0%—drupal7 - security update
- EPSS 100.0%—⚠ KEVIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft Exchange Server Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVD-Link DNS-320 Device Command Injection Vulnerability
- EPSS 100.0%—⚠ KEVIBM Aspera Faspex Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVMicrosoft Exchange Server Validation Key Remote Code Execution Vulnerability
- EPSS 100.0%—⚠ KEVOracle WebLogic Server, Injection
- EPSS 100.0%CRITICAL9.8⚠ KEVPath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
- EPSS 100.0%—⚠ KEVMicrosoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
- EPSS 100.0%CRITICAL9.8⚠ KEVexim4 - security update
- EPSS 100.0%—⚠ KEVConnectWise ScreenConnect Authentication Bypass Vulnerability
- EPSS 100.0%CRITICAL9.1⚠ KEVApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
- EPSS 100.0%—⚠ KEVF5 BIG-IP Missing Authentication Vulnerability
- EPSS 100.0%—⚠ KEVIvanti Endpoint Manager (EPM) SQL Injection Vulnerability
- EPSS 100.0%—⚠ KEVAdobe ColdFusion Unrestricted File Upload Vulnerability
- EPSS 99.9%—⚠ KEVIvanti Sentry Authentication Bypass Vulnerability
- EPSS 99.9%—⚠ KEVDasan GPON Routers Command Injection Vulnerability
- EPSS 99.9%—⚠ KEVCrushFTP Authentication Bypass Vulnerability
- EPSS 99.9%—⚠ KEVMicrosoft Exchange Server Remote Code Execution Vulnerability
- EPSS 99.9%—⚠ KEVMicrosoft Office Memory Corruption Vulnerability
- EPSS 99.9%—⚠ KEVMicrosoft Exchange Server Server-Side Request Forgery Vulnerability
- EPSS 99.9%CRITICAL9.8⚠ KEVApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT