Ransomware

Oracle E-Business Suite Pre-Authentication RCE Chain (CVE-2025-61882) new KEV RW EPSS 100%CVE-2025-61882webCRITICAL 9.8Patched2026-08-09Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote API Access (CVE-2023-35078) new KEV RW EPSS 100%CVE-2023-35078networkCRITICAL 9.8Unverified2026-08-09Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Unauthenticated Stack-Based Buffer Overflow (CVE-2025-22457) new KEV RW EPSS 100%CVE-2025-22457networkCRITICAL 9Unpatched2026-08-09GitLab Unauthenticated RCE via Workhorse Pre-Auth Upload into ExifTool DjVu Injection (CVE-2021-22205) new KEV RW EPSS 100%CVE-2021-22205webCRITICAL 10Patched2026-08-09CyberPanel Pre-Auth Remote Code Execution via getresetstatus Command Injection (CVE-2024-51378) new KEV RW EPSS 95%CVE-2024-51378webCRITICAL 10Patched2026-08-09SimpleHelp OIDC Authentication Bypass via Unverified JWT Signature (CVE-2026-48558) new KEV EPSS 12%CVE-2026-48558webCRITICAL 10Patched2026-07-19Fortinet FortiClient EMS Pre-Auth Bypass — "FortiBleed" (CVE-2026-35616) new KEV EPSS 91%CVE-2026-35616networkCRITICAL 9.1Patched2026-07-03Check Point Remote Access VPN IKEv1 Auth Bypass (CVE-2026-50751) new KEV RW EPSS 84%CVE-2026-50751networkCRITICAL 9.3Patched2026-06-28ToolShell - SharePoint Unauthenticated RCE Chain new KEV RW EPSS 100%CVE-2025-53770, CVE-2025-53771, CVE-2025-49704, CVE-2025-49706webCRITICALPatched2026-05-17Linux nf_tables Use-After-Free Local Privilege Escalation (CVE-2024-1086) new KEV RW EPSS 28%CVE-2024-1086binaryHIGH 7.8Patched2026-05-17Confluence SSTI RCE - CVE-2023-22527 new KEV RW EPSS 100%CVE-2023-22527webCRITICAL 10Patched2026-05-17VMware ESXi Active Directory Authentication Bypass (CVE-2024-37085) new KEV RW EPSS 27%CVE-2024-37085networkMEDIUM 6.8Patched2026-05-16