Patchfirst
Patchfirst
T1078Initial AccessPersistencePrivilege EscalationStealth

Valid Accounts

Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook…

attack.mitre.org ↗
CVEs243
In 194
Reports1
Sub-techniques T1078.001Default Accounts9T1078.002Domain AccountsT1078.003Local Accounts1T1078.004Cloud Accounts1

Detections

56 Sigma rules tagged T1078
Valid AccountsT107856 general rules
All 56 on SigmaHQ ↗

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Valid Accounts

Top 150 of 243 by priority. Each link shows its badge.
  1. CVE-2026-18577N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts7 reports
    AI mapping from the description · primary impact
    14.6%Top 3.3%
    88.0priority
  2. CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more · 4 reports
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.02%
    87.7priority
  3. CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    AI mapping from the description · how it is exploited
    11.8%Top 3.9%
    86.1priority
  4. CVE-2018-10561Dasan GPON Routers Authentication Bypass Vulnerability
    Dasan · Gigabit Passive Optical Network (GPON) RoutersKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts2 reports
    AI mapping from the description · primary impact
    92.8%Top 0.17%
    86.0priority
  5. CVE-2025-61757Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
    Oracle · Fusion MiddlewareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    88.6%Top 0.23%
    84.8priority
  6. CVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
    SmarterTools · SmarterMailKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    96.4%Top 0.12%
    84.8priority
  7. CVE-2026-24061GNU InetUtils Argument Injection Vulnerability
    GNU · InetUtilsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    99.0%Top 0.07%
    84.8priority
  8. CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
    Oracle · PeopleSoft Enterprise PeopleToolsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    96.7%Top 0.12%
    84.8priority
  9. CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
    WebPros · cPanel & WHM and WP2 (WordPress Squared)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    98.5%Top 0.08%
    84.8priority
  10. CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    68.3%Top 0.67%
    84.7priority
  11. CVE-2026-50751Check Point Security Gateway Improper Authentication Vulnerability
    Check Point · Security GatewayKEVRansomwarePublic exploitCritical · 9.3T1133External Remote ServicesT1078Valid Accounts
    AI mapping from the description · primary impact
    85.3%Top 0.28%
    84.5priority
  12. CVE-2024-1709ConnectWise ScreenConnect Authentication Bypass Vulnerability
    ConnectWise · ScreenConnectKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    83.9priority
  13. CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+2 more · 1 report
    MITRE CTID mapping of the KEV entry · primary impact
    94.3%Top 0.15%
    83.7priority
  14. CVE-2021-42321Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · ExchangeKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · how it is exploited
    91.7%Top 0.19%
    83.0priority
  15. CVE-2014-1812Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1552.006Group Policy Preferences1 report
    AI mapping from the description · how it is exploited
    65.1%Top 0.75%
    82.9priority
  16. CVE-2024-20359Cisco ASA and FTD Privilege Escalation Vulnerability
    Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)KEVPublic exploitMedium · 6.0T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    18.8%Top 2.7%
    82.8priority
  17. CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control Vulnerability
    Microsoft · DefenderKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    6.7%Top 6%
    82.3priority
  18. CVE-2026-18556N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
    N-able · N-centralKEVPublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1078Valid Accounts5 reports
    AI mapping from the description · primary impact
    7.9%Top 5.3%
    82.1priority
  19. CVE-2021-42278Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · primary impact
    73.3%Top 0.54%
    82.0priority
  20. CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Pulse Connect Secure and Pulse Policy SecureKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    AI mapping from the description · how it is exploited
    98.5%Top 0.08%
    81.9priority
  21. CVE-2025-53771Microsoft SharePoint Server Spoofing Vulnerability
    Microsoft · Microsoft SharePoint Enterprise Server 2016Public exploitMedium · 6.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    99.9%Top 0.03%
    81.4priority
  22. CVE-2026-20316Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
    Cisco · Secure Firewall Management Center (FMC)KEVRansomwareMedium · 5.3T1078Valid AccountsT1005Data from Local System1 report
    AI mapping from the description · how it is exploited
    35.1%Top 1.6%
    80.3priority
  23. CVE-2022-1040Sophos Firewall Authentication Bypass Vulnerability
    Sophos · FirewallKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+4 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.8%Top 0.04%
    79.9priority
  24. CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron CoreKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    79.9priority
  25. CVE-2024-0012Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    99.8%Top 0.04%
    79.9priority
  26. CVE-2025-31161CrushFTP Authentication Bypass Vulnerability
    CrushFTP · CrushFTPKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    >99.9%Top 0.02%
    79.9priority
  27. CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability
    SonicWall · SMA1000 applianceKEVPublic exploitMedium · 6.6T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    2.8%Top 14%
    79.9priority
  28. CVE-2025-61882Oracle E-Business Suite Unspecified Vulnerability
    Oracle · E-Business SuiteKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    99.7%Top 0.05%
    79.9priority
  29. CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
    Cisco · Identity Services EngineKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    75.6%Top 0.48%
    79.9priority
  30. CVE-2019-7192QNAP Photo Station Improper Access Control Vulnerability
    QNAP · Photo StationKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    88.1%Top 0.23%
    79.8priority
  31. CVE-2021-28799QNAP NAS Improper Authorization Vulnerability
    QNAP · Network Attached Storage (NAS)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    78.3%Top 0.42%
    79.8priority
  32. CVE-2022-21587Oracle E-Business Suite Unspecified Vulnerability
    Oracle · E-Business SuiteKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    98.3%Top 0.08%
    79.8priority
  33. CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
    Atlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+3 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    99.2%Top 0.07%
    79.8priority
  34. CVE-2023-23397Microsoft Office Outlook Privilege Escalation Vulnerability
    Microsoft · OfficeKEVPublic exploitCritical · 9.8T1078Valid AccountsT1550.002Pass the Hash
    MITRE CTID mapping of the KEV entry · follow-on activity
    97.2%Top 0.11%
    79.8priority
  35. CVE-2024-57726SimpleHelp Missing Authorization Vulnerability
    SimpleHelp · SimpleHelpKEVRansomwarePublic exploitCritical · 9.9T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    66.4%Top 0.72%
    79.8priority
  36. CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
    Cisco · Catalyst SD-WAN ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    38.9%Top 1.4%
    79.6priority
  37. CVE-2026-5430WSO2 Multiple Products Path Traversal Vulnerability
    WSO2 · Multiple ProductsKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    22.4%Top 2.3%
    79.5priority
  38. CVE-2026-55040Microsoft SharePoint Weak Authentication Vulnerability
    Microsoft · SharePointKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    69.5%Top 0.64%
    79.2priority
  39. CVE-2026-82329JFrog Artifactory Improper Authentication Vulnerability
    JFrog · ArtifactoryKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    14.4%Top 3.4%
    79.2priority
  40. CVE-2022-26923Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    83.5%Top 0.32%
    79.1priority
  41. CVE-2022-41080Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    77.3%Top 0.44%
    79.1priority
  42. CVE-2025-33073Microsoft Windows SMB Client Improper Access Control Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    82.7%Top 0.33%
    79.1priority
  43. CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
    SonicWall · SMA1000 AppliancesKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    8.0%Top 5.2%
    79.0priority
  44. CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
    Ivanti · Connect Secure, Policy Secure, and NeuronsKEVRansomwarePublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more
    MITRE CTID mapping of the KEV entry · primary impact
    >99.9%Top 0.01%
    78.7priority
  45. CVE-2022-41082Microsoft Exchange Server Remote Code Execution Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.0T1078Valid AccountsT1059.001PowerShell+4 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    >99.9%Top 0.02%
    78.6priority
  46. CVE-2013-3660Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    39.3%Top 1.4%
    78.2priority
  47. CVE-2019-0841Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    41.4%Top 1.3%
    78.2priority
  48. CVE-2020-2021Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    4.4%Top 8.8%
    78.2priority
  49. CVE-2022-21999Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    41.0%Top 1.3%
    78.2priority
  50. CVE-2023-27351PaperCut NG/MF Improper Authentication Vulnerability
    PaperCut · NG/MFKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    78.1%Top 0.42%
    78.2priority
  51. CVE-2023-28252Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+5 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    48.9%Top 1.1%
    78.2priority
  52. CVE-2022-37969Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    28.5%Top 1.9%
    78.1priority
  53. CVE-2024-27199JetBrains TeamCity Relative Path Traversal Vulnerability
    JetBrains · TeamCityKEVRansomwarePublic exploitHigh · 7.3T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    78.1priority
  54. CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
    Oracle · VirtualBoxKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    6.9%Top 5.9%
    78.0priority
  55. CVE-2024-9474Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    93.8%Top 0.16%
    78.0priority
  56. CVE-2025-68613n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
    n8n · n8nKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    AI mapping from the description · how it is exploited
    99.0%Top 0.07%
    78.0priority
  57. CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability
    Ahsay · AhsayCBSKEVPublic exploitHigh · 7.3T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    79.5%Top 0.4%
    78.0priority
  58. CVE-2019-1322Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    18.8%Top 2.7%
    77.9priority
  59. CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
    Citrix · StoreFront ServerKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    30.0%Top 1.8%
    77.9priority
  60. CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
    Citrix · Workspace Application and Receiver for WindowsKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+5 more · 1 report
    MITRE CTID mapping of the KEV entry · follow-on activity
    8.1%Top 5.2%
    77.7priority
  61. CVE-2019-1253Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    11.6%Top 4%
    77.7priority
  62. CVE-2020-3433Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
    Cisco · AnyConnect SecureKEVRansomwarePublic exploitHigh · 7.8T1078Valid Accounts
    AI mapping from the description · how it is exploited
    10.0%Top 4.4%
    77.6priority
  63. CVE-2024-37085VMware ESXi Authentication Bypass Vulnerability
    VMware · ESXiKEVRansomwarePublic exploitHigh · 7.2T1608.001Upload MalwareT1078Valid Accounts+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    26.8%Top 2%
    77.6priority
  64. CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVPublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    9.9%Top 4.4%
    77.6priority
  65. CVE-2019-1064Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    6.9%Top 5.9%
    77.3priority
  66. CVE-2022-24521Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    7.1%Top 5.7%
    77.3priority
  67. CVE-2020-3153Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
    Cisco · AnyConnect SecureKEVRansomwarePublic exploitMedium · 6.5T1078Valid AccountsT1574.001DLL+1 more
    AI mapping from the description · how it is exploited
    28.5%Top 1.9%
    77.2priority
  68. CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
    Red Hat · Automatic Bug Reporting ToolKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    5.0%Top 7.8%
    76.9priority
  69. CVE-2021-36955Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    4.1%Top 9.3%
    76.6priority
  70. CVE-2026-16232Check Point SmartConsole Improper Authentication Vulnerability
    Check Point · SmartConsoleKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    3.5%Top 11%
    76.6priority
  71. CVE-2019-1315Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.5%Top 11%
    76.3priority
  72. CVE-2023-20867VMware Tools Authentication Bypass Vulnerability
    VMware · ToolsKEVLow · 3.9T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    13.6%Top 3.5%
    76.2priority
  73. CVE-2018-9995TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR…
    Public exploitT1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    82.3%Top 0.34%
    76.0priority
  74. CVE-2022-41073Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1574Hijack Execution Flow+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    2.4%Top 16%
    75.2priority
  75. CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
    Cisco · Catalyst SD-WAN Controller and ManagerKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    89.3%Top 0.22%
    75.0priority
  76. CVE-2026-48558SimpleHelp Authentication Bypass Vulnerability
    SimpleHelp · SimpleHelpKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    77.7%Top 0.44%
    74.9priority
  77. CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass Vulnerability
    SolarWinds · Web Help DeskKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    73.6%Top 0.53%
    74.8priority
  78. CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    86.6%Top 0.26%
    74.8priority
  79. CVE-2021-22681Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
    Rockwell · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    63.6%Top 0.79%
    74.7priority
  80. CVE-2023-22894Strapi Cleartext Storage of Sensitive Information Vulnerability
    Strapi · StrapiKEVPublic exploitMedium · 4.9T1078Valid AccountsT1212Exploitation for Credential Access
    AI mapping from the description · how it is exploited
    4.1%Top 9.2%
    74.6priority
  81. CVE-2025-12480Gladinet Triofox Improper Access Control Vulnerability
    Gladinet · TriofoxKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    95.7%Top 0.13%
    74.3priority
  82. CVE-2023-20273Cisco IOS XE Web UI Command Injection Vulnerability
    Cisco · Cisco IOS XE Web UIKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    92.9%Top 0.17%
    74.1priority
  83. CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
    Cisco · Adaptive Security Appliance and Firepower Threat DefenseKEVRansomwareCritical · 9.1T1133External Remote ServicesT1078Valid Accounts
    MITRE CTID mapping of the KEV entry · primary impact
    26.6%Top 2%
    74.0priority
  84. CVE-2021-20090Arcadyan Buffalo Firmware Path Traversal Vulnerability
    Arcadyan · Buffalo FirmwareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    73.7priority
  85. CVE-2021-33044Dahua IP Camera Authentication Bypass Vulnerability
    Dahua · IP Camera FirmwareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    73.7priority
  86. CVE-2021-33045Dahua IP Camera Authentication Bypass Vulnerability
    Dahua · IP Camera FirmwareKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    99.6%Top 0.05%
    73.7priority
  87. CVE-2024-20399Cisco NX-OS Command Injection Vulnerability
    Cisco · NX-OSKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter3 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    4.3%Top 8.9%
    73.7priority
  88. CVE-2026-0322Palo Alto Networks PAN-OS Code Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    1.7%Top 22%
    73.6priority
  89. CVE-2021-32648October CMS Improper Authentication
    October CMS · October CMSKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report
    AI mapping from the description · primary impact
    90.4%Top 0.2%
    73.2priority
  90. CVE-2026-42016JFrog Artifactory Incorrect Authorization Vulnerability
    JFrog · ArtifactoryKEVHigh · 8.8T1078Valid Accounts
    AI mapping from the description · how it is exploited
    8.6%Top 4.9%
    73.2priority
  91. CVE-2026-96656Plex Media Server External Control of File Name or Path Vulnerability
    Plex · Media ServerKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    1.8%Top 22%
    73.1priority
  92. CVE-2014-6324Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
    Microsoft · Kerberos Key Distribution Center (KDC)KEVPublic exploitHigh · 8.8T1078Valid AccountsT1558Steal or Forge Kerberos Tickets1 report
    AI mapping from the description · how it is exploited
    87.3%Top 0.25%
    73.0priority
  93. CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability
    VMware · vCenter ServerKEVPublic exploitMedium · 6.5T1078Valid AccountsT1068Exploitation for Privilege Escalation+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    13.3%Top 3.6%
    73.0priority
  94. CVE-2017-6736Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 1 report
    AI mapping from the description · how it is exploited
    70.4%Top 0.62%
    72.9priority
  95. CVE-2022-26500Veeam Backup & Replication Remote Code Execution Vulnerability
    Veeam · Backup & ReplicationKEVRansomwareHigh · 8.8T1078Valid AccountsT1190Exploit Public-Facing Application+3 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    5.8%Top 6.9%
    72.8priority
  96. CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability
    Arista · VeloCloud OrchestratorKEVPublic exploitCritical · 9.9T1078Valid AccountsT1190Exploit Public-Facing Application+1 more
    AI mapping from the description · how it is exploited
    1.0%Top 36%
    72.5priority
  97. CVE-2021-20022SonicWall Email Security Unrestricted Upload of File Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwareHigh · 7.2T1078Valid AccountsT1105Ingress Tool Transfer
    AI mapping from the description · how it is exploited
    16.6%Top 3%
    72.4priority
  98. CVE-2026-34926Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
    Trend Micro · Apex OneKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    13.4%Top 3.6%
    72.0priority
  99. CVE-2010-4398Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+1 more · 1 report
    AI mapping from the description · how it is exploited
    8.7%Top 4.9%
    71.4priority
  100. CVE-2019-1385Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.6%Top 11%
    71.4priority
  101. CVE-2021-41379Microsoft Windows Installer Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareMedium · 5.5T1078Valid AccountsT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    19.5%Top 2.6%
    71.3priority
  102. CVE-2021-20023SonicWall Email Security Path Traversal Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwareMedium · 4.9T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · how it is exploited
    51.7%Top 1.1%
    71.2priority
  103. CVE-2025-62215Microsoft Windows Race Condition Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.0T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    4.5%Top 8.6%
    71.2priority
  104. CVE-2026-20805Microsoft Windows Information Disclosure Vulnerability
    Microsoft · WindowsKEVPublic exploitMedium · 5.5T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · how it is exploited
    7.5%Top 5.5%
    70.7priority
  105. CVE-2020-0638Microsoft Update Notification Manager Privilege Escalation Vulnerability
    Microsoft · Update Notification ManagerKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    2.4%Top 16%
    70.2priority
  106. CVE-2020-6287SAP NetWeaver Missing Authentication for Critical Function Vulnerability
    SAP · NetWeaverKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    94.7%Top 0.14%
    70.0priority
  107. CVE-2017-7921Hikvision Multiple Products Improper Authentication Vulnerability
    Hikvision · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    69.9priority
  108. CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
    Ivanti · Virtual Traffic ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    >99.9%Top 0.01%
    69.9priority
  109. CVE-2025-24016Wazuh Server Deserialization of Untrusted Data Vulnerability
    Wazuh · Wazuh ServerKEVPublic exploitCritical · 9.9T1078Valid AccountsT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · how it is exploited
    93.8%Top 0.16%
    69.9priority
  110. CVE-2019-7238Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
    Sonatype · Nexus Repository ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    76.6%Top 0.46%
    69.8priority
  111. CVE-2020-29583Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
    Zyxel · Multiple ProductsKEVPublic exploitCritical · 9.8T1078Valid Accounts
    AI mapping from the description · how it is exploited
    90.2%Top 0.2%
    69.8priority
  112. CVE-2020-3952VMware vCenter Server Information Disclosure Vulnerability
    VMware · vCenter ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    90.4%Top 0.2%
    69.8priority
  113. CVE-2020-6207SAP Solution Manager Missing Authentication for Critical Function Vulnerability
    SAP · Solution ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    98.1%Top 0.09%
    69.8priority
  114. CVE-2022-23131Zabbix Frontend Authentication Bypass Vulnerability
    Zabbix · FrontendKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    95.7%Top 0.13%
    69.8priority
  115. CVE-2022-24706Apache CouchDB Insecure Default Initialization of Resource Vulnerability
    Apache · CouchDBKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    92.5%Top 0.17%
    69.8priority
  116. CVE-2023-27524Apache Superset Insecure Default Initialization of Resource Vulnerability
    Apache · SupersetKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    MITRE CTID mapping of the KEV entry · primary impact
    98.1%Top 0.09%
    69.8priority
  117. CVE-2023-7028GitLab Community and Enterprise Editions Improper Access Control Vulnerability
    GitLab · GitLab CE/EEKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    94.5%Top 0.15%
    69.8priority
  118. CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
    D-Link · Multiple NAS DevicesKEVPublic exploitCritical · 9.8T1078Valid AccountsT1552Unsecured Credentials
    AI mapping from the description · primary impact
    98.1%Top 0.09%
    69.8priority
  119. CVE-2024-5910Palo Alto Networks Expedition Missing Authentication Vulnerability
    Palo Alto Networks · ExpeditionKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    91.7%Top 0.19%
    69.8priority
  120. CVE-2025-2746Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Kentico · Xperience CMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    74.1%Top 0.52%
    69.8priority
  121. CVE-2025-2747Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Kentico · Xperience CMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    97.2%Top 0.1%
    69.8priority
  122. CVE-2015-7755Juniper ScreenOS Improper Authentication Vulnerability
    Juniper · ScreenOSKEVPublic exploitCritical · 9.8T1078Valid AccountsT1021.004SSH
    AI mapping from the description · how it is exploited
    61.1%Top 0.84%
    69.7priority
  123. CVE-2020-4427IBM Data Risk Manager Security Bypass Vulnerability
    IBM · Data Risk ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    70.0%Top 0.63%
    69.7priority
  124. CVE-2023-45249Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
    Acronis · Cyber Infrastructure (ACI)KEVPublic exploitCritical · 9.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    53.3%Top 1%
    69.7priority
  125. CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
    Dell · RecoverPoint for Virtual Machines (RP4VMs)KEVCritical · 10.0T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    13.5%Top 3.6%
    69.3priority
  126. CVE-2019-1129Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    1.8%Top 22%
    69.1priority
  127. CVE-2019-15949Nagios XI Remote Code Execution Vulnerability
    Nagios · Nagios XIKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    77.0%Top 0.45%
    69.1priority
  128. CVE-2023-22952Multiple SugarCRM Products Remote Code Execution Vulnerability
    SugarCRM · Multiple ProductsKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+7 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    80.1%Top 0.38%
    69.1priority
  129. CVE-2019-1130Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    1.7%Top 23%
    68.9priority
  130. CVE-2021-38163SAP NetWeaver Unrestricted File Upload Vulnerability
    SAP · NetWeaverKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    36.9%Top 1.5%
    68.9priority
  131. CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection Vulnerability
    ASUS · RT-AX55 RoutersKEVPublic exploitHigh · 8.8T1588Obtain CapabilitiesT1078Valid Accounts+3 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    39.5%Top 1.4%
    68.9priority
  132. CVE-2022-40799D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
    D-Link · DNR-322LKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    33.7%Top 1.6%
    68.8priority
  133. CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    34.2%Top 1.6%
    68.8priority
  134. CVE-2024-57968Advantive VeraCore Unrestricted File Upload Vulnerability
    Advantive · VeraCoreKEVPublic exploitHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter
    MITRE CTID mapping of the KEV entry · how it is exploited
    32.3%Top 1.7%
    68.8priority
  135. CVE-2019-3010Oracle Solaris Privilege Escalation Vulnerability
    Oracle · SolarisKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    13.4%Top 3.6%
    68.4priority
  136. CVE-2021-36934Microsoft Windows SAM Local Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    67.3%Top 0.7%
    68.3priority
  137. CVE-2017-16651Roundcube Webmail File Disclosure Vulnerability
    Roundcube · Roundcube WebmailKEVPublic exploitHigh · 7.8T1078Valid AccountsT1005Data from Local System
    AI mapping from the description · how it is exploited
    45.7%Top 1.2%
    68.2priority
  138. CVE-2020-5849Unraid Authentication Bypass Vulnerability
    Unraid · UnraidKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    AI mapping from the description · primary impact
    93.2%Top 0.17%
    68.2priority
  139. CVE-2023-36874Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1078Valid Accounts
    AI mapping from the description · how it is exploited
    42.6%Top 1.3%
    68.2priority
  140. CVE-2025-34026Versa Concerto Improper Authentication Vulnerability
    Versa · ConcertoKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1078Valid Accounts+1 more
    AI mapping from the description · primary impact
    81.8%Top 0.36%
    68.2priority
  141. CVE-2023-28434MinIO Security Feature Bypass Vulnerability
    MinIO · MinIOKEVPublic exploitHigh · 8.8T1078Valid AccountsT1565Data Manipulation
    AI mapping from the description · how it is exploited
    7.9%Top 5.3%
    68.1priority
  142. CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability
    Citrix · Session RecordingKEVPublic exploitHigh · 8.0T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    21.1%Top 2.4%
    68.1priority
  143. CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
    Cisco · Adaptive Security Appliance (ASA)KEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    22.6%Top 2.3%
    68.0priority
  144. CVE-2018-9276Paessler PRTG Network Monitor OS Command Injection Vulnerability
    Paessler · PRTG Network MonitorKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    87.0%Top 0.25%
    68.0priority
  145. CVE-2020-8816Pi-Hole AdminLTE Remote Code Execution Vulnerability
    Pi-hole · AdminLTEKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    78.3%Top 0.42%
    68.0priority
  146. CVE-2021-3560Red Hat Polkit Incorrect Authorization Vulnerability
    Red Hat · PolkitKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    23.7%Top 2.2%
    68.0priority
  147. CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection Vulnerability
    Ivanti · Cloud Services ApplianceKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    88.5%Top 0.23%
    68.0priority
  148. CVE-2010-4345Exim Privilege Escalation Vulnerability
    Exim · EximKEVPublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    18.0%Top 2.8%
    67.9priority
  149. CVE-2021-22894Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
    Ivanti · Pulse Connect SecureKEVHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    MITRE CTID mapping of the KEV entry · how it is exploited
    41.3%Top 1.3%
    67.8priority
  150. CVE-2019-11001Reolink Multiple IP Cameras OS Command Injection Vulnerability
    Reolink · Multiple IP CamerasKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    AI mapping from the description · how it is exploited
    37.5%Top 1.5%
    67.7priority

Linked through a sub-technique

11 more
  1. CVE-2024-53704SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
    SonicWall · SonicOSKEVRansomwarePublic exploitCritical · 9.8T1199Trusted RelationshipT1078.004Cloud Accounts+2 more
    95.3%Top 0.13%
    79.8priority
  2. CVE-2021-44168Fortinet FortiOS Arbitrary File Download
    Fortinet · FortiOSKEVPublic exploitHigh · 7.8T1078.003Local AccountsT1601Modify System Image
    0.9%Top 40%
    60.4priority
  3. CVE-2020-14510OFF-BY-ONE ERROR CWE-193
    Secomea · GateManagerCritical · 9.8T1078.001Default AccountsT1059Command and Scripting Interpreter+1 more
    2.5%Top 15%
    23.8priority
  4. CVE-2020-5374Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…
    Dell · OMIMSSC (OpenManage Integration for Microsoft System Center)High · 8.8T1078.001Default Accounts
    1.0%Top 36%
    19.0priority
  5. CVE-2019-10990Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password…
    Medium · 6.5T1078.001Default Accounts
    1.3%Top 29%
    18.8priority
  6. CVE-2020-5364Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability
    Dell · Isilon OneFSMedium · 5.3T1078.001Default AccountsT1005Data from Local System
    1.0%Top 38%
    16.2priority
  7. CVE-2020-5365Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability
    Dell · Isilon OneFSMedium · 5.3T1078.001Default AccountsT1110Brute Force
    1.0%Top 38%
    16.2priority
  8. CVE-2018-10633Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow…
    Universal Robots · Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100T1078.001Default Accounts
    1.8%Top 21%
    15.7priority
  9. CVE-2018-11062Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability
    Dell EMC · Integrated Data Protection ApplianceT1078.001Default Accounts
    1.8%Top 22%
    15.6priority
  10. CVE-2020-5231Opencast users with ROLE_COURSE_ADMIN can create new users
    opencast · opencastMedium · 4.8T1078.001Default AccountsT1136Create Account
    0.6%Top 50%
    13.3priority
  11. CVE-2018-15771Dell EMC RecoverPoint Information Disclosure Vulnerability
    Dell EMC · Dell EMC RecoverPointT1078.001Default AccountsT1005Data from Local System
    0.4%Top 64%
    7.2priority

Passages that support these links

First 40, from the highest-priority CVEs
↑ ↓ chooseEnter openEsc close