Registry & coordination contributor

MITRE

CNA assigner on 322 (independent) of 322 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

No vendor advisory domain is cited for this contributor in the corpus — its credit here is as a CNA/finder. Home URL is a stated coverage gap.

Independent CNA

322

records cited in

deterministic count

finder / reporter credits

CVE.org credits

322

CVE records catalogued (CNA)

independent

64%

avg modeled exploit prob.

FIRST EPSS, 322/322

24%

ransomware-associated

76 of 322 · CISA flag

Roles across the work

— find / fix / exploit / catalog, computed per record from credit type, the vendor-self-CNA gate, and the linked public exploit catalog

Find

record(s)

Fix

record(s)

Exploit

record(s)

322

Catalog

record(s)

Each dimension is a count of the listed records where this contributor did that job. A CNA row is fix only when the affected product is the assigner’s own; registries, coordinators, platforms, intel and research houses read as catalog, never fix. Exploit counts records where this contributor is credited as author of a public exploit / detection template in a linked catalog — we link the catalog, never host a payload.

Known for

— recomputed from this contributor’s own records

SurfacesApplication / other (229), Edge / remote-access infra (66), Operating system / kernel (13), Server / web platform (10), Browser (3)

WeaknessInjection (109), Path traversal / file (36), Memory safety (30), Web / client (29), Authentication (27)

PortfolioD-Link (23), Synacor (19), Roundcube (10), Microsoft (9), Zoho (9), Arm (7)

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out

1Front door

315reach this stage

→

2Keys to the kingdom

315reach this stage

→

3Lateral reach

295reach this stage

→

4Data at risk

50reach this stage

→

5Lights out

12reach this stage

Furthest any of these records carries an attacker: 5 · Lights out. 50 of 315 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

Recent highlights

— this contributor’s newest known-exploited records

CVE-2023-49105ownCloud43%KEV CVE-2026-60004Gitea24%KEV CVE-2026-73570Synacor12%KEV CVE-2021-27137DD-WRT4%KEV CVE-2008-4128Cisco34%KEV CVE-2025-67038Lantronix19%KEV

Every record they’re cited in

— all 322, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

CVE-2022-29464WSO2100%RWKEV CVE-2019-11510Ivanti100%RWKEV CVE-2019-19781Citrix100%RWKEV CVE-2021-35464ForgeRock100%RWKEV CVE-2025-31161CrushFTP100%RWKEV CVE-2018-10562Dasan100%RWKEV CVE-2021-3129Laravel100%RWKEV CVE-2023-34362Progress100%RWKEV CVE-2023-38831RARLAB100%RWKEV CVE-2022-47966Zoho100%RWKEV CVE-2019-18935Progress100%RWKEV CVE-2019-15107Webmin100%RWKEV CVE-2022-30333RARLAB99%RWKEV CVE-2021-40539Zoho99%RWKEV CVE-2023-47246SysAid99%RWKEV CVE-2022-27925Synacor99%RWKEV CVE-2024-50623Cleo99%RWKEV CVE-2019-11539Ivanti99%RWKEV CVE-2012-4681Oracle99%RWKEV CVE-2008-2992Adobe98%RWKEV CVE-2024-41713Mitel98%RWKEV CVE-2021-42237Sitecore98%RWKEV CVE-2018-6530D-Link97%RWKEV CVE-2024-57727SimpleHelp 97%RWKEV CVE-2022-41352Synacor95%RWKEV CVE-2022-36537ZK Framework95%RWKEV CVE-2024-51378CyberPersons95%RWKEV CVE-2024-55956Cleo94%RWKEV CVE-2022-37042Synacor92%RWKEV CVE-2018-11138Quest92%RWKEV CVE-2022-26352dotCMS92%RWKEV CVE-2023-41265Qlik88%RWKEV CVE-2017-18362Kaseya87%RWKEV CVE-2024-51567CyberPersons87%RWKEV CVE-2019-16057D-Link86%RWKEV CVE-2021-30116Kaseya86%RWKEV CVE-2022-27924Synacor85%RWKEV CVE-2023-41266Qlik85%RWKEV CVE-2022-24990TerraMaster83%RWKEV CVE-2023-43208NextGen Healthcare83%RWKEV CVE-2018-6789Exim82%RWKEV CVE-2017-11357Telerik78%RWKEV CVE-2021-42258BQE74%RWKEV CVE-2013-2551Microsoft74%RWKEV CVE-2023-28461Array Networks 68%RWKEV CVE-2024-57726SimpleHelp 67%RWKEV CVE-2021-27877Veritas65%RWKEV CVE-2021-27104Accellion57%RWKEV CVE-2022-29499Mitel54%RWKEV CVE-2023-48365Qlik47%RWKEV CVE-2020-12271Sophos42%RWKEV CVE-2024-55550Mitel38%RWKEV CVE-2022-31199Netwrix36%RWKEV CVE-2017-6884Zyxel34%RWKEV CVE-2022-24682Synacor31%RWKEV CVE-2019-13608Citrix30%RWKEV CVE-2018-6882Synacor30%RWKEV CVE-2018-20753Kaseya29%RWKEV CVE-2021-27878Veritas24%RWKEV CVE-2021-27876Veritas14%RWKEV CVE-2021-27103Accellion11%RWKEV CVE-2017-1000253Linux11%RWKEV CVE-2022-41223Mitel11%RWKEV CVE-2022-40765Mitel11%RWKEV CVE-2015-2291Intel9%RWKEV CVE-2019-11634Citrix8%RWKEV CVE-2018-19323GIGABYTE8%RWKEV CVE-2024-57728SimpleHelp 7%RWKEV CVE-2021-27101Accellion6%RWKEV CVE-2022-26500Veeam6%RWKEV CVE-2020-29574Sophos5%RWKEV CVE-2022-26501Veeam4%RWKEV CVE-2018-19321GIGABYTE4%RWKEV CVE-2021-27102Accellion4%RWKEV CVE-2018-19320GIGABYTE4%RWKEV CVE-2018-19322GIGABYTE2%RWKEV CVE-2023-44487IETF100%KEV CVE-2017-9841PHPUnit100%KEV CVE-2019-16920D-Link100%KEV CVE-2022-44877CWP100%KEV CVE-2020-8515DrayTek100%KEV CVE-2019-9670Synacor100%KEV CVE-2014-8361Realtek100%KEV CVE-2020-25506D-Link100%KEV CVE-2021-3156Sudo100%KEV CVE-2020-10189Zoho100%KEV CVE-2014-7169GNU100%KEV CVE-2022-35405Zoho100%KEV CVE-2024-45519Synacor100%KEV CVE-2015-1427Elastic100%KEV CVE-2020-7961Liferay100%KEV CVE-2022-35914Teclib100%KEV CVE-2021-44515Zoho100%KEV CVE-2021-35394Realtek100%KEV CVE-2021-37415Zoho100%KEV CVE-2017-7269Microsoft100%KEV CVE-2016-6277NETGEAR100%KEV CVE-2020-15505Ivanti100%KEV CVE-2019-16759vBulletin100%KEV CVE-2016-10033PHP100%KEV CVE-2017-1000353Jenkins100%KEV CVE-2025-48703CWP100%KEV CVE-2020-16846SaltStack100%KEV CVE-2018-20062ThinkPHP100%KEV CVE-2021-32030ASUS99%KEV CVE-2014-6287Rejetto99%KEV CVE-2020-10199Sonatype99%KEV CVE-2019-16278Nostromo99%KEV CVE-2026-24061GNU99%KEV CVE-2020-7247OpenBSD99%KEV CVE-2025-49113Roundcube99%KEV CVE-2024-50603Aviatrix99%KEV CVE-2018-1000861Jenkins98%KEV CVE-2017-15944Palo Alto Networks98%KEV CVE-2023-25717Ruckus Wireless98%KEV CVE-2022-29303SolarView98%KEV CVE-2021-35395Realtek98%KEV CVE-2018-19410Paessler98%KEV CVE-2023-25280D-Link98%KEV CVE-2021-45382D-Link98%KEV CVE-2020-11738WordPress98%KEV CVE-2021-36380Sunhillo98%KEV CVE-2020-25078D-Link98%KEV CVE-2019-9082ThinkPHP97%KEV CVE-2007-3010Alcatel97%KEV CVE-2020-25213WordPress97%KEV CVE-2019-20500D-Link97%KEV CVE-2015-2051D-Link97%KEV CVE-2019-7256Nice97%KEV CVE-2017-8291Artifex97%KEV CVE-2023-52163Digiever97%KEV CVE-2020-25223Sophos97%KEV CVE-2009-0927Adobe97%KEV CVE-2020-11651SaltStack97%KEV CVE-2009-1151phpMyAdmin97%KEV CVE-2017-17562Embedthis96%KEV CVE-2018-14847MikroTik96%KEV CVE-2019-20085TVT96%KEV CVE-2020-5847Unraid96%KEV CVE-2017-12637SAP95%KEV CVE-2019-10068Kentico95%KEV CVE-2019-12989Citrix95%KEV CVE-2025-54309CrushFTP95%KEV CVE-2018-14933NUUO95%KEV CVE-2017-18368Zyxel94%KEV CVE-2024-48248NAKIVO94%KEV CVE-2025-30406Gladinet94%KEV CVE-2017-1000486Primetek94%KEV CVE-2021-44077Zoho93%KEV CVE-2020-5849Unraid93%KEV CVE-2021-40870Aviatrix93%KEV CVE-2018-10561Dasan93%KEV CVE-2025-47812Wing FTP Server93%KEV CVE-2023-38950ZKTeco92%KEV CVE-2022-26258D-Link92%KEV CVE-2020-8657EyesOfNetwork92%KEV CVE-2020-29583Zyxel90%KEV CVE-2020-17463Fuel CMS90%KEV CVE-2019-17621D-Link90%KEV CVE-2018-14839LG89%KEV CVE-2017-5521NETGEAR89%KEV CVE-2014-3120Elastic89%KEV CVE-2025-29635D-Link88%KEV CVE-2024-58136Yiiframework88%KEV CVE-2020-17496vBulletin88%KEV CVE-2007-5659Adobe87%KEV CVE-2022-26143Mitel87%KEV CVE-2018-9276Paessler87%KEV CVE-2021-31755Tenda87%KEV CVE-2020-8644PlaySMS87%KEV CVE-2021-40655D-Link87%KEV CVE-2020-11652SaltStack86%KEV CVE-2020-28949PEAR85%KEV CVE-2020-15415DrayTek84%KEV CVE-2020-7796Synacor84%KEV CVE-2020-12641Roundcube84%KEV CVE-2017-11317Telerik84%KEV CVE-2015-3035TP-Link84%KEV CVE-2019-9874Sitecore84%KEV CVE-2010-1871Red Hat83%KEV CVE-2016-10174NETGEAR83%KEV CVE-2010-3765Mozilla83%KEV CVE-2024-42009Roundcube83%KEV CVE-2021-27561Yealink83%KEV CVE-2015-1187D-Link and TRENDnet83%KEV CVE-2019-9621Synacor81%KEV CVE-2012-4969Microsoft80%KEV CVE-2023-22952SugarCRM80%KEV CVE-2020-10987Tenda80%KEV CVE-2023-49103ownCloud78%KEV CVE-2020-8816Pi-hole78%KEV CVE-2022-26318WatchGuard78%KEV CVE-2023-34192Synacor77%KEV CVE-2019-7238Sonatype77%KEV CVE-2020-10221rConfig77%KEV CVE-2019-15949Nagios77%KEV CVE-2018-15133Laravel77%KEV CVE-2008-0015Microsoft77%KEV CVE-2020-13965Roundcube77%KEV CVE-2018-15811DotNetNuke (DNN)76%KEV CVE-2012-0391Apache76%KEV CVE-2021-25298Nagios75%KEV CVE-2017-9248Progress75%KEV CVE-2005-2773Hewlett Packard (HP)75%KEV CVE-2019-12991Citrix74%KEV CVE-2018-18325DotNetNuke (DNN)74%KEV CVE-2024-37383Roundcube73%KEV CVE-2017-6316Citrix73%KEV CVE-2019-9978WordPress73%KEV CVE-2017-6334NETGEAR73%KEV CVE-2021-25296Nagios72%KEV CVE-2025-30066tj-actions72%KEV CVE-2016-2386SAP72%KEV CVE-2022-28810Zoho71%KEV CVE-2020-36193PEAR71%KEV CVE-2012-1535Adobe70%KEV CVE-2021-44026Roundcube70%KEV CVE-2016-11021D-Link69%KEV CVE-2017-6077NETGEAR69%KEV CVE-2016-20017D-Link64%KEV CVE-2023-29552IETF64%KEV CVE-2023-43770Roundcube64%KEV CVE-2015-4068Arcserve64%KEV CVE-2019-8394Zoho63%KEV CVE-2025-47813Wing FTP Server63%KEV CVE-2015-7755Juniper61%KEV CVE-2025-32463Sudo61%KEV CVE-2018-7445MikroTik61%KEV CVE-2020-8655EyesOfNetwork60%KEV CVE-2020-26919NETGEAR57%KEV CVE-2025-25181Advantive57%KEV CVE-2021-25297Nagios57%KEV CVE-2019-19006Sangoma56%KEV CVE-2022-37055D-Link56%KEV CVE-2020-29557D-Link54%KEV CVE-2020-25079D-Link54%KEV CVE-2016-2388SAP52%KEV CVE-2019-13272Linux52%KEV CVE-2013-5223D-Link51%KEV CVE-2013-7331Microsoft50%KEV CVE-2023-37580Synacor49%KEV CVE-2025-68645Synacor49%KEV CVE-2019-15752Docker49%KEV CVE-2022-23227NUUO48%KEV CVE-2021-26829OpenPLC48%KEV CVE-2016-3976SAP47%KEV CVE-2022-39197Fortra46%KEV CVE-2017-16651Roundcube46%KEV CVE-2014-100005D-Link43%KEV CVE-2023-49105ownCloud43%KEV CVE-2024-41710Mitel42%KEV CVE-2019-16928Exim42%KEV CVE-2023-33538TP-Link42%KEV CVE-2011-1823Android41%KEV CVE-2023-39780ASUS40%KEV CVE-2013-6282Linux40%KEV CVE-2010-5330Ubiquiti39%KEV CVE-2021-26828OpenPLC39%KEV CVE-2013-3660Microsoft39%KEV CVE-2008-0655Adobe38%KEV CVE-2019-11001Reolink38%KEV CVE-2008-4128Cisco34%KEV CVE-2022-40799D-Link34%KEV CVE-2020-35730Roundcube33%KEV CVE-2024-57968Advantive32%KEV CVE-2014-3931Looking Glass29%KEV CVE-2019-19356Netis28%KEV CVE-2025-68461Roundcube27%KEV CVE-2016-9563SAP24%KEV CVE-2026-60004Gitea24%KEV CVE-2024-27443Synacor24%KEV CVE-2020-9377D-Link21%KEV CVE-2009-1862Adobe21%KEV CVE-2020-24363TP-Link21%KEV CVE-2025-66376Synacor20%KEV CVE-2025-67038Lantronix19%KEV CVE-2020-11899Treck TCP/IP stack19%KEV CVE-2010-5326SAP18%KEV CVE-2022-27926Synacor18%KEV CVE-2021-44207Acclaim Systems18%KEV CVE-2020-10181Sumavision15%KEV CVE-2019-9875Sitecore14%KEV CVE-2022-38181Arm14%KEV CVE-2021-28663Arm12%KEV CVE-2026-73570Synacor12%KEV CVE-2025-48927TeleMessage11%KEV CVE-2022-23176WatchGuard11%KEV CVE-2020-15069Sophos11%KEV CVE-2018-14558Tenda9%KEV CVE-2010-4398Microsoft9%KEV CVE-2004-0210Microsoft7%KEV CVE-2008-3431Oracle7%KEV CVE-2021-28664Arm5%KEV CVE-2019-16256SIMalliance5%KEV CVE-2025-47827IGEL5%KEV CVE-2002-0367Microsoft5%KEV CVE-2004-1464Cisco5%KEV CVE-2019-18988TeamViewer5%KEV CVE-2025-54313Prettier5%KEV CVE-2021-27137DD-WRT4%KEV CVE-2025-27915Synacor4%KEV CVE-2016-3643SolarWinds4%KEV CVE-2016-8562Siemens4%KEV CVE-2025-66644Array Networks 3%KEV CVE-2013-2596Linux3%KEV CVE-2021-27562Arm3%KEV CVE-2011-4723D-Link3%KEV CVE-2021-29256Arm3%KEV CVE-2022-42948Fortra3%KEV CVE-2023-29492Novi Survey3%KEV CVE-2025-32975Quest2%KEV CVE-2025-59689Libraesva2%KEV CVE-2025-27920Srimax2%KEV CVE-2025-48700Synacor2%KEV CVE-2024-39891Twilio2%KEV CVE-2013-2597Code Aurora2%KEV CVE-2023-26083Arm1%KEV CVE-2022-22706Arm1%KEV CVE-2026-48172LiteSpeed1%KEV CVE-2026-54420LiteSpeed1%KEV CVE-2025-48928TeleMessage1%KEV CVE-2025-47729TeleMessage0%KEV

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

Cited in 322 known-exploited records — the list below; every one links to its public source.

Catalogued 322 CVE record(s) as the CNA assigner (from CVE.org).

Coverage gaps — stated, not hidden

This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.

The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.

No vendor advisory home domain is cited for this contributor in the corpus.