Skip to content

August 2020 · Band 1

Exploited in the wild

10 CVEs · 10 exploited

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
10

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Netlogon Elevation of Privilege VulnerabilityCVE-2020-1472Microsoft · CVSS 5.5 · 99% likelycovered by CyberSIXT

    MicrosoftBerserk BearFIN7

  2. Fuel CMS 1.4.7 - SQL InjectionCVE-2020-17463Fuel CMS · CVSS 9.8 · 90% likely

    CWE-89Fuel CMS

  3. vBulletin 5.5.4 - 5.6.2- Remote Command ExecutionCVE-2020-17496vBulletin · CVSS 9.8 · 87% likely

    CWE-74Vbulletin

  4. Windows Spoofing VulnerabilityCVE-2020-1464Microsoft · CVSS 7.8 · 39% likely

    CWE-347Microsoft

  5. Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Succ…CVE-2020-9715Adobe · CVSS 7.8 · 33% likelycovered by CyberSIXT

    CWE-416Adobe

  6. Scripting Engine Memory Corruption VulnerabilityCVE-2020-1380Microsoft · CVSS 7.8 · 24% likely

    CWE-787MicrosoftAPT37

  7. TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The att…CVE-2020-24363TP-Link · CVSS 8.8 · 22% likely

    CWE-306TP-Link

  8. FortiOS - Insecure LDAP Configuration DetectionCVE-2019-5591Fortinet · CVSS 6.5 · 19% likely

    CWE-306Fortinet

  9. Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCVE-2020-3433Cisco · CVSS 7.8 · 10% likely

    CWE-427Cisco

  10. Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityCVE-2020-3566Cisco · CVSS 8.6 · 3.7% likely

    CWE-400Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.