RansomVuln Index tracks the exploit likelihood [EPSS score] of vulnerabilities known to be exploited by ransomware groups (based on the data gathered by [BushidoToken].)
RansomVuln Index Overview Updated: 2026-01-31
152
Total Vulnerabilities
0.7469
Average EPSS Score
Risk Distribution
71
14
14
High Risk: 108 Medium Risk: 22 Low Risk: 22
Vulnerability Types
Top Risers (Last 30 Days)
| CVE | Product | Current | Change | % | Honeypot? |
|---|---|---|---|---|---|
| CVE-2021-20022 | SMA 100 | 0.3260 | 0.2259 | 225.67% | 🍯 |
| CVE-2021-28799 | QNAP NAS | 0.8020 | 0.5147 | 179.18% | N/A |
| CVE-2019-5591 | FortiOS | 0.0270 | 0.0171 | 173.43% | 🍯 |
| CVE-2023-24880 | SmartScreen | 0.7729 | 0.4746 | 159.11% | N/A |
| CVE-2020-12812 | FortiOS SSL VPN | 0.4502 | 0.2714 | 151.79% | N/A |
| CVE-2020-0787 | BITS | 0.6682 | 0.3537 | 112.46% | N/A |
| CVE-2020-3259 | ASA | 0.6973 | 0.3460 | 98.48% | 🍯 |
| CVE-2020-3259 | FTD | 0.6973 | 0.3460 | 98.48% | 🍯 |
| CVE-2022-26501 | Veeam Backup &... | 0.6719 | 0.3012 | 81.25% | N/A |
| CVE-2023-27351 | PaperCut... | 0.0181 | 0.0077 | 73.85% | N/A |
| CVE-2021-20016 | SMA 100 | 0.7982 | 0.2883 | 56.56% | 🍯 |
| CVE-2019-11634 | Workspace app | 0.5284 | 0.1562 | 41.99% | N/A |
| CVE-2019-11634 | Receiver for Windows | 0.5284 | 0.1562 | 41.99% | N/A |
| CVE-2019-1069 | Task Scheduler Service | 0.3046 | 0.0628 | 25.97% | N/A |
| CVE-2020-12271 | XG Firewall | 0.8811 | 0.1449 | 19.68% | N/A |
Highest Risk Vulnerabilities
| CVE | Type | Product | EPSS Score | 1M Change | Risk |
|---|---|---|---|---|---|
| CVE-2024-27198 | Application | JetBrains TeamCity | 0.9458 | 0.0001 | High |
| CVE-2021-22986 | Network Edge | iControl REST | 0.9448 | 0.0009 | High |
| CVE-2019-0708 BlueKeep | Windows | Remote Desktop Services | 0.9448 | 0.0017 | High |
| CVE-2020-14882 | Application | Oracle WebLogic | 0.9448 | 0.0007 | High |
| CVE-2018-13379 | Network Edge | FortiOS | 0.9447 | 0.0015 | High |
| CVE-2020-14750 | Application | Oracle WebLogic | 0.9447 | 0.0006 | High |
| CVE-2019-2725 | Application | Oracle WebLogic | 0.9447 | 0.0007 | High |
| CVE-2023-38035 | Network Edge | Ivanti MobileIron | 0.9447 | 0.0007 | High |
| CVE-2024-23897 | Application | Jenkins Jenkins | 0.9447 | 0.0012 | High |
| CVE-2021-44529 | Network Edge | Ivanti EPM Cloud... | 0.9446 | 0.0007 | High |