CVE-2014-6271Vulnerability
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by GreyNoise · last reported
Last reported 12 days ago
CISA KEVAdded 28 Jan 2022
Fix due 28 Jul 2022
Used by ransomware: not knownCISA KEV catalogue
Fix due 28 Jul 2022
Used by ransomware: not knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 26 Sep 2026
higher than 99% of CVEsFIRST EPSS, as of 26 Sep 2026
What the reports say
2 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2014-6271”
-
Coordinated Cloud-Based Scanning Operation Targets 75 Known Exposure Points in One Day“Bash — CVE-2014-6271 (Shellshock)”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-53266, CVE-2026-76460, CVE-2026-76461, CVE-2026-58704
Thanks — we review every report.