Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 276 | CVE-2021-35395Realtek — Realtek AP-Router SDK Buffer Overflow VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 98.1% · 99.91st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.981. | |||||||
| 277 | CVE-2023-25717Ruckus Wireless — Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 98.1% · 99.91st | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.981. | |||||||
| 278 | CVE-2022-29303SolarView — SolarView Compact Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 98.0% · 99.91st | 2023-07-13 | 2023-08-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.980. | |||||||
| 279 | CVE-2022-22536SAP — SAP Multiple Products HTTP Request Smuggling VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 10.0 | 97.9% · 99.91st | 2022-08-18 | 2022-09-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.979. | |||||||
| 280 | CVE-2025-34028Commvault — Commvault Command Center Path Traversal VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.3 | 97.6% · 99.9th | 2025-05-02 | 2025-05-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.976. | |||||||
| 281 | CVE-2024-56145Craft CMS — Craft CMS Code Injection VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.3 | 97.4% · 99.9th | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.974. | |||||||
| 282 | CVE-2025-2747Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.8 | 97.2% · 99.9th | 2025-10-20 | 2025-11-10KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.972. | |||||||
| 283 | CVE-2024-20439Cisco — Cisco Smart Licensing Utility Static Credential VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.8 | 97.1% · 99.89th | 2025-03-31 | 2025-04-21KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 284 | CVE-2024-1212Progress — Progress Kemp LoadMaster OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 95.4% · 99.87th | 2024-11-18 | 2024-12-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.954. | |||||||
| 285 | CVE-2025-57819Sangoma — Sangoma FreePBX Authentication Bypass VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 10.0 | 95.0% · 99.86th | 2025-08-29 | 2025-09-19KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.950. | |||||||
| 286 | CVE-2024-47575Fortinet — Fortinet FortiManager Missing Authentication VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 94.8% · 99.86th | 2024-10-23 | 2024-11-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.948. | |||||||
| 287 | CVE-2018-14933NUUO — NUUO NVRmini Devices OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 94.8% · 99.86th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.948. | |||||||
| 288 | CVE-2025-54236Adobe — Adobe Commerce and Magento Improper Input Validation VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 87 | 9.1 | 94.7% · 99.86th | 2025-10-24 | 2025-11-14CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.947. | |||||||
| 289 | CVE-2020-2883Oracle — Oracle WebLogic Server Unspecified VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.8 | 94.6% · 99.86th | 2025-01-07 | 2025-01-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.946. | |||||||
| 290 | CVE-2025-30406Gladinet — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.8 | 94.3% · 99.85th | 2025-04-08 | 2025-04-29KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.943. | |||||||
| 291 | CVE-2025-47812Wing FTP Server — Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 10.0 | 93.9% · 99.85th | 2025-07-14 | 2025-08-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
| 292 | CVE-2025-24016Wazuh — Wazuh Server Deserialization of Untrusted Data VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.9 | 93.8% · 99.85th | 2025-06-10 | 2025-07-01KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.938. | |||||||
| 293 | CVE-2025-34291Langflow — Langflow Origin Validation Error VulnerabilityExigentCISA federal deadline · Overdue by 5 months | 87 | 9.4 | 92.8% · 99.83rd | 2026-05-21 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 294 | CVE-2025-9242WatchGuard — WatchGuard Firebox Out-of-Bounds Write VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 87 | 9.3 | 91.8% · 99.82nd | 2025-11-12 | 2025-12-03CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 295 | CVE-2025-37164Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 9 months | 87 | 9.8 | 90.2% · 99.8th | 2026-01-07 | 2026-01-28CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 296 | CVE-2009-3960Adobe — Adobe BlazeDS Information Disclosure VulnerabilityRansomwareKEV since 2022 · listed over a year | 87 | 6.5 | 90.1% · 99.8th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 297 | CVE-2025-61757Oracle — Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 10 months | 87 | 9.8 | 88.6% · 99.78th | 2025-11-21 | 2025-12-12CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.886. | |||||||
| 298 | CVE-2026-48908JoomShaper — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 87 | 10.0 | 88.5% · 99.78th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 299 | CVE-2026-20127Cisco — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 8 months | 87 | 10.0 | 88.5% · 99.77th | 2026-02-25 | 2026-02-27CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 300 | CVE-2021-23758Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 43 days | 87 | 9.8 | 82.6% · 99.67th | 2026-08-26 | 2026-09-09CISA federal deadline · Overdue by 43 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.826. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsRealtek — Realtek AP-Router SDK Buffer Overflow Vulnerability
EVRS 87 Immediate
Rank 276 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.1% 99.91st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
Ruckus Wireless — Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
EVRS 87 Immediate
Rank 277 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.1% 99.91st percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ruckus Wireless
- Source
- CISA KEV
SolarView — SolarView Compact Command Injection Vulnerability
EVRS 87 Immediate
Rank 278 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.0% 99.91st percentile
- In CISA KEV since
- 2023-07-13
- CISA deadline
- 2023-08-03 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarView
- Source
- CISA KEV
SAP — SAP Multiple Products HTTP Request Smuggling Vulnerability
EVRS 87 Immediate
Rank 279 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 97.9% 99.91st percentile
- In CISA KEV since
- 2022-08-18
- CISA deadline
- 2022-09-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Commvault — Commvault Command Center Path Traversal Vulnerability
EVRS 87 Immediate
Rank 280 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.3 NVD
- EPSS
- 97.6% 99.9th percentile
- In CISA KEV since
- 2025-05-02
- CISA deadline
- 2025-05-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Commvault
- Source
- CISA KEV
Craft CMS — Craft CMS Code Injection Vulnerability
EVRS 87 Immediate
Rank 281 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.3 NVD
- EPSS
- 97.4% 99.9th percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Craft CMS
- Source
- CISA KEV
Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 87 Immediate
Rank 282 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.2% 99.9th percentile
- In CISA KEV since
- 2025-10-20
- CISA deadline
- 2025-11-10 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
Cisco — Cisco Smart Licensing Utility Static Credential Vulnerability
EVRS 87 Immediate
Rank 283 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2025-03-31
- CISA deadline
- 2025-04-21 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Progress — Progress Kemp LoadMaster OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 284 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.4% 99.87th percentile
- In CISA KEV since
- 2024-11-18
- CISA deadline
- 2024-12-09 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
Sangoma — Sangoma FreePBX Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 285 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 95.0% 99.86th percentile
- In CISA KEV since
- 2025-08-29
- CISA deadline
- 2025-09-19 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
Fortinet — Fortinet FortiManager Missing Authentication Vulnerability
EVRS 87 Immediate
Rank 286 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.8% 99.86th percentile
- In CISA KEV since
- 2024-10-23
- CISA deadline
- 2024-11-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
NUUO — NUUO NVRmini Devices OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 287 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.8% 99.86th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- NUUO
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 288 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.1 NVD
- EPSS
- 94.7% 99.86th percentile
- In CISA KEV since
- 2025-10-24
- CISA deadline
- 2025-11-14 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 87 Immediate
Rank 289 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.6% 99.86th percentile
- In CISA KEV since
- 2025-01-07
- CISA deadline
- 2025-01-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Gladinet — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
EVRS 87 Immediate
Rank 290 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.3% 99.85th percentile
- In CISA KEV since
- 2025-04-08
- CISA deadline
- 2025-04-29 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
Wing FTP Server — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
EVRS 87 Immediate
Rank 291 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2025-07-14
- CISA deadline
- 2025-08-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Wing FTP Server
- Source
- CISA KEV
Wazuh — Wazuh Server Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 292 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.9 NVD
- EPSS
- 93.8% 99.85th percentile
- In CISA KEV since
- 2025-06-10
- CISA deadline
- 2025-07-01 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Wazuh
- Source
- CISA KEV
Langflow — Langflow Origin Validation Error Vulnerability
EVRS 87 Immediate
Rank 293 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.4 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2026-05-21
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox Out-of-Bounds Write Vulnerability
EVRS 87 Immediate
Rank 294 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.8% 99.82nd percentile
- In CISA KEV since
- 2025-11-12
- CISA deadline
- 2025-12-03 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
EVRS 87 Immediate
Rank 295 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2026-01-07
- CISA deadline
- 2026-01-28 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Hewlett Packard Enterprise (HPE)
- Source
- CISA KEV
Adobe — Adobe BlazeDS Information Disclosure Vulnerability
EVRS 87 Immediate
Rank 296 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 90.1% 99.8th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
EVRS 87 Immediate
Rank 297 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.6% 99.78th percentile
- In CISA KEV since
- 2025-11-21
- CISA deadline
- 2025-12-12 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
JoomShaper — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 87 Immediate
Rank 298 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- JoomShaper
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 299 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.77th percentile
- In CISA KEV since
- 2026-02-25
- CISA deadline
- 2026-02-27 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 300 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.6% 99.67th percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-09-09 CISA federal deadline · Overdue by 43 days
- Ransomware use
- Not known
- Vendor
- Ajax.NET Professional
- Source
- CISA KEV