Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 151 | CVE-2026-24061GNU — GNU InetUtils Argument Injection VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 89 | 9.8 | 99.0% · 99.93rd | 2026-01-26 | 2026-02-16CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 152 | CVE-2026-1281Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 9 months | 89 | 9.8 | 98.7% · 99.92nd | 2026-01-29 | 2026-02-01CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.987. | |||||||
| 153 | CVE-2026-1340Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 89 | 9.8 | 98.6% · 99.92nd | 2026-04-08 | 2026-04-11CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. | |||||||
| 154 | CVE-2026-20253Splunk — Splunk Enterprise Missing Authentication for Critical Function VulnerabilityExigentCISA federal deadline · Overdue by 4 months | 89 | 9.8 | 96.9% · 99.89th | 2026-06-18 | 2026-06-21CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 155 | CVE-2022-36537ZK Framework — ZK Framework AuUploader Unspecified VulnerabilityRansomwareKEV since 2023 · listed over a year | 89 | 7.5 | 95.4% · 99.87th | 2023-02-27 | 2023-03-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 156 | CVE-2024-9474Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityRansomwareKEV since 2024 · listed over a year | 89 | 6.9 | 94.8% · 99.86th | 2024-11-18 | 2024-12-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 157 | CVE-2022-27924Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityRansomwareKEV since 2022 · listed over a year | 89 | 7.5 | 93.9% · 99.85th | 2022-08-04 | 2022-08-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 158 | CVE-2026-20079Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 40 days | 89 | 10.0 | 88.5% · 99.77th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 159 | CVE-2026-71362Adobe — Adobe Commerce and Magento Incorrect Authorization VulnerabilityCISA federal deadline · Overdue by 25 days | 89 | 9.1 | 87.5% · 99.76th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.875. | |||||||
| 160 | CVE-2024-21762Fortinet — Fortinet FortiOS Out-of-Bound Write VulnerabilityRansomwareExigentKEV since 2024 · listed over a year | 89 | 9.8 | 83.4% · 99.68th | 2024-02-09 | 2024-02-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 161 | CVE-2020-3992VMware — VMware ESXi OpenSLP Use-After-Free VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 89 | 9.8 | 83.0% · 99.67th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 162 | CVE-2019-7194QNAP — QNAP Photo Station Path Traversal VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 89 | 9.8 | 82.7% · 99.67th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 163 | CVE-2023-43208NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityRansomwareExigentKEV since 2024 · listed over a year | 89 | 9.8 | 82.7% · 99.67th | 2024-05-20 | 2024-06-10KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 164 | CVE-2018-6789Exim — Exim Buffer Overflow VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 89 | 9.8 | 82.1% · 99.66th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 165 | CVE-2021-26085Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityRansomwareKEV since 2022 · listed over a year | 88 | 5.3 | 99.9% · 99.97th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 166 | CVE-2025-24813Apache — Apache Tomcat Path Equivalence VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.9% · 99.97th | 2025-04-01 | 2025-04-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 167 | CVE-2025-25257Fortinet — Fortinet FortiWeb SQL Injection VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.9% · 99.97th | 2025-07-18 | 2025-08-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 168 | CVE-2016-10033PHP — PHPMailer Command Injection VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.7% · 99.95th | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 169 | CVE-2017-1000353Jenkins — Jenkins Remote Code Execution VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.7% · 99.95th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 170 | CVE-2021-32030ASUS — ASUS Routers Improper Authentication VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.4% · 99.94th | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 171 | CVE-2024-4885Progress — Progress WhatsUp Gold Path Traversal VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.3% · 99.94th | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.993. | |||||||
| 172 | CVE-2019-16278Nostromo — Nostromo nhttpd Directory Traversal VulnerabilityExigentKEV since 2024 · listed over a year | 88 | 9.8 | 99.0% · 99.93rd | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 173 | CVE-2025-68613n8n — n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityCISA federal deadline · Overdue by 7 months | 88 | 8.8 | 99.0% · 99.93rd | 2026-03-11 | 2026-03-25CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 174 | CVE-2025-49113Roundcube — RoundCube Webmail Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 7 months | 88 | 8.8 | 99.0% · 99.93rd | 2026-02-20 | 2026-03-13CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 175 | CVE-2025-32433Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 10.0 | 98.8% · 99.93rd | 2025-06-09 | 2025-06-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.988. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsGNU — GNU InetUtils Argument Injection Vulnerability
EVRS 89 Immediate
Rank 151 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-01-26
- CISA deadline
- 2026-02-16 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
EVRS 89 Immediate
Rank 152 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.7% 99.92nd percentile
- In CISA KEV since
- 2026-01-29
- CISA deadline
- 2026-02-01 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
EVRS 89 Immediate
Rank 153 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.6% 99.92nd percentile
- In CISA KEV since
- 2026-04-08
- CISA deadline
- 2026-04-11 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Splunk — Splunk Enterprise Missing Authentication for Critical Function Vulnerability
EVRS 89 Immediate
Rank 154 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2026-06-18
- CISA deadline
- 2026-06-21 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Splunk
- Source
- CISA KEV
ZK Framework — ZK Framework AuUploader Unspecified Vulnerability
EVRS 89 Immediate
Rank 155 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.4% 99.87th percentile
- In CISA KEV since
- 2023-02-27
- CISA deadline
- 2023-03-20 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- ZK Framework
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
EVRS 89 Immediate
Rank 156 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.9 NVD
- EPSS
- 94.8% 99.86th percentile
- In CISA KEV since
- 2024-11-18
- CISA deadline
- 2024-12-09 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
EVRS 89 Immediate
Rank 157 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2022-08-04
- CISA deadline
- 2022-08-25 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 89 Immediate
Rank 158 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.77th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Incorrect Authorization Vulnerability
EVRS 89 Immediate
Rank 159 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 87.5% 99.76th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability
EVRS 89 Immediate
Rank 160 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.4% 99.68th percentile
- In CISA KEV since
- 2024-02-09
- CISA deadline
- 2024-02-16 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability
EVRS 89 Immediate
Rank 161 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.0% 99.67th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
QNAP — QNAP Photo Station Path Traversal Vulnerability
EVRS 89 Immediate
Rank 162 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
EVRS 89 Immediate
Rank 163 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2024-05-20
- CISA deadline
- 2024-06-10 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- NextGen Healthcare
- Source
- CISA KEV
Exim — Exim Buffer Overflow Vulnerability
EVRS 89 Immediate
Rank 164 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.1% 99.66th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Exim
- Source
- CISA KEV
Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
EVRS 88 Immediate
Rank 165 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Atlassian
- Source
- CISA KEV
Apache — Apache Tomcat Path Equivalence Vulnerability
EVRS 88 Immediate
Rank 166 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2025-04-01
- CISA deadline
- 2025-04-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Fortinet — Fortinet FortiWeb SQL Injection Vulnerability
EVRS 88 Immediate
Rank 167 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2025-07-18
- CISA deadline
- 2025-08-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
PHP — PHPMailer Command Injection Vulnerability
EVRS 88 Immediate
Rank 168 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- PHP
- Source
- CISA KEV
Jenkins — Jenkins Remote Code Execution Vulnerability
EVRS 88 Immediate
Rank 169 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
ASUS — ASUS Routers Improper Authentication Vulnerability
EVRS 88 Immediate
Rank 170 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ASUS
- Source
- CISA KEV
Progress — Progress WhatsUp Gold Path Traversal Vulnerability
EVRS 88 Immediate
Rank 171 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.3% 99.94th percentile
- In CISA KEV since
- 2025-03-03
- CISA deadline
- 2025-03-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
Nostromo — Nostromo nhttpd Directory Traversal Vulnerability
EVRS 88 Immediate
Rank 172 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nostromo
- Source
- CISA KEV
n8n — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
EVRS 88 Immediate
Rank 173 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-03-11
- CISA deadline
- 2026-03-25 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- n8n
- Source
- CISA KEV
Roundcube — RoundCube Webmail Deserialization of Untrusted Data Vulnerability
EVRS 88 Immediate
Rank 174 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-02-20
- CISA deadline
- 2026-03-13 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
EVRS 88 Immediate
Rank 175 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 98.8% 99.93rd percentile
- In CISA KEV since
- 2025-06-09
- CISA deadline
- 2025-06-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Erlang
- Source
- CISA KEV
