Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 376 | CVE-2026-76461Cisco — Cisco Secure Email Gateway SQL Injection VulnerabilityCISA federal deadline · Overdue by 36 days | 75 | 9.8 | 29.5% · 98.2nd | 2026-09-14 | 2026-09-17CISA federal deadline · Overdue by 36 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.295. | |||||||
| 377 | CVE-2025-68686Fortinet — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 5.9 | 29.5% · 98.2nd | 2026-07-27 | 2026-08-10CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.295. | |||||||
| 378 | CVE-2024-3393Palo Alto Networks — Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityKEV since 2024 · listed over a year | 75 | 8.7 | 29.1% · 98.2nd | 2024-12-30 | 2025-01-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.291. | |||||||
| 379 | CVE-2023-33010Zyxel — Zyxel Multiple Firewalls Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 29.0% · 98.2nd | 2023-06-05 | 2023-06-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.290. | |||||||
| 380 | CVE-2014-3931Looking Glass — Multi-Router Looking Glass (MRLG) Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 29.0% · 98.2nd | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.290. | |||||||
| 381 | CVE-2018-2380SAP — SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 6.6 | 28.9% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 382 | CVE-2021-30807Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 28.8% · 98.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.288. | |||||||
| 383 | CVE-2023-2533PaperCut — PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 28.8% · 98.2nd | 2025-07-28 | 2025-08-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.288. | |||||||
| 384 | CVE-2026-9198IBM — IBM Langflow Code Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 28.7% · 98.1st | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.287. | |||||||
| 385 | CVE-2024-11120GeoVision — GeoVision Devices OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 28.4% · 98.1st | 2025-05-07 | 2025-05-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.284. | |||||||
| 386 | CVE-2020-3153Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 28.3% · 98.1st | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 387 | CVE-2026-20262Cisco — Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 6.5 | 28.2% · 98.1st | 2026-06-15 | 2026-06-29CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.282. | |||||||
| 388 | CVE-2019-19356Netis — Netis WF2419 Devices Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 28.2% · 98.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.282. | |||||||
| 389 | CVE-2023-33009Zyxel — Zyxel Multiple Firewalls Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 28.1% · 98.1st | 2023-06-05 | 2023-06-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.281. | |||||||
| 390 | CVE-2024-1086Linux — Linux Kernel Use-After-Free VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.8 | 28.1% · 98.1st | 2024-05-30 | 2024-06-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 391 | CVE-2025-27363FreeType — FreeType Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 8.1 | 27.8% · 98.1st | 2025-05-06 | 2025-05-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.278. | |||||||
| 392 | CVE-2018-4063Sierra Wireless — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 27.3% · 98.1st | 2025-12-12 | 2026-01-02CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.273. | |||||||
| 393 | CVE-2023-28205Apple — Apple Multiple Products WebKit Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 27.1% · 98th | 2023-04-10 | 2023-05-01KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.271. | |||||||
| 394 | CVE-2024-4978Justice AV Solutions — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code VulnerabilityKEV since 2024 · listed over a year | 75 | 8.7 | 26.9% · 98th | 2024-05-29 | 2024-06-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.269. | |||||||
| 395 | CVE-2025-68461Roundcube — RoundCube Webmail Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 6.1 | 26.8% · 98th | 2026-02-20 | 2026-03-13CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.268. | |||||||
| 396 | CVE-2024-37085VMware — VMware ESXi Authentication Bypass VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.2 | 26.8% · 98th | 2024-07-30 | 2024-08-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 397 | CVE-2020-8196Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 26.3% · 98th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.263. | |||||||
| 398 | CVE-2026-104935Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 7 days | 75 | 8.6 | 26.0% · 98th | 2026-10-13 | 2026-10-16CISA federal deadline · Overdue by 7 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.260. | |||||||
| 399 | CVE-2021-22506Micro Focus — Micro Focus Access Manager Information Leakage VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 25.7% · 98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.257. | |||||||
| 400 | CVE-2026-20122Cisco — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 5.4 | 25.5% · 98th | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.255. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco Secure Email Gateway SQL Injection Vulnerability
EVRS 75 Urgent
Rank 376 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.5% 98.2nd percentile
- In CISA KEV since
- 2026-09-14
- CISA deadline
- 2026-09-17 CISA federal deadline · Overdue by 36 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
EVRS 75 Urgent
Rank 377 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.9 NVD
- EPSS
- 29.5% 98.2nd percentile
- In CISA KEV since
- 2026-07-27
- CISA deadline
- 2026-08-10 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
EVRS 75 Urgent
Rank 378 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.7 NVD
- EPSS
- 29.1% 98.2nd percentile
- In CISA KEV since
- 2024-12-30
- CISA deadline
- 2025-01-20 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 379 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.0% 98.2nd percentile
- In CISA KEV since
- 2023-06-05
- CISA deadline
- 2023-06-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Looking Glass — Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 380 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.0% 98.2nd percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Looking Glass
- Source
- CISA KEV
SAP — SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
EVRS 75 Urgent
Rank 381 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.6 NVD
- EPSS
- 28.9% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SAP
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 382 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 28.8% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
EVRS 75 Urgent
Rank 383 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 28.8% 98.2nd percentile
- In CISA KEV since
- 2025-07-28
- CISA deadline
- 2025-08-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- PaperCut
- Source
- CISA KEV
IBM — IBM Langflow Code Injection Vulnerability
EVRS 75 Urgent
Rank 384 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.7% 98.1st percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
GeoVision — GeoVision Devices OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 385 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.4% 98.1st percentile
- In CISA KEV since
- 2025-05-07
- CISA deadline
- 2025-05-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- GeoVision
- Source
- CISA KEV
Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
EVRS 75 Urgent
Rank 386 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 28.3% 98.1st percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
EVRS 75 Urgent
Rank 387 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 28.2% 98.1st percentile
- In CISA KEV since
- 2026-06-15
- CISA deadline
- 2026-06-29 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Netis — Netis WF2419 Devices Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 388 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 28.2% 98.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Netis
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 389 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.1% 98.1st percentile
- In CISA KEV since
- 2023-06-05
- CISA deadline
- 2023-06-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Linux — Linux Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 390 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 28.1% 98.1st percentile
- In CISA KEV since
- 2024-05-30
- CISA deadline
- 2024-06-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Linux
- Source
- CISA KEV
FreeType — FreeType Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 391 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 27.8% 98.1st percentile
- In CISA KEV since
- 2025-05-06
- CISA deadline
- 2025-05-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- FreeType
- Source
- CISA KEV
Sierra Wireless — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 392 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 27.3% 98.1st percentile
- In CISA KEV since
- 2025-12-12
- CISA deadline
- 2026-01-02 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Sierra Wireless
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 393 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 27.1% 98th percentile
- In CISA KEV since
- 2023-04-10
- CISA deadline
- 2023-05-01 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Justice AV Solutions — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 394 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.7 NVD
- EPSS
- 26.9% 98th percentile
- In CISA KEV since
- 2024-05-29
- CISA deadline
- 2024-06-19 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Justice AV Solutions
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 395 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 26.8% 98th percentile
- In CISA KEV since
- 2026-02-20
- CISA deadline
- 2026-03-13 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
VMware — VMware ESXi Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 396 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 26.8% 98th percentile
- In CISA KEV since
- 2024-07-30
- CISA deadline
- 2024-08-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 397 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 4.3 NVD
- EPSS
- 26.3% 98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 398 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.6 NVD
- EPSS
- 26.0% 98th percentile
- In CISA KEV since
- 2026-10-13
- CISA deadline
- 2026-10-16 CISA federal deadline · Overdue by 7 days
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Micro Focus — Micro Focus Access Manager Information Leakage Vulnerability
EVRS 75 Urgent
Rank 399 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 25.7% 98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Micro Focus
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
EVRS 75 Urgent
Rank 400 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.4 NVD
- EPSS
- 25.5% 98th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV