Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 51 | CVE-2019-1652Cisco — Cisco Small Business Routers Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 83 | 7.2 | 95.9% · 99.88th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.959. | |||||||
| 52 | CVE-2020-5410VMware Tanzu — VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 83 | 7.5 | 95.6% · 99.87th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.956. | |||||||
| 53 | CVE-2016-0752Rails — Ruby on Rails Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 83 | 7.5 | 95.5% · 99.87th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.955. | |||||||
| 54 | CVE-2023-38950ZKTeco — ZKTeco BioTime Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 7.5 | 92.5% · 99.83rd | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.925. | |||||||
| 55 | CVE-2019-6340Drupal — Drupal Core Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 83 | 8.1 | 92.0% · 99.82nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 56 | CVE-2024-13160Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 7.5 | 91.0% · 99.81st | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.910. | |||||||
| 57 | CVE-2025-29635D-Link — D-Link DIR-823X Command Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 83 | 7.2 | 87.9% · 99.77th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.879. | |||||||
| 58 | CVE-2025-20362Cisco — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityKEV since 2025 · listed over a year | 83 | 8.6 | 87.1% · 99.75th | 2025-09-25 | 2025-09-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.871. | |||||||
| 59 | CVE-2021-31755Tenda — Tenda AC11 Router Stack Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 86.5% · 99.74th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.865. | |||||||
| 60 | CVE-2019-4716IBM — IBM Planning Analytics Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 86.4% · 99.74th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.864. | |||||||
| 61 | CVE-2015-0311Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 85.6% · 99.73rd | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.856. | |||||||
| 62 | CVE-2019-10758MongoDB — MongoDB mongo-express Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 9.9 | 84.7% · 99.71st | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.847. | |||||||
| 63 | CVE-2024-28986SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 83 | 9.8 | 84.6% · 99.71st | 2024-08-15 | 2024-09-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 64 | CVE-2019-11581Atlassian — Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.6% · 99.71st | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 65 | CVE-2020-15415DrayTek — DrayTek Multiple Vigor Routers OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 83 | 9.8 | 84.5% · 99.7th | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.845. | |||||||
| 66 | CVE-2020-12641Roundcube — Roundcube Webmail Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 83 | 9.8 | 84.5% · 99.7th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.845. | |||||||
| 67 | CVE-2020-5722Grandstream — Grandstream Networks UCM6200 Series SQL Injection VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.4% · 99.7th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.844. | |||||||
| 68 | CVE-2017-11317Telerik — Telerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.2% · 99.7th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.842. | |||||||
| 69 | CVE-2020-3161Cisco — Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 83.9% · 99.69th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.839. | |||||||
| 70 | CVE-2016-10174NETGEAR — NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 83.3% · 99.68th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.833. | |||||||
| 71 | CVE-2024-42009Roundcube — RoundCube Webmail Cross-Site Scripting VulnerabilityKEV since 2025 · listed over a year | 83 | 9.3 | 82.9% · 99.67th | 2025-06-09 | 2025-06-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.829. | |||||||
| 72 | CVE-2024-0769D-Link — D-Link DIR-859 Router Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 9.8 | 82.7% · 99.67th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.827. | |||||||
| 73 | CVE-2026-16232Check Point — Check Point SmartConsole Improper Authentication VulnerabilityCISA federal deadline · Overdue by 3 months | 83 | 9.3 | 78.0% · 99.57th | 2026-07-22 | 2026-07-25CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.780. | |||||||
| 74 | CVE-2026-25089Fortinet — Fortinet FortiSandbox OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 83 | 9.8 | 76.1% · 99.53rd | 2026-07-16 | 2026-07-19CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.761. | |||||||
| 75 | CVE-2025-40536SolarWinds — SolarWinds Web Help Desk Security Control Bypass VulnerabilityCISA federal deadline · Overdue by 8 months | 83 | 9.8 | 73.6% · 99.47th | 2026-02-12 | 2026-02-15CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.736. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco Small Business Routers Improper Input Validation Vulnerability
EVRS 83 Urgent
Rank 51 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.2 NVD
- EPSS
- 95.9% 99.88th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 52 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.6% 99.87th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
Rails — Ruby on Rails Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 53 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.5% 99.87th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Rails
- Source
- CISA KEV
ZKTeco — ZKTeco BioTime Path Traversal Vulnerability
EVRS 83 Urgent
Rank 54 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 92.5% 99.83rd percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ZKTeco
- Source
- CISA KEV
Drupal — Drupal Core Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 55 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.1 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
EVRS 83 Urgent
Rank 56 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 91.0% 99.81st percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
D-Link — D-Link DIR-823X Command Injection Vulnerability
EVRS 83 Urgent
Rank 57 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.2 NVD
- EPSS
- 87.9% 99.77th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
EVRS 83 Urgent
Rank 58 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.6 NVD
- EPSS
- 87.1% 99.75th percentile
- In CISA KEV since
- 2025-09-25
- CISA deadline
- 2025-09-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Tenda — Tenda AC11 Router Stack Buffer Overflow Vulnerability
EVRS 83 Urgent
Rank 59 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.5% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Tenda
- Source
- CISA KEV
IBM — IBM Planning Analytics Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 60 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.4% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Adobe — Adobe Flash Player Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 61 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 85.6% 99.73rd percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
MongoDB — MongoDB mongo-express Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 62 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.9 NVD
- EPSS
- 84.7% 99.71st percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MongoDB
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
EVRS 83 Urgent
Rank 63 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2024-08-15
- CISA deadline
- 2024-09-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Atlassian — Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
EVRS 83 Urgent
Rank 64 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
DrayTek — DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 65 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.5% 99.7th percentile
- In CISA KEV since
- 2024-09-30
- CISA deadline
- 2024-10-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Roundcube — Roundcube Webmail Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 66 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.5% 99.7th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Grandstream — Grandstream Networks UCM6200 Series SQL Injection Vulnerability
EVRS 83 Urgent
Rank 67 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.4% 99.7th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Grandstream
- Source
- CISA KEV
Telerik — Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
EVRS 83 Urgent
Rank 68 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.2% 99.7th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Telerik
- Source
- CISA KEV
Cisco — Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
EVRS 83 Urgent
Rank 69 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.9% 99.69th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
NETGEAR — NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
EVRS 83 Urgent
Rank 70 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.3% 99.68th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-Site Scripting Vulnerability
EVRS 83 Urgent
Rank 71 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 82.9% 99.67th percentile
- In CISA KEV since
- 2025-06-09
- CISA deadline
- 2025-06-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
D-Link — D-Link DIR-859 Router Path Traversal Vulnerability
EVRS 83 Urgent
Rank 72 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Check Point — Check Point SmartConsole Improper Authentication Vulnerability
EVRS 83 Urgent
Rank 73 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 78.0% 99.57th percentile
- In CISA KEV since
- 2026-07-22
- CISA deadline
- 2026-07-25 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Check Point
- Source
- CISA KEV
Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 74 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 76.1% 99.53rd percentile
- In CISA KEV since
- 2026-07-16
- CISA deadline
- 2026-07-19 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Security Control Bypass Vulnerability
EVRS 83 Urgent
Rank 75 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.6% 99.47th percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-02-15 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
