Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 776 | CVE-2026-45247Mirasvit — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 2.1% · 81.4th | 2026-06-03 | 2026-06-06CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
| 777 | CVE-2017-12238Cisco — Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 2.0% · 80.7th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 778 | CVE-2025-0111Palo Alto Networks — Palo Alto Networks PAN-OS File Read VulnerabilityKEV since 2025 · listed over a year | 75 | 7.1 | 2.0% · 80.6th | 2025-02-20 | 2025-03-13KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 779 | CVE-2020-2506QNAP Systems — QNAP Helpdesk Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 2.0% · 80.4th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 780 | CVE-2023-41974Apple — Apple iOS and iPadOS Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 2.0% · 80.1st | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 781 | CVE-2026-28318SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.5 | 1.9% · 80th | 2026-06-05 | 2026-06-19CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 782 | CVE-2025-8875N-able — N-able N-Central Insecure Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 9.4 | 1.9% · 79.5th | 2025-08-13 | 2025-08-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 783 | CVE-2025-27920Srimax — Srimax Output Messenger Directory Traversal VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 1.9% · 79.1st | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 784 | CVE-2025-59689Libraesva — Libraesva Email Security Gateway Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 6.1 | 1.9% · 79.1st | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 785 | CVE-2026-76504Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCISA federal deadline · Overdue by 19 days | 75 | 9.8 | 1.8% · 78.5th | 2026-09-30 | 2026-10-03CISA federal deadline · Overdue by 19 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 786 | CVE-2018-19322GIGABYTE — GIGABYTE Multiple Products Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 7.8 | 1.8% · 78.5th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 787 | CVE-2026-34909Ubiquiti — Ubiquiti UniFi OS Path Traversal VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 1.8% · 78.2nd | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 788 | CVE-2024-7694TeamT5 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.2 | 1.8% · 78.2nd | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 789 | CVE-2025-15556Notepad++ — Notepad++ Download of Code Without Integrity Check VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.7 | 1.8% · 78th | 2026-02-12 | 2026-03-05CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 790 | CVE-2025-22226VMware — VMware ESXi, Workstation, and Fusion Information Disclosure VulnerabilityKEV since 2025 · listed over a year | 75 | 6.0 | 1.8% · 77.9th | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 791 | CVE-2026-33634Aquasecurity — Aquasecurity Trivy Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 9.4 | 1.7% · 77.6th | 2026-03-26 | 2026-04-09CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 792 | CVE-2025-21590Juniper — Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityKEV since 2025 · listed over a year | 75 | 6.7 | 1.7% · 77.5th | 2025-03-13 | 2025-04-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 793 | CVE-2024-21287Oracle — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization VulnerabilityKEV since 2024 · listed over a year | 75 | 7.5 | 1.7% · 77.3rd | 2024-11-21 | 2024-12-12KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 794 | CVE-2026-65400Apple — Apple macOS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 9.8 | 1.7% · 77.3rd | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 795 | CVE-2025-48595Android — Android Framework Integer Overflow VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 8.4 | 1.7% · 77.2nd | 2026-06-02 | 2026-06-05CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 796 | CVE-2025-48700Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 6.1 | 1.7% · 77.2nd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 797 | CVE-2026-72530TrueConf — TrueConf Server Code Injection VulnerabilityCISA federal deadline · Overdue by 49 days | 75 | 9.5 | 1.7% · 76.8th | 2026-08-20 | 2026-09-03CISA federal deadline · Overdue by 49 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 798 | CVE-2024-39891Twilio — Twilio Authy Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 75 | 5.3 | 1.7% · 76.6th | 2024-07-23 | 2024-08-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 799 | CVE-2025-31277Apple — Apple Multiple Products Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 1.7% · 76.4th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 800 | CVE-2020-11261Qualcomm — Qualcomm Multiple Chipsets Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 1.6% · 75.6th | 2021-12-01 | 2022-06-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMirasvit — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 776 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.1% 81.4th percentile
- In CISA KEV since
- 2026-06-03
- CISA deadline
- 2026-06-06 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Mirasvit
- Source
- CISA KEV
Cisco — Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 777 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 2.0% 80.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS File Read Vulnerability
EVRS 75 Urgent
Rank 778 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.1 NVD
- EPSS
- 2.0% 80.6th percentile
- In CISA KEV since
- 2025-02-20
- CISA deadline
- 2025-03-13 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
QNAP Systems — QNAP Helpdesk Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 779 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.0% 80.4th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- QNAP Systems
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 780 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.0% 80.1st percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
EVRS 75 Urgent
Rank 781 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.9% 80th percentile
- In CISA KEV since
- 2026-06-05
- CISA deadline
- 2026-06-19 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
N-able — N-able N-Central Insecure Deserialization Vulnerability
EVRS 75 Urgent
Rank 782 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.9% 79.5th percentile
- In CISA KEV since
- 2025-08-13
- CISA deadline
- 2025-08-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
Srimax — Srimax Output Messenger Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 783 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.9% 79.1st percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Srimax
- Source
- CISA KEV
Libraesva — Libraesva Email Security Gateway Command Injection Vulnerability
EVRS 75 Urgent
Rank 784 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 1.9% 79.1st percentile
- In CISA KEV since
- 2025-09-29
- CISA deadline
- 2025-10-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Libraesva
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
EVRS 75 Urgent
Rank 785 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.8% 78.5th percentile
- In CISA KEV since
- 2026-09-30
- CISA deadline
- 2026-10-03 CISA federal deadline · Overdue by 19 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 786 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.8% 78.5th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Path Traversal Vulnerability
EVRS 75 Urgent
Rank 787 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.8% 78.2nd percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
TeamT5 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 788 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 1.8% 78.2nd percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- TeamT5
- Source
- CISA KEV
Notepad++ — Notepad++ Download of Code Without Integrity Check Vulnerability
EVRS 75 Urgent
Rank 789 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.7 NVD
- EPSS
- 1.8% 78th percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-03-05 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Notepad++
- Source
- CISA KEV
VMware — VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 790 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.0 NVD
- EPSS
- 1.8% 77.9th percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Aquasecurity — Aquasecurity Trivy Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 791 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.7% 77.6th percentile
- In CISA KEV since
- 2026-03-26
- CISA deadline
- 2026-04-09 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Aquasecurity
- Source
- CISA KEV
Juniper — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
EVRS 75 Urgent
Rank 792 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.7 NVD
- EPSS
- 1.7% 77.5th percentile
- In CISA KEV since
- 2025-03-13
- CISA deadline
- 2025-04-03 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
Oracle — Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 793 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.7% 77.3rd percentile
- In CISA KEV since
- 2024-11-21
- CISA deadline
- 2024-12-12 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apple — Apple macOS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 794 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.7% 77.3rd percentile
- In CISA KEV since
- 2026-08-18
- CISA deadline
- 2026-08-21 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Android — Android Framework Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 795 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 1.7% 77.2nd percentile
- In CISA KEV since
- 2026-06-02
- CISA deadline
- 2026-06-05 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 796 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 1.7% 77.2nd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
TrueConf — TrueConf Server Code Injection Vulnerability
EVRS 75 Urgent
Rank 797 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.7% 76.8th percentile
- In CISA KEV since
- 2026-08-20
- CISA deadline
- 2026-09-03 CISA federal deadline · Overdue by 49 days
- Ransomware use
- Not known
- Vendor
- TrueConf
- Source
- CISA KEV
Twilio — Twilio Authy Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 798 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 1.7% 76.6th percentile
- In CISA KEV since
- 2024-07-23
- CISA deadline
- 2024-08-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Twilio
- Source
- CISA KEV
Apple — Apple Multiple Products Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 799 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.7% 76.4th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 800 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.6% 75.6th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2022-06-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV