CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
Priority feed
The highest risk items, ranked by real-world exploitation signals.
1,757
Tracked itemsTotal vulnerabilities in the current EVULNABLE dataset across KEV and Patch Tuesday coverage.
358
ExigentKEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — all at once.
239
Ransomware-linkedAssociated with known ransomware activity according to source data.
29
New to CISA KEVAdded to the KEV catalog in the last 30 days.
Ranked by EVRS — Exigent
Showing the top 50 of 358 entries meeting the Exigent criteria. Data checked 07 Sep 11:30 UTC. Show all tracked items.
#2 97 Immediate CVE-2026-35273 ExigentOverdue by 3 monthsRansomwareCISA KEV Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#3 96 Immediate CVE-2025-10035 ExigentOverdue by 11 monthsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#4 96 Immediate CVE-2025-61882 ExigentOverdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#5 95 Immediate CVE-2025-3248 ExigentOverdue by 15 monthsRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 95 Immediate CVE-2025-22457 ExigentOverdue by 17 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#7 95 Immediate CVE-2025-31161 ExigentOverdue by 16 monthsRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#8 95 Immediate CVE-2025-31324 ExigentOverdue by 16 monthsRansomwareCISA KEV SAP — SAP NetWeaver Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#9 95 Immediate CVE-2026-41940 ExigentOverdue by 4 monthsRansomwareCISA KEV WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#10 95 Immediate CVE-2026-23760 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#11 94 Immediate CVE-2017-5638 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#12 94 Immediate CVE-2018-13379 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#13 94 Immediate CVE-2019-11510 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#14 94 Immediate CVE-2019-19781 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#15 94 Immediate CVE-2020-5902 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#16 94 Immediate CVE-2021-21985 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#17 94 Immediate CVE-2021-22005 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#18 94 Immediate CVE-2021-26084 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#19 94 Immediate CVE-2021-35464 ExigentOverdue by 4.8 yearsRansomwareCISA KEV ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#20 94 Immediate CVE-2021-44228 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache Log4j2 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#21 94 Immediate CVE-2022-26134 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#22 94 Immediate CVE-2022-29464 ExigentOverdue by 4.3 yearsRansomwareCISA KEV WSO2 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#23 94 Immediate CVE-2023-22518 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#24 94 Immediate CVE-2023-27350 ExigentOverdue by 3.3 yearsRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#25 94 Immediate CVE-2023-35078 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#26 94 Immediate CVE-2023-35082 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#27 94 Immediate CVE-2024-23897 ExigentOverdue by 2.0 yearsRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#28 94 Immediate CVE-2024-3400 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#29 94 Immediate CVE-2022-22954 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#30 94 Immediate CVE-2021-41773 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#31 94 Immediate CVE-2018-7600 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#32 94 Immediate CVE-2023-29300 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#33 94 Immediate CVE-2024-4577 ExigentOverdue by 2.2 yearsRansomwareCISA KEV PHP Group — PHP-CGI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#34 94 Immediate CVE-2022-40684 ExigentOverdue by 3.8 yearsRansomwareCISA KEV Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#35 94 Immediate CVE-2023-22527 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#36 94 Immediate CVE-2024-1709 ExigentOverdue by 2.5 yearsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#37 94 Immediate CVE-2023-42793 ExigentOverdue by 2.9 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#38 94 Immediate CVE-2025-0282 ExigentOverdue by 20 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#39 94 Immediate CVE-2022-47986 ExigentOverdue by 3.5 yearsRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#40 94 Immediate CVE-2019-2725 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle WebLogic Server, Injection Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#41 94 Immediate CVE-2021-42013 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#42 94 Immediate CVE-2025-5777 ExigentOverdue by 14 monthsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#43 94 Immediate CVE-2022-1388 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#44 94 Immediate CVE-2023-38035 ExigentOverdue by 3.0 yearsRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#45 94 Immediate CVE-2018-10562 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Dasan — Dasan GPON Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#46 94 Immediate CVE-2021-3129 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#47 94 Immediate CVE-2024-27198 ExigentOverdue by 2.4 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#48 94 Immediate CVE-2023-34362 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Progress — Progress MOVEit Transfer SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#49 94 Immediate CVE-2019-3396 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#50 94 Immediate CVE-2021-20038 ExigentOverdue by 4.6 yearsRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#51 94 Immediate CVE-2021-22986 ExigentOverdue by 4.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#52 94 Immediate CVE-2021-21972 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#53 94 Immediate CVE-2019-11043 ExigentOverdue by 4.4 yearsRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#54 94 Immediate CVE-2019-15107 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Webmin — Webmin Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#55 94 Immediate CVE-2022-47966 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#56 94 Immediate CVE-2023-3519 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#57 94 Immediate CVE-2019-18935 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#58 94 Immediate CVE-2021-22205 ExigentOverdue by 4.8 yearsRansomwareCISA KEV GitLab — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#59 94 Immediate CVE-2023-46604 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Apache — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#60 94 Immediate CVE-2010-2861 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#61 94 Immediate CVE-2024-0012 ExigentOverdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#62 94 Immediate CVE-2022-42475 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#63 94 Immediate CVE-2024-23692 ExigentOverdue by 2.1 yearsRansomwareCISA KEV Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#64 94 Immediate CVE-2017-7494 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Samba — Samba Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#65 94 Immediate CVE-2018-7602 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#66 94 Immediate CVE-2023-22515 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#67 94 Immediate CVE-2024-50623 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#68 94 Immediate CVE-2024-55591 ExigentOverdue by 20 monthsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#69 94 Immediate CVE-2026-1731 ExigentOverdue by 7 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#70 94 Immediate CVE-2025-26399 ExigentOverdue by 6 monthsRansomwareCISA KEV SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#71 94 Immediate CVE-2026-15409 ExigentOverdue by 52 daysRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#72 93 Immediate CVE-2021-40438 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache HTTP Server-Side Request Forgery (SSRF) Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#73 93 Immediate CVE-2024-21887 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#74 93 Immediate CVE-2021-45046 ExigentOverdue by 3.3 yearsRansomwareCISA KEV Apache — Apache Log4j2 Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#75 93 Immediate CVE-2021-44529 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#76 93 Immediate CVE-2021-40539 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#77 93 Immediate CVE-2023-47246 ExigentOverdue by 2.8 yearsRansomwareCISA KEV SysAid — SysAid Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#78 93 Immediate CVE-2013-2465 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Oracle — Oracle Java SE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#79 93 Immediate CVE-2012-4681 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#80 93 Immediate CVE-2023-48788 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.984.
#81 93 Immediate CVE-2022-21587 ExigentOverdue by 3.5 yearsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#82 93 Immediate CVE-2012-0507 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#83 93 Immediate CVE-2024-41713 ExigentOverdue by 19 monthsRansomwareCISA KEV Mitel — Mitel MiCollab Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#84 93 Immediate CVE-2021-42237 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#85 93 Immediate CVE-2013-0422 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#86 93 Immediate CVE-2019-5544 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#87 93 Immediate CVE-2018-1273 ExigentOverdue by 4.4 yearsRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.970.
#88 93 Immediate CVE-2023-38203 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#89 93 Immediate CVE-2018-6530 ExigentOverdue by 3.9 yearsRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#90 93 Immediate CVE-2023-46747 ExigentOverdue by 2.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#91 93 Immediate CVE-2024-53704 ExigentOverdue by 18 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#92 93 Immediate CVE-2024-51378 ExigentOverdue by 20 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#93 93 Immediate CVE-2024-55956 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#94 93 Immediate CVE-2024-6670 ExigentOverdue by 23 monthsRansomwareCISA KEV Progress — Progress WhatsUp Gold SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#95 93 Immediate CVE-2025-52691 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#96 92 Immediate CVE-2026-10520 ExigentOverdue by 3 monthsCISA KEV Ivanti — Ivanti Sentry OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#97 92 Immediate CVE-2019-11580 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.954.
#98 92 Immediate CVE-2016-4117 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#99 92 Immediate CVE-2026-72898 ExigentOverdue by 24 daysCISA KEV Metabase — Metabase SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.942.
#100 92 Immediate CVE-2012-1723 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#101 92 Immediate CVE-2018-11138 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Quest — Quest KACE System Management Appliance Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.921.
#102 92 Immediate CVE-2022-37042 ExigentOverdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#103 92 Immediate CVE-2021-35211 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SolarWinds — SolarWinds Serv-U Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.912.
#104 92 Immediate CVE-2024-40711 ExigentOverdue by 22 monthsRansomwareCISA KEV Veeam — Veeam Backup and Replication Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#105 92 Immediate CVE-2026-24423 ExigentOverdue by 6 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.877.
#106 91 Immediate CVE-2026-8037 ExigentOverdue by 28 daysCISA KEV Progress — Progress LoadMaster Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#107 91 Immediate CVE-2026-63030 ExigentOverdue by 45 daysCISA KEV WordPress — WordPress Core Interpretation Conflict Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#108 91 Immediate CVE-2026-20253 ExigentOverdue by 3 monthsCISA KEV Splunk — Splunk Enterprise Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.969.
#109 91 Immediate CVE-2022-26352 ExigentOverdue by 4.0 yearsRansomwareCISA KEV dotCMS — dotCMS Unrestricted Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.916.
#110 91 Immediate CVE-2017-12149 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.907.
#111 91 Immediate CVE-2019-7195 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.897.
#112 91 Immediate CVE-2023-41265 ExigentOverdue by 2.7 yearsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#113 91 Immediate CVE-2019-7192 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#114 91 Immediate CVE-2024-51567 ExigentOverdue by 21 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.865.
#115 91 Immediate CVE-2026-50751 ExigentOverdue by 3 monthsRansomwareCISA KEV Check Point — Check Point Security Gateway Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.838.
#116 90 Immediate CVE-2017-7921 ExigentOverdue by 5 monthsCISA KEV Hikvision — Hikvision Multiple Products Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#117 90 Immediate CVE-2025-24893 ExigentOverdue by 10 monthsCISA KEV XWiki — XWiki Platform Eval Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#118 90 Immediate CVE-2025-32432 ExigentOverdue by 5 monthsCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#119 90 Immediate CVE-2017-1000353 ExigentOverdue by 10 monthsCISA KEV Jenkins — Jenkins Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#120 90 Immediate CVE-2022-27593 ExigentOverdue by 3.9 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.879.
#121 90 Immediate CVE-2019-16057 ExigentOverdue by 4.3 yearsRansomwareCISA KEV D-Link — D-Link DNS-320 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.871.
#122 90 Immediate CVE-2017-18362 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Kaseya — Kaseya VSA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.868.
#123 90 Immediate CVE-2021-30116 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#124 90 Immediate CVE-2023-27997 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#125 90 Immediate CVE-2024-21762 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.843.
#126 89 Immediate CVE-2025-48703 ExigentOverdue by 9 monthsCISA KEV CWP — CWP Control Web Panel OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#127 89 Immediate CVE-2026-39987 ExigentOverdue by 4 monthsCISA KEV Marimo — Marimo Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#128 89 Immediate CVE-2026-24061 ExigentOverdue by 7 monthsCISA KEV GNU — GNU InetUtils Argument Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#129 89 Immediate CVE-2026-39808 ExigentOverdue by 50 daysCISA KEV Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.928.
#130 89 Immediate CVE-2021-23758 ExigentCISA deadline in 2 daysCISA KEV Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.836.
#131 89 Immediate CVE-2021-20021 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.834.
#132 89 Immediate CVE-2019-7194 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.831.
#133 89 Immediate CVE-2020-3992 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.830.
#134 89 Immediate CVE-2023-43208 ExigentOverdue by 2.2 yearsRansomwareCISA KEV NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.827.
#135 89 Immediate CVE-2018-6789 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Exim — Exim Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.821.
#136 88 Immediate CVE-2024-7593 ExigentOverdue by 23 monthsCISA KEV Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#137 88 Immediate CVE-2025-24813 ExigentOverdue by 17 monthsCISA KEV Apache — Apache Tomcat Path Equivalence Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#138 88 Immediate CVE-2024-45519 ExigentOverdue by 22 monthsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#139 88 Immediate CVE-2014-0497 ExigentOverdue by 23 monthsCISA KEV Adobe — Adobe Flash Player Integer Underflow Vulnerablity Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#140 88 Immediate CVE-2025-25257 ExigentOverdue by 13 monthsCISA KEV Fortinet — Fortinet FortiWeb SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#141 88 Immediate CVE-2016-10033 ExigentOverdue by 13 monthsCISA KEV PHP — PHPMailer Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#142 88 Immediate CVE-2021-32030 ExigentOverdue by 14 monthsCISA KEV ASUS — ASUS Routers Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#143 88 Immediate CVE-2024-4885 ExigentOverdue by 17 monthsCISA KEV Progress — Progress WhatsUp Gold Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#144 88 Immediate CVE-2024-27348 ExigentOverdue by 23 monthsCISA KEV Apache — Apache HugeGraph-Server Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#145 88 Immediate CVE-2019-16278 ExigentOverdue by 21 monthsCISA KEV Nostromo — Nostromo nhttpd Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#146 88 Immediate CVE-2025-32433 ExigentOverdue by 14 monthsCISA KEV Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#147 88 Immediate CVE-2024-9463 ExigentOverdue by 21 monthsCISA KEV Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#148 88 Immediate CVE-2024-50603 ExigentOverdue by 19 monthsCISA KEV Aviatrix — Aviatrix Controllers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#149 88 Immediate CVE-2018-19410 ExigentOverdue by 18 monthsCISA KEV Paessler — Paessler PRTG Network Monitor Local File Inclusion Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#150 88 Immediate CVE-2025-20281 ExigentOverdue by 13 monthsCISA KEV Cisco — Cisco Identity Services Engine Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.
#151 88 Immediate CVE-2025-54068 ExigentOverdue by 5 monthsCISA KEV Laravel — Laravel Livewire Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#152 88 Immediate CVE-2026-33017 ExigentOverdue by 5 monthsCISA KEV Langflow — Langflow Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.962.
#153 88 Immediate CVE-2026-21643 ExigentOverdue by 5 monthsCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.941.
#154 88 Immediate CVE-2025-11953 ExigentOverdue by 6 monthsCISA KEV React Native Community — React Native Community CLI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#155 88 Immediate CVE-2025-2747 ExigentOverdue by 10 monthsCISA KEV Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.925.
#156 88 Immediate CVE-2024-7399 ExigentOverdue by 4 monthsCISA KEV Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#157 88 Immediate CVE-2025-64446 ExigentOverdue by 10 monthsCISA KEV Fortinet — Fortinet FortiWeb Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.918.
#158 88 Immediate CVE-2026-20182 ExigentOverdue by 4 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.915.
#159 88 Immediate CVE-2021-28799 ExigentOverdue by 4.4 yearsRansomwareCISA KEV QNAP — QNAP NAS Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.782.
#160 88 Immediate CVE-2017-11357 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.777.
#161 88 Immediate CVE-2024-57726 ExigentOverdue by 4 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Missing Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#162 87 Immediate CVE-2014-6271 ExigentOverdue by 4.1 yearsCISA KEV GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#163 87 Immediate CVE-2017-9841 ExigentOverdue by 4.1 yearsCISA KEV PHPUnit — PHPUnit Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#164 87 Immediate CVE-2021-1498 ExigentOverdue by 4.8 yearsCISA KEV Cisco — Cisco HyperFlex HX Data Platform Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#165 87 Immediate CVE-2023-1671 ExigentOverdue by 2.8 yearsCISA KEV Sophos — Sophos Web Appliance Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#166 87 Immediate CVE-2012-1823 ExigentOverdue by 4.4 yearsCISA KEV PHP — PHP-CGI Query String Parameter Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#167 87 Immediate CVE-2013-2251 ExigentOverdue by 4.4 yearsCISA KEV Apache — Apache Struts Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#168 87 Immediate CVE-2020-14882 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#169 87 Immediate CVE-2024-3273 ExigentOverdue by 2.3 yearsCISA KEV D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#170 87 Immediate CVE-2019-16920 ExigentOverdue by 4.4 yearsCISA KEV D-Link — D-Link Multiple Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#171 87 Immediate CVE-2022-44877 ExigentOverdue by 3.6 yearsCISA KEV CWP — CWP Control Web Panel OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#172 87 Immediate CVE-2024-34102 ExigentOverdue by 2.1 yearsCISA KEV Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#173 87 Immediate CVE-2020-8515 ExigentOverdue by 4.3 yearsCISA KEV DrayTek — Multiple DrayTek Vigor Routers Web Management Page Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#174 87 Immediate CVE-2020-9054 ExigentOverdue by 4.4 yearsCISA KEV Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#175 87 Immediate CVE-2019-9670 ExigentOverdue by 4.2 yearsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#176 87 Immediate CVE-2021-20090 ExigentOverdue by 4.8 yearsCISA KEV Arcadyan — Arcadyan Buffalo Firmware Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#177 87 Immediate CVE-2014-8361 ExigentOverdue by 2.9 yearsCISA KEV Realtek — Realtek SDK Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#178 87 Immediate CVE-2020-25506 ExigentOverdue by 4.3 yearsCISA KEV D-Link — D-Link DNS-320 Device Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#179 87 Immediate CVE-2019-10149 ExigentOverdue by 4.2 yearsCISA KEV Exim — Exim Mail Transfer Agent (MTA) Improper Input Validation Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#180 87 Immediate CVE-2024-38475 ExigentOverdue by 16 monthsCISA KEV Apache — Apache HTTP Server Improper Escaping of Output Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#181 87 Immediate CVE-2018-15961 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe ColdFusion Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#182 87 Immediate CVE-2022-30525 ExigentOverdue by 4.3 yearsCISA KEV Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#183 87 Immediate CVE-2020-10189 ExigentOverdue by 4.3 yearsCISA KEV Zoho — Zoho ManageEngine Desktop Central File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#184 87 Immediate CVE-2014-7169 ExigentOverdue by 4.1 yearsCISA KEV GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#185 87 Immediate CVE-2015-3113 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#186 87 Immediate CVE-2022-22963 ExigentOverdue by 4.0 yearsCISA KEV VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#187 87 Immediate CVE-2021-1497 ExigentOverdue by 4.8 yearsCISA KEV Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#188 87 Immediate CVE-2022-35405 ExigentOverdue by 3.9 yearsCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#189 87 Immediate CVE-2015-1427 ExigentOverdue by 4.4 yearsCISA KEV Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#190 87 Immediate CVE-2020-7961 ExigentOverdue by 4.3 yearsCISA KEV Liferay — Liferay Portal Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#191 87 Immediate CVE-2021-33044 ExigentOverdue by 2.0 yearsCISA KEV Dahua — Dahua IP Camera Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#192 87 Immediate CVE-2021-44515 ExigentOverdue by 4.7 yearsCISA KEV Zoho — Zoho Desktop Central Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#193 87 Immediate CVE-2021-36260 ExigentOverdue by 4.6 yearsCISA KEV Hikvision — Hikvision Improper Input Validation Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#194 87 Immediate CVE-2021-35394 ExigentOverdue by 4.7 yearsCISA KEV Realtek — Realtek Jungle SDK Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#195 87 Immediate CVE-2022-46169 ExigentOverdue by 3.5 yearsCISA KEV Cacti — Cacti Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#196 87 Immediate CVE-2021-37415 ExigentOverdue by 4.7 yearsCISA KEV Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#197 87 Immediate CVE-2024-36401 ExigentOverdue by 2.1 yearsCISA KEV OSGeo — OSGeo GeoServer GeoTools Eval Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#198 87 Immediate CVE-2022-1040 ExigentOverdue by 4.4 yearsCISA KEV Sophos — Sophos Firewall Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#199 87 Immediate CVE-2020-13927 ExigentOverdue by 4.1 yearsCISA KEV Apache — Apache Airflow's Experimental API Authentication Bypass Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#200 87 Immediate CVE-2020-15505 ExigentOverdue by 4.3 yearsCISA KEV Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#201 87 Immediate CVE-2019-16759 ExigentOverdue by 4.3 yearsCISA KEV vBulletin — vBulletin PHP Module Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#202 87 Immediate CVE-2022-35914 ExigentOverdue by 3.4 yearsCISA KEV Teclib — Teclib GLPI Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#203 87 Immediate CVE-2022-22965 ExigentOverdue by 4.4 yearsCISA KEV VMware — Spring Framework JDK 9+ Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#204 87 Immediate CVE-2024-9465 ExigentOverdue by 21 monthsCISA KEV Palo Alto Networks — Palo Alto Networks Expedition SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#205 87 Immediate CVE-2020-16846 ExigentOverdue by 4.3 yearsCISA KEV SaltStack — SaltStack Salt Shell Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#206 87 Immediate CVE-2023-20198 ExigentOverdue by 2.9 yearsCISA KEV Cisco — Cisco IOS XE Web UI Privilege Escalation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#207 87 Immediate CVE-2021-33045 ExigentOverdue by 2.0 yearsCISA KEV Dahua — Dahua IP Camera Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#208 87 Immediate CVE-2024-4040 ExigentOverdue by 2.4 yearsCISA KEV CrushFTP — CrushFTP VFS Sandbox Escape Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#209 87 Immediate CVE-2018-20062 ExigentOverdue by 4.3 yearsCISA KEV ThinkPHP — ThinkPHP "noneCms" Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#210 87 Immediate CVE-2018-0171 ExigentOverdue by 4.3 yearsCISA KEV Cisco — Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#211 87 Immediate CVE-2018-2628 ExigentOverdue by 3.9 yearsCISA KEV Oracle — Oracle WebLogic Server Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#212 87 Immediate CVE-2024-32113 ExigentOverdue by 2.0 yearsCISA KEV Apache — Apache OFBiz Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#213 87 Immediate CVE-2023-34048 ExigentOverdue by 2.6 yearsCISA KEV VMware — VMware vCenter Server Out-of-Bounds Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#214 87 Immediate CVE-2024-38856 ExigentOverdue by 2.0 yearsCISA KEV Apache — Apache OFBiz Incorrect Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#215 87 Immediate CVE-2022-0543 ExigentOverdue by 4.4 yearsCISA KEV Redis — Debian-specific Redis Server Lua Sandbox Escape Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#216 87 Immediate CVE-2015-5119 ExigentOverdue by 4.5 yearsCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#217 87 Immediate CVE-2014-6287 ExigentOverdue by 4.4 yearsCISA KEV Rejetto — Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#218 87 Immediate CVE-2023-28771 ExigentOverdue by 3.2 yearsCISA KEV Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#219 87 Immediate CVE-2020-14750 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#220 87 Immediate CVE-2020-1938 ExigentOverdue by 4.5 yearsCISA KEV Apache — Apache Tomcat Improper Privilege Management Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#221 87 Immediate CVE-2022-24086 ExigentOverdue by 4.5 yearsCISA KEV Adobe — Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#222 87 Immediate CVE-2017-3881 ExigentOverdue by 4.4 yearsCISA KEV Cisco — Cisco IOS and IOS XE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#223 87 Immediate CVE-2020-7247 ExigentOverdue by 4.4 yearsCISA KEV OpenBSD — OpenSMTPD Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#224 87 Immediate CVE-2019-3929 ExigentOverdue by 4.3 yearsCISA KEV Crestron — Crestron Multiple Products Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#225 87 Immediate CVE-2017-9791 ExigentOverdue by 4.1 yearsCISA KEV Apache — Apache Struts 1 Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#226 87 Immediate CVE-2022-3236 ExigentOverdue by 3.9 yearsCISA KEV Sophos — Sophos Firewall Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#227 87 Immediate CVE-2024-8963 ExigentOverdue by 23 monthsCISA KEV Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#228 87 Immediate CVE-2016-3088 ExigentOverdue by 4.1 yearsCISA KEV Apache — Apache ActiveMQ Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#229 87 Immediate CVE-2022-24816 ExigentOverdue by 2.1 yearsCISA KEV OSGeo — OSGeo GeoServer JAI-EXT Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#230 87 Immediate CVE-2018-1000861 ExigentOverdue by 4.1 yearsCISA KEV Jenkins — Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#231 87 Immediate CVE-2016-1555 ExigentOverdue by 4.4 yearsCISA KEV NETGEAR — NETGEAR Multiple WAP Devices Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#232 87 Immediate CVE-2017-15944 ExigentOverdue by 4.0 yearsCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#233 87 Immediate CVE-2023-20887 ExigentOverdue by 3.2 yearsCISA KEV VMware — Vmware Aria Operations for Networks Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#234 87 Immediate CVE-2020-6207 ExigentOverdue by 4.3 yearsCISA KEV SAP — SAP Solution Manager Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#235 87 Immediate CVE-2022-22947 ExigentOverdue by 4.3 yearsCISA KEV VMware — VMware Spring Cloud Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#236 87 Immediate CVE-2022-26138 ExigentOverdue by 4.1 yearsCISA KEV Atlassian — Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.982.
#237 87 Immediate CVE-2023-25717 ExigentOverdue by 3.3 yearsCISA KEV Ruckus Wireless — Multiple Ruckus Wireless Products CSRF and RCE Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#238 87 Immediate CVE-2024-3272 ExigentOverdue by 2.3 yearsCISA KEV D-Link — D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.980.
#239 87 Immediate CVE-2022-29303 ExigentOverdue by 3.1 yearsCISA KEV SolarView — SolarView Compact Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.980.
#240 87 Immediate CVE-2021-35395 ExigentOverdue by 4.8 yearsCISA KEV Realtek — Realtek AP-Router SDK Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.980.
#241 87 Immediate CVE-2022-22536 ExigentOverdue by 4.0 yearsCISA KEV SAP — SAP Multiple Products HTTP Request Smuggling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#242 87 Immediate CVE-2023-25280 ExigentOverdue by 23 monthsCISA KEV D-Link — D-Link DIR-820 Router OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#243 87 Immediate CVE-2025-34028 ExigentOverdue by 16 monthsCISA KEV Commvault — Commvault Command Center Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.977.
#244 87 Immediate CVE-2024-56145 ExigentOverdue by 14 monthsCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.974.
#245 87 Immediate CVE-2024-1212 ExigentOverdue by 21 monthsCISA KEV Progress — Progress Kemp LoadMaster OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.954.
#246 87 Immediate CVE-2024-47575 ExigentOverdue by 22 monthsCISA KEV Fortinet — Fortinet FortiManager Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#247 87 Immediate CVE-2020-2883 ExigentOverdue by 19 monthsCISA KEV Oracle — Oracle WebLogic Server Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.949.
#248 87 Immediate CVE-2018-14933 ExigentOverdue by 20 monthsCISA KEV NUUO — NUUO NVRmini Devices OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.949.
#249 87 Immediate CVE-2025-54309 ExigentOverdue by 13 monthsCISA KEV CrushFTP — CrushFTP Unprotected Alternate Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#250 87 Immediate CVE-2020-14644 ExigentOverdue by 23 monthsCISA KEV Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.945.
#251 87 Immediate CVE-2025-54236 ExigentOverdue by 10 monthsCISA KEV Adobe — Adobe Commerce and Magento Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.945.
#252 87 Immediate CVE-2025-30406 ExigentOverdue by 16 monthsCISA KEV Gladinet — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.943.
#253 87 Immediate CVE-2025-24016 ExigentOverdue by 14 monthsCISA KEV Wazuh — Wazuh Server Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.938.
#254 87 Immediate CVE-2025-5086 ExigentOverdue by 11 monthsCISA KEV Dassault Systèmes — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.920.
#255 87 Immediate CVE-2025-9242 ExigentOverdue by 9 monthsCISA KEV WatchGuard — WatchGuard Firebox Out-of-Bounds Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.913.
#256 87 Immediate CVE-2026-35616 ExigentOverdue by 5 monthsCISA KEV Fortinet — Fortinet FortiClient EMS Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.907.
#257 87 Immediate CVE-2025-37164 ExigentOverdue by 7 monthsCISA KEV Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.902.
#258 87 Immediate CVE-2021-42258 ExigentOverdue by 4.8 yearsRansomwareCISA KEV BQE — BQE BillQuick Web Suite SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#259 86 Immediate CVE-2024-4879 ExigentOverdue by 2.1 yearsCISA KEV ServiceNow — ServiceNow Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#260 86 Immediate CVE-2024-5217 ExigentOverdue by 2.1 yearsCISA KEV ServiceNow — ServiceNow Incomplete List of Disallowed Inputs Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#261 86 Immediate CVE-2012-3152 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle Fusion Middleware Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.988.
#262 86 Immediate CVE-2021-45382 ExigentOverdue by 4.4 yearsCISA KEV D-Link — D-Link Multiple Routers Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.
#263 86 Immediate CVE-2015-7450 ExigentOverdue by 4.2 yearsCISA KEV IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.977.
#264 86 Immediate CVE-2021-36380 ExigentOverdue by 2.5 yearsCISA KEV Sunhillo — Sunhillo SureLine OS Command Injection Vulnerablity Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#265 86 Immediate CVE-2024-4358 ExigentOverdue by 2.2 yearsCISA KEV Progress — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.975.
#266 86 Immediate CVE-2007-3010 ExigentOverdue by 4.3 yearsCISA KEV Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.974.
#267 86 Immediate CVE-2023-27524 ExigentOverdue by 2.6 yearsCISA KEV Apache — Apache Superset Insecure Default Initialization of Resource Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.974.
#268 86 Immediate CVE-2023-24489 ExigentOverdue by 3.0 yearsCISA KEV Citrix — Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#269 86 Immediate CVE-2020-25213 ExigentOverdue by 4.3 yearsCISA KEV WordPress — WordPress File Manager Plugin Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#270 86 Immediate CVE-2019-7256 ExigentOverdue by 2.4 yearsCISA KEV Nice — Nice Linear eMerge E3-Series OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.
#271 86 Immediate CVE-2020-2555 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.
#272 86 Immediate CVE-2019-1003030 ExigentOverdue by 4.4 yearsCISA KEV Jenkins — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.969.
#273 86 Immediate CVE-2021-22502 ExigentOverdue by 4.8 yearsCISA KEV Micro Focus — Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#274 86 Immediate CVE-2011-3544 ExigentOverdue by 4.5 yearsCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#275 86 Immediate CVE-2020-25223 ExigentOverdue by 4.4 yearsCISA KEV Sophos — Sophos SG UTM Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#276 86 Immediate CVE-2020-11651 ExigentOverdue by 4.3 yearsCISA KEV SaltStack — SaltStack Salt Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.966.
#277 86 Immediate CVE-2023-33246 ExigentOverdue by 2.9 yearsCISA KEV Apache — Apache RocketMQ Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.966.
#278 86 Immediate CVE-2009-1151 ExigentOverdue by 4.4 yearsCISA KEV phpMyAdmin — phpMyAdmin Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.966.
#279 86 Immediate CVE-2010-0840 ExigentOverdue by 4.2 yearsCISA KEV Oracle — Oracle JRE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#280 86 Immediate CVE-2021-35587 ExigentOverdue by 3.7 yearsCISA KEV Oracle — Oracle Fusion Middleware Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#281 86 Immediate CVE-2015-4852 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.960.
#282 86 Immediate CVE-2022-24112 ExigentOverdue by 4.0 yearsCISA KEV Apache — Apache APISIX Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.960.
#283 86 Immediate CVE-2020-17530 ExigentOverdue by 4.3 yearsCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.959.
#284 86 Immediate CVE-2020-5847 ExigentOverdue by 4.3 yearsCISA KEV Unraid — Unraid Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.958.
#285 86 Immediate CVE-2015-0313 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.957.
#286 86 Immediate CVE-2022-23131 ExigentOverdue by 4.5 yearsCISA KEV Zabbix — Zabbix Frontend Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.957.
#287 86 Immediate CVE-2022-41352 ExigentOverdue by 3.8 yearsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#288 86 Immediate CVE-2019-7609 ExigentOverdue by 4.2 yearsCISA KEV Elastic — Kibana Arbitrary Code Execution Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.953.
#289 86 Immediate CVE-2019-10068 ExigentOverdue by 4.4 yearsCISA KEV Kentico — Kentico Xperience Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#290 86 Immediate CVE-2020-6287 ExigentOverdue by 4.3 yearsCISA KEV SAP — SAP NetWeaver Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#291 86 Immediate CVE-2023-7028 ExigentOverdue by 2.3 yearsCISA KEV GitLab — GitLab Community and Enterprise Editions Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.946.
#292 86 Immediate CVE-2023-36845 ExigentOverdue by 2.8 yearsCISA KEV Juniper — Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.946.
#293 86 Immediate CVE-2017-18368 ExigentOverdue by 3.0 yearsCISA KEV Zyxel — Zyxel P660HN-T1A Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#294 86 Immediate CVE-2019-12989 ExigentOverdue by 4.4 yearsCISA KEV Citrix — Citrix SD-WAN and NetScaler SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.941.
#295 86 Immediate CVE-2025-47812 ExigentOverdue by 13 monthsCISA KEV Wing FTP Server — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.928.
#296 86 Immediate CVE-2022-43939 ExigentOverdue by 17 monthsCISA KEV Hitachi Vantara — Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.923.
#297 86 Immediate CVE-2024-20439 ExigentOverdue by 17 monthsCISA KEV Cisco — Cisco Smart Licensing Utility Static Credential Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.921.
#298 86 Immediate CVE-2024-11680 ExigentOverdue by 20 monthsCISA KEV ProjectSend — ProjectSend Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.917.
#299 86 Immediate CVE-2017-3066 ExigentOverdue by 18 monthsCISA KEV Adobe — Adobe ColdFusion Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.906.
#300 86 Immediate CVE-2025-12480 ExigentOverdue by 9 monthsCISA KEV Gladinet — Gladinet Triofox Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.905.
#301 86 Immediate CVE-2023-28461 ExigentOverdue by 21 monthsRansomwareCISA KEV Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#302 85 Immediate CVE-2018-14847 ExigentOverdue by 4.3 yearsCISA KEV MikroTik — MikroTik Router OS Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.961.
#303 85 Immediate CVE-2017-1000486 ExigentOverdue by 4.2 yearsCISA KEV Primetek — Primetek Primefaces Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.941.
#304 85 Immediate CVE-2013-0625 ExigentOverdue by 4.0 yearsCISA KEV Adobe — Adobe ColdFusion Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.938.
#305 85 Immediate CVE-2013-0632 ExigentOverdue by 4.5 yearsCISA KEV Adobe — Adobe ColdFusion Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#306 85 Immediate CVE-2015-5122 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#307 85 Immediate CVE-2021-44077 ExigentOverdue by 4.7 yearsCISA KEV Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.933.
#308 85 Immediate CVE-2024-28987 ExigentOverdue by 22 monthsCISA KEV SolarWinds — SolarWinds Web Help Desk Hardcoded Credential Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.932.
#309 85 Immediate CVE-2020-2551 ExigentOverdue by 2.8 yearsCISA KEV Oracle — Oracle Fusion Middleware Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.932.
#310 85 Immediate CVE-2018-10561 ExigentOverdue by 4.4 yearsCISA KEV Dasan — Dasan GPON Routers Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#311 85 Immediate CVE-2016-4437 ExigentOverdue by 4.3 yearsCISA KEV Apache — Apache Shiro Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#312 85 Immediate CVE-2021-40870 ExigentOverdue by 4.6 yearsCISA KEV Aviatrix — Aviatrix Controller Unrestricted Upload of File Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#313 85 Immediate CVE-2022-24706 ExigentOverdue by 4.0 yearsCISA KEV Apache — Apache CouchDB Insecure Default Initialization of Resource Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.925.
#314 85 Immediate CVE-2016-3427 ExigentOverdue by 3.3 yearsCISA KEV Oracle — Oracle Java SE and JRockit Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.923.
#315 85 Immediate CVE-2017-5689 ExigentOverdue by 4.1 yearsCISA KEV Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.922.
#316 85 Immediate CVE-2020-10148 ExigentOverdue by 4.3 yearsCISA KEV SolarWinds — SolarWinds Orion Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.920.
#317 85 Immediate CVE-2020-8657 ExigentOverdue by 4.3 yearsCISA KEV EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#318 85 Immediate CVE-2024-5910 ExigentOverdue by 21 monthsCISA KEV Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.918.
#319 85 Immediate CVE-2012-5076 ExigentOverdue by 4.4 yearsCISA KEV Oracle — Oracle Java SE Sandbox Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.910.
#320 85 Immediate CVE-2021-32648 ExigentOverdue by 4.6 yearsCISA KEV October CMS — October CMS Improper Authentication Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#321 85 Immediate CVE-2020-3952 ExigentOverdue by 4.3 yearsCISA KEV VMware — VMware vCenter Server Information Disclosure Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#322 85 Immediate CVE-2016-8735 ExigentOverdue by 3.3 yearsCISA KEV Apache — Apache Tomcat Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#323 85 Immediate CVE-2020-29583 ExigentOverdue by 4.3 yearsCISA KEV Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.902.
#324 85 Immediate CVE-2021-27877 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Veritas — Veritas Backup Exec Agent Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#325 85 Immediate CVE-2021-27104 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#326 85 Immediate CVE-2022-29499 ExigentOverdue by 4.1 yearsRansomwareCISA KEV Mitel — Mitel MiVoice Connect Data Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#327 85 Immediate CVE-2021-22941 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Citrix — Citrix ShareFile Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#328 85 Immediate CVE-2020-12812 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#329 85 Immediate CVE-2021-22893 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#330 85 Immediate CVE-2020-12271 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Sophos — Sophos SFOS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#331 85 Immediate CVE-2026-12569 ExigentOverdue by 2 monthsRansomwareCISA KEV PTC — PTC Windchill and FlexPLM Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#332 85 Immediate CVE-2021-20016 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall SSLVPN SMA100 SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#333 85 Immediate CVE-2022-31199 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Netwrix — Netwrix Auditor Insecure Object Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#334 85 Immediate CVE-2026-20131 ExigentOverdue by 6 monthsRansomwareCISA KEV Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#335 85 Immediate CVE-2021-20028 ExigentOverdue by 4.4 yearsRansomwareCISA KEV SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#336 85 Immediate CVE-2018-20753 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Kaseya — Kaseya VSA Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#337 85 Immediate CVE-2020-5135 ExigentOverdue by 4.4 yearsRansomwareCISA KEV SonicWall — SonicWall SonicOS Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#338 85 Immediate CVE-2023-20269 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#339 85 Immediate CVE-2023-48365 ExigentOverdue by 19 monthsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#340 85 Immediate CVE-2018-19949 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP NAS File Station Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#341 85 Immediate CVE-2025-23006 ExigentOverdue by 19 monthsRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#342 85 Immediate CVE-2024-9680 ExigentOverdue by 22 monthsRansomwareCISA KEV Mozilla — Mozilla Firefox Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#343 85 Immediate CVE-2016-1019 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#344 85 Immediate CVE-2024-40766 ExigentOverdue by 23 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#345 85 Immediate CVE-2019-7193 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP QTS Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#346 85 Immediate CVE-2025-42999 ExigentOverdue by 15 monthsRansomwareCISA KEV SAP — SAP NetWeaver Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#347 85 Immediate CVE-2012-1710 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle Fusion Middleware Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#348 85 Immediate CVE-2021-27103 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#349 85 Immediate CVE-2019-11634 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#350 85 Immediate CVE-2018-19323 ExigentOverdue by 3.8 yearsRansomwareCISA KEV GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#351 85 Immediate CVE-2021-27101 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#352 85 Immediate CVE-2020-29574 ExigentOverdue by 18 monthsRansomwareCISA KEV Sophos — CyberoamOS (CROS) SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#353 85 Immediate CVE-2020-2021 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#354 85 Immediate CVE-2022-26501 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#355 85 Immediate CVE-2024-11667 ExigentOverdue by 20 monthsRansomwareCISA KEV Zyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#356 85 Immediate CVE-2026-45321 ExigentOverdue by 3 monthsRansomwareCISA KEV TanStack — TanStack Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#357 85 Immediate CVE-2026-48027 ExigentOverdue by 3 monthsRansomwareCISA KEV Nx — Nx Console Embedded Malicious Code Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#358 85 Immediate CVE-2026-82078 ExigentCISA deadline in 7 daysCISA KEV PaperCut — PaperCut NG/MF Unsafe Reflection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.