Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
363 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 326 | CVE-2021-27104Accellion — Accellion FTA OS Command Injection VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 56.7% · 99.06th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 327 | CVE-2022-29499Mitel — Mitel MiVoice Connect Data Validation VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 55.2% · 99.03rd | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 328 | CVE-2021-22941Citrix — Citrix ShareFile Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 53.6% · 99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 329 | CVE-2023-48365Qlik — Qlik Sense HTTP Tunneling VulnerabilityKEV since 2025 · listed over a year | 85 | 9.9 | 47.5% · 98.8th | 2025-01-13 | 2025-02-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 330 | CVE-2021-22893Ivanti — Ivanti Pulse Connect Secure Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 85 | 10.0 | 47.2% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 331 | CVE-2026-12569PTC — PTC Windchill and FlexPLM Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 46.0% · 98.8th | 2026-06-25 | 2026-06-28CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 332 | CVE-2020-12812Fortinet — Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 45.4% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 333 | CVE-2026-20131Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 7 months | 85 | 10.0 | 43.2% · 98.7th | 2026-03-19 | 2026-03-22CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 334 | CVE-2020-12271Sophos — Sophos SFOS SQL Injection VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 42.4% · 98.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 335 | CVE-2021-20016SonicWall — SonicWall SSLVPN SMA100 SQL Injection VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 40.0% · 98.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 336 | CVE-2022-31199Netwrix — Netwrix Auditor Insecure Object Deserialization VulnerabilityKEV since 2023 · listed over a year | 85 | 9.8 | 36.0% · 98.5th | 2023-07-11 | 2023-08-01KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 337 | CVE-2018-19949QNAP — QNAP NAS File Station Command Injection VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 30.2% · 98.2nd | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 338 | CVE-2021-20028SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 30.1% · 98.2nd | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 339 | CVE-2018-20753Kaseya — Kaseya VSA Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 29.6% · 98.2nd | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 340 | CVE-2020-5135SonicWall — SonicWall SonicOS Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 26.9% · 98th | 2022-03-15 | 2022-04-05KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 341 | CVE-2025-14733WatchGuard — WatchGuard Firebox Out of Bounds Write VulnerabilityCISA federal deadline · Overdue by 10 months | 85 | 9.3 | 26.5% · 98th | 2025-12-19 | 2025-12-26CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 342 | CVE-2023-20269Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityKEV since 2023 · listed over a year | 85 | 9.1 | 25.5% · 98th | 2023-09-13 | 2023-10-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 343 | CVE-2025-23006SonicWall — SonicWall SMA1000 Appliances Deserialization VulnerabilityKEV since 2025 · listed over a year | 85 | 9.8 | 23.4% · 97.8th | 2025-01-24 | 2025-02-14KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 344 | CVE-2024-9680Mozilla — Mozilla Firefox Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 85 | 9.8 | 23.2% · 97.8th | 2024-10-15 | 2024-11-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 345 | CVE-2016-1019Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 22.3% · 97.7th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 346 | CVE-2024-40766SonicWall — SonicWall SonicOS Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 85 | 9.8 | 18.4% · 97.2nd | 2024-09-09 | 2024-09-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 347 | CVE-2019-7193QNAP — QNAP QTS Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 14.4% · 96.6th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 348 | CVE-2025-42999SAP — SAP NetWeaver Deserialization VulnerabilityKEV since 2025 · listed over a year | 85 | 9.1 | 12.9% · 96.3rd | 2025-05-15 | 2025-06-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 349 | CVE-2021-27103Accellion — Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 11.4% · 96th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 350 | CVE-2018-19323GIGABYTE — GIGABYTE Multiple Products Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 8.4% · 95th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAccellion — Accellion FTA OS Command Injection Vulnerability
EVRS 85 Immediate
Rank 326 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 56.7% 99.06th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Data Validation Vulnerability
EVRS 85 Immediate
Rank 327 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.2% 99.03rd percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Citrix — Citrix ShareFile Improper Access Control Vulnerability
EVRS 85 Immediate
Rank 328 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 53.6% 99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Qlik — Qlik Sense HTTP Tunneling Vulnerability
EVRS 85 Immediate
Rank 329 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.9 NVD
- EPSS
- 47.5% 98.8th percentile
- In CISA KEV since
- 2025-01-13
- CISA deadline
- 2025-02-03 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Qlik
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 330 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 47.2% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
PTC — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
EVRS 85 Immediate
Rank 331 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 46.0% 98.8th percentile
- In CISA KEV since
- 2026-06-25
- CISA deadline
- 2026-06-28 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- PTC
- Source
- CISA KEV
Fortinet — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
EVRS 85 Immediate
Rank 332 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 45.4% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
EVRS 85 Immediate
Rank 333 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 43.2% 98.7th percentile
- In CISA KEV since
- 2026-03-19
- CISA deadline
- 2026-03-22 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Sophos — Sophos SFOS SQL Injection Vulnerability
EVRS 85 Immediate
Rank 334 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 42.4% 98.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Sophos
- Source
- CISA KEV
SonicWall — SonicWall SSLVPN SMA100 SQL Injection Vulnerability
EVRS 85 Immediate
Rank 335 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 40.0% 98.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Netwrix — Netwrix Auditor Insecure Object Deserialization Vulnerability
EVRS 85 Immediate
Rank 336 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 36.0% 98.5th percentile
- In CISA KEV since
- 2023-07-11
- CISA deadline
- 2023-08-01 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Netwrix
- Source
- CISA KEV
QNAP — QNAP NAS File Station Command Injection Vulnerability
EVRS 85 Immediate
Rank 337 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.2% 98.2nd percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
EVRS 85 Immediate
Rank 338 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.1% 98.2nd percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Kaseya — Kaseya VSA Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 339 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.6% 98.2nd percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Kaseya
- Source
- CISA KEV
SonicWall — SonicWall SonicOS Buffer Overflow Vulnerability
EVRS 85 Immediate
Rank 340 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 26.9% 98th percentile
- In CISA KEV since
- 2022-03-15
- CISA deadline
- 2022-04-05 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox Out of Bounds Write Vulnerability
EVRS 85 Immediate
Rank 341 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 26.5% 98th percentile
- In CISA KEV since
- 2025-12-19
- CISA deadline
- 2025-12-26 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Known
- Vendor
- WatchGuard
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
EVRS 85 Immediate
Rank 342 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 25.5% 98th percentile
- In CISA KEV since
- 2023-09-13
- CISA deadline
- 2023-10-04 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Deserialization Vulnerability
EVRS 85 Immediate
Rank 343 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 23.4% 97.8th percentile
- In CISA KEV since
- 2025-01-24
- CISA deadline
- 2025-02-14 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Mozilla — Mozilla Firefox Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 344 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 23.2% 97.8th percentile
- In CISA KEV since
- 2024-10-15
- CISA deadline
- 2024-11-05 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Mozilla
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 85 Immediate
Rank 345 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 22.3% 97.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
SonicWall — SonicWall SonicOS Improper Access Control Vulnerability
EVRS 85 Immediate
Rank 346 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 18.4% 97.2nd percentile
- In CISA KEV since
- 2024-09-09
- CISA deadline
- 2024-09-30 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
QNAP — QNAP QTS Improper Input Validation Vulnerability
EVRS 85 Immediate
Rank 347 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 14.4% 96.6th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
SAP — SAP NetWeaver Deserialization Vulnerability
EVRS 85 Immediate
Rank 348 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 12.9% 96.3rd percentile
- In CISA KEV since
- 2025-05-15
- CISA deadline
- 2025-06-05 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SAP
- Source
- CISA KEV
Accellion — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
EVRS 85 Immediate
Rank 349 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.4% 96th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability
EVRS 85 Immediate
Rank 350 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 8.4% 95th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
