Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
363 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 351 | CVE-2019-11634Citrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year | 85 | 9.8 | 8.1% · 94.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 352 | CVE-2012-1710Oracle — Oracle Fusion Middleware Unspecified VulnerabilityRansomwareKEV since 2022 · listed over a year | 85 | 9.8 | 7.8% · 94.7th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 353 | CVE-2026-15409SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityRansomwareCISA federal deadline · Overdue by 3 months | 85 | 10.0 | 6.8% · 94th | 2026-07-14 | 2026-07-17CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 354 | CVE-2021-27101Accellion — Accellion FTA SQL Injection VulnerabilityRansomwareKEV since 2021 · listed over a year | 85 | 9.8 | 6.0% · 93.3rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 355 | CVE-2020-29574Sophos — CyberoamOS (CROS) SQL Injection VulnerabilityRansomwareKEV since 2025 · listed over a year | 85 | 9.8 | 4.7% · 91.8th | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 356 | CVE-2020-2021Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomwareKEV since 2022 · listed over a year | 85 | 10.0 | 4.4% · 91.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 357 | CVE-2022-26501Veeam — Veeam Backup & Replication Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 85 | 9.8 | 4.1% · 90.7th | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 358 | CVE-2024-11667Zyxel — Zyxel Multiple Firewalls Path Traversal VulnerabilityRansomwareKEV since 2024 · listed over a year | 85 | 9.8 | 2.9% · 87th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 359 | CVE-2026-59310Broadcom — Broadcom VMware vCenter Path Traversal VulnerabilityRansomwareCISA federal deadline · Overdue by 2 months | 85 | 9.8 | 2.6% · 85th | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 360 | CVE-2026-48027Nx — Nx Console Embedded Malicious Code VulnerabilityRansomwareCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 1.3% · 71st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 361 | CVE-2026-110447Collabora — Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCISA federal deadline in 2 days | 85 | 9.2 | 1.2% · 68.6th | 2026-10-23 | 2026-10-26CISA federal deadline in 2 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 362 | CVE-2026-45321TanStack — TanStack Unspecified VulnerabilityRansomwareCISA federal deadline · Overdue by 4 months | 85 | 9.6 | 1.1% · 64.1st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 363 | CVE-2026-114625Arista — Arista VeloCloud Orchestrator SQL Injection VulnerabilityCISA federal deadline in 2 days | 85 | 9.4 | 0.6% · 45.6th | 2026-10-23 | 2026-10-26CISA federal deadline in 2 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCitrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 351 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 8.1% 94.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 85 Immediate
Rank 352 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.8% 94.7th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
EVRS 85 Immediate
Rank 353 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 6.8% 94th percentile
- In CISA KEV since
- 2026-07-14
- CISA deadline
- 2026-07-17 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Accellion — Accellion FTA SQL Injection Vulnerability
EVRS 85 Immediate
Rank 354 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 6.0% 93.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
Sophos — CyberoamOS (CROS) SQL Injection Vulnerability
EVRS 85 Immediate
Rank 355 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.7% 91.8th percentile
- In CISA KEV since
- 2025-02-06
- CISA deadline
- 2025-02-27 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Sophos
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 356 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 4.4% 91.2nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 357 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.1% 90.7th percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability
EVRS 85 Immediate
Rank 358 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.9% 87th percentile
- In CISA KEV since
- 2024-12-03
- CISA deadline
- 2024-12-24 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
Broadcom — Broadcom VMware vCenter Path Traversal Vulnerability
EVRS 85 Immediate
Rank 359 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.6% 85th percentile
- In CISA KEV since
- 2026-08-18
- CISA deadline
- 2026-08-21 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Known
- Vendor
- Broadcom
- Source
- CISA KEV
Nx — Nx Console Embedded Malicious Code Vulnerability
EVRS 85 Immediate
Rank 360 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.3% 71st percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- Nx
- Source
- CISA KEV
Collabora — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
EVRS 85 Immediate
Rank 361 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.2 NVD
- EPSS
- 1.2% 68.6th percentile
- In CISA KEV since
- 2026-10-23
- CISA deadline
- 2026-10-26 CISA federal deadline in 2 days
- Ransomware use
- Not known
- Vendor
- Collabora
- Source
- CISA KEV
TanStack — TanStack Unspecified Vulnerability
EVRS 85 Immediate
Rank 362 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.6 NVD
- EPSS
- 1.1% 64.1st percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- TanStack
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator SQL Injection Vulnerability
EVRS 85 Immediate
Rank 363 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.4 NVD
- EPSS
- 0.6% 45.6th percentile
- In CISA KEV since
- 2026-10-23
- CISA deadline
- 2026-10-26 CISA federal deadline in 2 days
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
