Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 0 filters on

Ranked by EVRS

363 match · filtered from 2,956 Sort

All 25 rows on this page are CISA KEV Exigent. Rows show only what differs.

Priority Feed, rows 101 to 125
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
101	CVE-2024-6670Progress — Progress WhatsUp Gold SQL Injection VulnerabilityRansomwareKEV since 2024 · listed over a year	92	9.8	93.0% · 99.83rd	2024-09-16	2024-10-07KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
102	CVE-2022-37042Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityRansomwareKEV since 2022 · listed over a year	92	9.8	91.9% · 99.82nd	2022-08-11	2022-09-01KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
103	CVE-2018-11138Quest — Quest KACE System Management Appliance Remote Command Execution VulnerabilityRansomwareKEV since 2022 · listed over a year	92	9.8	91.7% · 99.82nd	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
104	CVE-2021-35211SolarWinds — SolarWinds Serv-U Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year	92	10.0	91.2% · 99.81st	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
105	CVE-2026-50751Check Point — Check Point Security Gateway Improper Authentication VulnerabilityRansomwareCISA federal deadline · Overdue by 4 months	92	9.3	85.3% · 99.72nd	2026-06-08	2026-06-11CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
106	CVE-2026-72898Metabase — Metabase SQL Injection VulnerabilityCISA federal deadline · Overdue by 2 months	91	10.0	97.4% · 99.9th	2026-08-11	2026-08-14CISA federal deadline · Overdue by 2 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.974. Open CVE page NVD CISA KEV Vendor Advisory
107	CVE-2022-26352dotCMS — dotCMS Unrestricted Upload of File VulnerabilityRansomwareKEV since 2022 · listed over a year	91	9.8	91.2% · 99.81st	2022-08-25	2022-09-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
108	CVE-2017-12149Red Hat — Red Hat JBoss Application Server Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year	91	9.8	90.7% · 99.81st	2021-12-10	2022-06-10KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
109	CVE-2024-40711Veeam — Veeam Backup and Replication Deserialization VulnerabilityRansomwareKEV since 2024 · listed over a year	91	9.8	90.4% · 99.8th	2024-10-17	2024-11-07KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
110	CVE-2019-7195QNAP — QNAP Photo Station Path Traversal VulnerabilityRansomwareKEV since 2022 · listed over a year	91	9.8	89.7% · 99.79th	2022-06-08	2022-06-22KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
111	CVE-2021-20021SonicWall — SonicWall Email Security Improper Privilege Management VulnerabilityRansomwareKEV since 2021 · listed over a year	91	9.8	88.8% · 99.78th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
112	CVE-2023-41265Qlik — Qlik Sense HTTP Tunneling VulnerabilityRansomwareKEV since 2023 · listed over a year	91	9.9	88.2% · 99.77th	2023-12-07	2023-12-28KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
113	CVE-2019-7192QNAP — QNAP Photo Station Improper Access Control VulnerabilityRansomwareKEV since 2022 · listed over a year	91	9.8	88.1% · 99.77th	2022-06-08	2022-06-22KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
114	CVE-2024-51567CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityRansomwareKEV since 2024 · listed over a year	91	9.8	84.4% · 99.7th	2024-11-07	2024-11-28KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
115	CVE-2017-7921Hikvision — Hikvision Multiple Products Improper Authentication VulnerabilityCISA federal deadline · Overdue by 7 months	90	9.8	100.0% · 99.99th	2026-03-05	2026-03-26CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
116	CVE-2026-10520Ivanti — Ivanti Sentry OS Command Injection VulnerabilityCISA federal deadline · Overdue by 4 months	90	10.0	99.9% · 99.97th	2026-06-11	2026-06-14CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
117	CVE-2025-24893XWiki — XWiki Platform Eval Injection VulnerabilityCISA federal deadline · Overdue by 11 months	90	9.8	99.9% · 99.96th	2025-10-30	2025-11-20CISA federal deadline · Overdue by 11 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
118	CVE-2025-32432Craft CMS — Craft CMS Code Injection VulnerabilityCISA federal deadline · Overdue by 7 months	90	10.0	99.8% · 99.96th	2026-03-20	2026-04-03CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. Open CVE page NVD CISA KEV Vendor Advisory
119	CVE-2026-85706GitLab — GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityCISA federal deadline · Overdue by 40 days	90	10.0	92.0% · 99.82nd	2026-09-11	2026-09-14CISA federal deadline · Overdue by 40 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. Open CVE page NVD CISA KEV Vendor Advisory
120	CVE-2022-27593QNAP — QNAP Photo Station Externally Controlled Reference VulnerabilityRansomwareKEV since 2022 · listed over a year	90	9.1	87.9% · 99.77th	2022-09-08	2022-09-29KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
121	CVE-2017-18362Kaseya — Kaseya VSA SQL Injection VulnerabilityRansomwareKEV since 2022 · listed over a year	90	9.8	86.8% · 99.75th	2022-05-24	2022-06-14KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
122	CVE-2019-16057D-Link — D-Link DNS-320 Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year	90	9.8	86.5% · 99.74th	2022-04-15	2022-05-06KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
123	CVE-2021-30116Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityRansomwareKEV since 2021 · listed over a year	90	9.8	85.7% · 99.73rd	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
124	CVE-2023-27997Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityRansomwareKEV since 2023 · listed over a year	90	9.8	85.7% · 99.73rd	2023-06-13	2023-07-04KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
125	CVE-2025-48703CWP — CWP Control Web Panel OS Command Injection VulnerabilityCISA federal deadline · Overdue by 11 months	89	9.0	99.7% · 99.95th	2025-11-04	2025-11-25CISA federal deadline · Overdue by 11 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. Open CVE page NVD CISA KEV Vendor Advisory

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics