Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Ranked by EVRS

363 match · filtered from 2,956

All 25 rows on this page are CISA KEV Exigent. Rows show only what differs.

Priority Feed, rows 151 to 175
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
151 CVE-2026-21643Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityCISA federal deadline · Overdue by 6 months 88 9.8 93.9% · 99.85th 2026-04-13 2026-04-16CISA federal deadline · Overdue by 6 months
152 CVE-2025-64446Fortinet — Fortinet FortiWeb Path Traversal VulnerabilityCISA federal deadline · Overdue by 11 months 88 9.8 92.0% · 99.82nd 2025-11-14 2025-11-21CISA federal deadline · Overdue by 11 months
153 CVE-2024-7399Samsung — Samsung MagicINFO 9 Server Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months 88 9.8 91.9% · 99.82nd 2026-04-24 2026-05-08CISA federal deadline · Overdue by 6 months
154 CVE-2026-20182Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 5 months 88 10.0 91.8% · 99.82nd 2026-05-14 2026-05-17CISA federal deadline · Overdue by 5 months
155 CVE-2021-28799QNAP — QNAP NAS Improper Authorization VulnerabilityRansomwareKEV since 2022 · listed over a year 88 9.8 78.2% · 99.58th 2022-03-31 2022-04-21KEV since 2022 · listed over a year
156 CVE-2017-11357Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityRansomwareKEV since 2023 · listed over a year 88 9.8 77.7% · 99.57th 2023-01-26 2023-02-16KEV since 2023 · listed over a year
157 CVE-2024-57726SimpleHelp — SimpleHelp Missing Authorization VulnerabilityRansomwareCISA federal deadline · Overdue by 6 months 88 9.9 66.4% · 99.29th 2026-04-24 2026-05-08CISA federal deadline · Overdue by 6 months
158 CVE-2014-6271GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.99th 2022-01-28 2022-07-28KEV since 2022 · listed over a year
159 CVE-2017-9841PHPUnit — PHPUnit Command Injection VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.99th 2022-02-15 2022-08-15KEV since 2022 · listed over a year
160 CVE-2021-1498Cisco — Cisco HyperFlex HX Data Platform Command Injection VulnerabilityKEV since 2021 · listed over a year 87 9.8 100.0% · 99.99th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
161 CVE-2023-1671Sophos — Sophos Web Appliance Command Injection VulnerabilityKEV since 2023 · listed over a year 87 9.8 100.0% · 99.99th 2023-11-16 2023-12-07KEV since 2023 · listed over a year
162 CVE-2024-7593Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityKEV since 2024 · listed over a year 87 9.8 100.0% · 99.99th 2024-09-24 2024-10-15KEV since 2024 · listed over a year
163 CVE-2012-1823PHP — PHP-CGI Query String Parameter VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.99th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
164 CVE-2013-2251Apache — Apache Struts Improper Input Validation VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.99th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
165 CVE-2020-14882Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 87 9.8 100.0% · 99.99th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
166 CVE-2019-16920D-Link — D-Link Multiple Routers Command Injection VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.99th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
167 CVE-2022-44877CWP — CWP Control Web Panel OS Command Injection VulnerabilityKEV since 2023 · listed over a year 87 9.8 100.0% · 99.99th 2023-01-17 2023-02-07KEV since 2023 · listed over a year
168 CVE-2024-3273D-Link — D-Link Multiple NAS Devices Command Injection VulnerabilityKEV since 2024 · listed over a year 87 9.8 100.0% · 99.99th 2024-04-11 2024-05-02KEV since 2024 · listed over a year
169 CVE-2024-34102Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEV since 2024 · listed over a year 87 9.8 100.0% · 99.99th 2024-07-17 2024-08-07KEV since 2024 · listed over a year
170 CVE-2020-8515DrayTek — Multiple DrayTek Vigor Routers Web Management Page VulnerabilityKEV since 2021 · listed over a year 87 9.8 100.0% · 99.99th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
171 CVE-2021-33044Dahua — Dahua IP Camera Authentication Bypass VulnerabilityKEV since 2024 · listed over a year 87 9.8 100.0% · 99.98th 2024-08-21 2024-09-11KEV since 2024 · listed over a year
172 CVE-2020-9054Zyxel — Zyxel Multiple NAS Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year 87 9.8 100.0% · 99.98th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
173 CVE-2019-9670Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceKEV since 2022 · listed over a year 87 9.8 100.0% · 99.98th 2022-01-10 2022-07-10KEV since 2022 · listed over a year
174 CVE-2021-20090Arcadyan — Arcadyan Buffalo Firmware Path Traversal VulnerabilityKEV since 2021 · listed over a year 87 9.8 100.0% · 99.98th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
175 CVE-2014-8361Realtek — Realtek SDK Improper Input Validation VulnerabilityKEV since 2023 · listed over a year 87 9.8 100.0% · 99.98th 2023-09-18 2023-10-09KEV since 2023 · listed over a year
Showing 151–175 of 363

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics