CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
Priority feed
The highest risk items, ranked by real-world exploitation signals.
1,757
Tracked itemsTotal vulnerabilities in the current EVULNABLE dataset across KEV and Patch Tuesday coverage.
358
ExigentKEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — all at once.
239
Ransomware-linkedAssociated with known ransomware activity according to source data.
29
New to CISA KEVAdded to the KEV catalog in the last 30 days.
Ranked by EVRS — Exigent
Showing the top 200 of 358 entries meeting the Exigent criteria. Data checked 07 Sep 11:30 UTC. Show all tracked items.
#2 97 Immediate CVE-2026-35273 ExigentOverdue by 3 monthsRansomwareCISA KEV Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#3 96 Immediate CVE-2025-10035 ExigentOverdue by 11 monthsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#4 96 Immediate CVE-2025-61882 ExigentOverdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#5 95 Immediate CVE-2025-3248 ExigentOverdue by 15 monthsRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 95 Immediate CVE-2025-22457 ExigentOverdue by 17 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#7 95 Immediate CVE-2025-31161 ExigentOverdue by 16 monthsRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#8 95 Immediate CVE-2025-31324 ExigentOverdue by 16 monthsRansomwareCISA KEV SAP — SAP NetWeaver Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#9 95 Immediate CVE-2026-41940 ExigentOverdue by 4 monthsRansomwareCISA KEV WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#10 95 Immediate CVE-2026-23760 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#11 94 Immediate CVE-2017-5638 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#12 94 Immediate CVE-2018-13379 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#13 94 Immediate CVE-2019-11510 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#14 94 Immediate CVE-2019-19781 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#15 94 Immediate CVE-2020-5902 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#16 94 Immediate CVE-2021-21985 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#17 94 Immediate CVE-2021-22005 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#18 94 Immediate CVE-2021-26084 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#19 94 Immediate CVE-2021-35464 ExigentOverdue by 4.8 yearsRansomwareCISA KEV ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#20 94 Immediate CVE-2021-44228 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache Log4j2 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#21 94 Immediate CVE-2022-26134 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#22 94 Immediate CVE-2022-29464 ExigentOverdue by 4.3 yearsRansomwareCISA KEV WSO2 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#23 94 Immediate CVE-2023-22518 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#24 94 Immediate CVE-2023-27350 ExigentOverdue by 3.3 yearsRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#25 94 Immediate CVE-2023-35078 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#26 94 Immediate CVE-2023-35082 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#27 94 Immediate CVE-2024-23897 ExigentOverdue by 2.0 yearsRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#28 94 Immediate CVE-2024-3400 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#29 94 Immediate CVE-2022-22954 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#30 94 Immediate CVE-2021-41773 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#31 94 Immediate CVE-2018-7600 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#32 94 Immediate CVE-2023-29300 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#33 94 Immediate CVE-2024-4577 ExigentOverdue by 2.2 yearsRansomwareCISA KEV PHP Group — PHP-CGI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#34 94 Immediate CVE-2022-40684 ExigentOverdue by 3.8 yearsRansomwareCISA KEV Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#35 94 Immediate CVE-2023-22527 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#36 94 Immediate CVE-2024-1709 ExigentOverdue by 2.5 yearsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#37 94 Immediate CVE-2023-42793 ExigentOverdue by 2.9 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#38 94 Immediate CVE-2025-0282 ExigentOverdue by 20 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#39 94 Immediate CVE-2022-47986 ExigentOverdue by 3.5 yearsRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#40 94 Immediate CVE-2019-2725 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle WebLogic Server, Injection Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#41 94 Immediate CVE-2021-42013 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#42 94 Immediate CVE-2025-5777 ExigentOverdue by 14 monthsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#43 94 Immediate CVE-2022-1388 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#44 94 Immediate CVE-2023-38035 ExigentOverdue by 3.0 yearsRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#45 94 Immediate CVE-2018-10562 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Dasan — Dasan GPON Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#46 94 Immediate CVE-2021-3129 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#47 94 Immediate CVE-2024-27198 ExigentOverdue by 2.4 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#48 94 Immediate CVE-2023-34362 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Progress — Progress MOVEit Transfer SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#49 94 Immediate CVE-2019-3396 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#50 94 Immediate CVE-2021-20038 ExigentOverdue by 4.6 yearsRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#51 94 Immediate CVE-2021-22986 ExigentOverdue by 4.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#52 94 Immediate CVE-2021-21972 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#53 94 Immediate CVE-2019-11043 ExigentOverdue by 4.4 yearsRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#54 94 Immediate CVE-2019-15107 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Webmin — Webmin Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#55 94 Immediate CVE-2022-47966 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#56 94 Immediate CVE-2023-3519 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#57 94 Immediate CVE-2019-18935 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#58 94 Immediate CVE-2021-22205 ExigentOverdue by 4.8 yearsRansomwareCISA KEV GitLab — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#59 94 Immediate CVE-2023-46604 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Apache — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#60 94 Immediate CVE-2010-2861 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#61 94 Immediate CVE-2024-0012 ExigentOverdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#62 94 Immediate CVE-2022-42475 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#63 94 Immediate CVE-2024-23692 ExigentOverdue by 2.1 yearsRansomwareCISA KEV Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#64 94 Immediate CVE-2017-7494 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Samba — Samba Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#65 94 Immediate CVE-2018-7602 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#66 94 Immediate CVE-2023-22515 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#67 94 Immediate CVE-2024-50623 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#68 94 Immediate CVE-2024-55591 ExigentOverdue by 20 monthsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#69 94 Immediate CVE-2026-1731 ExigentOverdue by 7 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#70 94 Immediate CVE-2025-26399 ExigentOverdue by 6 monthsRansomwareCISA KEV SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#71 94 Immediate CVE-2026-15409 ExigentOverdue by 52 daysRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#72 93 Immediate CVE-2021-40438 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache HTTP Server-Side Request Forgery (SSRF) Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#73 93 Immediate CVE-2024-21887 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#74 93 Immediate CVE-2021-45046 ExigentOverdue by 3.3 yearsRansomwareCISA KEV Apache — Apache Log4j2 Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#75 93 Immediate CVE-2021-44529 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#76 93 Immediate CVE-2021-40539 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#77 93 Immediate CVE-2023-47246 ExigentOverdue by 2.8 yearsRansomwareCISA KEV SysAid — SysAid Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#78 93 Immediate CVE-2013-2465 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Oracle — Oracle Java SE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#79 93 Immediate CVE-2012-4681 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#80 93 Immediate CVE-2023-48788 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.984.
#81 93 Immediate CVE-2022-21587 ExigentOverdue by 3.5 yearsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#82 93 Immediate CVE-2012-0507 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#83 93 Immediate CVE-2024-41713 ExigentOverdue by 19 monthsRansomwareCISA KEV Mitel — Mitel MiCollab Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#84 93 Immediate CVE-2021-42237 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#85 93 Immediate CVE-2013-0422 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#86 93 Immediate CVE-2019-5544 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#87 93 Immediate CVE-2018-1273 ExigentOverdue by 4.4 yearsRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.970.
#88 93 Immediate CVE-2023-38203 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#89 93 Immediate CVE-2018-6530 ExigentOverdue by 3.9 yearsRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#90 93 Immediate CVE-2023-46747 ExigentOverdue by 2.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#91 93 Immediate CVE-2024-53704 ExigentOverdue by 18 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#92 93 Immediate CVE-2024-51378 ExigentOverdue by 20 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#93 93 Immediate CVE-2024-55956 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#94 93 Immediate CVE-2024-6670 ExigentOverdue by 23 monthsRansomwareCISA KEV Progress — Progress WhatsUp Gold SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#95 93 Immediate CVE-2025-52691 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#96 92 Immediate CVE-2026-10520 ExigentOverdue by 3 monthsCISA KEV Ivanti — Ivanti Sentry OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#97 92 Immediate CVE-2019-11580 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.954.
#98 92 Immediate CVE-2016-4117 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#99 92 Immediate CVE-2026-72898 ExigentOverdue by 24 daysCISA KEV Metabase — Metabase SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.942.
#100 92 Immediate CVE-2012-1723 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#101 92 Immediate CVE-2018-11138 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Quest — Quest KACE System Management Appliance Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.921.
#102 92 Immediate CVE-2022-37042 ExigentOverdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#103 92 Immediate CVE-2021-35211 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SolarWinds — SolarWinds Serv-U Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.912.
#104 92 Immediate CVE-2024-40711 ExigentOverdue by 22 monthsRansomwareCISA KEV Veeam — Veeam Backup and Replication Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#105 92 Immediate CVE-2026-24423 ExigentOverdue by 6 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.877.
#106 91 Immediate CVE-2026-8037 ExigentOverdue by 28 daysCISA KEV Progress — Progress LoadMaster Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#107 91 Immediate CVE-2026-63030 ExigentOverdue by 45 daysCISA KEV WordPress — WordPress Core Interpretation Conflict Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#108 91 Immediate CVE-2026-20253 ExigentOverdue by 3 monthsCISA KEV Splunk — Splunk Enterprise Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.969.
#109 91 Immediate CVE-2022-26352 ExigentOverdue by 4.0 yearsRansomwareCISA KEV dotCMS — dotCMS Unrestricted Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.916.
#110 91 Immediate CVE-2017-12149 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.907.
#111 91 Immediate CVE-2019-7195 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.897.
#112 91 Immediate CVE-2023-41265 ExigentOverdue by 2.7 yearsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#113 91 Immediate CVE-2019-7192 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#114 91 Immediate CVE-2024-51567 ExigentOverdue by 21 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.865.
#115 91 Immediate CVE-2026-50751 ExigentOverdue by 3 monthsRansomwareCISA KEV Check Point — Check Point Security Gateway Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.838.
#116 90 Immediate CVE-2017-7921 ExigentOverdue by 5 monthsCISA KEV Hikvision — Hikvision Multiple Products Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#117 90 Immediate CVE-2025-24893 ExigentOverdue by 10 monthsCISA KEV XWiki — XWiki Platform Eval Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#118 90 Immediate CVE-2025-32432 ExigentOverdue by 5 monthsCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#119 90 Immediate CVE-2017-1000353 ExigentOverdue by 10 monthsCISA KEV Jenkins — Jenkins Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#120 90 Immediate CVE-2022-27593 ExigentOverdue by 3.9 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.879.
#121 90 Immediate CVE-2019-16057 ExigentOverdue by 4.3 yearsRansomwareCISA KEV D-Link — D-Link DNS-320 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.871.
#122 90 Immediate CVE-2017-18362 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Kaseya — Kaseya VSA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.868.
#123 90 Immediate CVE-2021-30116 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#124 90 Immediate CVE-2023-27997 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#125 90 Immediate CVE-2024-21762 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.843.
#126 89 Immediate CVE-2025-48703 ExigentOverdue by 9 monthsCISA KEV CWP — CWP Control Web Panel OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#127 89 Immediate CVE-2026-39987 ExigentOverdue by 4 monthsCISA KEV Marimo — Marimo Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#128 89 Immediate CVE-2026-24061 ExigentOverdue by 7 monthsCISA KEV GNU — GNU InetUtils Argument Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#129 89 Immediate CVE-2026-39808 ExigentOverdue by 50 daysCISA KEV Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.928.
#130 89 Immediate CVE-2021-23758 ExigentCISA deadline in 2 daysCISA KEV Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.836.
#131 89 Immediate CVE-2021-20021 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.834.
#132 89 Immediate CVE-2019-7194 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.831.
#133 89 Immediate CVE-2020-3992 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.830.
#134 89 Immediate CVE-2023-43208 ExigentOverdue by 2.2 yearsRansomwareCISA KEV NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.827.
#135 89 Immediate CVE-2018-6789 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Exim — Exim Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.821.
#136 88 Immediate CVE-2024-7593 ExigentOverdue by 23 monthsCISA KEV Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#137 88 Immediate CVE-2025-24813 ExigentOverdue by 17 monthsCISA KEV Apache — Apache Tomcat Path Equivalence Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#138 88 Immediate CVE-2024-45519 ExigentOverdue by 22 monthsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#139 88 Immediate CVE-2014-0497 ExigentOverdue by 23 monthsCISA KEV Adobe — Adobe Flash Player Integer Underflow Vulnerablity Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#140 88 Immediate CVE-2025-25257 ExigentOverdue by 13 monthsCISA KEV Fortinet — Fortinet FortiWeb SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#141 88 Immediate CVE-2016-10033 ExigentOverdue by 13 monthsCISA KEV PHP — PHPMailer Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#142 88 Immediate CVE-2021-32030 ExigentOverdue by 14 monthsCISA KEV ASUS — ASUS Routers Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#143 88 Immediate CVE-2024-4885 ExigentOverdue by 17 monthsCISA KEV Progress — Progress WhatsUp Gold Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#144 88 Immediate CVE-2024-27348 ExigentOverdue by 23 monthsCISA KEV Apache — Apache HugeGraph-Server Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#145 88 Immediate CVE-2019-16278 ExigentOverdue by 21 monthsCISA KEV Nostromo — Nostromo nhttpd Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#146 88 Immediate CVE-2025-32433 ExigentOverdue by 14 monthsCISA KEV Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#147 88 Immediate CVE-2024-9463 ExigentOverdue by 21 monthsCISA KEV Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#148 88 Immediate CVE-2024-50603 ExigentOverdue by 19 monthsCISA KEV Aviatrix — Aviatrix Controllers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#149 88 Immediate CVE-2018-19410 ExigentOverdue by 18 monthsCISA KEV Paessler — Paessler PRTG Network Monitor Local File Inclusion Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#150 88 Immediate CVE-2025-20281 ExigentOverdue by 13 monthsCISA KEV Cisco — Cisco Identity Services Engine Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.
#151 88 Immediate CVE-2025-54068 ExigentOverdue by 5 monthsCISA KEV Laravel — Laravel Livewire Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#152 88 Immediate CVE-2026-33017 ExigentOverdue by 5 monthsCISA KEV Langflow — Langflow Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.962.
#153 88 Immediate CVE-2026-21643 ExigentOverdue by 5 monthsCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.941.
#154 88 Immediate CVE-2025-11953 ExigentOverdue by 6 monthsCISA KEV React Native Community — React Native Community CLI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#155 88 Immediate CVE-2025-2747 ExigentOverdue by 10 monthsCISA KEV Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.925.
#156 88 Immediate CVE-2024-7399 ExigentOverdue by 4 monthsCISA KEV Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#157 88 Immediate CVE-2025-64446 ExigentOverdue by 10 monthsCISA KEV Fortinet — Fortinet FortiWeb Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.918.
#158 88 Immediate CVE-2026-20182 ExigentOverdue by 4 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.915.
#159 88 Immediate CVE-2021-28799 ExigentOverdue by 4.4 yearsRansomwareCISA KEV QNAP — QNAP NAS Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.782.
#160 88 Immediate CVE-2017-11357 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.777.
#161 88 Immediate CVE-2024-57726 ExigentOverdue by 4 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Missing Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#162 87 Immediate CVE-2014-6271 ExigentOverdue by 4.1 yearsCISA KEV GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#163 87 Immediate CVE-2017-9841 ExigentOverdue by 4.1 yearsCISA KEV PHPUnit — PHPUnit Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#164 87 Immediate CVE-2021-1498 ExigentOverdue by 4.8 yearsCISA KEV Cisco — Cisco HyperFlex HX Data Platform Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#165 87 Immediate CVE-2023-1671 ExigentOverdue by 2.8 yearsCISA KEV Sophos — Sophos Web Appliance Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#166 87 Immediate CVE-2012-1823 ExigentOverdue by 4.4 yearsCISA KEV PHP — PHP-CGI Query String Parameter Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#167 87 Immediate CVE-2013-2251 ExigentOverdue by 4.4 yearsCISA KEV Apache — Apache Struts Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#168 87 Immediate CVE-2020-14882 ExigentOverdue by 4.3 yearsCISA KEV Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#169 87 Immediate CVE-2024-3273 ExigentOverdue by 2.3 yearsCISA KEV D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#170 87 Immediate CVE-2019-16920 ExigentOverdue by 4.4 yearsCISA KEV D-Link — D-Link Multiple Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#171 87 Immediate CVE-2022-44877 ExigentOverdue by 3.6 yearsCISA KEV CWP — CWP Control Web Panel OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#172 87 Immediate CVE-2024-34102 ExigentOverdue by 2.1 yearsCISA KEV Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#173 87 Immediate CVE-2020-8515 ExigentOverdue by 4.3 yearsCISA KEV DrayTek — Multiple DrayTek Vigor Routers Web Management Page Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#174 87 Immediate CVE-2020-9054 ExigentOverdue by 4.4 yearsCISA KEV Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#175 87 Immediate CVE-2019-9670 ExigentOverdue by 4.2 yearsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#176 87 Immediate CVE-2021-20090 ExigentOverdue by 4.8 yearsCISA KEV Arcadyan — Arcadyan Buffalo Firmware Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#177 87 Immediate CVE-2014-8361 ExigentOverdue by 2.9 yearsCISA KEV Realtek — Realtek SDK Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#178 87 Immediate CVE-2020-25506 ExigentOverdue by 4.3 yearsCISA KEV D-Link — D-Link DNS-320 Device Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#179 87 Immediate CVE-2019-10149 ExigentOverdue by 4.2 yearsCISA KEV Exim — Exim Mail Transfer Agent (MTA) Improper Input Validation Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#180 87 Immediate CVE-2024-38475 ExigentOverdue by 16 monthsCISA KEV Apache — Apache HTTP Server Improper Escaping of Output Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#181 87 Immediate CVE-2018-15961 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe ColdFusion Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#182 87 Immediate CVE-2022-30525 ExigentOverdue by 4.3 yearsCISA KEV Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#183 87 Immediate CVE-2020-10189 ExigentOverdue by 4.3 yearsCISA KEV Zoho — Zoho ManageEngine Desktop Central File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#184 87 Immediate CVE-2014-7169 ExigentOverdue by 4.1 yearsCISA KEV GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#185 87 Immediate CVE-2015-3113 ExigentOverdue by 4.3 yearsCISA KEV Adobe — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#186 87 Immediate CVE-2022-22963 ExigentOverdue by 4.0 yearsCISA KEV VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#187 87 Immediate CVE-2021-1497 ExigentOverdue by 4.8 yearsCISA KEV Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#188 87 Immediate CVE-2022-35405 ExigentOverdue by 3.9 yearsCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#189 87 Immediate CVE-2015-1427 ExigentOverdue by 4.4 yearsCISA KEV Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#190 87 Immediate CVE-2020-7961 ExigentOverdue by 4.3 yearsCISA KEV Liferay — Liferay Portal Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#191 87 Immediate CVE-2021-33044 ExigentOverdue by 2.0 yearsCISA KEV Dahua — Dahua IP Camera Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#192 87 Immediate CVE-2021-44515 ExigentOverdue by 4.7 yearsCISA KEV Zoho — Zoho Desktop Central Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#193 87 Immediate CVE-2021-36260 ExigentOverdue by 4.6 yearsCISA KEV Hikvision — Hikvision Improper Input Validation Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#194 87 Immediate CVE-2021-35394 ExigentOverdue by 4.7 yearsCISA KEV Realtek — Realtek Jungle SDK Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#195 87 Immediate CVE-2022-46169 ExigentOverdue by 3.5 yearsCISA KEV Cacti — Cacti Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#196 87 Immediate CVE-2021-37415 ExigentOverdue by 4.7 yearsCISA KEV Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#197 87 Immediate CVE-2024-36401 ExigentOverdue by 2.1 yearsCISA KEV OSGeo — OSGeo GeoServer GeoTools Eval Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#198 87 Immediate CVE-2022-1040 ExigentOverdue by 4.4 yearsCISA KEV Sophos — Sophos Firewall Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#199 87 Immediate CVE-2020-13927 ExigentOverdue by 4.1 yearsCISA KEV Apache — Apache Airflow's Experimental API Authentication Bypass Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#200 87 Immediate CVE-2020-15505 ExigentOverdue by 4.3 yearsCISA KEV Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.