Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
33 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1 | CVE-2015-3306ProFTPD — ProFTPD Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 13 days | 93 | 10.0 | 99.5% · 99.95th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 13 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
| 2 | CVE-2015-5477ISC — ISC BIND Data Processing Errors VulnerabilityCISA federal deadline · Overdue by 13 days | 90 | 7.5 | 99.4% · 99.94th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 13 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 3 | CVE-2016-3081Apache — Apache Struts Command Injection VulnerabilityCISA federal deadline · Overdue by 13 days | 90 | 8.1 | 96.1% · 99.88th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 13 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.961. | |||||||
| 4 | CVE-2026-71362Adobe — Adobe Commerce and Magento Incorrect Authorization VulnerabilityCISA federal deadline · Overdue by 27 days | 89 | 9.1 | 87.5% · 99.76th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.875. | |||||||
| 5 | CVE-2026-110447Collabora — Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityExigentCISA federal deadline in 2 days | 85 | 9.2 | 1.2% · 68.6th | 2026-10-23 | 2026-10-26CISA federal deadline in 2 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 6 | CVE-2026-114625Arista — Arista VeloCloud Orchestrator SQL Injection VulnerabilityExigentCISA federal deadline in 2 days | 85 | 9.4 | 0.6% · 45.6th | 2026-10-23 | 2026-10-26CISA federal deadline in 2 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 7 | CVE-2026-105134Ahsay — Ahsay AhsayCBS Command Injection VulnerabilityCISA federal deadline · Overdue by 7 days | 76 | 9.3 | 38.3% · 98.6th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 7 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.383. | |||||||
| 8 | CVE-2026-87902WordPress — WordPress Core Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 26 days | 75 | 8.1 | 40.0% · 98.6th | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 26 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.400. | |||||||
| 9 | CVE-2026-104935Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 8 days | 75 | 8.6 | 26.0% · 98th | 2026-10-13 | 2026-10-16CISA federal deadline · Overdue by 8 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.260. | |||||||
| 10 | CVE-2021-3199ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA federal deadline · Overdue by 13 days | 75 | 9.8 | 20.1% · 97.5th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 13 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 11 | CVE-2026-21589Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 6 days | 75 | 9.3 | 12.7% · 96.3rd | 2026-10-15 | 2026-10-18CISA federal deadline · Overdue by 6 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.127. | |||||||
| 12 | CVE-2026-105133Ahsay — Ahsay AhsayCBS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 7 days | 75 | 5.5 | 5.8% · 93.1st | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 7 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.058. | |||||||
| 13 | CVE-2026-88772Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 9.5 | 5.3% · 92.6th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 24 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.053. | |||||||
| 14 | CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 9.5 | 4.7% · 91.8th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 24 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.047. | |||||||
| 15 | CVE-2023-22894Strapi — Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA federal deadline · Overdue by 13 days | 75 | 4.9 | 3.6% · 89.4th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 13 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.036. | |||||||
| 16 | CVE-2026-104286Fortinet — Fortinet FortiMail Path Traversal VulnerabilityCISA federal deadline · Overdue by 20 days | 75 | 9.8 | 2.2% · 82.4th | 2026-10-01 | 2026-10-04CISA federal deadline · Overdue by 20 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 17 | CVE-2026-76504Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCISA federal deadline · Overdue by 21 days | 75 | 9.8 | 1.8% · 78.6th | 2026-09-30 | 2026-10-03CISA federal deadline · Overdue by 21 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 18 | CVE-2026-76519Cisco — Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA federal deadline · Overdue by 7 days | 75 | 9.8 | 1.6% · 75.2nd | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 7 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 19 | CVE-2026-102489Zammad GmbH — Zammad GmbH Zammad Session Fixation VulnerabilityCISA federal deadline · Overdue by 19 days | 75 | 9.4 | 1.3% · 69.3rd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 19 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 20 | CVE-2026-86950Apple — Apple Multiple Products Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 11 days | 75 | 8.8 | 1.2% · 69th | 2026-09-29 | 2026-10-13CISA federal deadline · Overdue by 11 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 21 | CVE-2026-0322Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA federal deadline · Overdue by 7 days | 75 | 8.6 | 1.2% · 68.4th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 7 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 22 | CVE-2026-102764BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 9.3 | 1.2% · 67.5th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 23 | CVE-2026-106931EG Secure Solutions — EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA federal deadline · Overdue by 1 day | 75 | 8.5 | 1.2% · 67.2nd | 2026-10-20 | 2026-10-23CISA federal deadline · Overdue by 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 24 | CVE-2025-61624Fortinet — Fortinet Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 6.5 | 1.1% · 64.9th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 25 | CVE-2026-67279MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCISA federal deadline · Overdue by 26 days | 75 | 6.9 | 1.0% · 63.9th | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 26 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsProFTPD — ProFTPD Improper Access Control Vulnerability
EVRS 93 Immediate
Rank 1 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.5% 99.95th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 13 days
- Ransomware use
- Not known
- Vendor
- ProFTPD
- Source
- CISA KEV
ISC — ISC BIND Data Processing Errors Vulnerability
EVRS 90 Immediate
Rank 2 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 13 days
- Ransomware use
- Not known
- Vendor
- ISC
- Source
- CISA KEV
Apache — Apache Struts Command Injection Vulnerability
EVRS 90 Immediate
Rank 3 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.1 NVD
- EPSS
- 96.1% 99.88th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 13 days
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Incorrect Authorization Vulnerability
EVRS 89 Immediate
Rank 4 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 87.5% 99.76th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Collabora — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
EVRS 85 Immediate
Rank 5 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.2 NVD
- EPSS
- 1.2% 68.6th percentile
- In CISA KEV since
- 2026-10-23
- CISA deadline
- 2026-10-26 CISA federal deadline in 2 days
- Ransomware use
- Not known
- Vendor
- Collabora
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator SQL Injection Vulnerability
EVRS 85 Immediate
Rank 6 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.4 NVD
- EPSS
- 0.6% 45.6th percentile
- In CISA KEV since
- 2026-10-23
- CISA deadline
- 2026-10-26 CISA federal deadline in 2 days
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Command Injection Vulnerability
EVRS 76 Urgent
Rank 7 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 38.3% 98.6th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 7 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
WordPress — WordPress Core Remote File Inclusion Vulnerability
EVRS 75 Urgent
Rank 8 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.1 NVD
- EPSS
- 40.0% 98.6th percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 26 days
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 9 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.6 NVD
- EPSS
- 26.0% 98th percentile
- In CISA KEV since
- 2026-10-13
- CISA deadline
- 2026-10-16 CISA federal deadline · Overdue by 8 days
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal Vulnerability
EVRS 75 Urgent
Rank 10 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 20.1% 97.5th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 13 days
- Ransomware use
- Not known
- Vendor
- ONLYOFFICE
- Source
- CISA KEV
Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
EVRS 75 Urgent
Rank 11 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 12.7% 96.3rd percentile
- In CISA KEV since
- 2026-10-15
- CISA deadline
- 2026-10-18 CISA federal deadline · Overdue by 6 days
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 12 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.5 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 7 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 13 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.5 NVD
- EPSS
- 5.3% 92.6th percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 24 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 14 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.5 NVD
- EPSS
- 4.7% 91.8th percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 24 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Strapi — Strapi Cleartext Storage of Sensitive Information Vulnerability
EVRS 75 Urgent
Rank 15 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 4.9 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 13 days
- Ransomware use
- Not known
- Vendor
- Strapi
- Source
- CISA KEV
Fortinet — Fortinet FortiMail Path Traversal Vulnerability
EVRS 75 Urgent
Rank 16 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.2% 82.4th percentile
- In CISA KEV since
- 2026-10-01
- CISA deadline
- 2026-10-04 CISA federal deadline · Overdue by 20 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
EVRS 75 Urgent
Rank 17 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.8% 78.6th percentile
- In CISA KEV since
- 2026-09-30
- CISA deadline
- 2026-10-03 CISA federal deadline · Overdue by 21 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
EVRS 75 Urgent
Rank 18 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.6% 75.2nd percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 7 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Session Fixation Vulnerability
EVRS 75 Urgent
Rank 19 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.3% 69.3rd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 19 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Apple — Apple Multiple Products Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 20 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.2% 69th percentile
- In CISA KEV since
- 2026-09-29
- CISA deadline
- 2026-10-13 CISA federal deadline · Overdue by 11 days
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection Vulnerability
EVRS 75 Urgent
Rank 21 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.6 NVD
- EPSS
- 1.2% 68.4th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 7 days
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 22 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.2% 67.5th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
EG Secure Solutions — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 23 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.5 NVD
- EPSS
- 1.2% 67.2nd percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline · Overdue by 1 day
- Ransomware use
- Not known
- Vendor
- EG Secure Solutions
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 24 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 1.1% 64.9th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
EVRS 75 Urgent
Rank 25 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.9 NVD
- EPSS
- 1.0% 63.9th percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 26 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
