Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

Ranked by EVRS

33 match · filtered from 2,956

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 1 to 25
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
1 CVE-2015-3306ProFTPD — ProFTPD Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 13 days 93 10.0 99.5% · 99.95th 2026-10-08 2026-10-11CISA federal deadline · Overdue by 13 days
2 CVE-2015-5477ISC — ISC BIND Data Processing Errors VulnerabilityCISA federal deadline · Overdue by 13 days 90 7.5 99.4% · 99.94th 2026-10-08 2026-10-11CISA federal deadline · Overdue by 13 days
3 CVE-2016-3081Apache — Apache Struts Command Injection VulnerabilityCISA federal deadline · Overdue by 13 days 90 8.1 96.1% · 99.88th 2026-10-08 2026-10-11CISA federal deadline · Overdue by 13 days
4 CVE-2026-71362Adobe — Adobe Commerce and Magento Incorrect Authorization VulnerabilityCISA federal deadline · Overdue by 27 days 89 9.1 87.5% · 99.76th 2026-09-24 2026-09-27CISA federal deadline · Overdue by 27 days
5 CVE-2026-110447Collabora — Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityExigentCISA federal deadline in 2 days 85 9.2 1.2% · 68.6th 2026-10-23 2026-10-26CISA federal deadline in 2 days
6 CVE-2026-114625Arista — Arista VeloCloud Orchestrator SQL Injection VulnerabilityExigentCISA federal deadline in 2 days 85 9.4 0.6% · 45.6th 2026-10-23 2026-10-26CISA federal deadline in 2 days
7 CVE-2026-105134Ahsay — Ahsay AhsayCBS Command Injection VulnerabilityCISA federal deadline · Overdue by 7 days 76 9.3 38.3% · 98.6th 2026-10-14 2026-10-17CISA federal deadline · Overdue by 7 days
8 CVE-2026-87902WordPress — WordPress Core Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 26 days 75 8.1 40.0% · 98.6th 2026-09-25 2026-09-28CISA federal deadline · Overdue by 26 days
9 CVE-2026-104935Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 8 days 75 8.6 26.0% · 98th 2026-10-13 2026-10-16CISA federal deadline · Overdue by 8 days
10 CVE-2021-3199ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA federal deadline · Overdue by 13 days 75 9.8 20.1% · 97.5th 2026-10-08 2026-10-11CISA federal deadline · Overdue by 13 days
11 CVE-2026-21589Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 6 days 75 9.3 12.7% · 96.3rd 2026-10-15 2026-10-18CISA federal deadline · Overdue by 6 days
12 CVE-2026-105133Ahsay — Ahsay AhsayCBS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 7 days 75 5.5 5.8% · 93.1st 2026-10-14 2026-10-17CISA federal deadline · Overdue by 7 days
13 CVE-2026-88772Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 24 days 75 9.5 5.3% · 92.6th 2026-09-27 2026-09-30CISA federal deadline · Overdue by 24 days
14 CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 24 days 75 9.5 4.7% · 91.8th 2026-09-27 2026-09-30CISA federal deadline · Overdue by 24 days
15 CVE-2023-22894Strapi — Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA federal deadline · Overdue by 13 days 75 4.9 3.6% · 89.4th 2026-10-08 2026-10-11CISA federal deadline · Overdue by 13 days
16 CVE-2026-104286Fortinet — Fortinet FortiMail Path Traversal VulnerabilityCISA federal deadline · Overdue by 20 days 75 9.8 2.2% · 82.4th 2026-10-01 2026-10-04CISA federal deadline · Overdue by 20 days
17 CVE-2026-76504Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCISA federal deadline · Overdue by 21 days 75 9.8 1.8% · 78.6th 2026-09-30 2026-10-03CISA federal deadline · Overdue by 21 days
18 CVE-2026-76519Cisco — Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA federal deadline · Overdue by 7 days 75 9.8 1.6% · 75.2nd 2026-10-14 2026-10-17CISA federal deadline · Overdue by 7 days
19 CVE-2026-102489Zammad GmbH — Zammad GmbH Zammad Session Fixation VulnerabilityCISA federal deadline · Overdue by 19 days 75 9.4 1.3% · 69.3rd 2026-10-02 2026-10-05CISA federal deadline · Overdue by 19 days
20 CVE-2026-86950Apple — Apple Multiple Products Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 11 days 75 8.8 1.2% · 69th 2026-09-29 2026-10-13CISA federal deadline · Overdue by 11 days
21 CVE-2026-0322Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA federal deadline · Overdue by 7 days 75 8.6 1.2% · 68.4th 2026-10-14 2026-10-17CISA federal deadline · Overdue by 7 days
22 CVE-2026-102764BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 5 days 75 9.3 1.2% · 67.5th 2026-10-16 2026-10-19CISA federal deadline · Overdue by 5 days
23 CVE-2026-106931EG Secure Solutions — EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityCISA federal deadline · Overdue by 1 day 75 8.5 1.2% · 67.2nd 2026-10-20 2026-10-23CISA federal deadline · Overdue by 1 day
24 CVE-2025-61624Fortinet — Fortinet Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 5 days 75 6.5 1.1% · 64.9th 2026-10-16 2026-10-19CISA federal deadline · Overdue by 5 days
25 CVE-2026-67279MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCISA federal deadline · Overdue by 26 days 75 6.9 1.0% · 63.9th 2026-09-25 2026-09-28CISA federal deadline · Overdue by 26 days
Showing 1–25 of 33

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics