Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
33 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 26 | CVE-2026-96656Plex — Plex Media Server External Control of File Name or Path VulnerabilityCISA federal deadline · Overdue by 1 day | 75 | 8.6 | 0.8% · 56.7th | 2026-10-20 | 2026-10-23CISA federal deadline · Overdue by 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 27 | CVE-2026-88779Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 17 days | 75 | 8.7 | 0.6% · 47.6th | 2026-10-04 | 2026-10-07CISA federal deadline · Overdue by 17 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 28 | CVE-2026-5430WSO2 — WSO2 Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 10.0 | 0.6% · 47.4th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 29 | CVE-2026-102490Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management VulnerabilityCISA federal deadline · Overdue by 19 days | 75 | 9.4 | 0.5% · 45.3rd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 19 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 30 | CVE-2026-96654Plex — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityCISA federal deadline · Overdue by 1 day | 75 | 6.9 | 0.5% · 39.3rd | 2026-10-20 | 2026-10-23CISA federal deadline · Overdue by 1 day | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 31 | CVE-2026-96652Plex — Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline in 10 days | 75 | 5.3 | 0.5% · 38.6th | 2026-10-20 | 2026-11-03CISA federal deadline in 10 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 32 | CVE-2026-96655Plex — Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline in 10 days | 75 | 5.3 | 0.5% · 38.6th | 2026-10-20 | 2026-11-03CISA federal deadline in 10 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 33 | CVE-2026-110936Siemens — Siemens Software Center Uncontrolled Search Path Element VulnerabilityCISA federal deadline in 10 days | 75 | 8.4 | 0.2% · 14th | 2026-10-20 | 2026-11-03CISA federal deadline in 10 days | |
Why it ranks here: Listed in the CISA KEV catalog, and added to CISA KEV within the last 30 days. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsPlex — Plex Media Server External Control of File Name or Path Vulnerability
EVRS 75 Urgent
Rank 26 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.6 NVD
- EPSS
- 0.8% 56.7th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline · Overdue by 1 day
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 27 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.7 NVD
- EPSS
- 0.6% 47.6th percentile
- In CISA KEV since
- 2026-10-04
- CISA deadline
- 2026-10-07 CISA federal deadline · Overdue by 17 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
WSO2 — WSO2 Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 28 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 0.6% 47.4th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- WSO2
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 29 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.4 NVD
- EPSS
- 0.5% 45.3rd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 19 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Plex — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
EVRS 75 Urgent
Rank 30 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.9 NVD
- EPSS
- 0.5% 39.3rd percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-10-23 CISA federal deadline · Overdue by 1 day
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Plex — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 31 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.5% 38.6th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-11-03 CISA federal deadline in 10 days
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Plex — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 32 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.5% 38.6th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-11-03 CISA federal deadline in 10 days
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
Siemens — Siemens Software Center Uncontrolled Search Path Element Vulnerability
EVRS 75 Urgent
Rank 33 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.4 NVD
- EPSS
- 0.2% 14th percentile
- In CISA KEV since
- 2026-10-20
- CISA deadline
- 2026-11-03 CISA federal deadline in 10 days
- Ransomware use
- Not known
- Vendor
- Siemens
- Source
- CISA KEV
