Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
244 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 201 | CVE-2024-11667Zyxel — Zyxel Multiple Firewalls Path Traversal VulnerabilityExigentKEV since 2024 · listed over a year | 85 | 9.8 | 2.9% · 87th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 202 | CVE-2026-59310Broadcom — Broadcom VMware vCenter Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 2 months | 85 | 9.8 | 2.6% · 85th | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 203 | CVE-2026-48027Nx — Nx Console Embedded Malicious Code VulnerabilityExigentCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 1.3% · 71st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 204 | CVE-2026-45321TanStack — TanStack Unspecified VulnerabilityExigentCISA federal deadline · Overdue by 4 months | 85 | 9.6 | 1.1% · 64.1st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 205 | CVE-2020-3259Cisco — Cisco ASA and FTD Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 83 | 7.5 | 71.5% · 99.42nd | 2024-02-15 | 2024-03-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 206 | CVE-2024-57728SimpleHelp — SimpleHelp Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months | 83 | 7.2 | 64.5% · 99.24th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 207 | CVE-2015-7645Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 82 | 7.8 | 65.3% · 99.26th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 208 | CVE-2010-0738Red Hat — Red Hat JBoss Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 81 | 5.3 | 74.7% · 99.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 209 | CVE-2010-1428Red Hat — Red Hat JBoss Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 80 | 7.5 | 61.5% · 99.17th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 210 | CVE-2019-1579Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 77 | 8.1 | 46.2% · 98.8th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 211 | CVE-2021-20023SonicWall — SonicWall Email Security Path Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 4.9 | 51.7% · 98.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 212 | CVE-2024-55550Mitel — Mitel MiCollab Path Traversal VulnerabilityKEV since 2025 · listed over a year | 75 | 2.7 | 38.2% · 98.6th | 2025-01-07 | 2025-01-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 213 | CVE-2018-13374Fortinet — Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 75 | 4.3 | 38.1% · 98.6th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 214 | CVE-2026-20316Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 5.3 | 35.1% · 98.4th | 2026-07-29 | 2026-08-01CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 215 | CVE-2018-13383Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds WriteKEV since 2022 · listed over a year | 75 | 6.5 | 33.6% · 98.4th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 216 | CVE-2017-6884Zyxel — Zyxel EMG2926 Routers Command Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 33.0% · 98.4th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 217 | CVE-2022-24682Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 6.1 | 30.9% · 98.3rd | 2022-02-25 | 2022-03-11KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 218 | CVE-2018-19953QNAP — QNAP NAS File Station Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 6.1 | 30.5% · 98.2nd | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 219 | CVE-2019-13608Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 30.0% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 220 | CVE-2018-6882Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2022 · listed over a year | 75 | 6.1 | 29.8% · 98.2nd | 2022-04-19 | 2022-05-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 221 | CVE-2018-2380SAP — SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 6.6 | 28.9% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 222 | CVE-2020-3153Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 28.3% · 98.1st | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 223 | CVE-2024-1086Linux — Linux Kernel Use-After-Free VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 28.1% · 98.1st | 2024-05-30 | 2024-06-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 224 | CVE-2024-37085VMware — VMware ESXi Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 26.8% · 98th | 2024-07-30 | 2024-08-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 225 | CVE-2021-27878Veritas — Veritas Backup Exec Agent Command Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 24.0% · 97.8th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsZyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability
EVRS 85 Immediate
Rank 201 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.9% 87th percentile
- In CISA KEV since
- 2024-12-03
- CISA deadline
- 2024-12-24 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
Broadcom — Broadcom VMware vCenter Path Traversal Vulnerability
EVRS 85 Immediate
Rank 202 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.6% 85th percentile
- In CISA KEV since
- 2026-08-18
- CISA deadline
- 2026-08-21 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Known
- Vendor
- Broadcom
- Source
- CISA KEV
Nx — Nx Console Embedded Malicious Code Vulnerability
EVRS 85 Immediate
Rank 203 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.3% 71st percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- Nx
- Source
- CISA KEV
TanStack — TanStack Unspecified Vulnerability
EVRS 85 Immediate
Rank 204 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.6 NVD
- EPSS
- 1.1% 64.1st percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- TanStack
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Information Disclosure Vulnerability
EVRS 83 Urgent
Rank 205 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 71.5% 99.42nd percentile
- In CISA KEV since
- 2024-02-15
- CISA deadline
- 2024-03-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
SimpleHelp — SimpleHelp Path Traversal Vulnerability
EVRS 83 Urgent
Rank 206 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 64.5% 99.24th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 82 Urgent
Rank 207 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 65.3% 99.26th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Red Hat — Red Hat JBoss Authentication Bypass Vulnerability
EVRS 81 Urgent
Rank 208 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Red Hat — Red Hat JBoss Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 209 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 61.5% 99.17th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
EVRS 77 Urgent
Rank 210 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.1 NVD
- EPSS
- 46.2% 98.8th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
SonicWall — SonicWall Email Security Path Traversal Vulnerability
EVRS 75 Urgent
Rank 211 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 4.9 NVD
- EPSS
- 51.7% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Mitel — Mitel MiCollab Path Traversal Vulnerability
EVRS 75 Urgent
Rank 212 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 2.7 NVD
- EPSS
- 38.2% 98.6th percentile
- In CISA KEV since
- 2025-01-07
- CISA deadline
- 2025-01-28 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 213 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 4.3 NVD
- EPSS
- 38.1% 98.6th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
EVRS 75 Urgent
Rank 214 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 35.1% 98.4th percentile
- In CISA KEV since
- 2026-07-29
- CISA deadline
- 2026-08-01 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds Write
EVRS 75 Urgent
Rank 215 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 33.6% 98.4th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Zyxel — Zyxel EMG2926 Routers Command Injection Vulnerability
EVRS 75 Urgent
Rank 216 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 33.0% 98.4th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 217 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2022-02-25
- CISA deadline
- 2022-03-11 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 218 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.5% 98.2nd percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
EVRS 75 Urgent
Rank 219 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 30.0% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 220 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.1 NVD
- EPSS
- 29.8% 98.2nd percentile
- In CISA KEV since
- 2022-04-19
- CISA deadline
- 2022-05-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
SAP — SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
EVRS 75 Urgent
Rank 221 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.6 NVD
- EPSS
- 28.9% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SAP
- Source
- CISA KEV
Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
EVRS 75 Urgent
Rank 222 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 28.3% 98.1st percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Linux — Linux Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 223 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 28.1% 98.1st percentile
- In CISA KEV since
- 2024-05-30
- CISA deadline
- 2024-06-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Linux
- Source
- CISA KEV
VMware — VMware ESXi Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 224 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 26.8% 98th percentile
- In CISA KEV since
- 2024-07-30
- CISA deadline
- 2024-08-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent Command Execution Vulnerability
EVRS 75 Urgent
Rank 225 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
