CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
Priority feed
The highest risk items, ranked by real-world exploitation signals.
1,757
Tracked itemsTotal vulnerabilities in the current EVULNABLE dataset across KEV and Patch Tuesday coverage.
358
ExigentKEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — all at once.
239
Ransomware-linkedAssociated with known ransomware activity according to source data.
29
New to CISA KEVAdded to the KEV catalog in the last 30 days.
Ranked by EVRS — Ransomware-linked
Showing the top 100 of 239 ransomware-linked entries. Data checked 07 Sep 11:30 UTC. Show all tracked items.
#2 97 Immediate CVE-2026-35273 ExigentOverdue by 3 monthsRansomwareCISA KEV Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#3 96 Immediate CVE-2025-10035 ExigentOverdue by 11 monthsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#4 96 Immediate CVE-2025-61882 ExigentOverdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#5 95 Immediate CVE-2025-3248 ExigentOverdue by 15 monthsRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 95 Immediate CVE-2025-22457 ExigentOverdue by 17 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#7 95 Immediate CVE-2025-31161 ExigentOverdue by 16 monthsRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#8 95 Immediate CVE-2025-31324 ExigentOverdue by 16 monthsRansomwareCISA KEV SAP — SAP NetWeaver Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#9 95 Immediate CVE-2026-41940 ExigentOverdue by 4 monthsRansomwareCISA KEV WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#10 95 Immediate CVE-2026-23760 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#11 94 Immediate CVE-2017-5638 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#12 94 Immediate CVE-2018-13379 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#13 94 Immediate CVE-2019-11510 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#14 94 Immediate CVE-2019-19781 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#15 94 Immediate CVE-2020-5902 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#16 94 Immediate CVE-2021-21985 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#17 94 Immediate CVE-2021-22005 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#18 94 Immediate CVE-2021-26084 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#19 94 Immediate CVE-2021-35464 ExigentOverdue by 4.8 yearsRansomwareCISA KEV ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#20 94 Immediate CVE-2021-44228 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache Log4j2 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#21 94 Immediate CVE-2022-26134 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#22 94 Immediate CVE-2022-29464 ExigentOverdue by 4.3 yearsRansomwareCISA KEV WSO2 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#23 94 Immediate CVE-2023-22518 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#24 94 Immediate CVE-2023-27350 ExigentOverdue by 3.3 yearsRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#25 94 Immediate CVE-2023-35078 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#26 94 Immediate CVE-2023-35082 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#27 94 Immediate CVE-2024-23897 ExigentOverdue by 2.0 yearsRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#28 94 Immediate CVE-2024-3400 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#29 94 Immediate CVE-2022-22954 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#30 94 Immediate CVE-2021-41773 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#31 94 Immediate CVE-2018-7600 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#32 94 Immediate CVE-2023-29300 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#33 94 Immediate CVE-2024-4577 ExigentOverdue by 2.2 yearsRansomwareCISA KEV PHP Group — PHP-CGI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#34 94 Immediate CVE-2022-40684 ExigentOverdue by 3.8 yearsRansomwareCISA KEV Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#35 94 Immediate CVE-2023-22527 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#36 94 Immediate CVE-2024-1709 ExigentOverdue by 2.5 yearsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#37 94 Immediate CVE-2023-42793 ExigentOverdue by 2.9 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#38 94 Immediate CVE-2025-0282 ExigentOverdue by 20 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#39 94 Immediate CVE-2022-47986 ExigentOverdue by 3.5 yearsRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#40 94 Immediate CVE-2019-2725 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle WebLogic Server, Injection Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#41 94 Immediate CVE-2021-42013 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#42 94 Immediate CVE-2025-5777 ExigentOverdue by 14 monthsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#43 94 Immediate CVE-2022-1388 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#44 94 Immediate CVE-2023-38035 ExigentOverdue by 3.0 yearsRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#45 94 Immediate CVE-2018-10562 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Dasan — Dasan GPON Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#46 94 Immediate CVE-2021-3129 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#47 94 Immediate CVE-2024-27198 ExigentOverdue by 2.4 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#48 94 Immediate CVE-2023-34362 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Progress — Progress MOVEit Transfer SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#49 94 Immediate CVE-2019-3396 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#50 94 Immediate CVE-2021-20038 ExigentOverdue by 4.6 yearsRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#51 94 Immediate CVE-2021-22986 ExigentOverdue by 4.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#52 94 Immediate CVE-2021-21972 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#53 94 Immediate CVE-2019-11043 ExigentOverdue by 4.4 yearsRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#54 94 Immediate CVE-2019-15107 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Webmin — Webmin Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#55 94 Immediate CVE-2022-47966 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#56 94 Immediate CVE-2023-3519 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#57 94 Immediate CVE-2019-18935 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#58 94 Immediate CVE-2021-22205 ExigentOverdue by 4.8 yearsRansomwareCISA KEV GitLab — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#59 94 Immediate CVE-2023-46604 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Apache — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#60 94 Immediate CVE-2010-2861 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#61 94 Immediate CVE-2024-0012 ExigentOverdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#62 94 Immediate CVE-2022-42475 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#63 94 Immediate CVE-2024-23692 ExigentOverdue by 2.1 yearsRansomwareCISA KEV Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#64 94 Immediate CVE-2017-7494 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Samba — Samba Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#65 94 Immediate CVE-2018-7602 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#66 94 Immediate CVE-2023-22515 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#67 94 Immediate CVE-2024-50623 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#68 94 Immediate CVE-2024-55591 ExigentOverdue by 20 monthsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#69 94 Immediate CVE-2026-1731 ExigentOverdue by 7 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#70 94 Immediate CVE-2025-26399 ExigentOverdue by 6 monthsRansomwareCISA KEV SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#71 94 Immediate CVE-2026-15409 ExigentOverdue by 52 daysRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#72 93 Immediate CVE-2021-40438 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache HTTP Server-Side Request Forgery (SSRF) Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#73 93 Immediate CVE-2024-21887 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#74 93 Immediate CVE-2024-27199 Overdue by 4 monthsRansomwareCISA KEV JetBrains — JetBrains TeamCity Relative Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#75 93 Immediate CVE-2021-45046 ExigentOverdue by 3.3 yearsRansomwareCISA KEV Apache — Apache Log4j2 Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#76 93 Immediate CVE-2021-44529 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#77 93 Immediate CVE-2021-40539 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#78 93 Immediate CVE-2023-47246 ExigentOverdue by 2.8 yearsRansomwareCISA KEV SysAid — SysAid Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#79 93 Immediate CVE-2013-2465 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Oracle — Oracle Java SE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#80 93 Immediate CVE-2012-4681 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#81 93 Immediate CVE-2023-48788 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.984.
#82 93 Immediate CVE-2022-21587 ExigentOverdue by 3.5 yearsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#83 93 Immediate CVE-2012-0507 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#84 93 Immediate CVE-2024-41713 ExigentOverdue by 19 monthsRansomwareCISA KEV Mitel — Mitel MiCollab Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#85 93 Immediate CVE-2021-42237 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#86 93 Immediate CVE-2025-61884 Overdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.
#87 93 Immediate CVE-2013-0422 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#88 93 Immediate CVE-2019-5544 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#89 93 Immediate CVE-2018-1273 ExigentOverdue by 4.4 yearsRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.970.
#90 93 Immediate CVE-2023-38203 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#91 93 Immediate CVE-2018-6530 ExigentOverdue by 3.9 yearsRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#92 93 Immediate CVE-2023-46747 ExigentOverdue by 2.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#93 93 Immediate CVE-2024-1708 Overdue by 4 monthsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#94 93 Immediate CVE-2024-53704 ExigentOverdue by 18 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#95 93 Immediate CVE-2024-51378 ExigentOverdue by 20 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#96 93 Immediate CVE-2024-55956 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#97 93 Immediate CVE-2024-6670 ExigentOverdue by 23 monthsRansomwareCISA KEV Progress — Progress WhatsUp Gold SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#98 93 Immediate CVE-2025-52691 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#99 92 Immediate CVE-2024-21893 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#100 92 Immediate CVE-2023-46805 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.