CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
Priority feed
The highest risk items, ranked by real-world exploitation signals.
1,757
Tracked itemsTotal vulnerabilities in the current EVULNABLE dataset across KEV and Patch Tuesday coverage.
358
ExigentKEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — all at once.
239
Ransomware-linkedAssociated with known ransomware activity according to source data.
29
New to CISA KEVAdded to the KEV catalog in the last 30 days.
Ranked by EVRS — Ransomware-linked
Showing the top 200 of 239 ransomware-linked entries. Data checked 07 Sep 11:30 UTC. Show all tracked items.
#2 97 Immediate CVE-2026-35273 ExigentOverdue by 3 monthsRansomwareCISA KEV Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#3 96 Immediate CVE-2025-10035 ExigentOverdue by 11 monthsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#4 96 Immediate CVE-2025-61882 ExigentOverdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#5 95 Immediate CVE-2025-3248 ExigentOverdue by 15 monthsRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 95 Immediate CVE-2025-22457 ExigentOverdue by 17 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#7 95 Immediate CVE-2025-31161 ExigentOverdue by 16 monthsRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#8 95 Immediate CVE-2025-31324 ExigentOverdue by 16 monthsRansomwareCISA KEV SAP — SAP NetWeaver Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#9 95 Immediate CVE-2026-41940 ExigentOverdue by 4 monthsRansomwareCISA KEV WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#10 95 Immediate CVE-2026-23760 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#11 94 Immediate CVE-2017-5638 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#12 94 Immediate CVE-2018-13379 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#13 94 Immediate CVE-2019-11510 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#14 94 Immediate CVE-2019-19781 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#15 94 Immediate CVE-2020-5902 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#16 94 Immediate CVE-2021-21985 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#17 94 Immediate CVE-2021-22005 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#18 94 Immediate CVE-2021-26084 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#19 94 Immediate CVE-2021-35464 ExigentOverdue by 4.8 yearsRansomwareCISA KEV ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#20 94 Immediate CVE-2021-44228 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache Log4j2 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#21 94 Immediate CVE-2022-26134 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#22 94 Immediate CVE-2022-29464 ExigentOverdue by 4.3 yearsRansomwareCISA KEV WSO2 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#23 94 Immediate CVE-2023-22518 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#24 94 Immediate CVE-2023-27350 ExigentOverdue by 3.3 yearsRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#25 94 Immediate CVE-2023-35078 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#26 94 Immediate CVE-2023-35082 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#27 94 Immediate CVE-2024-23897 ExigentOverdue by 2.0 yearsRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#28 94 Immediate CVE-2024-3400 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#29 94 Immediate CVE-2022-22954 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#30 94 Immediate CVE-2021-41773 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#31 94 Immediate CVE-2018-7600 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#32 94 Immediate CVE-2023-29300 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#33 94 Immediate CVE-2024-4577 ExigentOverdue by 2.2 yearsRansomwareCISA KEV PHP Group — PHP-CGI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#34 94 Immediate CVE-2022-40684 ExigentOverdue by 3.8 yearsRansomwareCISA KEV Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#35 94 Immediate CVE-2023-22527 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#36 94 Immediate CVE-2024-1709 ExigentOverdue by 2.5 yearsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#37 94 Immediate CVE-2023-42793 ExigentOverdue by 2.9 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#38 94 Immediate CVE-2025-0282 ExigentOverdue by 20 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#39 94 Immediate CVE-2022-47986 ExigentOverdue by 3.5 yearsRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#40 94 Immediate CVE-2019-2725 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle WebLogic Server, Injection Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#41 94 Immediate CVE-2021-42013 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#42 94 Immediate CVE-2025-5777 ExigentOverdue by 14 monthsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#43 94 Immediate CVE-2022-1388 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#44 94 Immediate CVE-2023-38035 ExigentOverdue by 3.0 yearsRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#45 94 Immediate CVE-2018-10562 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Dasan — Dasan GPON Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#46 94 Immediate CVE-2021-3129 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#47 94 Immediate CVE-2024-27198 ExigentOverdue by 2.4 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#48 94 Immediate CVE-2023-34362 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Progress — Progress MOVEit Transfer SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#49 94 Immediate CVE-2019-3396 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#50 94 Immediate CVE-2021-20038 ExigentOverdue by 4.6 yearsRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#51 94 Immediate CVE-2021-22986 ExigentOverdue by 4.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#52 94 Immediate CVE-2021-21972 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#53 94 Immediate CVE-2019-11043 ExigentOverdue by 4.4 yearsRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#54 94 Immediate CVE-2019-15107 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Webmin — Webmin Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#55 94 Immediate CVE-2022-47966 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#56 94 Immediate CVE-2023-3519 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#57 94 Immediate CVE-2019-18935 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#58 94 Immediate CVE-2021-22205 ExigentOverdue by 4.8 yearsRansomwareCISA KEV GitLab — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#59 94 Immediate CVE-2023-46604 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Apache — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#60 94 Immediate CVE-2010-2861 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#61 94 Immediate CVE-2024-0012 ExigentOverdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#62 94 Immediate CVE-2022-42475 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#63 94 Immediate CVE-2024-23692 ExigentOverdue by 2.1 yearsRansomwareCISA KEV Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#64 94 Immediate CVE-2017-7494 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Samba — Samba Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#65 94 Immediate CVE-2018-7602 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#66 94 Immediate CVE-2023-22515 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#67 94 Immediate CVE-2024-50623 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#68 94 Immediate CVE-2024-55591 ExigentOverdue by 20 monthsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#69 94 Immediate CVE-2026-1731 ExigentOverdue by 7 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#70 94 Immediate CVE-2025-26399 ExigentOverdue by 6 monthsRansomwareCISA KEV SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#71 94 Immediate CVE-2026-15409 ExigentOverdue by 52 daysRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#72 93 Immediate CVE-2021-40438 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache HTTP Server-Side Request Forgery (SSRF) Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#73 93 Immediate CVE-2024-21887 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#74 93 Immediate CVE-2024-27199 Overdue by 4 monthsRansomwareCISA KEV JetBrains — JetBrains TeamCity Relative Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#75 93 Immediate CVE-2021-45046 ExigentOverdue by 3.3 yearsRansomwareCISA KEV Apache — Apache Log4j2 Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#76 93 Immediate CVE-2021-44529 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#77 93 Immediate CVE-2021-40539 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#78 93 Immediate CVE-2023-47246 ExigentOverdue by 2.8 yearsRansomwareCISA KEV SysAid — SysAid Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#79 93 Immediate CVE-2013-2465 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Oracle — Oracle Java SE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#80 93 Immediate CVE-2012-4681 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#81 93 Immediate CVE-2023-48788 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.984.
#82 93 Immediate CVE-2022-21587 ExigentOverdue by 3.5 yearsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#83 93 Immediate CVE-2012-0507 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#84 93 Immediate CVE-2024-41713 ExigentOverdue by 19 monthsRansomwareCISA KEV Mitel — Mitel MiCollab Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#85 93 Immediate CVE-2021-42237 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#86 93 Immediate CVE-2025-61884 Overdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.
#87 93 Immediate CVE-2013-0422 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#88 93 Immediate CVE-2019-5544 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#89 93 Immediate CVE-2018-1273 ExigentOverdue by 4.4 yearsRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.970.
#90 93 Immediate CVE-2023-38203 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#91 93 Immediate CVE-2018-6530 ExigentOverdue by 3.9 yearsRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#92 93 Immediate CVE-2023-46747 ExigentOverdue by 2.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#93 93 Immediate CVE-2024-1708 Overdue by 4 monthsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#94 93 Immediate CVE-2024-53704 ExigentOverdue by 18 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#95 93 Immediate CVE-2024-51378 ExigentOverdue by 20 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#96 93 Immediate CVE-2024-55956 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#97 93 Immediate CVE-2024-6670 ExigentOverdue by 23 monthsRansomwareCISA KEV Progress — Progress WhatsUp Gold SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#98 93 Immediate CVE-2025-52691 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#99 92 Immediate CVE-2024-21893 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#100 92 Immediate CVE-2023-46805 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#101 92 Immediate CVE-2024-24919 Overdue by 2.2 yearsRansomwareCISA KEV Check Point — Check Point Quantum Security Gateways Information Disclosure Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#102 92 Immediate CVE-2019-11580 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.954.
#103 92 Immediate CVE-2016-4117 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#104 92 Immediate CVE-2026-0257 Overdue by 3 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.939.
#105 92 Immediate CVE-2012-1723 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#106 92 Immediate CVE-2018-11138 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Quest — Quest KACE System Management Appliance Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.921.
#107 92 Immediate CVE-2022-37042 ExigentOverdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#108 92 Immediate CVE-2021-35211 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SolarWinds — SolarWinds Serv-U Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.912.
#109 92 Immediate CVE-2024-40711 ExigentOverdue by 22 monthsRansomwareCISA KEV Veeam — Veeam Backup and Replication Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#110 92 Immediate CVE-2026-24423 ExigentOverdue by 6 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.877.
#111 91 Immediate CVE-2023-4966 Overdue by 2.8 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#112 91 Immediate CVE-2017-10271 Overdue by 4.1 yearsRansomwareCISA KEV Oracle — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#113 91 Immediate CVE-2019-7481 Overdue by 4.3 yearsRansomwareCISA KEV SonicWall — SonicWall SMA100 SQL Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#114 91 Immediate CVE-2017-12615 Overdue by 4.4 yearsRansomwareCISA KEV Apache — Apache Tomcat on Windows Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#115 91 Immediate CVE-2008-2992 Overdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Input Validation Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#116 91 Immediate CVE-2023-38831 Overdue by 3.0 yearsRansomwareCISA KEV RARLAB — RARLAB WinRAR Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#117 91 Immediate CVE-2017-9822 Overdue by 4.3 yearsRansomwareCISA KEV DotNetNuke (DNN) — DotNetNuke (DNN) Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.948.
#118 91 Immediate CVE-2025-8088 Overdue by 12 monthsRansomwareCISA KEV RARLAB — RARLAB WinRAR Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.946.
#119 91 Immediate CVE-2022-26352 ExigentOverdue by 4.0 yearsRansomwareCISA KEV dotCMS — dotCMS Unrestricted Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.916.
#120 91 Immediate CVE-2017-12149 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.907.
#121 91 Immediate CVE-2019-7195 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.897.
#122 91 Immediate CVE-2023-41265 ExigentOverdue by 2.7 yearsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#123 91 Immediate CVE-2019-7192 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#124 91 Immediate CVE-2024-51567 ExigentOverdue by 21 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.865.
#125 91 Immediate CVE-2026-50751 ExigentOverdue by 3 monthsRansomwareCISA KEV Check Point — Check Point Security Gateway Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.838.
#126 90 Immediate CVE-2023-0669 Overdue by 3.5 yearsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#127 90 Immediate CVE-2022-30333 Overdue by 4.0 yearsRansomwareCISA KEV RARLAB — RARLAB UnRAR Directory Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#128 90 Immediate CVE-2022-27925 Overdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#129 90 Immediate CVE-2019-11539 Overdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#130 90 Immediate CVE-2018-20250 Overdue by 4.1 yearsRansomwareCISA KEV RARLAB — WinRAR Absolute Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#131 90 Immediate CVE-2024-57727 Overdue by 18 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.952.
#132 90 Immediate CVE-2021-4034 Overdue by 4.1 yearsRansomwareCISA KEV Red Hat — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.949.
#133 90 Immediate CVE-2023-40044 Overdue by 2.9 yearsRansomwareCISA KEV Progress — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.901.
#134 90 Immediate CVE-2022-27593 ExigentOverdue by 3.9 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.879.
#135 90 Immediate CVE-2019-16057 ExigentOverdue by 4.3 yearsRansomwareCISA KEV D-Link — D-Link DNS-320 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.871.
#136 90 Immediate CVE-2017-18362 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Kaseya — Kaseya VSA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.868.
#137 90 Immediate CVE-2021-30116 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#138 90 Immediate CVE-2023-27997 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#139 90 Immediate CVE-2024-21762 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.843.
#140 89 Immediate CVE-2022-36537 Overdue by 3.5 yearsRansomwareCISA KEV ZK Framework — ZK Framework AuUploader Unspecified Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.953.
#141 89 Immediate CVE-2024-9474 Overdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#142 89 Immediate CVE-2021-20021 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.834.
#143 89 Immediate CVE-2019-7194 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.831.
#144 89 Immediate CVE-2020-3992 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.830.
#145 89 Immediate CVE-2023-43208 ExigentOverdue by 2.2 yearsRansomwareCISA KEV NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.827.
#146 89 Immediate CVE-2018-6789 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Exim — Exim Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.821.
#147 88 Immediate CVE-2021-26085 Overdue by 4.4 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#148 88 Immediate CVE-2018-4878 Overdue by 4.3 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#149 88 Immediate CVE-2010-0188 Overdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#150 88 Immediate CVE-2021-28799 ExigentOverdue by 4.4 yearsRansomwareCISA KEV QNAP — QNAP NAS Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.782.
#151 88 Immediate CVE-2017-11357 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.777.
#152 88 Immediate CVE-2024-57726 ExigentOverdue by 4 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Missing Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#153 87 Immediate CVE-2009-3960 Overdue by 4.0 yearsRansomwareCISA KEV Adobe — Adobe BlazeDS Information Disclosure Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.900.
#154 87 Immediate CVE-2022-27924 Overdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.854.
#155 87 Immediate CVE-2023-27351 Overdue by 4 monthsRansomwareCISA KEV PaperCut — PaperCut NG/MF Improper Authentication Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.781.
#156 87 Immediate CVE-2021-42258 ExigentOverdue by 4.8 yearsRansomwareCISA KEV BQE — BQE BillQuick Web Suite SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#157 86 Immediate CVE-2022-24990 Overdue by 3.5 yearsRansomwareCISA KEV TerraMaster — TerraMaster OS Remote Command Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.836.
#158 86 Immediate CVE-2018-15982 Overdue by 4.1 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.825.
#159 86 Immediate CVE-2018-13382 Overdue by 4.2 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Improper Authorization Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.817.
#160 86 Immediate CVE-2023-28461 ExigentOverdue by 21 monthsRansomwareCISA KEV Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#161 85 Immediate CVE-2013-0431 Overdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Sandbox Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.900.
#162 85 Immediate CVE-2020-3580 Overdue by 4.3 yearsRansomwareCISA KEV Cisco — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.856.
#163 85 Immediate CVE-2023-41266 Overdue by 2.7 yearsRansomwareCISA KEV Qlik — Qlik Sense Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.848.
#164 85 Immediate CVE-2021-21975 Overdue by 4.6 yearsRansomwareCISA KEV VMware — VMware Server Side Request Forgery in vRealize Operations Manager API Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.783.
#165 85 Immediate CVE-2023-27532 Overdue by 3.0 yearsRansomwareCISA KEV Veeam — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.776.
#166 85 Immediate CVE-2022-2294 Overdue by 4.0 yearsRansomwareCISA KEV WebRTC — WebRTC Heap Buffer Overflow Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#167 85 Immediate CVE-2021-27877 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Veritas — Veritas Backup Exec Agent Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#168 85 Immediate CVE-2021-27104 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#169 85 Immediate CVE-2022-29499 ExigentOverdue by 4.1 yearsRansomwareCISA KEV Mitel — Mitel MiVoice Connect Data Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#170 85 Immediate CVE-2021-22941 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Citrix — Citrix ShareFile Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#171 85 Immediate CVE-2020-12812 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#172 85 Immediate CVE-2021-22893 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#173 85 Immediate CVE-2020-12271 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Sophos — Sophos SFOS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#174 85 Immediate CVE-2026-12569 ExigentOverdue by 2 monthsRansomwareCISA KEV PTC — PTC Windchill and FlexPLM Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#175 85 Immediate CVE-2021-20016 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall SSLVPN SMA100 SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#176 85 Immediate CVE-2022-31199 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Netwrix — Netwrix Auditor Insecure Object Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#177 85 Immediate CVE-2026-20131 ExigentOverdue by 6 monthsRansomwareCISA KEV Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#178 85 Immediate CVE-2021-20028 ExigentOverdue by 4.4 yearsRansomwareCISA KEV SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#179 85 Immediate CVE-2018-20753 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Kaseya — Kaseya VSA Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#180 85 Immediate CVE-2020-5135 ExigentOverdue by 4.4 yearsRansomwareCISA KEV SonicWall — SonicWall SonicOS Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#181 85 Immediate CVE-2023-20269 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#182 85 Immediate CVE-2023-48365 ExigentOverdue by 19 monthsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#183 85 Immediate CVE-2018-19949 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP NAS File Station Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#184 85 Immediate CVE-2025-23006 ExigentOverdue by 19 monthsRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#185 85 Immediate CVE-2024-9680 ExigentOverdue by 22 monthsRansomwareCISA KEV Mozilla — Mozilla Firefox Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#186 85 Immediate CVE-2016-1019 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#187 85 Immediate CVE-2024-40766 ExigentOverdue by 23 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#188 85 Immediate CVE-2019-7193 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP QTS Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#189 85 Immediate CVE-2025-42999 ExigentOverdue by 15 monthsRansomwareCISA KEV SAP — SAP NetWeaver Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#190 85 Immediate CVE-2012-1710 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle Fusion Middleware Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#191 85 Immediate CVE-2021-27103 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#192 85 Immediate CVE-2019-11634 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#193 85 Immediate CVE-2018-19323 ExigentOverdue by 3.8 yearsRansomwareCISA KEV GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#194 85 Immediate CVE-2021-27101 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Accellion — Accellion FTA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#195 85 Immediate CVE-2020-29574 ExigentOverdue by 18 monthsRansomwareCISA KEV Sophos — CyberoamOS (CROS) SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#196 85 Immediate CVE-2020-2021 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#197 85 Immediate CVE-2022-26501 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#198 85 Immediate CVE-2024-11667 ExigentOverdue by 20 monthsRansomwareCISA KEV Zyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#199 85 Immediate CVE-2026-45321 ExigentOverdue by 3 monthsRansomwareCISA KEV TanStack — TanStack Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#200 85 Immediate CVE-2026-48027 ExigentOverdue by 3 monthsRansomwareCISA KEV Nx — Nx Console Embedded Malicious Code Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.