Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 1 filter on

Ranked by EVRS

259 match · filtered from 2,960 Sort

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 1 to 25
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
1	CVE-2025-55182Meta — Meta React Server Components Remote Code Execution VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 10 months	97	10.0	99.8% · 99.96th	2025-12-05	2025-12-12CISA federal deadline · Overdue by 10 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
2	CVE-2026-35273Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months	96	9.8	96.7% · 99.89th	2026-06-12	2026-06-15CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
3	CVE-2026-41940WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 6 months	95	9.3	98.5% · 99.92nd	2026-04-30	2026-05-03CISA federal deadline · Overdue by 6 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
4	CVE-2026-23760SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 8 months	95	9.3	96.4% · 99.88th	2026-01-26	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
5	CVE-2026-1731BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 8 months	95	9.9	92.5% · 99.83rd	2026-02-13	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
6	CVE-2026-63077JetBrains — JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 2 months	95	9.8	89.6% · 99.79th	2026-08-05	2026-08-08CISA federal deadline · Overdue by 2 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
7	CVE-2025-26399SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 7 months	94	9.8	90.1% · 99.8th	2026-03-09	2026-03-12CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
8	CVE-2024-27199JetBrains — JetBrains TeamCity Relative Path Traversal VulnerabilityRansomwareCISA federal deadline · Overdue by 6 months	93	7.3	100.0% · 99.99th	2026-04-20	2026-05-04CISA federal deadline · Overdue by 6 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
9	CVE-2015-3306ProFTPD — ProFTPD Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 11 days	93	10.0	99.5% · 99.95th	2026-10-08	2026-10-11CISA federal deadline · Overdue by 11 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. Open CVE page NVD CISA KEV Vendor Advisory
10	CVE-2026-0257Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomwareCISA federal deadline · Overdue by 5 months	93	7.8	96.9% · 99.89th	2026-05-29	2026-06-01CISA federal deadline · Overdue by 5 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
11	CVE-2024-1708ConnectWise — ConnectWise ScreenConnect Path Traversal VulnerabilityRansomwareCISA federal deadline · Overdue by 5 months	93	8.4	95.4% · 99.87th	2026-04-28	2026-05-12CISA federal deadline · Overdue by 5 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
12	CVE-2026-24423SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 8 months	93	9.3	88.2% · 99.77th	2026-02-05	2026-02-26CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
13	CVE-2025-52691SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 8 months	93	10.0	85.7% · 99.73rd	2026-01-26	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
14	CVE-2026-50751Check Point — Check Point Security Gateway Improper Authentication VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months	92	9.3	85.3% · 99.72nd	2026-06-08	2026-06-11CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
15	CVE-2026-72898Metabase — Metabase SQL Injection VulnerabilityExigentCISA federal deadline · Overdue by 2 months	91	10.0	97.3% · 99.9th	2026-08-11	2026-08-14CISA federal deadline · Overdue by 2 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.973. Open CVE page NVD CISA KEV Vendor Advisory
16	CVE-2017-7921Hikvision — Hikvision Multiple Products Improper Authentication VulnerabilityExigentCISA federal deadline · Overdue by 7 months	90	9.8	100.0% · 99.99th	2026-03-05	2026-03-26CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
17	CVE-2026-10520Ivanti — Ivanti Sentry OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 4 months	90	10.0	99.9% · 99.97th	2026-06-11	2026-06-14CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
18	CVE-2025-24893XWiki — XWiki Platform Eval Injection VulnerabilityExigentCISA federal deadline · Overdue by 11 months	90	9.8	99.9% · 99.96th	2025-10-30	2025-11-20CISA federal deadline · Overdue by 11 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
19	CVE-2025-32432Craft CMS — Craft CMS Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 7 months	90	10.0	99.8% · 99.96th	2026-03-20	2026-04-03CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. Open CVE page NVD CISA KEV Vendor Advisory
20	CVE-2015-5477ISC — ISC BIND Data Processing Errors VulnerabilityCISA federal deadline · Overdue by 11 days	90	7.5	99.4% · 99.94th	2026-10-08	2026-10-11CISA federal deadline · Overdue by 11 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. Open CVE page NVD CISA KEV Vendor Advisory
21	CVE-2016-3081Apache — Apache Struts Command Injection VulnerabilityCISA federal deadline · Overdue by 11 days	90	8.1	96.1% · 99.88th	2026-10-08	2026-10-11CISA federal deadline · Overdue by 11 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.961. Open CVE page NVD CISA KEV Vendor Advisory
22	CVE-2026-85706GitLab — GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 38 days	90	10.0	92.0% · 99.82nd	2026-09-11	2026-09-14CISA federal deadline · Overdue by 38 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. Open CVE page NVD CISA KEV Vendor Advisory
23	CVE-2025-48703CWP — CWP Control Web Panel OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 11 months	89	9.0	99.7% · 99.95th	2025-11-04	2025-11-25CISA federal deadline · Overdue by 11 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. Open CVE page NVD CISA KEV Vendor Advisory
24	CVE-2026-24061GNU — GNU InetUtils Argument Injection VulnerabilityExigentCISA federal deadline · Overdue by 8 months	89	9.8	99.0% · 99.93rd	2026-01-26	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. Open CVE page NVD CISA KEV Vendor Advisory
25	CVE-2026-1281Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 9 months	89	9.8	98.7% · 99.92nd	2026-01-29	2026-02-01CISA federal deadline · Overdue by 9 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.987. Open CVE page NVD CISA KEV Vendor Advisory

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics