Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 226 | CVE-2025-59374ASUS — ASUS Live Update Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 9 months | 75 | 9.3 | 1.2% · 67.8th | 2025-12-17 | 2026-01-07CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 227 | CVE-2026-102764BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 3 days | 75 | 9.3 | 1.2% · 67.4th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 3 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 228 | CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 22 days | 75 | 9.5 | 1.1% · 64.9th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 22 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 229 | CVE-2025-61624Fortinet — Fortinet Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 3 days | 75 | 6.5 | 1.1% · 64.8th | 2026-10-16 | 2026-10-19CISA federal deadline · Overdue by 3 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 230 | CVE-2026-3910Google — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 1.1% · 64.4th | 2026-03-13 | 2026-03-27CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 231 | CVE-2026-93952Arista — Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 9.5 | 1.1% · 64.3rd | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.011. | |||||||
| 232 | CVE-2026-67279MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 6.9 | 1.0% · 63.3rd | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 24 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 233 | CVE-2026-48172LiteSpeed — LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 10.0 | 1.0% · 62.8th | 2026-05-26 | 2026-05-29CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 234 | CVE-2026-8452Citrix — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 54 days | 75 | 8.8 | 1.0% · 62.8th | 2026-08-26 | 2026-08-29CISA federal deadline · Overdue by 54 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 235 | CVE-2026-20349Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 8.6 | 1.0% · 62.8th | 2026-08-11 | 2026-08-14CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 236 | CVE-2026-16812Arista — Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 1.0% · 62.4th | 2026-07-27 | 2026-07-30CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 237 | CVE-2026-8398Daemon — Daemon Tools Lite Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 1.0% · 61.2nd | 2026-05-27 | 2026-05-30CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.010. | |||||||
| 238 | CVE-2026-84869ConnectWise — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityCISA federal deadline · Overdue by 38 days | 75 | 9.9 | 0.9% · 60th | 2026-09-11 | 2026-09-14CISA federal deadline · Overdue by 38 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 239 | CVE-2026-55255Langflow — Langflow Authorization Bypass Through User-Controlled Key VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.4 | 0.9% · 58.8th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 240 | CVE-2026-105133Ahsay — Ahsay AhsayCBS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 5.5 | 0.9% · 57.9th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.009. | |||||||
| 241 | CVE-2026-59822BerriAI — BerriAI LiteLLM Improper Authentication VulnerabilityCISA federal deadline · Overdue by 36 days | 75 | 8.8 | 0.8% · 57.2nd | 2026-09-02 | 2026-09-16CISA federal deadline · Overdue by 36 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 242 | CVE-2026-53266Linux — Linux Kernel Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 8.8 | 0.8% · 57th | 2026-09-18 | 2026-09-21CISA federal deadline · Overdue by 31 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 243 | CVE-2026-46817Oracle — Oracle E-Business Suite Improper Privilege Management VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 0.8% · 56.5th | 2026-07-15 | 2026-07-18CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 244 | CVE-2026-54420LiteSpeed — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 8.5 | 0.8% · 56.3rd | 2026-06-15 | 2026-06-18CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.008. | |||||||
| 245 | CVE-2026-53362Linux — Linux Kernel Unspecified VulnerabilityCISA federal deadline · Overdue by 53 days | 75 | 7.8 | 0.7% · 52.9th | 2026-08-27 | 2026-08-30CISA federal deadline · Overdue by 53 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 246 | CVE-2026-5281Google — Google Dawn Use-After-Free VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.8 | 0.7% · 52.7th | 2026-04-01 | 2026-04-15CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 247 | CVE-2026-66384JFrog — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityCISA federal deadline · Overdue by 42 days | 75 | 5.3 | 0.7% · 51.1st | 2026-08-27 | 2026-09-10CISA federal deadline · Overdue by 42 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.007. | |||||||
| 248 | CVE-2026-7473Arista — Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 6.9 | 0.6% · 50.4th | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 249 | CVE-2026-88779Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 15 days | 75 | 8.7 | 0.6% · 47.5th | 2026-10-04 | 2026-10-07CISA federal deadline · Overdue by 15 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 250 | CVE-2026-58704Google — Google Pixel Improper Authorization VulnerabilityCISA federal deadline · Overdue by 33 days | 75 | 8.8 | 0.6% · 47.5th | 2026-09-16 | 2026-09-19CISA federal deadline · Overdue by 33 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsASUS — ASUS Live Update Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 226 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.2% 67.8th percentile
- In CISA KEV since
- 2025-12-17
- CISA deadline
- 2026-01-07 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- ASUS
- Source
- CISA KEV
BeyondTrust — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 227 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.2% 67.4th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 3 days
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 228 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.1% 64.9th percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 22 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 229 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.5 NVD
- EPSS
- 1.1% 64.8th percentile
- In CISA KEV since
- 2026-10-16
- CISA deadline
- 2026-10-19 CISA federal deadline · Overdue by 3 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Google — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 230 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.1% 64.4th percentile
- In CISA KEV since
- 2026-03-13
- CISA deadline
- 2026-03-27 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 231 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.1% 64.3rd percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
EVRS 75 Urgent
Rank 232 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.9 NVD
- EPSS
- 1.0% 63.3rd percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 24 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
LiteSpeed — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 233 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-05-26
- CISA deadline
- 2026-05-29 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- LiteSpeed
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 234 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-08-29 CISA federal deadline · Overdue by 54 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
EVRS 75 Urgent
Rank 235 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.6 NVD
- EPSS
- 1.0% 62.8th percentile
- In CISA KEV since
- 2026-08-11
- CISA deadline
- 2026-08-14 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Arista — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 236 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.0% 62.4th percentile
- In CISA KEV since
- 2026-07-27
- CISA deadline
- 2026-07-30 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Daemon — Daemon Tools Lite Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 237 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.0% 61.2nd percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-05-30 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Daemon
- Source
- CISA KEV
ConnectWise — ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
EVRS 75 Urgent
Rank 238 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.9 NVD
- EPSS
- 0.9% 60th percentile
- In CISA KEV since
- 2026-09-11
- CISA deadline
- 2026-09-14 CISA federal deadline · Overdue by 38 days
- Ransomware use
- Not known
- Vendor
- ConnectWise
- Source
- CISA KEV
Langflow — Langflow Authorization Bypass Through User-Controlled Key Vulnerability
EVRS 75 Urgent
Rank 239 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.4 NVD
- EPSS
- 0.9% 58.8th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 240 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.9% 57.9th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
BerriAI — BerriAI LiteLLM Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 241 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.8% 57.2nd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-16 CISA federal deadline · Overdue by 36 days
- Ransomware use
- Not known
- Vendor
- BerriAI
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 242 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.8% 57th percentile
- In CISA KEV since
- 2026-09-18
- CISA deadline
- 2026-09-21 CISA federal deadline · Overdue by 31 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Oracle — Oracle E-Business Suite Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 243 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 0.8% 56.5th percentile
- In CISA KEV since
- 2026-07-15
- CISA deadline
- 2026-07-18 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
LiteSpeed — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
EVRS 75 Urgent
Rank 244 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.5 NVD
- EPSS
- 0.8% 56.3rd percentile
- In CISA KEV since
- 2026-06-15
- CISA deadline
- 2026-06-18 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- LiteSpeed
- Source
- CISA KEV
Linux — Linux Kernel Unspecified Vulnerability
EVRS 75 Urgent
Rank 245 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.7% 52.9th percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-08-30 CISA federal deadline · Overdue by 53 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Google — Google Dawn Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 246 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.7% 52.7th percentile
- In CISA KEV since
- 2026-04-01
- CISA deadline
- 2026-04-15 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
EVRS 75 Urgent
Rank 247 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 5.3 NVD
- EPSS
- 0.7% 51.1st percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-09-10 CISA federal deadline · Overdue by 42 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Arista — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
EVRS 75 Urgent
Rank 248 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 6.9 NVD
- EPSS
- 0.6% 50.4th percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Arista
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 249 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.7 NVD
- EPSS
- 0.6% 47.5th percentile
- In CISA KEV since
- 2026-10-04
- CISA deadline
- 2026-10-07 CISA federal deadline · Overdue by 15 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Google — Google Pixel Improper Authorization Vulnerability
EVRS 75 Urgent
Rank 250 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 0.6% 47.5th percentile
- In CISA KEV since
- 2026-09-16
- CISA deadline
- 2026-09-19 CISA federal deadline · Overdue by 33 days
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV