Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 251 | CVE-2026-5430WSO2 — WSO2 Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 25 days | 75 | 10.0 | 0.6% · 47.4th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.006. | |||||||
| 252 | CVE-2026-102490Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management VulnerabilityCISA federal deadline · Overdue by 17 days | 75 | 9.4 | 0.5% · 45.2nd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 17 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 253 | CVE-2026-34926Trend Micro — Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 6.7 | 0.5% · 44.4th | 2026-05-21 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.005. | |||||||
| 254 | CVE-2025-43520Apple — Apple Multiple Products Classic Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 5.5 | 0.4% · 35.7th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 255 | CVE-2025-43510Apple — Apple Multiple Products Improper Locking VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 0.4% · 28th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.004. | |||||||
| 256 | CVE-2026-3502TrueConf — TrueConf Client Download of Code Without Integrity Check VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.8 | 0.3% · 24.7th | 2026-04-02 | 2026-04-16CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.003. | |||||||
| 257 | CVE-2025-48633Android — Android Framework Information Disclosure VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 5.5 | 0.3% · 17th | 2025-12-02 | 2025-12-23CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.003. | |||||||
| 258 | CVE-2025-48572Android — Android Framework Privilege Escalation VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 7.8 | 0.3% · 16.6th | 2025-12-02 | 2025-12-23CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.003. | |||||||
| 259 | CVE-2026-87886Acronis — Acronis Backup Incorrect Default Permissions VulnerabilityCISA federal deadline · Overdue by 33 days | 75 | 7.8 | 0.2% · 13.4th | 2026-09-16 | 2026-09-19CISA federal deadline · Overdue by 33 days | |
Why it ranks here: Listed in the CISA KEV catalog, and added to CISA KEV within the last 90 days. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsWSO2 — WSO2 Multiple Products Path Traversal Vulnerability
EVRS 75 Urgent
Rank 251 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 0.6% 47.4th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- WSO2
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 252 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.4 NVD
- EPSS
- 0.5% 45.2nd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 17 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Trend Micro — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 253 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 6.7 NVD
- EPSS
- 0.5% 44.4th percentile
- In CISA KEV since
- 2026-05-21
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Trend Micro
- Source
- CISA KEV
Apple — Apple Multiple Products Classic Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 254 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.4% 35.7th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple Multiple Products Improper Locking Vulnerability
EVRS 75 Urgent
Rank 255 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.4% 28th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
TrueConf — TrueConf Client Download of Code Without Integrity Check Vulnerability
EVRS 75 Urgent
Rank 256 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.3% 24.7th percentile
- In CISA KEV since
- 2026-04-02
- CISA deadline
- 2026-04-16 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- TrueConf
- Source
- CISA KEV
Android — Android Framework Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 257 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 5.5 NVD
- EPSS
- 0.3% 17th percentile
- In CISA KEV since
- 2025-12-02
- CISA deadline
- 2025-12-23 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Android — Android Framework Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 258 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.3% 16.6th percentile
- In CISA KEV since
- 2025-12-02
- CISA deadline
- 2025-12-23 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Acronis — Acronis Backup Incorrect Default Permissions Vulnerability
EVRS 75 Urgent
Rank 259 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 0.2% 13.4th percentile
- In CISA KEV since
- 2026-09-16
- CISA deadline
- 2026-09-19 CISA federal deadline · Overdue by 33 days
- Ransomware use
- Not known
- Vendor
- Acronis
- Source
- CISA KEV