Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 26 | CVE-2026-1340Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 89 | 9.8 | 98.6% · 99.92nd | 2026-04-08 | 2026-04-11CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. | |||||||
| 27 | CVE-2026-20253Splunk — Splunk Enterprise Missing Authentication for Critical Function VulnerabilityExigentCISA federal deadline · Overdue by 4 months | 89 | 9.8 | 96.9% · 99.89th | 2026-06-18 | 2026-06-21CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 28 | CVE-2026-20079Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 40 days | 89 | 10.0 | 88.5% · 99.77th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 29 | CVE-2026-71362Adobe — Adobe Commerce and Magento Incorrect Authorization VulnerabilityCISA federal deadline · Overdue by 25 days | 89 | 9.1 | 87.5% · 99.76th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.875. | |||||||
| 30 | CVE-2025-68613n8n — n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityCISA federal deadline · Overdue by 7 months | 88 | 8.8 | 99.0% · 99.93rd | 2026-03-11 | 2026-03-25CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 31 | CVE-2025-49113Roundcube — RoundCube Webmail Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 7 months | 88 | 8.8 | 99.0% · 99.93rd | 2026-02-20 | 2026-03-13CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 32 | CVE-2023-52163Digiever — Digiever DS-2105 Pro Missing Authorization VulnerabilityCISA federal deadline · Overdue by 9 months | 88 | 8.8 | 96.9% · 99.89th | 2025-12-22 | 2026-01-12CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 33 | CVE-2025-54068Laravel — Laravel Livewire Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 7 months | 88 | 9.2 | 96.3% · 99.88th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 34 | CVE-2025-12480Gladinet — Gladinet Triofox Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 88 | 9.1 | 95.7% · 99.87th | 2025-11-12 | 2025-12-03CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.957. | |||||||
| 35 | CVE-2026-35616Fortinet — Fortinet FortiClient EMS Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 88 | 9.8 | 94.0% · 99.85th | 2026-04-06 | 2026-04-09CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.940. | |||||||
| 36 | CVE-2025-11953React Native Community — React Native Community CLI OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 88 | 9.8 | 94.0% · 99.85th | 2026-02-05 | 2026-02-26CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.940. | |||||||
| 37 | CVE-2026-21643Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 88 | 9.8 | 93.9% · 99.85th | 2026-04-13 | 2026-04-16CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
| 38 | CVE-2025-64446Fortinet — Fortinet FortiWeb Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 88 | 9.8 | 92.0% · 99.82nd | 2025-11-14 | 2025-11-21CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 39 | CVE-2024-7399Samsung — Samsung MagicINFO 9 Server Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 5 months | 88 | 9.8 | 91.9% · 99.82nd | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.919. | |||||||
| 40 | CVE-2026-20182Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityExigentCISA federal deadline · Overdue by 5 months | 88 | 10.0 | 91.8% · 99.82nd | 2026-05-14 | 2026-05-17CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 41 | CVE-2024-57726SimpleHelp — SimpleHelp Missing Authorization VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 5 months | 88 | 9.9 | 66.6% · 99.29th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 42 | CVE-2021-22054Omnissa — Omnissa Workspace ONE Server-Side Request ForgeryCISA federal deadline · Overdue by 7 months | 87 | 7.5 | 99.7% · 99.95th | 2026-03-09 | 2026-03-23CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 43 | CVE-2025-54236Adobe — Adobe Commerce and Magento Improper Input Validation VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 87 | 9.1 | 94.7% · 99.86th | 2025-10-24 | 2025-11-14CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.947. | |||||||
| 44 | CVE-2025-34291Langflow — Langflow Origin Validation Error VulnerabilityExigentCISA federal deadline · Overdue by 5 months | 87 | 9.4 | 92.8% · 99.83rd | 2026-05-21 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 45 | CVE-2025-9242WatchGuard — WatchGuard Firebox Out-of-Bounds Write VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 87 | 9.3 | 91.8% · 99.82nd | 2025-11-12 | 2025-12-03CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 46 | CVE-2025-37164Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 9 months | 87 | 9.8 | 90.2% · 99.8th | 2026-01-07 | 2026-01-28CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 47 | CVE-2025-61757Oracle — Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 10 months | 87 | 9.8 | 88.6% · 99.78th | 2025-11-21 | 2025-12-12CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.886. | |||||||
| 48 | CVE-2026-48908JoomShaper — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 87 | 10.0 | 88.5% · 99.78th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 49 | CVE-2026-20127Cisco — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 8 months | 87 | 10.0 | 88.5% · 99.78th | 2026-02-25 | 2026-02-27CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 50 | CVE-2021-23758Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 43 days | 87 | 9.8 | 82.6% · 99.67th | 2026-08-26 | 2026-09-09CISA federal deadline · Overdue by 43 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.826. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsIvanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
EVRS 89 Immediate
Rank 26 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.6% 99.92nd percentile
- In CISA KEV since
- 2026-04-08
- CISA deadline
- 2026-04-11 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Splunk — Splunk Enterprise Missing Authentication for Critical Function Vulnerability
EVRS 89 Immediate
Rank 27 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2026-06-18
- CISA deadline
- 2026-06-21 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Splunk
- Source
- CISA KEV
Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 89 Immediate
Rank 28 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.77th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Incorrect Authorization Vulnerability
EVRS 89 Immediate
Rank 29 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.1 NVD
- EPSS
- 87.5% 99.76th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
n8n — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
EVRS 88 Immediate
Rank 30 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-03-11
- CISA deadline
- 2026-03-25 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- n8n
- Source
- CISA KEV
Roundcube — RoundCube Webmail Deserialization of Untrusted Data Vulnerability
EVRS 88 Immediate
Rank 31 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-02-20
- CISA deadline
- 2026-03-13 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Digiever — Digiever DS-2105 Pro Missing Authorization Vulnerability
EVRS 88 Immediate
Rank 32 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.8 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2025-12-22
- CISA deadline
- 2026-01-12 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Digiever
- Source
- CISA KEV
Laravel — Laravel Livewire Code Injection Vulnerability
EVRS 88 Immediate
Rank 33 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.2 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Laravel
- Source
- CISA KEV
Gladinet — Gladinet Triofox Improper Access Control Vulnerability
EVRS 88 Immediate
Rank 34 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.1 NVD
- EPSS
- 95.7% 99.87th percentile
- In CISA KEV since
- 2025-11-12
- CISA deadline
- 2025-12-03 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
Fortinet — Fortinet FortiClient EMS Improper Access Control Vulnerability
EVRS 88 Immediate
Rank 35 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.85th percentile
- In CISA KEV since
- 2026-04-06
- CISA deadline
- 2026-04-09 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
React Native Community — React Native Community CLI OS Command Injection Vulnerability
EVRS 88 Immediate
Rank 36 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.85th percentile
- In CISA KEV since
- 2026-02-05
- CISA deadline
- 2026-02-26 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- React Native Community
- Source
- CISA KEV
Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability
EVRS 88 Immediate
Rank 37 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2026-04-13
- CISA deadline
- 2026-04-16 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Fortinet — Fortinet FortiWeb Path Traversal Vulnerability
EVRS 88 Immediate
Rank 38 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2025-11-14
- CISA deadline
- 2025-11-21 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability
EVRS 88 Immediate
Rank 39 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
EVRS 88 Immediate
Rank 40 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 91.8% 99.82nd percentile
- In CISA KEV since
- 2026-05-14
- CISA deadline
- 2026-05-17 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
SimpleHelp — SimpleHelp Missing Authorization Vulnerability
EVRS 88 Immediate
Rank 41 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.9 NVD
- EPSS
- 66.6% 99.29th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Omnissa — Omnissa Workspace ONE Server-Side Request Forgery
EVRS 87 Immediate
Rank 42 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2026-03-09
- CISA deadline
- 2026-03-23 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Omnissa
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 43 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.1 NVD
- EPSS
- 94.7% 99.86th percentile
- In CISA KEV since
- 2025-10-24
- CISA deadline
- 2025-11-14 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Langflow — Langflow Origin Validation Error Vulnerability
EVRS 87 Immediate
Rank 44 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.4 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2026-05-21
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox Out-of-Bounds Write Vulnerability
EVRS 87 Immediate
Rank 45 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.8% 99.82nd percentile
- In CISA KEV since
- 2025-11-12
- CISA deadline
- 2025-12-03 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
EVRS 87 Immediate
Rank 46 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2026-01-07
- CISA deadline
- 2026-01-28 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Hewlett Packard Enterprise (HPE)
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
EVRS 87 Immediate
Rank 47 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.6% 99.78th percentile
- In CISA KEV since
- 2025-11-21
- CISA deadline
- 2025-12-12 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
JoomShaper — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 87 Immediate
Rank 48 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- JoomShaper
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 49 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2026-02-25
- CISA deadline
- 2026-02-27 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 50 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.6% 99.67th percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-09-09 CISA federal deadline · Overdue by 43 days
- Ransomware use
- Not known
- Vendor
- Ajax.NET Professional
- Source
- CISA KEV
