Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 51 | CVE-2023-27351PaperCut — PaperCut NG/MF Improper Authentication VulnerabilityRansomwareCISA federal deadline · Overdue by 6 months | 87 | 7.5 | 78.1% · 99.58th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 52 | CVE-2026-93616Check Point — Check Point Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 27 days | 87 | 9.8 | 75.9% · 99.53rd | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.759. | |||||||
| 53 | CVE-2026-42271BerriAI — BerriAI LiteLLM Command Injection VulnerabilityCISA federal deadline · Overdue by 4 months | 86 | 8.7 | 92.6% · 99.83rd | 2026-06-08 | 2026-06-22CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.926. | |||||||
| 54 | CVE-2026-24858Fortinet — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 9 months | 86 | 9.8 | 85.8% · 99.73rd | 2026-01-27 | 2026-01-30CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.858. | |||||||
| 55 | CVE-2026-81578PaperCut — PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 38 days | 86 | 8.8 | 85.6% · 99.72nd | 2026-08-31 | 2026-09-14CISA federal deadline · Overdue by 38 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.856. | |||||||
| 56 | CVE-2020-7796Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilityCISA federal deadline · Overdue by 7 months | 86 | 9.8 | 84.4% · 99.7th | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.844. | |||||||
| 57 | CVE-2025-40551SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 8 months | 86 | 9.8 | 84.2% · 99.7th | 2026-02-03 | 2026-02-06CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.842. | |||||||
| 58 | CVE-2025-11371Gladinet — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 11 months | 85 | 7.5 | 92.1% · 99.82nd | 2025-11-04 | 2025-11-25CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.921. | |||||||
| 59 | CVE-2025-6218RARLAB — RARLAB WinRAR Path Traversal VulnerabilityCISA federal deadline · Overdue by 10 months | 85 | 7.8 | 90.5% · 99.8th | 2025-12-09 | 2025-12-30CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.905. | |||||||
| 60 | CVE-2026-20230Cisco — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline · Overdue by 4 months | 85 | 8.6 | 88.2% · 99.77th | 2026-06-25 | 2026-06-28CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.882. | |||||||
| 61 | CVE-2009-3459Adobe — Adobe Acrobat and Reader Heap-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 5 months | 85 | 8.8 | 86.6% · 99.74th | 2026-05-20 | 2026-06-03CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.866. | |||||||
| 62 | CVE-2026-8037Progress — Progress LoadMaster Command Injection VulnerabilityCISA federal deadline · Overdue by 2 months | 85 | 9.8 | 77.4% · 99.56th | 2026-08-07 | 2026-08-10CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.774. | |||||||
| 63 | CVE-2026-21962Oracle — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityCISA federal deadline · Overdue by 56 days | 85 | 10.0 | 73.2% · 99.46th | 2026-08-24 | 2026-08-27CISA federal deadline · Overdue by 56 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.732. | |||||||
| 64 | CVE-2026-12569PTC — PTC Windchill and FlexPLM Improper Input Validation VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 46.0% · 98.8th | 2026-06-25 | 2026-06-28CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 65 | CVE-2026-20131Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 7 months | 85 | 10.0 | 43.2% · 98.7th | 2026-03-19 | 2026-03-22CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 66 | CVE-2025-14733WatchGuard — WatchGuard Firebox Out of Bounds Write VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 10 months | 85 | 9.3 | 26.5% · 98th | 2025-12-19 | 2025-12-26CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 67 | CVE-2026-15409SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 3 months | 85 | 10.0 | 6.8% · 94th | 2026-07-14 | 2026-07-17CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 68 | CVE-2026-59310Broadcom — Broadcom VMware vCenter Path Traversal VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 2 months | 85 | 9.8 | 2.6% · 85th | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 69 | CVE-2026-48027Nx — Nx Console Embedded Malicious Code VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 1.3% · 71st | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 70 | CVE-2026-45321TanStack — TanStack Unspecified VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 4 months | 85 | 9.6 | 1.1% · 64th | 2026-05-27 | 2026-06-10CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 71 | CVE-2026-1603Ivanti — Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 7 months | 84 | 7.5 | 88.3% · 99.77th | 2026-03-09 | 2026-03-23CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.883. | |||||||
| 72 | CVE-2025-8110Gogs — Gogs Path Traversal VulnerabilityCISA federal deadline · Overdue by 9 months | 84 | 8.7 | 85.2% · 99.72nd | 2026-01-12 | 2026-02-02CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.852. | |||||||
| 73 | CVE-2025-64328Sangoma — Sangoma FreePBX OS Command Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 84 | 8.6 | 84.6% · 99.71st | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 74 | CVE-2025-14847MongoDB — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityCISA federal deadline · Overdue by 9 months | 84 | 8.7 | 83.2% · 99.68th | 2025-12-29 | 2026-01-19CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.832. | |||||||
| 75 | CVE-2025-34026Versa — Versa Concerto Improper Authentication VulnerabilityCISA federal deadline · Overdue by 8 months | 84 | 9.2 | 81.8% · 99.65th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.818. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsPaperCut — PaperCut NG/MF Improper Authentication Vulnerability
EVRS 87 Immediate
Rank 51 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 78.1% 99.58th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Known
- Vendor
- PaperCut
- Source
- CISA KEV
Check Point — Check Point Multiple Products Path Traversal Vulnerability
EVRS 87 Immediate
Rank 52 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 75.9% 99.53rd percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- Check Point
- Source
- CISA KEV
BerriAI — BerriAI LiteLLM Command Injection Vulnerability
EVRS 86 Immediate
Rank 53 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.7 NVD
- EPSS
- 92.6% 99.83rd percentile
- In CISA KEV since
- 2026-06-08
- CISA deadline
- 2026-06-22 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- BerriAI
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 86 Immediate
Rank 54 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 85.8% 99.73rd percentile
- In CISA KEV since
- 2026-01-27
- CISA deadline
- 2026-01-30 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
EVRS 86 Immediate
Rank 55 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 85.6% 99.72nd percentile
- In CISA KEV since
- 2026-08-31
- CISA deadline
- 2026-09-14 CISA federal deadline · Overdue by 38 days
- Ransomware use
- Not known
- Vendor
- PaperCut
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
EVRS 86 Immediate
Rank 56 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.4% 99.7th percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
EVRS 86 Immediate
Rank 57 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.2% 99.7th percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-06 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Gladinet — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
EVRS 85 Immediate
Rank 58 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 92.1% 99.82nd percentile
- In CISA KEV since
- 2025-11-04
- CISA deadline
- 2025-11-25 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
RARLAB — RARLAB WinRAR Path Traversal Vulnerability
EVRS 85 Immediate
Rank 59 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.8 NVD
- EPSS
- 90.5% 99.8th percentile
- In CISA KEV since
- 2025-12-09
- CISA deadline
- 2025-12-30 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- RARLAB
- Source
- CISA KEV
Cisco — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
EVRS 85 Immediate
Rank 60 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.6 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2026-06-25
- CISA deadline
- 2026-06-28 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
EVRS 85 Immediate
Rank 61 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.8 NVD
- EPSS
- 86.6% 99.74th percentile
- In CISA KEV since
- 2026-05-20
- CISA deadline
- 2026-06-03 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Progress — Progress LoadMaster Command Injection Vulnerability
EVRS 85 Immediate
Rank 62 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 77.4% 99.56th percentile
- In CISA KEV since
- 2026-08-07
- CISA deadline
- 2026-08-10 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
Oracle — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
EVRS 85 Immediate
Rank 63 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 73.2% 99.46th percentile
- In CISA KEV since
- 2026-08-24
- CISA deadline
- 2026-08-27 CISA federal deadline · Overdue by 56 days
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
PTC — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
EVRS 85 Immediate
Rank 64 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 46.0% 98.8th percentile
- In CISA KEV since
- 2026-06-25
- CISA deadline
- 2026-06-28 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- PTC
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
EVRS 85 Immediate
Rank 65 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 43.2% 98.7th percentile
- In CISA KEV since
- 2026-03-19
- CISA deadline
- 2026-03-22 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox Out of Bounds Write Vulnerability
EVRS 85 Immediate
Rank 66 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 26.5% 98th percentile
- In CISA KEV since
- 2025-12-19
- CISA deadline
- 2025-12-26 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Known
- Vendor
- WatchGuard
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
EVRS 85 Immediate
Rank 67 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 10.0 NVD
- EPSS
- 6.8% 94th percentile
- In CISA KEV since
- 2026-07-14
- CISA deadline
- 2026-07-17 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Broadcom — Broadcom VMware vCenter Path Traversal Vulnerability
EVRS 85 Immediate
Rank 68 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.6% 85th percentile
- In CISA KEV since
- 2026-08-18
- CISA deadline
- 2026-08-21 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Known
- Vendor
- Broadcom
- Source
- CISA KEV
Nx — Nx Console Embedded Malicious Code Vulnerability
EVRS 85 Immediate
Rank 69 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.3% 71st percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- Nx
- Source
- CISA KEV
TanStack — TanStack Unspecified Vulnerability
EVRS 85 Immediate
Rank 70 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.6 NVD
- EPSS
- 1.1% 64th percentile
- In CISA KEV since
- 2026-05-27
- CISA deadline
- 2026-06-10 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- TanStack
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
EVRS 84 Urgent
Rank 71 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 7.5 NVD
- EPSS
- 88.3% 99.77th percentile
- In CISA KEV since
- 2026-03-09
- CISA deadline
- 2026-03-23 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Gogs — Gogs Path Traversal Vulnerability
EVRS 84 Urgent
Rank 72 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.7 NVD
- EPSS
- 85.2% 99.72nd percentile
- In CISA KEV since
- 2026-01-12
- CISA deadline
- 2026-02-02 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Gogs
- Source
- CISA KEV
Sangoma — Sangoma FreePBX OS Command Injection Vulnerability
EVRS 84 Urgent
Rank 73 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.6 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
MongoDB — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
EVRS 84 Urgent
Rank 74 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 8.7 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2025-12-29
- CISA deadline
- 2026-01-19 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- MongoDB
- Source
- CISA KEV
Versa — Versa Concerto Improper Authentication Vulnerability
EVRS 84 Urgent
Rank 75 of 2,960 tracked · as of 22 Oct 11:53 UTC
- CVSS
- 9.2 NVD
- EPSS
- 81.8% 99.65th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Versa
- Source
- CISA KEV