Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 76 | CVE-2024-57728SimpleHelp — SimpleHelp Path Traversal VulnerabilityRansomwareCISA federal deadline · Overdue by 5 months | 84 | 7.2 | 64.7% · 99.24th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 77 | CVE-2025-29635D-Link — D-Link DIR-823X Command Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 83 | 7.2 | 87.9% · 99.77th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.879. | |||||||
| 78 | CVE-2026-16232Check Point — Check Point SmartConsole Improper Authentication VulnerabilityCISA federal deadline · Overdue by 3 months | 83 | 9.3 | 78.0% · 99.57th | 2026-07-22 | 2026-07-25CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.780. | |||||||
| 79 | CVE-2026-25089Fortinet — Fortinet FortiSandbox OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 83 | 9.8 | 76.1% · 99.53rd | 2026-07-16 | 2026-07-19CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.761. | |||||||
| 80 | CVE-2025-40536SolarWinds — SolarWinds Web Help Desk Security Control Bypass VulnerabilityCISA federal deadline · Overdue by 8 months | 83 | 9.8 | 73.6% · 99.47th | 2026-02-12 | 2026-02-15CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.736. | |||||||
| 81 | CVE-2026-73570Synacor — Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityCISA federal deadline · Overdue by 59 days | 83 | 8.9 | 71.7% · 99.42nd | 2026-08-21 | 2026-08-24CISA federal deadline · Overdue by 59 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.717. | |||||||
| 82 | CVE-2025-6204Dassault Systèmes — Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityCISA federal deadline · Overdue by 11 months | 82 | 8.0 | 79.2% · 99.6th | 2025-10-28 | 2025-11-18CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.792. | |||||||
| 83 | CVE-2025-6205Dassault Systèmes — Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityCISA federal deadline · Overdue by 11 months | 82 | 9.1 | 73.6% · 99.47th | 2025-10-28 | 2025-11-18CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.736. | |||||||
| 84 | CVE-2025-59718Fortinet — Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityCISA federal deadline · Overdue by 10 months | 81 | 9.8 | 68.3% · 99.33rd | 2025-12-16 | 2025-12-23CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.683. | |||||||
| 85 | CVE-2026-82078PaperCut — PaperCut NG/MF Unsafe Reflection VulnerabilityCISA federal deadline · Overdue by 38 days | 81 | 9.4 | 63.5% · 99.21st | 2026-08-31 | 2026-09-14CISA federal deadline · Overdue by 38 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.635. | |||||||
| 86 | CVE-2025-62593Ray-Project — Ray-Project Ray Code Injection VulnerabilityCISA federal deadline · Overdue by 2 months | 81 | 9.4 | 62.5% · 99.19th | 2026-08-17 | 2026-08-20CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 87 | CVE-2024-21182Oracle — Oracle WebLogic Server Unspecified VulnerabilityCISA federal deadline · Overdue by 5 months | 80 | 7.5 | 74.2% · 99.49th | 2026-06-01 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.742. | |||||||
| 88 | CVE-2021-22681Rockwell — Rockwell Multiple Products Insufficient Protected Credentials VulnerabilityCISA federal deadline · Overdue by 7 months | 80 | 9.8 | 63.6% · 99.22nd | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.636. | |||||||
| 89 | CVE-2026-0770Langflow — Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityCISA federal deadline · Overdue by 3 months | 80 | 9.8 | 62.6% · 99.19th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.626. | |||||||
| 90 | CVE-2026-85102Check Point — Check Point Multiple Products Improper Certificate Validation VulnerabilityCISA federal deadline · Overdue by 27 days | 80 | 9.8 | 50.4% · 98.9th | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.504. | |||||||
| 91 | CVE-2025-58360OSGeo — OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityCISA federal deadline · Overdue by 10 months | 79 | 9.8 | 60.0% · 99.13rd | 2025-12-11 | 2026-01-01CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.600. | |||||||
| 92 | CVE-2019-19006Sangoma — Sangoma FreePBX Improper Authentication VulnerabilityCISA federal deadline · Overdue by 8 months | 78 | 9.8 | 55.9% · 99.05th | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.559. | |||||||
| 93 | CVE-2022-37055D-Link — D-Link Routers Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 10 months | 78 | 9.8 | 55.5% · 99.04th | 2025-12-08 | 2025-12-29CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.555. | |||||||
| 94 | CVE-2025-31125Vite — Vite Vitejs Improper Access Control VulnerabilityCISA federal deadline · Overdue by 8 months | 77 | 7.5 | 65.2% · 99.25th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.652. | |||||||
| 95 | CVE-2021-22175GitLab — GitLab Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline · Overdue by 7 months | 77 | 9.8 | 53.4% · 99th | 2026-02-18 | 2026-03-11CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.534. | |||||||
| 96 | CVE-2026-2441Google — Google Chromium CSS Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 76 | 8.8 | 55.0% · 99.03rd | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.550. | |||||||
| 97 | CVE-2026-85046Google — Google Chromium V8 Type Confusion VulnerabilityCISA federal deadline · Overdue by 34 days | 76 | 8.8 | 48.9% · 98.9th | 2026-09-04 | 2026-09-18CISA federal deadline · Overdue by 34 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 98 | CVE-2026-39808Fortinet — Fortinet FortiSandbox OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 76 | 9.8 | 47.4% · 98.8th | 2026-07-16 | 2026-07-19CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.474. | |||||||
| 99 | CVE-2026-34910Ubiquiti — Ubiquiti UniFi OS Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 4 months | 76 | 10.0 | 45.8% · 98.8th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.458. | |||||||
| 100 | CVE-2023-49105ownCloud — ownCloud Improper Authentication VulnerabilityCISA federal deadline · Overdue by 53 days | 76 | 9.8 | 43.2% · 98.7th | 2026-08-27 | 2026-08-30CISA federal deadline · Overdue by 53 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.432. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSimpleHelp — SimpleHelp Path Traversal Vulnerability
EVRS 84 Urgent
Rank 76 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 64.7% 99.24th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
D-Link — D-Link DIR-823X Command Injection Vulnerability
EVRS 83 Urgent
Rank 77 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 87.9% 99.77th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Check Point — Check Point SmartConsole Improper Authentication Vulnerability
EVRS 83 Urgent
Rank 78 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 78.0% 99.57th percentile
- In CISA KEV since
- 2026-07-22
- CISA deadline
- 2026-07-25 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Check Point
- Source
- CISA KEV
Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 79 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 76.1% 99.53rd percentile
- In CISA KEV since
- 2026-07-16
- CISA deadline
- 2026-07-19 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Security Control Bypass Vulnerability
EVRS 83 Urgent
Rank 80 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.6% 99.47th percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-02-15 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Synacor — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 81 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.9 NVD
- EPSS
- 71.7% 99.42nd percentile
- In CISA KEV since
- 2026-08-21
- CISA deadline
- 2026-08-24 CISA federal deadline · Overdue by 59 days
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Dassault Systèmes — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
EVRS 82 Urgent
Rank 82 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.0 NVD
- EPSS
- 79.2% 99.6th percentile
- In CISA KEV since
- 2025-10-28
- CISA deadline
- 2025-11-18 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Dassault Systèmes
- Source
- CISA KEV
Dassault Systèmes — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
EVRS 82 Urgent
Rank 83 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 73.6% 99.47th percentile
- In CISA KEV since
- 2025-10-28
- CISA deadline
- 2025-11-18 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Dassault Systèmes
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
EVRS 81 Urgent
Rank 84 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.3% 99.33rd percentile
- In CISA KEV since
- 2025-12-16
- CISA deadline
- 2025-12-23 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Unsafe Reflection Vulnerability
EVRS 81 Urgent
Rank 85 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 63.5% 99.21st percentile
- In CISA KEV since
- 2026-08-31
- CISA deadline
- 2026-09-14 CISA federal deadline · Overdue by 38 days
- Ransomware use
- Not known
- Vendor
- PaperCut
- Source
- CISA KEV
Ray-Project — Ray-Project Ray Code Injection Vulnerability
EVRS 81 Urgent
Rank 86 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2026-08-17
- CISA deadline
- 2026-08-20 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Ray-Project
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 80 Urgent
Rank 87 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.2% 99.49th percentile
- In CISA KEV since
- 2026-06-01
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Rockwell — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
EVRS 80 Urgent
Rank 88 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 63.6% 99.22nd percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Rockwell
- Source
- CISA KEV
Langflow — Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
EVRS 80 Urgent
Rank 89 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 62.6% 99.19th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-07-24 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Check Point — Check Point Multiple Products Improper Certificate Validation Vulnerability
EVRS 80 Urgent
Rank 90 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 50.4% 98.9th percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- Check Point
- Source
- CISA KEV
OSGeo — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
EVRS 79 Urgent
Rank 91 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 60.0% 99.13rd percentile
- In CISA KEV since
- 2025-12-11
- CISA deadline
- 2026-01-01 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- OSGeo
- Source
- CISA KEV
Sangoma — Sangoma FreePBX Improper Authentication Vulnerability
EVRS 78 Urgent
Rank 92 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.9% 99.05th percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
D-Link — D-Link Routers Buffer Overflow Vulnerability
EVRS 78 Urgent
Rank 93 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.5% 99.04th percentile
- In CISA KEV since
- 2025-12-08
- CISA deadline
- 2025-12-29 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Vite — Vite Vitejs Improper Access Control Vulnerability
EVRS 77 Urgent
Rank 94 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 65.2% 99.25th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Vite
- Source
- CISA KEV
GitLab — GitLab Server-Side Request Forgery (SSRF) Vulnerability
EVRS 77 Urgent
Rank 95 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 53.4% 99th percentile
- In CISA KEV since
- 2026-02-18
- CISA deadline
- 2026-03-11 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- GitLab
- Source
- CISA KEV
Google — Google Chromium CSS Use-After-Free Vulnerability
EVRS 76 Urgent
Rank 96 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 55.0% 99.03rd percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 76 Urgent
Rank 97 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2026-09-04
- CISA deadline
- 2026-09-18 CISA federal deadline · Overdue by 34 days
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability
EVRS 76 Urgent
Rank 98 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 47.4% 98.8th percentile
- In CISA KEV since
- 2026-07-16
- CISA deadline
- 2026-07-19 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Improper Input Validation Vulnerability
EVRS 76 Urgent
Rank 99 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 45.8% 98.8th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
ownCloud — ownCloud Improper Authentication Vulnerability
EVRS 76 Urgent
Rank 100 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 43.2% 98.7th percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-08-30 CISA federal deadline · Overdue by 53 days
- Ransomware use
- Not known
- Vendor
- ownCloud
- Source
- CISA KEV