Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 101 | CVE-2025-47813Wing FTP Server — Wing FTP Server Information Disclosure VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 4.3 | 62.5% · 99.19th | 2026-03-16 | 2026-03-30CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 102 | CVE-2025-58034Fortinet — Fortinet FortiWeb OS Command Injection VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 7.2 | 54.7% · 99.02nd | 2025-11-18 | 2025-11-25CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.547. | |||||||
| 103 | CVE-2025-14611Gladinet — Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 7.1 | 53.3% · 99th | 2025-12-15 | 2026-01-05CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.533. | |||||||
| 104 | CVE-2025-68645Synacor — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 8.8 | 48.9% · 98.9th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 105 | CVE-2021-26829OpenPLC — OpenPLC ScadaBR Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 5.4 | 48.0% · 98.9th | 2025-11-28 | 2025-12-19CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.480. | |||||||
| 106 | CVE-2026-48282Adobe — Adobe ColdFusion Path Traversal VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 42.4% · 98.7th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.424. | |||||||
| 107 | CVE-2026-87902WordPress — WordPress Core Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 24 days | 75 | 8.1 | 40.0% · 98.6th | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 24 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.400. | |||||||
| 108 | CVE-2021-26828OpenPLC — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 39.1% · 98.6th | 2025-12-03 | 2025-12-24CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.391. | |||||||
| 109 | CVE-2026-39987Marimo — Marimo Remote Code Execution VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 9.3 | 37.9% · 98.5th | 2026-04-23 | 2026-05-07CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.379. | |||||||
| 110 | CVE-2021-39935GitLab — GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.5 | 36.1% · 98.5th | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.361. | |||||||
| 111 | CVE-2026-20316Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityRansomwareCISA federal deadline · Overdue by 3 months | 75 | 5.3 | 35.1% · 98.4th | 2026-07-29 | 2026-08-01CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 112 | CVE-2025-21042Samsung — Samsung Mobile Devices Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 9.8 | 34.5% · 98.4th | 2025-11-10 | 2025-12-01CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.345. | |||||||
| 113 | CVE-2008-4128Cisco — Cisco IOS Cross-Site Request Forgery VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.1 | 33.9% · 98.4th | 2026-07-13 | 2026-07-16CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.339. | |||||||
| 114 | CVE-2020-9715Adobe — Adobe Acrobat Use-After-Free VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.8 | 33.5% · 98.4th | 2026-04-13 | 2026-04-27CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.335. | |||||||
| 115 | CVE-2026-20133Cisco — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.5 | 32.4% · 98.3rd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.324. | |||||||
| 116 | CVE-2025-20393Cisco — Cisco Multiple Products Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 10.0 | 32.4% · 98.3rd | 2025-12-17 | 2025-12-24CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.324. | |||||||
| 117 | CVE-2026-0300Palo Alto Networks — Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 31.7% · 98.3rd | 2026-05-06 | 2026-05-09CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.317. | |||||||
| 118 | CVE-2026-56290Joomlack — Joomlack Page Builder Improper Access Control VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 30.9% · 98.3rd | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.309. | |||||||
| 119 | CVE-2026-76461Cisco — Cisco Secure Email Gateway SQL Injection VulnerabilityCISA federal deadline · Overdue by 35 days | 75 | 9.8 | 29.5% · 98.2nd | 2026-09-14 | 2026-09-17CISA federal deadline · Overdue by 35 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.295. | |||||||
| 120 | CVE-2025-68686Fortinet — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 5.9 | 29.5% · 98.2nd | 2026-07-27 | 2026-08-10CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.295. | |||||||
| 121 | CVE-2026-9198IBM — IBM Langflow Code Injection VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 9.8 | 28.7% · 98.1st | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.287. | |||||||
| 122 | CVE-2026-20262Cisco — Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 6.5 | 28.2% · 98.1st | 2026-06-15 | 2026-06-29CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.282. | |||||||
| 123 | CVE-2018-4063Sierra Wireless — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 27.3% · 98.1st | 2025-12-12 | 2026-01-02CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.273. | |||||||
| 124 | CVE-2025-68461Roundcube — RoundCube Webmail Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 6.1 | 26.8% · 98th | 2026-02-20 | 2026-03-13CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.268. | |||||||
| 125 | CVE-2026-104935Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 6 days | 75 | 8.6 | 26.0% · 98th | 2026-10-13 | 2026-10-16CISA federal deadline · Overdue by 6 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.260. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsWing FTP Server — Wing FTP Server Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 101 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.3 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2026-03-16
- CISA deadline
- 2026-03-30 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Wing FTP Server
- Source
- CISA KEV
Fortinet — Fortinet FortiWeb OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 102 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 54.7% 99.02nd percentile
- In CISA KEV since
- 2025-11-18
- CISA deadline
- 2025-11-25 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Gladinet — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
EVRS 75 Urgent
Rank 103 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.1 NVD
- EPSS
- 53.3% 99th percentile
- In CISA KEV since
- 2025-12-15
- CISA deadline
- 2026-01-05 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
EVRS 75 Urgent
Rank 104 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
OpenPLC — OpenPLC ScadaBR Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 105 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.4 NVD
- EPSS
- 48.0% 98.9th percentile
- In CISA KEV since
- 2025-11-28
- CISA deadline
- 2025-12-19 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- OpenPLC
- Source
- CISA KEV
Adobe — Adobe ColdFusion Path Traversal Vulnerability
EVRS 75 Urgent
Rank 106 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 42.4% 98.7th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
WordPress — WordPress Core Remote File Inclusion Vulnerability
EVRS 75 Urgent
Rank 107 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 40.0% 98.6th percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 24 days
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
OpenPLC — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 108 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 39.1% 98.6th percentile
- In CISA KEV since
- 2025-12-03
- CISA deadline
- 2025-12-24 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- OpenPLC
- Source
- CISA KEV
Marimo — Marimo Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 109 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 37.9% 98.5th percentile
- In CISA KEV since
- 2026-04-23
- CISA deadline
- 2026-05-07 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Marimo
- Source
- CISA KEV
GitLab — GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 110 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 36.1% 98.5th percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- GitLab
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
EVRS 75 Urgent
Rank 111 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 35.1% 98.4th percentile
- In CISA KEV since
- 2026-07-29
- CISA deadline
- 2026-08-01 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 112 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 34.5% 98.4th percentile
- In CISA KEV since
- 2025-11-10
- CISA deadline
- 2025-12-01 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Cisco — Cisco IOS Cross-Site Request Forgery Vulnerability
EVRS 75 Urgent
Rank 113 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 33.9% 98.4th percentile
- In CISA KEV since
- 2026-07-13
- CISA deadline
- 2026-07-16 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Acrobat Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 114 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 33.5% 98.4th percentile
- In CISA KEV since
- 2026-04-13
- CISA deadline
- 2026-04-27 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
EVRS 75 Urgent
Rank 115 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 32.4% 98.3rd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Multiple Products Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 116 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 32.4% 98.3rd percentile
- In CISA KEV since
- 2025-12-17
- CISA deadline
- 2025-12-24 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
EVRS 75 Urgent
Rank 117 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 31.7% 98.3rd percentile
- In CISA KEV since
- 2026-05-06
- CISA deadline
- 2026-05-09 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Joomlack — Joomlack Page Builder Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 118 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Joomlack
- Source
- CISA KEV
Cisco — Cisco Secure Email Gateway SQL Injection Vulnerability
EVRS 75 Urgent
Rank 119 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.5% 98.2nd percentile
- In CISA KEV since
- 2026-09-14
- CISA deadline
- 2026-09-17 CISA federal deadline · Overdue by 35 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
EVRS 75 Urgent
Rank 120 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.9 NVD
- EPSS
- 29.5% 98.2nd percentile
- In CISA KEV since
- 2026-07-27
- CISA deadline
- 2026-08-10 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
IBM — IBM Langflow Code Injection Vulnerability
EVRS 75 Urgent
Rank 121 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.7% 98.1st percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
EVRS 75 Urgent
Rank 122 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 28.2% 98.1st percentile
- In CISA KEV since
- 2026-06-15
- CISA deadline
- 2026-06-29 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Sierra Wireless — Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 123 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 27.3% 98.1st percentile
- In CISA KEV since
- 2025-12-12
- CISA deadline
- 2026-01-02 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Sierra Wireless
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 124 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 26.8% 98th percentile
- In CISA KEV since
- 2026-02-20
- CISA deadline
- 2026-03-13 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
EVRS 75 Urgent
Rank 125 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 26.0% 98th percentile
- In CISA KEV since
- 2026-10-13
- CISA deadline
- 2026-10-16 CISA federal deadline · Overdue by 6 days
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV