Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 126 | CVE-2026-20122Cisco — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 5.4 | 25.5% · 97.9th | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.255. | |||||||
| 127 | CVE-2026-20245Cisco — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.8 | 25.3% · 97.9th | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.253. | |||||||
| 128 | CVE-2026-33017Langflow — Langflow Code Injection VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 9.3 | 24.8% · 97.9th | 2026-03-25 | 2026-04-08CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.248. | |||||||
| 129 | CVE-2026-60004Gitea — Gitea Code Injection VulnerabilityCISA federal deadline · Overdue by 55 days | 75 | 9.8 | 24.0% · 97.8th | 2026-08-25 | 2026-08-28CISA federal deadline · Overdue by 55 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.240. | |||||||
| 130 | CVE-2026-19490Citrix — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 40 days | 75 | 9.3 | 23.2% · 97.8th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.232. | |||||||
| 131 | CVE-2024-37079Broadcom — Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 22.4% · 97.7th | 2026-01-23 | 2026-02-13CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.224. | |||||||
| 132 | CVE-2025-14174Google — Google Chromium Out of Bounds Memory Access VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 22.3% · 97.7th | 2025-12-12 | 2026-01-02CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.223. | |||||||
| 133 | CVE-2025-66376Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 6.1 | 20.2% · 97.5th | 2026-03-18 | 2026-04-01CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.202. | |||||||
| 134 | CVE-2021-3199ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA federal deadline · Overdue by 11 days | 75 | 9.8 | 20.1% · 97.4th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 11 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 135 | CVE-2026-48939iCagenda — iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 20.1% · 97.4th | 2026-07-10 | 2026-07-13CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.201. | |||||||
| 136 | CVE-2025-67038Lantronix — Lantronix EDS5000 Code Injection VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 9.3 | 20.0% · 97.4th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.200. | |||||||
| 137 | CVE-2026-9586Sangoma — Sangoma Switchvox SQL Injection VulnerabilityCISA federal deadline · Overdue by 47 days | 75 | 9.3 | 19.0% · 97.3rd | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 47 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.190. | |||||||
| 138 | CVE-2026-22719Broadcom — Broadcom VMware Aria Operations Command Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.1 | 18.1% · 97.2nd | 2026-03-03 | 2026-03-24CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.181. | |||||||
| 139 | CVE-2026-48907Widget Factory — Widget Factory Joomla Content Editor Improper Access Control VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 16.2% · 96.9th | 2026-06-16 | 2026-06-19CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.162. | |||||||
| 140 | CVE-2026-9082Drupal — Drupal Core SQL Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.8 | 15.7% · 96.8th | 2026-05-22 | 2026-05-27CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.157. | |||||||
| 141 | CVE-2026-34197Apache — Apache ActiveMQ Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.8 | 15.5% · 96.8th | 2026-04-16 | 2026-04-30CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.155. | |||||||
| 142 | CVE-2026-34908Ubiquiti — Ubiquiti UniFi OS Improper Access Control VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 15.2% · 96.7th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.152. | |||||||
| 143 | CVE-2026-56291Balbooa — Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 14.9% · 96.7th | 2026-07-10 | 2026-07-13CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.149. | |||||||
| 144 | CVE-2018-14634Linux — Linux Kernel Integer Overflow VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 14.7% · 96.7th | 2026-01-26 | 2026-02-16CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.147. | |||||||
| 145 | CVE-2026-18577N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.2 | 14.6% · 96.6th | 2026-08-03 | 2026-08-06CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.146. | |||||||
| 146 | CVE-2026-82329JFrog — JFrog Artifactory Improper Authentication VulnerabilityCISA federal deadline · Overdue by 47 days | 75 | 9.8 | 14.1% · 96.6th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 47 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.141. | |||||||
| 147 | CVE-2026-76460Cisco — Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCISA federal deadline · Overdue by 33 days | 75 | 10.0 | 14.0% · 96.5th | 2026-09-16 | 2026-09-19CISA federal deadline · Overdue by 33 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.140. | |||||||
| 148 | CVE-2026-22769Dell — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 10.0 | 13.5% · 96.4th | 2026-02-18 | 2026-02-21CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.135. | |||||||
| 149 | CVE-2026-86218N-able — N-able N-central Static Code Injection VulnerabilityCISA federal deadline · Overdue by 41 days | 75 | 10.0 | 13.3% · 96.4th | 2026-09-08 | 2026-09-11CISA federal deadline · Overdue by 41 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.133. | |||||||
| 150 | CVE-2026-21589Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 4 days | 75 | 9.3 | 12.7% · 96.3rd | 2026-10-15 | 2026-10-18CISA federal deadline · Overdue by 4 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.127. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
EVRS 75 Urgent
Rank 126 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.4 NVD
- EPSS
- 25.5% 97.9th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
EVRS 75 Urgent
Rank 127 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 25.3% 97.9th percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Langflow — Langflow Code Injection Vulnerability
EVRS 75 Urgent
Rank 128 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 24.8% 97.9th percentile
- In CISA KEV since
- 2026-03-25
- CISA deadline
- 2026-04-08 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Gitea — Gitea Code Injection Vulnerability
EVRS 75 Urgent
Rank 129 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 24.0% 97.8th percentile
- In CISA KEV since
- 2026-08-25
- CISA deadline
- 2026-08-28 CISA federal deadline · Overdue by 55 days
- Ransomware use
- Not known
- Vendor
- Gitea
- Source
- CISA KEV
Citrix — Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 75 Urgent
Rank 130 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 23.2% 97.8th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Broadcom — Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
EVRS 75 Urgent
Rank 131 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 22.4% 97.7th percentile
- In CISA KEV since
- 2026-01-23
- CISA deadline
- 2026-02-13 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
Google — Google Chromium Out of Bounds Memory Access Vulnerability
EVRS 75 Urgent
Rank 132 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 22.3% 97.7th percentile
- In CISA KEV since
- 2025-12-12
- CISA deadline
- 2026-01-02 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 133 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 20.2% 97.5th percentile
- In CISA KEV since
- 2026-03-18
- CISA deadline
- 2026-04-01 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
ONLYOFFICE — ONLYOFFICE Docs Server Path Traversal Vulnerability
EVRS 75 Urgent
Rank 134 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 20.1% 97.4th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 11 days
- Ransomware use
- Not known
- Vendor
- ONLYOFFICE
- Source
- CISA KEV
iCagenda — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 135 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 20.1% 97.4th percentile
- In CISA KEV since
- 2026-07-10
- CISA deadline
- 2026-07-13 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- iCagenda
- Source
- CISA KEV
Lantronix — Lantronix EDS5000 Code Injection Vulnerability
EVRS 75 Urgent
Rank 136 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 20.0% 97.4th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Lantronix
- Source
- CISA KEV
Sangoma — Sangoma Switchvox SQL Injection Vulnerability
EVRS 75 Urgent
Rank 137 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 19.0% 97.3rd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 47 days
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
Broadcom — Broadcom VMware Aria Operations Command Injection Vulnerability
EVRS 75 Urgent
Rank 138 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 18.1% 97.2nd percentile
- In CISA KEV since
- 2026-03-03
- CISA deadline
- 2026-03-24 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
Widget Factory — Widget Factory Joomla Content Editor Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 139 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 16.2% 96.9th percentile
- In CISA KEV since
- 2026-06-16
- CISA deadline
- 2026-06-19 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Widget Factory
- Source
- CISA KEV
Drupal — Drupal Core SQL Injection Vulnerability
EVRS 75 Urgent
Rank 140 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 15.7% 96.8th percentile
- In CISA KEV since
- 2026-05-22
- CISA deadline
- 2026-05-27 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
Apache — Apache ActiveMQ Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 141 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 15.5% 96.8th percentile
- In CISA KEV since
- 2026-04-16
- CISA deadline
- 2026-04-30 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 142 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 15.2% 96.7th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
Balbooa — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 143 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 14.9% 96.7th percentile
- In CISA KEV since
- 2026-07-10
- CISA deadline
- 2026-07-13 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Balbooa
- Source
- CISA KEV
Linux — Linux Kernel Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 144 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 14.7% 96.7th percentile
- In CISA KEV since
- 2026-01-26
- CISA deadline
- 2026-02-16 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 75 Urgent
Rank 145 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 14.6% 96.6th percentile
- In CISA KEV since
- 2026-08-03
- CISA deadline
- 2026-08-06 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 146 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 14.1% 96.6th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 47 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Cisco — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
EVRS 75 Urgent
Rank 147 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 14.0% 96.5th percentile
- In CISA KEV since
- 2026-09-16
- CISA deadline
- 2026-09-19 CISA federal deadline · Overdue by 33 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Dell — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
EVRS 75 Urgent
Rank 148 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 13.5% 96.4th percentile
- In CISA KEV since
- 2026-02-18
- CISA deadline
- 2026-02-21 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Dell
- Source
- CISA KEV
N-able — N-able N-central Static Code Injection Vulnerability
EVRS 75 Urgent
Rank 149 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 13.3% 96.4th percentile
- In CISA KEV since
- 2026-09-08
- CISA deadline
- 2026-09-11 CISA federal deadline · Overdue by 41 days
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
Atlassian — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
EVRS 75 Urgent
Rank 150 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 12.7% 96.3rd percentile
- In CISA KEV since
- 2026-10-15
- CISA deadline
- 2026-10-18 CISA federal deadline · Overdue by 4 days
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV