Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 151 | CVE-2022-20775Cisco — Cisco SD-WAN Path Traversal VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 12.5% · 96.2nd | 2026-02-25 | 2026-02-27CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.125. | |||||||
| 152 | CVE-2026-15410SonicWall — SonicWall SMA1000 Appliances Code Injection VulnerabilityRansomwareCISA federal deadline · Overdue by 3 months | 75 | 7.2 | 11.8% · 96.1st | 2026-07-14 | 2026-07-17CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 153 | CVE-2026-63030WordPress — WordPress Core Interpretation Conflict VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 9.8 | 10.6% · 95.8th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.106. | |||||||
| 154 | CVE-2026-83549SonicWall — SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCISA federal deadline · Overdue by 47 days | 75 | 7.8 | 9.9% · 95.6th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 47 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.099. | |||||||
| 155 | CVE-2026-64849MLflow — MLflow Server-Side Request Forgery VulnerabilityCISA federal deadline · Overdue by 50 days | 75 | 9.3 | 9.8% · 95.5th | 2026-08-19 | 2026-09-02CISA federal deadline · Overdue by 50 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.098. | |||||||
| 156 | CVE-2026-42018JFrog — JFrog Artifactory Improper Authentication VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 7.5 | 9.8% · 95.5th | 2026-09-11 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.098. | |||||||
| 157 | CVE-2022-0995Linux — Linux Kernel Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 54 days | 75 | 7.8 | 8.9% · 95.2nd | 2026-08-26 | 2026-08-29CISA federal deadline · Overdue by 54 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.089. | |||||||
| 158 | CVE-2025-43529Apple — Apple Multiple Products Use-After-Free WebKit VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 8.8% · 95.2nd | 2025-12-15 | 2026-01-05CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.088. | |||||||
| 159 | CVE-2026-42016JFrog — JFrog Artifactory Incorrect Authorization VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 8.8 | 8.6% · 95.1st | 2026-09-11 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.086. | |||||||
| 160 | CVE-2025-41244Broadcom — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 7.8 | 8.6% · 95.1st | 2025-10-30 | 2025-11-20CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.086. | |||||||
| 161 | CVE-2015-3246Red Hat — Red Hat Libuser Race Condition VulnerabilityCISA federal deadline · Overdue by 43 days | 75 | 5.1 | 8.5% · 95th | 2026-08-26 | 2026-09-09CISA federal deadline · Overdue by 43 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.085. | |||||||
| 162 | CVE-2026-83548SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCISA federal deadline · Overdue by 47 days | 75 | 10.0 | 8.0% · 94.8th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 47 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.080. | |||||||
| 163 | CVE-2026-18556N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 8.2 | 7.9% · 94.7th | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.079. | |||||||
| 164 | CVE-2026-20128Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.5 | 7.2% · 94.3rd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.072. | |||||||
| 165 | CVE-2026-48710Kludex — Kludex Starlette HTTP Request/Response Smuggling VulnerabilityCISA federal deadline · Overdue by 36 days | 75 | 6.5 | 7.1% · 94.2nd | 2026-09-02 | 2026-09-16CISA federal deadline · Overdue by 36 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 166 | CVE-2021-30952Apple — Apple Multiple Products Integer Overflow or Wraparound VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 7.0% · 94.1st | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
| 167 | CVE-2026-34486Apache — Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 7.5 | 6.6% · 93.8th | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.066. | |||||||
| 168 | CVE-2026-86060MikroTik — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityCISA federal deadline · Overdue by 39 days | 75 | 9.2 | 6.4% · 93.6th | 2026-09-10 | 2026-09-13CISA federal deadline · Overdue by 39 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.064. | |||||||
| 169 | CVE-2026-42208BerriAI — BerriAI LiteLLM SQL Injection VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 5.8% · 93.1st | 2026-05-08 | 2026-05-11CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.058. | |||||||
| 170 | CVE-2026-48558SimpleHelp — SimpleHelp Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 9.5 | 5.7% · 93rd | 2026-06-29 | 2026-07-02CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.057. | |||||||
| 171 | CVE-2022-0492Linux — Linux Kernel Improper Authentication VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.8 | 5.5% · 92.8th | 2026-06-02 | 2026-06-05CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.055. | |||||||
| 172 | CVE-2026-60137WordPress — WordPress Core SQL Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 5.9 | 5.3% · 92.6th | 2026-07-21 | 2026-08-04CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.053. | |||||||
| 173 | CVE-2026-25108Soliton Systems K.K — Soliton Systems K.K FileZen OS Command Injection VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.7 | 5.2% · 92.5th | 2026-02-24 | 2026-03-17CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.052. | |||||||
| 174 | CVE-2025-54313Prettier — Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.5 | 5.1% · 92.3rd | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.051. | |||||||
| 175 | CVE-2015-5287Red Hat — Red Hat Automatic Bug Reporting Tool Privilege Escalation VulnerabilityCISA federal deadline · Overdue by 43 days | 75 | 7.8 | 5.0% · 92.2nd | 2026-08-26 | 2026-09-09CISA federal deadline · Overdue by 43 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.050. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco SD-WAN Path Traversal Vulnerability
EVRS 75 Urgent
Rank 151 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 12.5% 96.2nd percentile
- In CISA KEV since
- 2026-02-25
- CISA deadline
- 2026-02-27 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Code Injection Vulnerability
EVRS 75 Urgent
Rank 152 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 11.8% 96.1st percentile
- In CISA KEV since
- 2026-07-14
- CISA deadline
- 2026-07-17 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
WordPress — WordPress Core Interpretation Conflict Vulnerability
EVRS 75 Urgent
Rank 153 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-07-24 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 154 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 9.9% 95.6th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 47 days
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
MLflow — MLflow Server-Side Request Forgery Vulnerability
EVRS 75 Urgent
Rank 155 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 9.8% 95.5th percentile
- In CISA KEV since
- 2026-08-19
- CISA deadline
- 2026-09-02 CISA federal deadline · Overdue by 50 days
- Ransomware use
- Not known
- Vendor
- MLflow
- Source
- CISA KEV
JFrog — JFrog Artifactory Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 156 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 9.8% 95.5th percentile
- In CISA KEV since
- 2026-09-11
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Linux — Linux Kernel Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 157 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 8.9% 95.2nd percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-08-29 CISA federal deadline · Overdue by 54 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Apple — Apple Multiple Products Use-After-Free WebKit Vulnerability
EVRS 75 Urgent
Rank 158 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 8.8% 95.2nd percentile
- In CISA KEV since
- 2025-12-15
- CISA deadline
- 2026-01-05 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
JFrog — JFrog Artifactory Incorrect Authorization Vulnerability
EVRS 75 Urgent
Rank 159 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 8.6% 95.1st percentile
- In CISA KEV since
- 2026-09-11
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- JFrog
- Source
- CISA KEV
Broadcom — Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
EVRS 75 Urgent
Rank 160 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 8.6% 95.1st percentile
- In CISA KEV since
- 2025-10-30
- CISA deadline
- 2025-11-20 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Broadcom
- Source
- CISA KEV
Red Hat — Red Hat Libuser Race Condition Vulnerability
EVRS 75 Urgent
Rank 161 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.1 NVD
- EPSS
- 8.5% 95th percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-09-09 CISA federal deadline · Overdue by 43 days
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
EVRS 75 Urgent
Rank 162 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 8.0% 94.8th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 47 days
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
N-able — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 75 Urgent
Rank 163 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 7.9% 94.7th percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- N-able
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
EVRS 75 Urgent
Rank 164 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Kludex — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
EVRS 75 Urgent
Rank 165 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-16 CISA federal deadline · Overdue by 36 days
- Ransomware use
- Not known
- Vendor
- Kludex
- Source
- CISA KEV
Apple — Apple Multiple Products Integer Overflow or Wraparound Vulnerability
EVRS 75 Urgent
Rank 166 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 7.0% 94.1st percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apache — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
EVRS 75 Urgent
Rank 167 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 6.6% 93.8th percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
EVRS 75 Urgent
Rank 168 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.2 NVD
- EPSS
- 6.4% 93.6th percentile
- In CISA KEV since
- 2026-09-10
- CISA deadline
- 2026-09-13 CISA federal deadline · Overdue by 39 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
BerriAI — BerriAI LiteLLM SQL Injection Vulnerability
EVRS 75 Urgent
Rank 169 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2026-05-08
- CISA deadline
- 2026-05-11 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- BerriAI
- Source
- CISA KEV
SimpleHelp — SimpleHelp Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 170 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 5.7% 93rd percentile
- In CISA KEV since
- 2026-06-29
- CISA deadline
- 2026-07-02 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Linux — Linux Kernel Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 171 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.5% 92.8th percentile
- In CISA KEV since
- 2026-06-02
- CISA deadline
- 2026-06-05 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
WordPress — WordPress Core SQL Injection Vulnerability
EVRS 75 Urgent
Rank 172 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.9 NVD
- EPSS
- 5.3% 92.6th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-08-04 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Soliton Systems K.K — Soliton Systems K.K FileZen OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 173 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.7 NVD
- EPSS
- 5.2% 92.5th percentile
- In CISA KEV since
- 2026-02-24
- CISA deadline
- 2026-03-17 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Soliton Systems K.K
- Source
- CISA KEV
Prettier — Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 174 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 5.1% 92.3rd percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Prettier
- Source
- CISA KEV
Red Hat — Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 175 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 5.0% 92.2nd percentile
- In CISA KEV since
- 2026-08-26
- CISA deadline
- 2026-09-09 CISA federal deadline · Overdue by 43 days
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
