Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 176 | CVE-2025-13223Google — Google Chromium V8 Type Confusion VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 4.9% · 92nd | 2025-11-19 | 2025-12-10CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.049. | |||||||
| 177 | CVE-2026-105134Ahsay — Ahsay AhsayCBS Command Injection VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 9.3 | 4.8% · 91.9th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.048. | |||||||
| 178 | CVE-2026-20045Cisco — Cisco Unified Communications Products Code Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 9.8 | 4.5% · 91.5th | 2026-01-21 | 2026-02-11CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.045. | |||||||
| 179 | CVE-2023-43000Apple — Apple Multiple products Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 4.0% · 90.6th | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 180 | CVE-2026-3055Citrix — Citrix NetScaler Out-of-Bounds Read VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 4.0% · 90.6th | 2026-03-30 | 2026-04-02CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 181 | CVE-2025-2749Kentico — Kentico Xperience Path Traversal VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.2 | 4.0% · 90.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 182 | CVE-2021-27137DD-WRT — DD-WRT Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 8.1 | 4.0% · 90.5th | 2026-07-21 | 2026-07-24CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.040. | |||||||
| 183 | CVE-2026-75650Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCISA federal deadline · Overdue by 41 days | 75 | 10.0 | 3.9% · 90.4th | 2026-09-08 | 2026-09-11CISA federal deadline · Overdue by 41 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.039. | |||||||
| 184 | CVE-2025-25249Fortinet — Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 40 days | 75 | 9.8 | 3.8% · 90th | 2026-09-09 | 2026-09-12CISA federal deadline · Overdue by 40 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.038. | |||||||
| 185 | CVE-2023-22894Strapi — Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA federal deadline · Overdue by 11 days | 75 | 4.9 | 3.6% · 89.4th | 2026-10-08 | 2026-10-11CISA federal deadline · Overdue by 11 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.036. | |||||||
| 186 | CVE-2026-31431Linux — Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.8 | 3.4% · 88.9th | 2026-05-01 | 2026-05-15CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 187 | CVE-2025-66644Array Networks — Array Networks ArrayOS AG OS Command Injection VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 9.8 | 3.4% · 88.8th | 2025-12-08 | 2025-12-29CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.034. | |||||||
| 188 | CVE-2026-87491Google — Google Chromium V8 Out of Bounds Write VulnerabilityCISA federal deadline · Overdue by 29 days | 75 | 8.8 | 3.1% · 87.8th | 2026-09-09 | 2026-09-23CISA federal deadline · Overdue by 29 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.031. | |||||||
| 189 | CVE-2025-39682Linux — Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 9.8 | 2.9% · 86.7th | 2026-09-18 | 2026-09-21CISA federal deadline · Overdue by 31 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.029. | |||||||
| 190 | CVE-2025-61932Motex — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 9.3 | 2.8% · 86.2nd | 2025-10-22 | 2025-11-12CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.028. | |||||||
| 191 | CVE-2025-40602SonicWall — SonicWall SMA1000 Missing Authorization VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 6.6 | 2.8% · 86.1st | 2025-12-17 | 2025-12-24CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.028. | |||||||
| 192 | CVE-2026-6973Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 7.2 | 2.5% · 84.8th | 2026-05-07 | 2026-05-10CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 193 | CVE-2026-7273Zyxel — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 28 days | 75 | 8.8 | 2.5% · 84.6th | 2026-09-21 | 2026-09-24CISA federal deadline · Overdue by 28 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 194 | CVE-2025-32975Quest — Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 10.0 | 2.5% · 84.5th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.025. | |||||||
| 195 | CVE-2026-11645Google — Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 8.8 | 2.4% · 84.2nd | 2026-06-09 | 2026-06-23CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.024. | |||||||
| 196 | CVE-2026-3909Google — Google Skia Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 2.3% · 83.5th | 2026-03-13 | 2026-03-27CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 197 | CVE-2025-53521F5 — F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 9.3 | 2.3% · 83.1st | 2026-03-27 | 2026-03-30CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.023. | |||||||
| 198 | CVE-2026-94127F5 — F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 27 days | 75 | 9.3 | 2.2% · 82.6th | 2026-09-22 | 2026-09-25CISA federal deadline · Overdue by 27 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 199 | CVE-2026-104286Fortinet — Fortinet FortiMail Path Traversal VulnerabilityCISA federal deadline · Overdue by 18 days | 75 | 9.8 | 2.2% · 82.4th | 2026-10-01 | 2026-10-04CISA federal deadline · Overdue by 18 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
| 200 | CVE-2026-34621Adobe — Adobe Acrobat and Reader Prototype Pollution VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 8.6 | 2.2% · 82.2nd | 2026-04-13 | 2026-04-27CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.022. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsGoogle — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 176 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.9% 92nd percentile
- In CISA KEV since
- 2025-11-19
- CISA deadline
- 2025-12-10 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Command Injection Vulnerability
EVRS 75 Urgent
Rank 177 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 4.8% 91.9th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
Cisco — Cisco Unified Communications Products Code Injection Vulnerability
EVRS 75 Urgent
Rank 178 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.5% 91.5th percentile
- In CISA KEV since
- 2026-01-21
- CISA deadline
- 2026-02-11 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple Multiple products Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 179 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 4.0% 90.6th percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Citrix — Citrix NetScaler Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 180 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 4.0% 90.6th percentile
- In CISA KEV since
- 2026-03-30
- CISA deadline
- 2026-04-02 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Kentico — Kentico Xperience Path Traversal Vulnerability
EVRS 75 Urgent
Rank 181 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
DD-WRT — DD-WRT Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 182 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 4.0% 90.5th percentile
- In CISA KEV since
- 2026-07-21
- CISA deadline
- 2026-07-24 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- DD-WRT
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
EVRS 75 Urgent
Rank 183 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 3.9% 90.4th percentile
- In CISA KEV since
- 2026-09-08
- CISA deadline
- 2026-09-11 CISA federal deadline · Overdue by 41 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 184 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 3.8% 90th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-12 CISA federal deadline · Overdue by 40 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Strapi — Strapi Cleartext Storage of Sensitive Information Vulnerability
EVRS 75 Urgent
Rank 185 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 4.9 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2026-10-08
- CISA deadline
- 2026-10-11 CISA federal deadline · Overdue by 11 days
- Ransomware use
- Not known
- Vendor
- Strapi
- Source
- CISA KEV
Linux — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
EVRS 75 Urgent
Rank 186 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.4% 88.9th percentile
- In CISA KEV since
- 2026-05-01
- CISA deadline
- 2026-05-15 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Array Networks — Array Networks ArrayOS AG OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 187 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 3.4% 88.8th percentile
- In CISA KEV since
- 2025-12-08
- CISA deadline
- 2025-12-29 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Array Networks
- Source
- CISA KEV
Google — Google Chromium V8 Out of Bounds Write Vulnerability
EVRS 75 Urgent
Rank 188 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 3.1% 87.8th percentile
- In CISA KEV since
- 2026-09-09
- CISA deadline
- 2026-09-23 CISA federal deadline · Overdue by 29 days
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Linux — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
EVRS 75 Urgent
Rank 189 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.9% 86.7th percentile
- In CISA KEV since
- 2026-09-18
- CISA deadline
- 2026-09-21 CISA federal deadline · Overdue by 31 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Motex — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
EVRS 75 Urgent
Rank 190 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.8% 86.2nd percentile
- In CISA KEV since
- 2025-10-22
- CISA deadline
- 2025-11-12 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Motex
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Missing Authorization Vulnerability
EVRS 75 Urgent
Rank 191 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.6 NVD
- EPSS
- 2.8% 86.1st percentile
- In CISA KEV since
- 2025-12-17
- CISA deadline
- 2025-12-24 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 192 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 2.5% 84.8th percentile
- In CISA KEV since
- 2026-05-07
- CISA deadline
- 2026-05-10 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Zyxel — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 193 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.5% 84.6th percentile
- In CISA KEV since
- 2026-09-21
- CISA deadline
- 2026-09-24 CISA federal deadline · Overdue by 28 days
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Quest — Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 194 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 2.5% 84.5th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Quest
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
EVRS 75 Urgent
Rank 195 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.4% 84.2nd percentile
- In CISA KEV since
- 2026-06-09
- CISA deadline
- 2026-06-23 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Skia Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 196 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 2.3% 83.5th percentile
- In CISA KEV since
- 2026-03-13
- CISA deadline
- 2026-03-27 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
F5 — F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 197 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.3% 83.1st percentile
- In CISA KEV since
- 2026-03-27
- CISA deadline
- 2026-03-30 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
F5 — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 198 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.2% 82.6th percentile
- In CISA KEV since
- 2026-09-22
- CISA deadline
- 2026-09-25 CISA federal deadline · Overdue by 27 days
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
Fortinet — Fortinet FortiMail Path Traversal Vulnerability
EVRS 75 Urgent
Rank 199 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.2% 82.4th percentile
- In CISA KEV since
- 2026-10-01
- CISA deadline
- 2026-10-04 CISA federal deadline · Overdue by 18 days
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Prototype Pollution Vulnerability
EVRS 75 Urgent
Rank 200 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 2.2% 82.2nd percentile
- In CISA KEV since
- 2026-04-13
- CISA deadline
- 2026-04-27 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV