Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
259 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 201 | CVE-2026-49869Kestra — Kestra OSS OS Command Injection VulnerabilityCISA federal deadline · Overdue by 47 days | 75 | 10.0 | 2.1% · 81.5th | 2026-09-02 | 2026-09-05CISA federal deadline · Overdue by 47 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
| 202 | CVE-2026-45247Mirasvit — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 2.1% · 81.4th | 2026-06-03 | 2026-06-06CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.021. | |||||||
| 203 | CVE-2023-41974Apple — Apple iOS and iPadOS Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 2.0% · 80.1st | 2026-03-05 | 2026-03-26CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.020. | |||||||
| 204 | CVE-2026-28318SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.5 | 1.9% · 80th | 2026-06-05 | 2026-06-19CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.019. | |||||||
| 205 | CVE-2026-76504Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCISA federal deadline · Overdue by 19 days | 75 | 9.8 | 1.8% · 78.5th | 2026-09-30 | 2026-10-03CISA federal deadline · Overdue by 19 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 206 | CVE-2026-34909Ubiquiti — Ubiquiti UniFi OS Path Traversal VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 10.0 | 1.8% · 78.2nd | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 207 | CVE-2024-7694TeamT5 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.2 | 1.8% · 78.2nd | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 208 | CVE-2025-15556Notepad++ — Notepad++ Download of Code Without Integrity Check VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.7 | 1.8% · 78th | 2026-02-12 | 2026-03-05CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.018. | |||||||
| 209 | CVE-2026-33634Aquasecurity — Aquasecurity Trivy Embedded Malicious Code VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 9.4 | 1.7% · 77.6th | 2026-03-26 | 2026-04-09CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 210 | CVE-2026-65400Apple — Apple macOS Improper Authentication VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 9.8 | 1.7% · 77.3rd | 2026-08-18 | 2026-08-21CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 211 | CVE-2025-48595Android — Android Framework Integer Overflow VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 8.4 | 1.7% · 77.2nd | 2026-06-02 | 2026-06-05CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 212 | CVE-2025-48700Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 6.1 | 1.7% · 77.2nd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 213 | CVE-2026-72530TrueConf — TrueConf Server Code Injection VulnerabilityCISA federal deadline · Overdue by 49 days | 75 | 9.5 | 1.7% · 76.8th | 2026-08-20 | 2026-09-03CISA federal deadline · Overdue by 49 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 214 | CVE-2025-31277Apple — Apple Multiple Products Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 8.8 | 1.7% · 76.4th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.017. | |||||||
| 215 | CVE-2026-76519Cisco — Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 9.8 | 1.6% · 75.2nd | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 216 | CVE-2026-67277MikroTik — MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 39 days | 75 | 8.8 | 1.6% · 75th | 2026-09-10 | 2026-09-13CISA federal deadline · Overdue by 39 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.016. | |||||||
| 217 | CVE-2026-72529TrueConf — TrueConf Server Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 2 months | 75 | 9.3 | 1.5% · 73.4th | 2026-08-20 | 2026-08-23CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.015. | |||||||
| 218 | CVE-2026-20700Apple — Apple Multiple Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 7.8 | 1.4% · 72.1st | 2026-02-12 | 2026-03-05CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 219 | CVE-2025-39964Linux — Linux Kernel Race Condition VulnerabilityCISA federal deadline · Overdue by 31 days | 75 | 5.5 | 1.4% · 71.5th | 2026-09-18 | 2026-09-21CISA federal deadline · Overdue by 31 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.014. | |||||||
| 220 | CVE-2026-88772Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCISA federal deadline · Overdue by 22 days | 75 | 9.5 | 1.3% · 70.2nd | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 22 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 221 | CVE-2023-4346KNX Association — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 7.5 | 1.3% · 70.1st | 2026-07-15 | 2026-07-29CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 222 | CVE-2026-21385Qualcomm — Qualcomm Multiple Chipsets Memory Corruption VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 7.8 | 1.3% · 70th | 2026-03-03 | 2026-03-24CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 223 | CVE-2026-102489Zammad GmbH — Zammad GmbH Zammad Session Fixation VulnerabilityCISA federal deadline · Overdue by 17 days | 75 | 9.4 | 1.3% · 69.2nd | 2026-10-02 | 2026-10-05CISA federal deadline · Overdue by 17 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.013. | |||||||
| 224 | CVE-2026-86950Apple — Apple Multiple Products Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 9 days | 75 | 8.8 | 1.2% · 68.9th | 2026-09-29 | 2026-10-13CISA federal deadline · Overdue by 9 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
| 225 | CVE-2026-0322Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection VulnerabilityCISA federal deadline · Overdue by 5 days | 75 | 8.6 | 1.2% · 68.3rd | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.012. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsKestra — Kestra OSS OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 201 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 2.1% 81.5th percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-05 CISA federal deadline · Overdue by 47 days
- Ransomware use
- Not known
- Vendor
- Kestra
- Source
- CISA KEV
Mirasvit — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 202 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 2.1% 81.4th percentile
- In CISA KEV since
- 2026-06-03
- CISA deadline
- 2026-06-06 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Mirasvit
- Source
- CISA KEV
Apple — Apple iOS and iPadOS Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 203 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 2.0% 80.1st percentile
- In CISA KEV since
- 2026-03-05
- CISA deadline
- 2026-03-26 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
EVRS 75 Urgent
Rank 204 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.9% 80th percentile
- In CISA KEV since
- 2026-06-05
- CISA deadline
- 2026-06-19 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
EVRS 75 Urgent
Rank 205 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.8% 78.5th percentile
- In CISA KEV since
- 2026-09-30
- CISA deadline
- 2026-10-03 CISA federal deadline · Overdue by 19 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Path Traversal Vulnerability
EVRS 75 Urgent
Rank 206 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 1.8% 78.2nd percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
TeamT5 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 207 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 1.8% 78.2nd percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- TeamT5
- Source
- CISA KEV
Notepad++ — Notepad++ Download of Code Without Integrity Check Vulnerability
EVRS 75 Urgent
Rank 208 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.7 NVD
- EPSS
- 1.8% 78th percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-03-05 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Notepad++
- Source
- CISA KEV
Aquasecurity — Aquasecurity Trivy Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 209 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.7% 77.6th percentile
- In CISA KEV since
- 2026-03-26
- CISA deadline
- 2026-04-09 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Aquasecurity
- Source
- CISA KEV
Apple — Apple macOS Improper Authentication Vulnerability
EVRS 75 Urgent
Rank 210 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 1.7% 77.3rd percentile
- In CISA KEV since
- 2026-08-18
- CISA deadline
- 2026-08-21 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Android — Android Framework Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 211 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 1.7% 77.2nd percentile
- In CISA KEV since
- 2026-06-02
- CISA deadline
- 2026-06-05 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 212 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.1 NVD
- EPSS
- 1.7% 77.2nd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
TrueConf — TrueConf Server Code Injection Vulnerability
EVRS 75 Urgent
Rank 213 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.7% 76.8th percentile
- In CISA KEV since
- 2026-08-20
- CISA deadline
- 2026-09-03 CISA federal deadline · Overdue by 49 days
- Ransomware use
- Not known
- Vendor
- TrueConf
- Source
- CISA KEV
Apple — Apple Multiple Products Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 214 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.7% 76.4th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
EVRS 75 Urgent
Rank 215 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 Cisco
- EPSS
- 1.6% 75.2nd percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 216 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.6% 75th percentile
- In CISA KEV since
- 2026-09-10
- CISA deadline
- 2026-09-13 CISA federal deadline · Overdue by 39 days
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
TrueConf — TrueConf Server Missing Authentication for Critical Function Vulnerability
EVRS 75 Urgent
Rank 217 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 1.5% 73.4th percentile
- In CISA KEV since
- 2026-08-20
- CISA deadline
- 2026-08-23 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- TrueConf
- Source
- CISA KEV
Apple — Apple Multiple Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 218 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.4% 72.1st percentile
- In CISA KEV since
- 2026-02-12
- CISA deadline
- 2026-03-05 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Linux — Linux Kernel Race Condition Vulnerability
EVRS 75 Urgent
Rank 219 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.5 NVD
- EPSS
- 1.4% 71.5th percentile
- In CISA KEV since
- 2026-09-18
- CISA deadline
- 2026-09-21 CISA federal deadline · Overdue by 31 days
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
EVRS 75 Urgent
Rank 220 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.5 NVD
- EPSS
- 1.3% 70.2nd percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 22 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
KNX Association — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
EVRS 75 Urgent
Rank 221 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 1.3% 70.1st percentile
- In CISA KEV since
- 2026-07-15
- CISA deadline
- 2026-07-29 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- KNX Association
- Source
- CISA KEV
Qualcomm — Qualcomm Multiple Chipsets Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 222 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.3% 70th percentile
- In CISA KEV since
- 2026-03-03
- CISA deadline
- 2026-03-24 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Qualcomm
- Source
- CISA KEV
Zammad GmbH — Zammad GmbH Zammad Session Fixation Vulnerability
EVRS 75 Urgent
Rank 223 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 1.3% 69.2nd percentile
- In CISA KEV since
- 2026-10-02
- CISA deadline
- 2026-10-05 CISA federal deadline · Overdue by 17 days
- Ransomware use
- Not known
- Vendor
- Zammad GmbH
- Source
- CISA KEV
Apple — Apple Multiple Products Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 224 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 1.2% 68.9th percentile
- In CISA KEV since
- 2026-09-29
- CISA deadline
- 2026-10-13 CISA federal deadline · Overdue by 9 days
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Code Injection Vulnerability
EVRS 75 Urgent
Rank 225 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 1.2% 68.3rd percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV