Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 0 filters on

Ranked by EVRS

2,956 match · no filters Sort

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 151 to 175
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
151	CVE-2021-30116Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityRansomwareExigentKEV since 2021 · listed over a year	90	9.8	85.7% · 99.72nd	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
152	CVE-2023-27997Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityRansomwareExigentKEV since 2023 · listed over a year	90	9.8	85.7% · 99.72nd	2023-06-13	2023-07-04KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
153	CVE-2024-21762Fortinet — Fortinet FortiOS Out-of-Bound Write VulnerabilityRansomwareExigentKEV since 2024 · listed over a year	90	9.8	84.6% · 99.7th	2024-02-09	2024-02-16KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
154	CVE-2025-48703CWP — CWP Control Web Panel OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 11 months	89	9.0	99.7% · 99.95th	2025-11-04	2025-11-25CISA federal deadline · Overdue by 11 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. Open CVE page NVD CISA KEV Vendor Advisory
155	CVE-2026-39987Marimo — Marimo Remote Code Execution VulnerabilityExigentCISA federal deadline · Overdue by 6 months	89	9.3	99.6% · 99.95th	2026-04-23	2026-05-07CISA federal deadline · Overdue by 6 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. Open CVE page NVD CISA KEV Vendor Advisory
156	CVE-2026-24061GNU — GNU InetUtils Argument Injection VulnerabilityExigentCISA federal deadline · Overdue by 8 months	89	9.8	99.0% · 99.93rd	2026-01-26	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. Open CVE page NVD CISA KEV Vendor Advisory
157	CVE-2026-1281Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 9 months	89	9.8	98.7% · 99.92nd	2026-01-29	2026-02-01CISA federal deadline · Overdue by 9 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.987. Open CVE page NVD CISA KEV Vendor Advisory
158	CVE-2026-1340Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 6 months	89	9.8	98.6% · 99.92nd	2026-04-08	2026-04-11CISA federal deadline · Overdue by 6 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. Open CVE page NVD CISA KEV Vendor Advisory
159	CVE-2026-21643Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityExigentCISA federal deadline · Overdue by 6 months	89	9.8	97.7% · 99.9th	2026-04-13	2026-04-16CISA federal deadline · Overdue by 6 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.977. Open CVE page NVD CISA KEV Vendor Advisory
160	CVE-2026-20253Splunk — Splunk Enterprise Missing Authentication for Critical Function VulnerabilityExigentCISA federal deadline · Overdue by 4 months	89	9.8	96.9% · 99.89th	2026-06-18	2026-06-21CISA federal deadline · Overdue by 4 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. Open CVE page NVD CISA KEV Vendor Advisory
161	CVE-2022-36537ZK Framework — ZK Framework AuUploader Unspecified VulnerabilityRansomwareKEV since 2023 · listed over a year	89	7.5	95.4% · 99.87th	2023-02-27	2023-03-20KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
162	CVE-2022-27924Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityRansomwareKEV since 2022 · listed over a year	89	7.5	93.9% · 99.84th	2022-08-04	2022-08-25KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
163	CVE-2024-9474Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityRansomwareKEV since 2024 · listed over a year	89	6.9	93.8% · 99.84th	2024-11-18	2024-12-09KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
164	CVE-2026-93616Check Point — Check Point Multiple Products Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 30 days	89	9.8	91.6% · 99.81st	2026-09-22	2026-09-25CISA federal deadline · Overdue by 30 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.916. Open CVE page NVD CISA KEV Vendor Advisory
165	CVE-2026-20079Cisco — Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA federal deadline · Overdue by 43 days	89	10.0	88.5% · 99.77th	2026-09-09	2026-09-12CISA federal deadline · Overdue by 43 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. Open CVE page NVD CISA KEV Vendor Advisory
166	CVE-2026-105134Ahsay — Ahsay AhsayCBS Command Injection VulnerabilityCISA federal deadline · Overdue by 8 days	89	9.3	86.3% · 99.73rd	2026-10-14	2026-10-17CISA federal deadline · Overdue by 8 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.863. Open CVE page NVD CISA KEV Vendor Advisory
167	CVE-2020-3992VMware — VMware ESXi OpenSLP Use-After-Free VulnerabilityRansomwareExigentKEV since 2021 · listed over a year	89	9.8	83.0% · 99.67th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
168	CVE-2019-7194QNAP — QNAP Photo Station Path Traversal VulnerabilityRansomwareExigentKEV since 2022 · listed over a year	89	9.8	82.7% · 99.66th	2022-06-08	2022-06-22KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
169	CVE-2023-43208NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityRansomwareExigentKEV since 2024 · listed over a year	89	9.8	82.7% · 99.66th	2024-05-20	2024-06-10KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
170	CVE-2018-6789Exim — Exim Buffer Overflow VulnerabilityRansomwareExigentKEV since 2021 · listed over a year	89	9.8	82.1% · 99.65th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
171	CVE-2025-24813Apache — Apache Tomcat Path Equivalence VulnerabilityExigentKEV since 2025 · listed over a year	88	9.8	99.9% · 99.97th	2025-04-01	2025-04-22KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
172	CVE-2021-26085Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityRansomwareKEV since 2022 · listed over a year	88	5.3	99.9% · 99.97th	2022-03-28	2022-04-18KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
173	CVE-2025-25257Fortinet — Fortinet FortiWeb SQL Injection VulnerabilityExigentKEV since 2025 · listed over a year	88	9.8	99.9% · 99.97th	2025-07-18	2025-08-08KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. Open CVE page NVD CISA KEV Vendor Advisory
174	CVE-2016-10033PHP — PHPMailer Command Injection VulnerabilityExigentKEV since 2025 · listed over a year	88	9.8	99.7% · 99.95th	2025-07-07	2025-07-28KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. Open CVE page NVD CISA KEV Vendor Advisory
175	CVE-2025-49113Roundcube — RoundCube Webmail Deserialization of Untrusted Data VulnerabilityCISA federal deadline · Overdue by 7 months	88	8.8	99.7% · 99.95th	2026-02-20	2026-03-13CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. Open CVE page NVD CISA KEV Vendor Advisory

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics