Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,956 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 176 | CVE-2017-1000353Jenkins — Jenkins Remote Code Execution VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.7% · 99.95th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 177 | CVE-2021-32030ASUS — ASUS Routers Improper Authentication VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.4% · 99.94th | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 178 | CVE-2024-4885Progress — Progress WhatsUp Gold Path Traversal VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 99.3% · 99.94th | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.993. | |||||||
| 179 | CVE-2019-16278Nostromo — Nostromo nhttpd Directory Traversal VulnerabilityExigentKEV since 2024 · listed over a year | 88 | 9.8 | 99.0% · 99.93rd | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 180 | CVE-2025-68613n8n — n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityCISA federal deadline · Overdue by 7 months | 88 | 8.8 | 99.0% · 99.93rd | 2026-03-11 | 2026-03-25CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 181 | CVE-2025-32433Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 10.0 | 98.9% · 99.93rd | 2025-06-09 | 2025-06-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.989. | |||||||
| 182 | CVE-2024-9463Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 88 | 9.9 | 98.5% · 99.92nd | 2024-11-14 | 2024-12-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 183 | CVE-2024-50603Aviatrix — Aviatrix Controllers OS Command Injection VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 98.5% · 99.92nd | 2025-01-16 | 2025-02-06KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 184 | CVE-2026-34486Apache — Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityCISA federal deadline · Overdue by 3 months | 88 | 7.5 | 98.5% · 99.92nd | 2026-08-04 | 2026-08-07CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 185 | CVE-2026-34197Apache — Apache ActiveMQ Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 6 months | 88 | 8.8 | 98.3% · 99.91st | 2026-04-16 | 2026-04-30CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.983. | |||||||
| 186 | CVE-2018-19410Paessler — Paessler PRTG Network Monitor Local File Inclusion VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 9.8 | 97.9% · 99.91st | 2025-02-04 | 2025-02-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.979. | |||||||
| 187 | CVE-2025-20281Cisco — Cisco Identity Services Engine Injection VulnerabilityExigentKEV since 2025 · listed over a year | 88 | 10.0 | 97.6% · 99.9th | 2025-07-28 | 2025-08-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.976. | |||||||
| 188 | CVE-2023-52163Digiever — Digiever DS-2105 Pro Missing Authorization VulnerabilityCISA federal deadline · Overdue by 9 months | 88 | 8.8 | 96.9% · 99.89th | 2025-12-22 | 2026-01-12CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 189 | CVE-2025-54068Laravel — Laravel Livewire Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 7 months | 88 | 9.2 | 96.3% · 99.88th | 2026-03-20 | 2026-04-03CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 190 | CVE-2026-33017Langflow — Langflow Code Injection VulnerabilityExigentCISA federal deadline · Overdue by 7 months | 88 | 9.3 | 96.2% · 99.88th | 2026-03-25 | 2026-04-08CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.962. | |||||||
| 191 | CVE-2025-12480Gladinet — Gladinet Triofox Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 11 months | 88 | 9.1 | 95.7% · 99.87th | 2025-11-12 | 2025-12-03CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.957. | |||||||
| 192 | CVE-2026-35616Fortinet — Fortinet FortiClient EMS Improper Access Control VulnerabilityExigentCISA federal deadline · Overdue by 7 months | 88 | 9.8 | 94.0% · 99.84th | 2026-04-06 | 2026-04-09CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.940. | |||||||
| 193 | CVE-2025-11953React Native Community — React Native Community CLI OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 88 | 9.8 | 94.0% · 99.84th | 2026-02-05 | 2026-02-26CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.940. | |||||||
| 194 | CVE-2020-7796Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 88 | 9.8 | 93.6% · 99.84th | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.936. | |||||||
| 195 | CVE-2026-39808Fortinet — Fortinet FortiSandbox OS Command Injection VulnerabilityExigentCISA federal deadline · Overdue by 3 months | 88 | 9.8 | 93.2% · 99.83rd | 2026-07-16 | 2026-07-19CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.932. | |||||||
| 196 | CVE-2024-7399Samsung — Samsung MagicINFO 9 Server Path Traversal VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 88 | 9.8 | 91.9% · 99.82nd | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.919. | |||||||
| 197 | CVE-2026-20182Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityExigentCISA federal deadline · Overdue by 5 months | 88 | 10.0 | 91.8% · 99.81st | 2026-05-14 | 2026-05-17CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 198 | CVE-2026-71362Adobe — Adobe Commerce and Magento Incorrect Authorization VulnerabilityExigentCISA federal deadline · Overdue by 28 days | 88 | 9.1 | 90.5% · 99.8th | 2026-09-24 | 2026-09-27CISA federal deadline · Overdue by 28 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.905. | |||||||
| 199 | CVE-2018-4878Adobe — Adobe Flash Player Use-After-Free VulnerabilityRansomwareKEV since 2021 · listed over a year | 88 | 7.8 | 90.3% · 99.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 200 | CVE-2018-15982Adobe — Adobe Flash Player Use-After-Free VulnerabilityRansomwareKEV since 2022 · listed over a year | 88 | 7.8 | 89.6% · 99.78th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsJenkins — Jenkins Remote Code Execution Vulnerability
EVRS 88 Immediate
Rank 176 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
ASUS — ASUS Routers Improper Authentication Vulnerability
EVRS 88 Immediate
Rank 177 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ASUS
- Source
- CISA KEV
Progress — Progress WhatsUp Gold Path Traversal Vulnerability
EVRS 88 Immediate
Rank 178 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.3% 99.94th percentile
- In CISA KEV since
- 2025-03-03
- CISA deadline
- 2025-03-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
Nostromo — Nostromo nhttpd Directory Traversal Vulnerability
EVRS 88 Immediate
Rank 179 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nostromo
- Source
- CISA KEV
n8n — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
EVRS 88 Immediate
Rank 180 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2026-03-11
- CISA deadline
- 2026-03-25 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- n8n
- Source
- CISA KEV
Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability
EVRS 88 Immediate
Rank 181 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 10.0 NVD
- EPSS
- 98.9% 99.93rd percentile
- In CISA KEV since
- 2025-06-09
- CISA deadline
- 2025-06-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Erlang
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection Vulnerability
EVRS 88 Immediate
Rank 182 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.9 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2024-11-14
- CISA deadline
- 2024-12-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Aviatrix — Aviatrix Controllers OS Command Injection Vulnerability
EVRS 88 Immediate
Rank 183 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2025-01-16
- CISA deadline
- 2025-02-06 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Aviatrix
- Source
- CISA KEV
Apache — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
EVRS 88 Immediate
Rank 184 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 7.5 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2026-08-04
- CISA deadline
- 2026-08-07 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Apache — Apache ActiveMQ Improper Input Validation Vulnerability
EVRS 88 Immediate
Rank 185 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 8.8 NVD
- EPSS
- 98.3% 99.91st percentile
- In CISA KEV since
- 2026-04-16
- CISA deadline
- 2026-04-30 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Paessler — Paessler PRTG Network Monitor Local File Inclusion Vulnerability
EVRS 88 Immediate
Rank 186 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.9% 99.91st percentile
- In CISA KEV since
- 2025-02-04
- CISA deadline
- 2025-02-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Paessler
- Source
- CISA KEV
Cisco — Cisco Identity Services Engine Injection Vulnerability
EVRS 88 Immediate
Rank 187 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 10.0 NVD
- EPSS
- 97.6% 99.9th percentile
- In CISA KEV since
- 2025-07-28
- CISA deadline
- 2025-08-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Digiever — Digiever DS-2105 Pro Missing Authorization Vulnerability
EVRS 88 Immediate
Rank 188 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 8.8 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2025-12-22
- CISA deadline
- 2026-01-12 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Digiever
- Source
- CISA KEV
Laravel — Laravel Livewire Code Injection Vulnerability
EVRS 88 Immediate
Rank 189 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.2 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2026-03-20
- CISA deadline
- 2026-04-03 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Laravel
- Source
- CISA KEV
Langflow — Langflow Code Injection Vulnerability
EVRS 88 Immediate
Rank 190 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.3 NVD
- EPSS
- 96.2% 99.88th percentile
- In CISA KEV since
- 2026-03-25
- CISA deadline
- 2026-04-08 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
Gladinet — Gladinet Triofox Improper Access Control Vulnerability
EVRS 88 Immediate
Rank 191 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.1 NVD
- EPSS
- 95.7% 99.87th percentile
- In CISA KEV since
- 2025-11-12
- CISA deadline
- 2025-12-03 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
Fortinet — Fortinet FortiClient EMS Improper Access Control Vulnerability
EVRS 88 Immediate
Rank 192 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.84th percentile
- In CISA KEV since
- 2026-04-06
- CISA deadline
- 2026-04-09 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
React Native Community — React Native Community CLI OS Command Injection Vulnerability
EVRS 88 Immediate
Rank 193 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.84th percentile
- In CISA KEV since
- 2026-02-05
- CISA deadline
- 2026-02-26 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- React Native Community
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
EVRS 88 Immediate
Rank 194 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.6% 99.84th percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability
EVRS 88 Immediate
Rank 195 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.2% 99.83rd percentile
- In CISA KEV since
- 2026-07-16
- CISA deadline
- 2026-07-19 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability
EVRS 88 Immediate
Rank 196 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Samsung
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
EVRS 88 Immediate
Rank 197 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 10.0 NVD
- EPSS
- 91.8% 99.81st percentile
- In CISA KEV since
- 2026-05-14
- CISA deadline
- 2026-05-17 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Incorrect Authorization Vulnerability
EVRS 88 Immediate
Rank 198 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 9.1 NVD
- EPSS
- 90.5% 99.8th percentile
- In CISA KEV since
- 2026-09-24
- CISA deadline
- 2026-09-27 CISA federal deadline · Overdue by 28 days
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 88 Immediate
Rank 199 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 7.8 NVD
- EPSS
- 90.3% 99.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 88 Immediate
Rank 200 of 2,956 tracked · as of 25 Oct 16:05 UTC
- CVSS
- 7.8 NVD
- EPSS
- 89.6% 99.78th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
