CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability
Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
Priority feed
The highest risk items, ranked by real-world exploitation signals.
1,757
Tracked itemsTotal vulnerabilities in the current EVULNABLE dataset across KEV and Patch Tuesday coverage.
358
ExigentKEV-listed, exploited, CVSS ≥ 9.0 and a live urgency signal — all at once.
239
Ransomware-linkedAssociated with known ransomware activity according to source data.
29
New to CISA KEVAdded to the KEV catalog in the last 30 days.
Ranked by EVRS
Showing the top 200 of 1,757 tracked items. Data checked 07 Sep 11:30 UTC.
#2 97 Immediate CVE-2026-35273 ExigentOverdue by 3 monthsRansomwareCISA KEV Oracle — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#3 96 Immediate CVE-2025-10035 ExigentOverdue by 11 monthsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#4 96 Immediate CVE-2025-61882 ExigentOverdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#5 95 Immediate CVE-2025-3248 ExigentOverdue by 15 monthsRansomwareCISA KEV Langflow — Langflow Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#6 95 Immediate CVE-2025-22457 ExigentOverdue by 17 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#7 95 Immediate CVE-2025-31161 ExigentOverdue by 16 monthsRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#8 95 Immediate CVE-2025-31324 ExigentOverdue by 16 monthsRansomwareCISA KEV SAP — SAP NetWeaver Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#9 95 Immediate CVE-2026-41940 ExigentOverdue by 4 monthsRansomwareCISA KEV WebPros — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#10 95 Immediate CVE-2026-23760 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#11 94 Immediate CVE-2017-5638 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Apache — Apache Struts Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#12 94 Immediate CVE-2018-13379 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS SSL VPN Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#13 94 Immediate CVE-2019-11510 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#14 94 Immediate CVE-2019-19781 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#15 94 Immediate CVE-2020-5902 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#16 94 Immediate CVE-2021-21985 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Improper Input Validation Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#17 94 Immediate CVE-2021-22005 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#18 94 Immediate CVE-2021-26084 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#19 94 Immediate CVE-2021-35464 ExigentOverdue by 4.8 yearsRansomwareCISA KEV ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#20 94 Immediate CVE-2021-44228 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache Log4j2 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#21 94 Immediate CVE-2022-26134 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#22 94 Immediate CVE-2022-29464 ExigentOverdue by 4.3 yearsRansomwareCISA KEV WSO2 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#23 94 Immediate CVE-2023-22518 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#24 94 Immediate CVE-2023-27350 ExigentOverdue by 3.3 yearsRansomwareCISA KEV PaperCut — PaperCut MF/NG Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#25 94 Immediate CVE-2023-35078 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#26 94 Immediate CVE-2023-35082 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#27 94 Immediate CVE-2024-23897 ExigentOverdue by 2.0 yearsRansomwareCISA KEV Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#28 94 Immediate CVE-2024-3400 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#29 94 Immediate CVE-2022-22954 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#30 94 Immediate CVE-2021-41773 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#31 94 Immediate CVE-2018-7600 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#32 94 Immediate CVE-2023-29300 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#33 94 Immediate CVE-2024-4577 ExigentOverdue by 2.2 yearsRansomwareCISA KEV PHP Group — PHP-CGI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#34 94 Immediate CVE-2022-40684 ExigentOverdue by 3.8 yearsRansomwareCISA KEV Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#35 94 Immediate CVE-2023-22527 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#36 94 Immediate CVE-2024-1709 ExigentOverdue by 2.5 yearsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#37 94 Immediate CVE-2023-42793 ExigentOverdue by 2.9 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#38 94 Immediate CVE-2025-0282 ExigentOverdue by 20 monthsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#39 94 Immediate CVE-2022-47986 ExigentOverdue by 3.5 yearsRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#40 94 Immediate CVE-2019-2725 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle WebLogic Server, Injection Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#41 94 Immediate CVE-2021-42013 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Apache — Apache HTTP Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#42 94 Immediate CVE-2025-5777 ExigentOverdue by 14 monthsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#43 94 Immediate CVE-2022-1388 ExigentOverdue by 4.3 yearsRansomwareCISA KEV F5 — F5 BIG-IP Missing Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#44 94 Immediate CVE-2023-38035 ExigentOverdue by 3.0 yearsRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#45 94 Immediate CVE-2018-10562 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Dasan — Dasan GPON Routers Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#46 94 Immediate CVE-2021-3129 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Laravel — Laravel Ignition File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#47 94 Immediate CVE-2024-27198 ExigentOverdue by 2.4 yearsRansomwareCISA KEV JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#48 94 Immediate CVE-2023-34362 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Progress — Progress MOVEit Transfer SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#49 94 Immediate CVE-2019-3396 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#50 94 Immediate CVE-2021-20038 ExigentOverdue by 4.6 yearsRansomwareCISA KEV SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#51 94 Immediate CVE-2021-22986 ExigentOverdue by 4.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#52 94 Immediate CVE-2021-21972 ExigentOverdue by 4.8 yearsRansomwareCISA KEV VMware — VMware vCenter Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#53 94 Immediate CVE-2019-11043 ExigentOverdue by 4.4 yearsRansomwareCISA KEV PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#54 94 Immediate CVE-2019-15107 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Webmin — Webmin Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#55 94 Immediate CVE-2022-47966 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#56 94 Immediate CVE-2023-3519 ExigentOverdue by 3.1 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#57 94 Immediate CVE-2019-18935 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#58 94 Immediate CVE-2021-22205 ExigentOverdue by 4.8 yearsRansomwareCISA KEV GitLab — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#59 94 Immediate CVE-2023-46604 ExigentOverdue by 2.8 yearsRansomwareCISA KEV Apache — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#60 94 Immediate CVE-2010-2861 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#61 94 Immediate CVE-2024-0012 ExigentOverdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#62 94 Immediate CVE-2022-42475 ExigentOverdue by 3.7 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#63 94 Immediate CVE-2024-23692 ExigentOverdue by 2.1 yearsRansomwareCISA KEV Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#64 94 Immediate CVE-2017-7494 ExigentOverdue by 3.4 yearsRansomwareCISA KEV Samba — Samba Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#65 94 Immediate CVE-2018-7602 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Drupal — Drupal Core Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#66 94 Immediate CVE-2023-22515 ExigentOverdue by 2.9 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#67 94 Immediate CVE-2024-50623 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unrestricted File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#68 94 Immediate CVE-2024-55591 ExigentOverdue by 20 monthsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#69 94 Immediate CVE-2026-1731 ExigentOverdue by 7 monthsRansomwareCISA KEV BeyondTrust — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.903.
#70 94 Immediate CVE-2025-26399 ExigentOverdue by 6 monthsRansomwareCISA KEV SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#71 94 Immediate CVE-2026-15409 ExigentOverdue by 52 daysRansomwareCISA KEV SonicWall — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#72 93 Immediate CVE-2021-40438 ExigentOverdue by 4.7 yearsRansomwareCISA KEV Apache — Apache HTTP Server-Side Request Forgery (SSRF) Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#73 93 Immediate CVE-2024-21887 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#74 93 Immediate CVE-2024-27199 Overdue by 4 monthsRansomwareCISA KEV JetBrains — JetBrains TeamCity Relative Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#75 93 Immediate CVE-2021-45046 ExigentOverdue by 3.3 yearsRansomwareCISA KEV Apache — Apache Log4j2 Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#76 93 Immediate CVE-2021-44529 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#77 93 Immediate CVE-2021-40539 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#78 93 Immediate CVE-2023-47246 ExigentOverdue by 2.8 yearsRansomwareCISA KEV SysAid — SysAid Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#79 93 Immediate CVE-2013-2465 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Oracle — Oracle Java SE Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#80 93 Immediate CVE-2012-4681 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#81 93 Immediate CVE-2023-48788 ExigentOverdue by 2.4 yearsRansomwareCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.984.
#82 93 Immediate CVE-2022-21587 ExigentOverdue by 3.5 yearsRansomwareCISA KEV Oracle — Oracle E-Business Suite Unspecified Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#83 93 Immediate CVE-2012-0507 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#84 93 Immediate CVE-2024-41713 ExigentOverdue by 19 monthsRansomwareCISA KEV Mitel — Mitel MiCollab Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.981.
#85 93 Immediate CVE-2021-42237 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#86 93 Immediate CVE-2025-61884 Overdue by 10 monthsRansomwareCISA KEV Oracle — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.
#87 93 Immediate CVE-2013-0422 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Oracle — Oracle JRE Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.976.
#88 93 Immediate CVE-2019-5544 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#89 93 Immediate CVE-2018-1273 ExigentOverdue by 4.4 yearsRansomwareCISA KEV VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.970.
#90 93 Immediate CVE-2023-38203 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#91 93 Immediate CVE-2018-6530 ExigentOverdue by 3.9 yearsRansomwareCISA KEV D-Link — D-Link Multiple Routers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.967.
#92 93 Immediate CVE-2023-46747 ExigentOverdue by 2.8 yearsRansomwareCISA KEV F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#93 93 Immediate CVE-2024-1708 Overdue by 4 monthsRansomwareCISA KEV ConnectWise — ConnectWise ScreenConnect Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.955.
#94 93 Immediate CVE-2024-53704 ExigentOverdue by 18 monthsRansomwareCISA KEV SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.
#95 93 Immediate CVE-2024-51378 ExigentOverdue by 20 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#96 93 Immediate CVE-2024-55956 ExigentOverdue by 20 monthsRansomwareCISA KEV Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#97 93 Immediate CVE-2024-6670 ExigentOverdue by 23 monthsRansomwareCISA KEV Progress — Progress WhatsUp Gold SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.930.
#98 93 Immediate CVE-2025-52691 ExigentOverdue by 7 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#99 92 Immediate CVE-2024-21893 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#100 92 Immediate CVE-2023-46805 Overdue by 2.6 yearsRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#101 92 Immediate CVE-2024-24919 Overdue by 2.2 yearsRansomwareCISA KEV Check Point — Check Point Quantum Security Gateways Information Disclosure Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#102 92 Immediate CVE-2026-10520 ExigentOverdue by 3 monthsCISA KEV Ivanti — Ivanti Sentry OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#103 92 Immediate CVE-2019-11580 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.954.
#104 92 Immediate CVE-2016-4117 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.944.
#105 92 Immediate CVE-2026-72898 ExigentOverdue by 24 daysCISA KEV Metabase — Metabase SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.942.
#106 92 Immediate CVE-2026-0257 Overdue by 3 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.939.
#107 92 Immediate CVE-2012-1723 ExigentOverdue by 4.5 yearsRansomwareCISA KEV Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.937.
#108 92 Immediate CVE-2018-11138 ExigentOverdue by 4.4 yearsRansomwareCISA KEV Quest — Quest KACE System Management Appliance Remote Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.921.
#109 92 Immediate CVE-2022-37042 ExigentOverdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#110 92 Immediate CVE-2021-35211 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SolarWinds — SolarWinds Serv-U Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.912.
#111 92 Immediate CVE-2024-40711 ExigentOverdue by 22 monthsRansomwareCISA KEV Veeam — Veeam Backup and Replication Deserialization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.904.
#112 92 Immediate CVE-2026-24423 ExigentOverdue by 6 monthsRansomwareCISA KEV SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.877.
#113 91 Immediate CVE-2023-4966 Overdue by 2.8 yearsRansomwareCISA KEV Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#114 91 Immediate CVE-2017-10271 Overdue by 4.1 yearsRansomwareCISA KEV Oracle — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#115 91 Immediate CVE-2019-7481 Overdue by 4.3 yearsRansomwareCISA KEV SonicWall — SonicWall SMA100 SQL Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#116 91 Immediate CVE-2017-12615 Overdue by 4.4 yearsRansomwareCISA KEV Apache — Apache Tomcat on Windows Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#117 91 Immediate CVE-2026-8037 ExigentOverdue by 28 daysCISA KEV Progress — Progress LoadMaster Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.996.
#118 91 Immediate CVE-2008-2992 Overdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Input Validation Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#119 91 Immediate CVE-2023-38831 Overdue by 3.0 yearsRansomwareCISA KEV RARLAB — RARLAB WinRAR Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#120 91 Immediate CVE-2026-63030 ExigentOverdue by 45 daysCISA KEV WordPress — WordPress Core Interpretation Conflict Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.973.
#121 91 Immediate CVE-2026-20253 ExigentOverdue by 3 monthsCISA KEV Splunk — Splunk Enterprise Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.969.
#122 91 Immediate CVE-2017-9822 Overdue by 4.3 yearsRansomwareCISA KEV DotNetNuke (DNN) — DotNetNuke (DNN) Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.948.
#123 91 Immediate CVE-2025-8088 Overdue by 12 monthsRansomwareCISA KEV RARLAB — RARLAB WinRAR Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.946.
#124 91 Immediate CVE-2022-26352 ExigentOverdue by 4.0 yearsRansomwareCISA KEV dotCMS — dotCMS Unrestricted Upload of File Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.916.
#125 91 Immediate CVE-2017-12149 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.907.
#126 91 Immediate CVE-2019-7195 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.897.
#127 91 Immediate CVE-2023-41265 ExigentOverdue by 2.7 yearsRansomwareCISA KEV Qlik — Qlik Sense HTTP Tunneling Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#128 91 Immediate CVE-2019-7192 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#129 91 Immediate CVE-2024-51567 ExigentOverdue by 21 monthsRansomwareCISA KEV CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.865.
#130 91 Immediate CVE-2026-50751 ExigentOverdue by 3 monthsRansomwareCISA KEV Check Point — Check Point Security Gateway Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.838.
#131 90 Immediate CVE-2023-0669 Overdue by 3.5 yearsRansomwareCISA KEV Fortra — Fortra GoAnywhere MFT Remote Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#132 90 Immediate CVE-2017-7921 ExigentOverdue by 5 monthsCISA KEV Hikvision — Hikvision Multiple Products Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#133 90 Immediate CVE-2025-24893 ExigentOverdue by 10 monthsCISA KEV XWiki — XWiki Platform Eval Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#134 90 Immediate CVE-2025-32432 ExigentOverdue by 5 monthsCISA KEV Craft CMS — Craft CMS Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#135 90 Immediate CVE-2017-1000353 ExigentOverdue by 10 monthsCISA KEV Jenkins — Jenkins Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#136 90 Immediate CVE-2022-30333 Overdue by 4.0 yearsRansomwareCISA KEV RARLAB — RARLAB UnRAR Directory Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#137 90 Immediate CVE-2022-27925 Overdue by 4.0 yearsRansomwareCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.
#138 90 Immediate CVE-2019-11539 Overdue by 4.3 yearsRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#139 90 Immediate CVE-2018-20250 Overdue by 4.1 yearsRansomwareCISA KEV RARLAB — WinRAR Absolute Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.963.
#140 90 Immediate CVE-2024-57727 Overdue by 18 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Path Traversal Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.952.
#141 90 Immediate CVE-2021-4034 Overdue by 4.1 yearsRansomwareCISA KEV Red Hat — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.949.
#142 90 Immediate CVE-2023-40044 Overdue by 2.9 yearsRansomwareCISA KEV Progress — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.901.
#143 90 Immediate CVE-2022-27593 ExigentOverdue by 3.9 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.879.
#144 90 Immediate CVE-2019-16057 ExigentOverdue by 4.3 yearsRansomwareCISA KEV D-Link — D-Link DNS-320 Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.871.
#145 90 Immediate CVE-2017-18362 ExigentOverdue by 4.2 yearsRansomwareCISA KEV Kaseya — Kaseya VSA SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.868.
#146 90 Immediate CVE-2026-60004 Overdue by 10 daysCISA KEV Gitea — Gitea Code Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.868.
#147 90 Immediate CVE-2021-30116 ExigentOverdue by 4.8 yearsRansomwareCISA KEV Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#148 90 Immediate CVE-2023-27997 ExigentOverdue by 3.2 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.857.
#149 90 Immediate CVE-2024-21762 ExigentOverdue by 2.6 yearsRansomwareCISA KEV Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.843.
#150 89 Immediate CVE-2025-48703 ExigentOverdue by 9 monthsCISA KEV CWP — CWP Control Web Panel OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#151 89 Immediate CVE-2026-39987 ExigentOverdue by 4 monthsCISA KEV Marimo — Marimo Remote Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#152 89 Immediate CVE-2026-24061 ExigentOverdue by 7 monthsCISA KEV GNU — GNU InetUtils Argument Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#153 89 Immediate CVE-2022-36537 Overdue by 3.5 yearsRansomwareCISA KEV ZK Framework — ZK Framework AuUploader Unspecified Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.953.
#154 89 Immediate CVE-2024-9474 Overdue by 21 monthsRansomwareCISA KEV Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.947.
#155 89 Immediate CVE-2026-39808 ExigentOverdue by 50 daysCISA KEV Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.928.
#156 89 Immediate CVE-2021-23758 ExigentCISA deadline in 2 daysCISA KEV Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.836.
#157 89 Immediate CVE-2021-20021 ExigentOverdue by 4.8 yearsRansomwareCISA KEV SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.834.
#158 89 Immediate CVE-2019-7194 ExigentOverdue by 4.2 yearsRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.831.
#159 89 Immediate CVE-2020-3992 ExigentOverdue by 4.3 yearsRansomwareCISA KEV VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.830.
#160 89 Immediate CVE-2023-43208 ExigentOverdue by 2.2 yearsRansomwareCISA KEV NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.827.
#161 89 Immediate CVE-2018-6789 ExigentOverdue by 4.3 yearsRansomwareCISA KEV Exim — Exim Buffer Overflow Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.821.
#162 88 Immediate CVE-2024-7593 ExigentOverdue by 23 monthsCISA KEV Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#163 88 Immediate CVE-2021-26085 Overdue by 4.4 yearsRansomwareCISA KEV Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#164 88 Immediate CVE-2025-24813 ExigentOverdue by 17 monthsCISA KEV Apache — Apache Tomcat Path Equivalence Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#165 88 Immediate CVE-2024-45519 ExigentOverdue by 22 monthsCISA KEV Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#166 88 Immediate CVE-2014-0497 ExigentOverdue by 23 monthsCISA KEV Adobe — Adobe Flash Player Integer Underflow Vulnerablity Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#167 88 Immediate CVE-2025-25257 ExigentOverdue by 13 monthsCISA KEV Fortinet — Fortinet FortiWeb SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#168 88 Immediate CVE-2016-10033 ExigentOverdue by 13 monthsCISA KEV PHP — PHPMailer Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.
#169 88 Immediate CVE-2014-6278 Overdue by 10 monthsCISA KEV GNU — GNU Bash OS Command Injection Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#170 88 Immediate CVE-2021-32030 ExigentOverdue by 14 monthsCISA KEV ASUS — ASUS Routers Improper Authentication Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.994.
#171 88 Immediate CVE-2024-4885 ExigentOverdue by 17 monthsCISA KEV Progress — Progress WhatsUp Gold Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.993.
#172 88 Immediate CVE-2024-27348 ExigentOverdue by 23 monthsCISA KEV Apache — Apache HugeGraph-Server Improper Access Control Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.992.
#173 88 Immediate CVE-2025-68613 Overdue by 5 monthsCISA KEV n8n — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.991.
#174 88 Immediate CVE-2019-16278 ExigentOverdue by 21 monthsCISA KEV Nostromo — Nostromo nhttpd Directory Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.990.
#175 88 Immediate CVE-2025-49113 Overdue by 6 monthsCISA KEV Roundcube — RoundCube Webmail Deserialization of Untrusted Data Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#176 88 Immediate CVE-2026-34486 Overdue by 31 daysCISA KEV Apache — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#177 88 Immediate CVE-2025-32433 ExigentOverdue by 14 monthsCISA KEV Erlang — Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.
#178 88 Immediate CVE-2024-9463 ExigentOverdue by 21 monthsCISA KEV Palo Alto Networks — Palo Alto Networks Expedition OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#179 88 Immediate CVE-2024-50603 ExigentOverdue by 19 monthsCISA KEV Aviatrix — Aviatrix Controllers OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.985.
#180 88 Immediate CVE-2026-34197 Overdue by 4 monthsCISA KEV Apache — Apache ActiveMQ Improper Input Validation Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.983.
#181 88 Immediate CVE-2018-19410 ExigentOverdue by 18 monthsCISA KEV Paessler — Paessler PRTG Network Monitor Local File Inclusion Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.979.
#182 88 Immediate CVE-2025-20281 ExigentOverdue by 13 monthsCISA KEV Cisco — Cisco Identity Services Engine Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.971.
#183 88 Immediate CVE-2023-52163 Overdue by 8 monthsCISA KEV Digiever — Digiever DS-2105 Pro Missing Authorization Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.969.
#184 88 Immediate CVE-2025-54068 ExigentOverdue by 5 monthsCISA KEV Laravel — Laravel Livewire Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.
#185 88 Immediate CVE-2026-33017 ExigentOverdue by 5 monthsCISA KEV Langflow — Langflow Code Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.962.
#186 88 Immediate CVE-2026-21643 ExigentOverdue by 5 monthsCISA KEV Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.941.
#187 88 Immediate CVE-2025-11953 ExigentOverdue by 6 monthsCISA KEV React Native Community — React Native Community CLI OS Command Injection Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.940.
#188 88 Immediate CVE-2025-2747 ExigentOverdue by 10 monthsCISA KEV Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.925.
#189 88 Immediate CVE-2024-7399 ExigentOverdue by 4 monthsCISA KEV Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.
#190 88 Immediate CVE-2025-64446 ExigentOverdue by 10 monthsCISA KEV Fortinet — Fortinet FortiWeb Path Traversal Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.918.
#191 88 Immediate CVE-2026-20182 ExigentOverdue by 4 monthsCISA KEV Cisco — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.915.
#192 88 Immediate CVE-2018-4878 Overdue by 4.3 yearsRansomwareCISA KEV Adobe — Adobe Flash Player Use-After-Free Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.895.
#193 88 Immediate CVE-2010-0188 Overdue by 4.5 yearsRansomwareCISA KEV Adobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.882.
#194 88 Immediate CVE-2026-34910 Overdue by 2 monthsCISA KEV Ubiquiti — Ubiquiti UniFi OS Improper Input Validation Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.875.
#195 88 Immediate CVE-2026-63077 Overdue by 30 daysCISA KEV JetBrains — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.865.
#196 88 Immediate CVE-2026-34908 Overdue by 2 monthsCISA KEV Ubiquiti — Ubiquiti UniFi OS Improper Access Control Vulnerability Patch Immediately
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.852.
#197 88 Immediate CVE-2021-28799 ExigentOverdue by 4.4 yearsRansomwareCISA KEV QNAP — QNAP NAS Improper Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.782.
#198 88 Immediate CVE-2017-11357 ExigentOverdue by 3.6 yearsRansomwareCISA KEV Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.777.
#199 88 Immediate CVE-2024-57726 ExigentOverdue by 4 monthsRansomwareCISA KEV SimpleHelp — SimpleHelp Missing Authorization Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and Confirmed exploitation in the wild.
#200 87 Immediate CVE-2014-6271 ExigentOverdue by 4.1 yearsCISA KEV GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Out-of-Band / Urgent Remediation
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.