Skip to main content
EVULNABLE
Home

Ivanti

CVEs currently on EVULNABLE's Priority Feed for Ivanti, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 0 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 1 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 1 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 1 added to KEV
1
1
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2000
2026-04-2700
2026-05-0410
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0100
2026-06-0810
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)10

In EVULNABLE's ranked feed

Showing all 36 Ivanti CVEs in EVULNABLE's ranked feed.

#1 95 Immediate CVE-2025-22457 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.98th pctlKEV since2025-04-04

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#2 94 Immediate CVE-2019-11510 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS99.9% · 99.99th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#3 94 Immediate CVE-2023-35078 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2023-07-25

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#4 94 Immediate CVE-2023-35082 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-01-18

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#5 94 Immediate CVE-2025-0282 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.0 (NVD)EPSS99.9% · 99.98th pctlKEV since2025-01-08

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#6 94 Immediate CVE-2023-38035 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Sentry Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2023-08-22

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#7 93 Immediate CVE-2024-21887 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-01-10

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#8 93 Immediate CVE-2021-44529 ExigentKEV since 2024 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability KEV + ransomware, EPSS 99.1%

EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.1% · 99.93rd pctlKEV since2024-03-25

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#9 92 Immediate CVE-2024-21893 KEV since 2024 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 92/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.2 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-01-31

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#10 92 Immediate CVE-2023-46805 KEV since 2024 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%

EVRS 92/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.2 (NVD)EPSS99.9% · 99.98th pctlKEV since2024-01-10

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#11 90 Immediate CVE-2026-10520 ExigentCISA federal deadline · Overdue by 4 monthsCISA KEV Ivanti — Ivanti Sentry OS Command Injection Vulnerability KEV, EPSS 99.9%

EVRS 90/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS99.9% · 99.97th pctlKEV since2026-06-11

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#12 90 Immediate CVE-2019-11539 KEV since 2021 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability KEV + ransomware, EPSS 98.5%

EVRS 90/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS98.5% · 99.92nd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#13 89 Immediate CVE-2026-1281 ExigentCISA federal deadline · Overdue by 8 monthsCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability KEV, EPSS 98.7%

EVRS 89/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.7% · 99.92nd pctlKEV since2026-01-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.987.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#14 89 Immediate CVE-2026-1340 ExigentCISA federal deadline · Overdue by 6 monthsCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability KEV, EPSS 98.6%

EVRS 89/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS98.6% · 99.92nd pctlKEV since2026-04-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#15 87 Immediate CVE-2024-7593 ExigentKEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability KEV, EPSS 99.9%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.9% · 99.99th pctlKEV since2024-09-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#16 87 Immediate CVE-2020-15505 ExigentKEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability KEV, EPSS 99.7%

EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS99.7% · 99.95th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.997.

Full CVE pageNVD ↗CISA KEV ↗
#17 86 Immediate CVE-2024-29824 KEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability KEV, EPSS 99.9%

EVRS 86/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS99.9% · 99.97th pctlKEV since2024-10-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#18 86 Immediate CVE-2024-8963 ExigentKEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability KEV, EPSS 98.6%

EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.1 (NVD)EPSS98.6% · 99.92nd pctlKEV since2024-09-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.986.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#19 85 Immediate CVE-2024-13159 KEV since 2025 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability KEV, EPSS 99.9%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.99th pctlKEV since2025-03-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#20 85 Immediate CVE-2025-4427 KEV since 2025 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability KEV, EPSS 99.9%

EVRS 85/100 · EVRS priority: Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS99.9% · 99.97th pctlKEV since2025-05-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#21 85 Immediate CVE-2021-22893 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Ivanti — Ivanti Pulse Connect Secure Use-After-Free Vulnerability KEV + ransomware, EPSS 47.2%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS10.0 (NVD)EPSS47.2% · 98.8th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

Full CVE pageNVD ↗CISA KEV ↗
#22 84 Urgent CVE-2026-1603 CISA federal deadline · Overdue by 7 monthsCISA KEV Ivanti — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability KEV, EPSS 88.3%

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS88.3% · 99.77th pctlKEV since2026-03-09

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.883.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#23 83 Urgent CVE-2020-8260 KEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti Pulse Connect Secure Code Execution Vulnerability KEV, EPSS 96.5%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS96.5% · 99.88th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.965.

Full CVE pageNVD ↗CISA KEV ↗
#24 83 Urgent CVE-2024-13160 KEV since 2025 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability KEV, EPSS 91.2%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS91.2% · 99.81st pctlKEV since2025-03-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.912.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#25 83 Urgent CVE-2025-4428 KEV since 2025 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability KEV, EPSS 87.0%

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS87.0% · 99.75th pctlKEV since2025-05-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.870.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#26 82 Urgent CVE-2024-13161 KEV since 2025 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability KEV, EPSS 90.1%

EVRS 82/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.5 (NVD)EPSS90.1% · 99.8th pctlKEV since2025-03-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.901.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#27 81 Urgent CVE-2020-8243 KEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti Pulse Connect Secure Code Execution Vulnerability KEV, EPSS 90.8%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS90.8% · 99.8th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.908.

Full CVE pageNVD ↗CISA KEV ↗
#28 81 Urgent CVE-2024-8190 KEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Cloud Services Appliance OS Command Injection Vulnerability KEV, EPSS 88.5%

EVRS 81/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS88.5% · 99.78th pctlKEV since2024-09-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.885.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#29 75 Urgent CVE-2023-35081 KEV since 2023 · listed over a yearCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability KEV, EPSS 63.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS63.6% · 99.21st pctlKEV since2023-07-31

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.636.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#30 75 Urgent CVE-2024-9380 KEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability KEV, EPSS 59.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS59.7% · 99.12nd pctlKEV since2024-10-09

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.597.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#31 75 Urgent CVE-2024-9379 KEV since 2024 · listed over a yearCISA KEV Ivanti — Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability KEV, EPSS 43.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS43.8% · 98.7th pctlKEV since2024-10-09

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.438.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗
#32 75 Urgent CVE-2021-22894 KEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability KEV, EPSS 41.3%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS41.3% · 98.7th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.413.

Full CVE pageNVD ↗CISA KEV ↗
#33 75 Urgent CVE-2026-104935 CISA federal deadline · Overdue by 1 dayCISA KEV Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability KEV, EPSS 26.0%, added to KEV within the last 30 days

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.6 (NVD)EPSS26.0% · 98th pctlKEV since2026-10-13

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.260.

Full CVE pageNVD ↗CISA KEV ↗
#34 75 Urgent CVE-2021-22899 KEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti Pulse Connect Secure Command Injection Vulnerability KEV, EPSS 22.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.8 (NVD)EPSS22.9% · 97.7th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.229.

Full CVE pageNVD ↗CISA KEV ↗
#35 75 Urgent CVE-2021-22900 KEV since 2021 · listed over a yearCISA KEV Ivanti — Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability KEV, EPSS 14.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS14.1% · 96.5th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.141.

Full CVE pageNVD ↗CISA KEV ↗
#36 75 Urgent CVE-2026-6973 CISA federal deadline · Overdue by 5 monthsCISA KEV Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability KEV, EPSS 2.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.2 (NVD)EPSS2.5% · 84.7th pctlKEV since2026-05-07

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.025.

Full CVE pageNVD ↗CISA KEV ↗Vendor Advisory ↗