What to patch first

Rank 11F5 BIG-IP

Recently addedHunt for compromise (CISA)

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 22, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 12Zyxel Switches (GS, XGS)

Recently addedHunt for compromise (CISA)

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 21, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 13Linux Kernel

Recently addedHunt for compromise (CISA)

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 14Linux Kernel

Recently addedHunt for compromise (CISA)

Linux Kernel Out-of-Bounds Write Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 18, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 15Linux Kernel

Recently addedHunt for compromise (CISA)

Linux Kernel Race Condition Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 18, 2026

CISA deadline

3 days

CVSS severity

5.5 (medium)

Rank 16Cisco Identity Services Engine (ISE)

Recently addedHunt for compromise (CISA)

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 16, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 17Google Pixel

Recently addedHunt for compromise (CISA)

Google Pixel Improper Authorization Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 16, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 18Acronis Backup

Recently addedHunt for compromise (CISA)

Acronis Backup Incorrect Default Permissions Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 16, 2026

CISA deadline

3 days

CVSS severity

7.8 (high)

Rank 19Cisco Secure Email Gateway

Recently addedHunt for compromise (CISA)

Cisco Secure Email Gateway SQL Injection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 14, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 20GitLab Community / Enterprise Edition (CE/EE)

Recently addedHunt for compromise (CISA)

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 11, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 21ConnectWise ScreenConnect

Recently addedHunt for compromise (CISA)

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 11, 2026

CISA deadline

3 days

CVSS severity

9.9 (critical)

Rank 22JFrog Artifactory

Recently added

JFrog Artifactory Incorrect Authorization Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 11, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 23JFrog Artifactory

Recently added

JFrog Artifactory Improper Authentication Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 11, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 24MikroTik RouterOS

Recently addedHunt for compromise (CISA)

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 10, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 25MikroTik RouterOS

Recently added

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 10, 2026

CISA deadline

3 days

CVSS severity

8.2 (high)

Rank 26Cisco Secure Firewall Management Center (FMC)

Recently addedHunt for compromise (CISA)

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 9, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 27Fortinet FortiOS / FortiProxy (FortiGate)

Recently addedHunt for compromise (CISA)

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 9, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 28Citrix NetScaler ADC / Gateway

Recently addedHunt for compromise (CISA)

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 9, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 29Google Chrome / Chromium

Recently added

Google Chromium V8 Out of Bounds Write Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 9, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 30Adobe Commerce (Magento)

Recently addedHunt for compromise (CISA)

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 8, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 31N-able N-central

Recently addedHunt for compromise (CISA)

N-able N-central Static Code Injection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 8, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 32Microsoft Windows

Recently added

Microsoft Windows Link Following Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 8, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 33Microsoft Windows

Recently added

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 8, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 34Google Chrome / Chromium

Recently added

Google Chromium V8 Type Confusion Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 4, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 35Kestra OSS

Recently addedHunt for compromise (CISA)

Kestra OSS OS Command Injection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 36SonicWall SMA 1000

Recently addedActive CERT-FR alertHunt for compromise (CISA)

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 37JFrog Artifactory

Recently addedHunt for compromise (CISA)

JFrog Artifactory Improper Authentication Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 38Sangoma Switchvox

Recently addedHunt for compromise (CISA)

Sangoma Switchvox SQL Injection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 39BerriAI LiteLLM

Recently added

BerriAI LiteLLM Improper Authentication Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

14 days

CVSS severity

8.2 (high)

Rank 40SonicWall SMA 1000

Recently addedActive CERT-FR alertHunt for compromise (CISA)

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

3 days

CVSS severity

7.8 (high)

Rank 41Starlette

Recently added

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Sep 2, 2026

CISA deadline

14 days

CVSS severity

6.5 (medium)

Rank 42PaperCut NG / MF

Recently added

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Aug 31, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 43PaperCut NG / MF

Recently added

PaperCut NG/MF Unsafe Reflection Vulnerability

Added to the catalog less than 30 days ago: ranked by date added.

Added

Aug 31, 2026

CISA deadline

14 days

CVSS severity

9.1 (critical)

Rank 44Oracle WebLogic Server

Hunt for compromise (CISA)

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 24, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 45Metabase

Active CERT-FR alertHunt for compromise (CISA)

Metabase SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 11, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 46Arista SD-WAN (VeloCloud)

Hunt for compromise (CISA)

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 27, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 47SonicWall SMA 1000

Hunt for compromise (CISA)Ransomware

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 14, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 48Adobe ColdFusion

Hunt for compromise (CISA)

Adobe ColdFusion Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 7, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 49SimpleHelp

SimpleHelp Authentication Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 29, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 50Ubiquiti UniFi OS / UniFi Network

Ubiquiti UniFi OS Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 23, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 51Ubiquiti UniFi OS / UniFi Network

Ubiquiti UniFi OS Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 23, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 52Ubiquiti UniFi OS / UniFi Network

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 23, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 53Ivanti Sentry

Ivanti Sentry OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 11, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 54Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 14, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 55Quest KACE Systems Management Appliance (SMA)

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

14 days

CVSS severity

10.0 (critical)

Rank 56Craft CMS

Craft CMS Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 20, 2026

CISA deadline

14 days

CVSS severity

10.0 (critical)

Rank 57Cisco Secure Firewall Management Center (FMC)

Ransomware

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 19, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 58Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 25, 2026

CISA deadline

2 days

CVSS severity

10.0 (critical)

Rank 59Dell RecoverPoint

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 18, 2026

CISA deadline

3 days

CVSS severity

10.0 (critical)

Rank 60SmarterTools SmarterMail

Ransomware

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 26, 2026

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 61Cisco Secure Email Gateway

Cisco Multiple Products Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 17, 2025

CISA deadline

7 days

CVSS severity

10.0 (critical)

Rank 62React (Meta) React Server Components

Ransomware

Meta React Server Components Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 5, 2025

CISA deadline

7 days

CVSS severity

10.0 (critical)

Rank 63Adobe Experience Manager (AEM)

Adobe Experience Manager Forms Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 15, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 64SimpleHelp

RansomwareCVE from 2024, added in 2026

SimpleHelp Missing Authorization Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 24, 2026

CISA deadline

14 days

CVSS severity

9.9 (critical)

Rank 65ownCloud Server

Hunt for compromise (CISA)CVE from 2023, added in 2026

ownCloud Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 27, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 66Ajax.NET Professional

CVE from 2021, added in 2026

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 67Citrix NetScaler ADC / Gateway

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 68Gitea

Hunt for compromise (CISA)

Gitea Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 25, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 69TrueConf Server

Hunt for compromise (CISA)

TrueConf Server Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 20, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 70Microsoft Windows

Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 71VMware (Broadcom) vCenter Server

Hunt for compromise (CISA)Ransomware

Broadcom VMware vCenter Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 72Apple macOS (OS X)

Hunt for compromise (CISA)

Apple macOS Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 73Progress Kemp LoadMaster

Hunt for compromise (CISA)

Progress LoadMaster Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 7, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 74JetBrains TeamCity

Hunt for compromise (CISA)Ransomware

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 5, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 75Langflow

Hunt for compromise (CISA)

IBM Langflow Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 4, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 76Check Point Security Management / SmartConsole

Hunt for compromise (CISA)

Check Point SmartConsole Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 22, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 77Microsoft SharePoint Server

Hunt for compromise (CISA)

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 22, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 78Langflow

Hunt for compromise (CISA)

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 21, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 79WordPress Core

Hunt for compromise (CISA)

WordPress Core Interpretation Conflict Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 21, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 80Fortinet FortiSandbox

Hunt for compromise (CISA)

Fortinet FortiSandbox OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 16, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 81Fortinet FortiSandbox

Hunt for compromise (CISA)

Fortinet FortiSandbox OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 16, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 82Microsoft SharePoint Server

Hunt for compromise (CISA)

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 16, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 83Oracle E-Business Suite

Hunt for compromise (CISA)

Oracle E-Business Suite Improper Privilege Management Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 15, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 84Microsoft SharePoint Server

Hunt for compromise (CISA)

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 14, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 85iCagenda

Hunt for compromise (CISA)

iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 10, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 86Balbooa Forms

Hunt for compromise (CISA)

Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 10, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 87JoomShaper SP Page Builder

Hunt for compromise (CISA)

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 7, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 88Joomlack Page Builder

Hunt for compromise (CISA)

Joomlack Page Builder Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 7, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 89PTC Windchill and FlexPLM

Ransomware

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 25, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 90Lantronix EDS5000

Lantronix EDS5000 Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 23, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 91Splunk Enterprise

Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 92Widget Factory (JCE) JCE (Joomla Content Editor)

Widget Factory Joomla Content Editor Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 16, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 93Oracle PeopleSoft

Ransomware

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 12, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 94Mirasvit Full Page Cache Warmer

Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 3, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 95Nx Console

Ransomware

Nx Console Embedded Malicious Code Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 27, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 96DAEMON Tools Lite

Daemon Tools Lite Embedded Malicious Code Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 27, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 97LiteSpeed cPanel Plugin

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 26, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 98Drupal Core

Drupal Core SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 22, 2026

CISA deadline

5 days

CVSS severity

9.8 (critical)

Rank 99Microsoft Windows

CVE from 2008, added in 2026

Microsoft Windows Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 100BerriAI LiteLLM

BerriAI LiteLLM SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 8, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 101Palo Alto Networks PAN-OS / GlobalProtect

Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 6, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 102cPanel (WebPros) cPanel & WHM (WP Squared)

Ransomware

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 30, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 103Samsung MagicINFO Server

CVE from 2024, added in 2026

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 24, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 104Marimo

Marimo Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 23, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 105Fortinet FortiClient EMS

Fortinet FortiClient EMS SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 106Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 8, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 107Fortinet FortiClient EMS

Fortinet FortiClient EMS Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 6, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 108Citrix NetScaler ADC / Gateway

Citrix NetScaler Out-of-Bounds Read Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 30, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 109F5 BIG-IP

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 27, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 110Langflow

Langflow Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 25, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 111Laravel Livewire

Laravel Livewire Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 20, 2026

CISA deadline

14 days

CVSS severity

9.8 (critical)

Rank 112Microsoft SharePoint Server

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 18, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 113SolarWinds Web Help Desk

Ransomware

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 9, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 114Hikvision IP cameras and recorders (NVR/DVR)

CVE from 2017, added in 2026

Hikvision Multiple Products Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 5, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 115Rockwell Automation Logix (PLCs, Studio 5000)

CVE from 2021, added in 2026

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 5, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 116GitLab Community / Enterprise Edition (CE/EE)

CVE from 2021, added in 2026

GitLab Server-Side Request Forgery (SSRF) Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 18, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 117Zimbra (Synacor) Collaboration Suite (ZCS)

CVE from 2020, added in 2026

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 17, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 118BeyondTrust Remote Support / Privileged Remote Access (RS / PRA)

Ransomware

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 13, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 119Microsoft Configuration Manager

CVE from 2024, added in 2026

Microsoft Configuration Manager SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 12, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 120SolarWinds Web Help Desk

SolarWinds Web Help Desk Security Control Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 12, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 121React Native Community React Native CLI

React Native Community CLI OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 5, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 122SmarterTools SmarterMail

Ransomware

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 5, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 123Sangoma FreePBX

CVE from 2019, added in 2026

Sangoma FreePBX Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 3, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 124SolarWinds Web Help Desk

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 3, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 125Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 29, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 126Fortinet FortiOS / FortiProxy (FortiGate)

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 27, 2026

CISA deadline

3 days

CVSS severity

9.8 (critical)

Rank 127SmarterTools SmarterMail

Ransomware

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 26, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 128GNU InetUtils

GNU InetUtils Argument Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 26, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 129VMware (Broadcom) vCenter Server

CVE from 2024, added in 2026

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 23, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 130Cisco Unified Communications Manager

Cisco Unified Communications Products Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 21, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 131HPE OneView

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 7, 2026

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 132WatchGuard Firebox / XTM (Fireware)

Ransomware

WatchGuard Firebox Out of Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 19, 2025

CISA deadline

7 days

CVSS severity

9.8 (critical)

Rank 133ASUS Live Update

ASUS Live Update Embedded Malicious Code Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 17, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 134Fortinet FortiOS / FortiProxy (FortiGate)

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 16, 2025

CISA deadline

7 days

CVSS severity

9.8 (critical)

Rank 135Gladinet CentreStack / Triofox

Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 15, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 136OSGeo GeoServer

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 11, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 137D-Link Routers (DIR, DWR, DSR)

CVE from 2022, added in 2025

D-Link Routers Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 8, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 138Array Networks ArrayOS AG / vxAG

Array Networks ArrayOS AG OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 8, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 139Oracle Identity and Access Management (OIM / OAM)

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 21, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 140Fortinet FortiWeb

Fortinet FortiWeb Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 14, 2025

CISA deadline

7 days

CVSS severity

9.8 (critical)

Rank 141WatchGuard Firebox / XTM (Fireware)

WatchGuard Firebox Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 12, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 142Samsung Mobile Devices (Galaxy)

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 10, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 143XWiki Platform

XWiki Platform Eval Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 30, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 144Microsoft Windows

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 24, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 145Motex LANSCOPE Endpoint Manager

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 22, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 146Kentico Xperience

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 20, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 147Kentico Xperience

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 20, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 148SKYSEA Client View

CVE from 2016, added in 2025

SKYSEA Client View Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 14, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 149Mozilla Firefox

CVE from 2010, added in 2025

Mozilla Multiple Products Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 150Oracle E-Business Suite

Ransomware

Oracle E-Business Suite Unspecified Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 151Juniper ScreenOS (NetScreen)

CVE from 2015, added in 2025

Juniper ScreenOS Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 152Jenkins Core

CVE from 2017, added in 2025

Jenkins Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 153Samsung Mobile Devices (Galaxy)

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 154Fortra GoAnywhere MFT

Ransomware

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Sep 29, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 155TanStack

Ransomware

TanStack Unspecified Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 27, 2026

CISA deadline

14 days

CVSS severity

9.6 (critical)

Rank 156MLflow

MLflow Server-Side Request Forgery Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 19, 2026

CISA deadline

14 days

CVSS severity

9.3 (critical)

Rank 157Check Point Quantum Security Gateway

Ransomware

Check Point Security Gateway Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 8, 2026

CISA deadline

3 days

CVSS severity

9.3 (critical)

Rank 158Microsoft SharePoint Server

Hunt for compromise (CISA)

Microsoft SharePoint Weak Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 18, 2026

CISA deadline

3 days

CVSS severity

9.1 (critical)

Rank 159Palo Alto Networks PAN-OS / GlobalProtect

Ransomware

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 29, 2026

CISA deadline

3 days

CVSS severity

9.1 (critical)

Rank 160Gladinet CentreStack / Triofox

Gladinet Triofox Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 12, 2025

CISA deadline

21 days

CVSS severity

9.1 (critical)

Rank 161Dassault Systèmes DELMIA Apriso

Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 28, 2025

CISA deadline

21 days

CVSS severity

9.1 (critical)

Rank 162Adobe Commerce (Magento)

Adobe Commerce and Magento Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 24, 2025

CISA deadline

21 days

CVSS severity

9.1 (critical)

Rank 163TrueConf Server

TrueConf Server Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 20, 2026

CISA deadline

14 days

CVSS severity

9.0 (critical)

Rank 164CWP (Control Web Panel / CentOS Web Panel) Control Web Panel

CWP Control Web Panel OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 4, 2025

CISA deadline

21 days

CVSS severity

9.0 (critical)

Rank 165Zimbra (Synacor) Collaboration Suite (ZCS)

Hunt for compromise (CISA)

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 21, 2026

CISA deadline

3 days

CVSS severity

8.9 (high)

Rank 166Microsoft SQL Server

Hunt for compromise (CISA)CVE from 2019, added in 2026

Microsoft SQL Server Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 167Ray

Hunt for compromise (CISA)

Ray-Project Ray Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 17, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 168Microsoft SharePoint Server

Hunt for compromise (CISA)Ransomware

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 1, 2026

CISA deadline

3 days

CVSS severity

8.8 (high)

Rank 169Google Chrome / Chromium

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 9, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 170BerriAI LiteLLM

BerriAI LiteLLM Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 8, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 171Langflow

Langflow Origin Validation Error Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 21, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 172Microsoft Windows

CVE from 2009, added in 2026

Microsoft DirectX NULL Byte Overwrite Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 173Adobe Acrobat / Reader

CVE from 2009, added in 2026

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 174Microsoft Internet Explorer / Edge (legacy)

CVE from 2010, added in 2026

Microsoft Internet Explorer Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 175Microsoft Internet Explorer / Edge (legacy)

CVE from 2010, added in 2026

Microsoft Internet Explorer Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 176Apache ActiveMQ

Apache ActiveMQ Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 16, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 177Microsoft Office

CVE from 2009, added in 2026

Microsoft Office Remote Code Execution

Added in the last 12 months: ranked by severity.

Added

Apr 14, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 178Microsoft Exchange Server

RansomwareCVE from 2023, added in 2026

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 179Google Chrome / Chromium

Google Dawn Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 1, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 180Aqua Security Trivy

Aquasecurity Trivy Embedded Malicious Code Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 26, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 181Apple Safari / WebKit

Apple Multiple Products Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 20, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 182Google Chrome / Chromium

Google Skia Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 13, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 183Google Chrome / Chromium

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 13, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 184n8n

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 11, 2026

CISA deadline

14 days

CVSS severity

8.8 (high)

Rank 185Apple Safari / WebKit

CVE from 2023, added in 2026

Apple Multiple products Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 5, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 186Soliton Systems FileZen

Soliton Systems K.K FileZen OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 24, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 187Roundcube Webmail

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 20, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 188Microsoft Windows

CVE from 2008, added in 2026

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 17, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 189Google Chrome / Chromium

Google Chromium CSS Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 17, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 190Microsoft Windows

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 191Microsoft Windows

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 192Zimbra (Synacor) Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 22, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 193Gogs

Gogs Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 12, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 194Microsoft Office

CVE from 2009, added in 2026

Microsoft Office PowerPoint Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 7, 2026

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 195Digiever DS-2105 Pro

CVE from 2023, added in 2025

Digiever DS-2105 Pro Missing Authorization Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 22, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 196Apple Safari / WebKit

Apple Multiple Products Use-After-Free WebKit Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 15, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 197Sierra Wireless AirLink ALEOS

CVE from 2018, added in 2025

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 12, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 198Google Chrome / Chromium

Google Chromium Out of Bounds Memory Access Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 12, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 199OpenPLC ScadaBR

CVE from 2021, added in 2025

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 3, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 200Google Chrome / Chromium

Google Chromium V8 Type Confusion Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 19, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 201Apple Safari / WebKit

CVE from 2022, added in 2025

Apple Multiple Products Unspecified Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 20, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 202Microsoft Windows

Microsoft Windows SMB Client Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 20, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 203Microsoft Windows

CVE from 2011, added in 2025

Microsoft Windows Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 204Microsoft Windows

CVE from 2013, added in 2025

Microsoft Windows Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 205GNU Bash

CVE from 2014, added in 2025

GNU Bash OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 2, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 206Smartbedded Meteobridge

Smartbedded Meteobridge Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 2, 2025

CISA deadline

21 days

CVSS severity

8.8 (high)

Rank 207Cisco ASA / Firepower (FTD)

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 11, 2026

CISA deadline

3 days

CVSS severity

8.6 (high)

Rank 208Cisco Unified Communications Manager

Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 25, 2026

CISA deadline

3 days

CVSS severity

8.6 (high)

Rank 209Adobe Acrobat / Reader

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

8.6 (high)

Rank 210LiteSpeed cPanel Plugin

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 15, 2026

CISA deadline

3 days

CVSS severity

8.5 (high)

Rank 211Langflow

Hunt for compromise (CISA)

Langflow Authorization Bypass Through User-Controlled Key Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 7, 2026

CISA deadline

3 days

CVSS severity

8.4 (high)

Rank 212Google Android

Android Framework Integer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 2, 2026

CISA deadline

3 days

CVSS severity

8.4 (high)

Rank 213ConnectWise ScreenConnect

RansomwareCVE from 2024, added in 2026

ConnectWise ScreenConnect Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 28, 2026

CISA deadline

14 days

CVSS severity

8.4 (high)

Rank 214N-able N-central

Hunt for compromise (CISA)

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 3, 2026

CISA deadline

3 days

CVSS severity

8.1 (high)

Rank 215DD-WRT

Hunt for compromise (CISA)CVE from 2021, added in 2026

DD-WRT Stack-Based Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 21, 2026

CISA deadline

3 days

CVSS severity

8.1 (high)

Rank 216Cisco IOS / IOS XE

Hunt for compromise (CISA)CVE from 2008, added in 2026

Cisco IOS Cross-Site Request Forgery Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 13, 2026

CISA deadline

3 days

CVSS severity

8.1 (high)

Rank 217VMware (Broadcom) Aria Operations (ex-vRealize Operations)

Broadcom VMware Aria Operations Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 3, 2026

CISA deadline

21 days

CVSS severity

8.1 (high)

Rank 218Microsoft Internet Explorer / Edge (legacy)

CVE from 2010, added in 2025

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

8.1 (high)

Rank 219Dassault Systèmes DELMIA Apriso

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 28, 2025

CISA deadline

21 days

CVSS severity

8.0 (high)

Rank 220Linux Kernel

Hunt for compromise (CISA)

Linux Kernel Unspecified Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 27, 2026

CISA deadline

3 days

CVSS severity

7.8 (high)

Rank 221Red Hat ABRT (Automatic Bug Reporting Tool)

CVE from 2015, added in 2026

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 222Linux Kernel

CVE from 2022, added in 2026

Linux Kernel Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 223Microsoft AD FS

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 14, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 224Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 9, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 225Linux Kernel

CVE from 2022, added in 2026

Linux Kernel Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 2, 2026

CISA deadline

3 days

CVSS severity

7.8 (high)

Rank 226Microsoft Defender

Microsoft Defender Link Following Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 227Linux Kernel

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 1, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 228Microsoft Defender

Ransomware

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 22, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 229Microsoft Office

CVE from 2012, added in 2026

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 230Adobe Acrobat / Reader

CVE from 2020, added in 2026

Adobe Acrobat Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 231Microsoft Windows

CVE from 2023, added in 2026

Microsoft Windows Out-of-Bounds Read Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 232Microsoft Windows

Ransomware

Microsoft Windows Link Following Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 13, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 233TrueConf Client

TrueConf Client Download of Code Without Integrity Check Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 2, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 234Apple iOS / iPadOS / macOS

Apple Multiple Products Improper Locking Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 20, 2026

CISA deadline

14 days

CVSS severity

7.8 (high)

Rank 235Apple Safari / WebKit

CVE from 2021, added in 2026

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 5, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 236Apple iOS / iPadOS

CVE from 2023, added in 2026

Apple iOS and iPadOS Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 5, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 237Qualcomm Snapdragon (chipsets and drivers)

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 3, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 238Cisco Catalyst SD-WAN

CVE from 2022, added in 2026

Cisco SD-WAN Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 25, 2026

CISA deadline

2 days

CVSS severity

7.8 (high)

Rank 239Apple iOS / iPadOS / macOS

Apple Multiple Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 12, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 240Microsoft Office

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 241Microsoft Windows

Microsoft Windows Type Confusion Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 242Microsoft Windows

Microsoft Windows Improper Privilege Management Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 243Linux Kernel

CVE from 2018, added in 2026

Linux Kernel Integer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 26, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 244Microsoft Office

Microsoft Office Security Feature Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 26, 2026

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 245RARLAB WinRAR

RARLAB WinRAR Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 9, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 246Microsoft Windows

Microsoft Windows Use After Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 9, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 247Google Android

Android Framework Privilege Escalation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 2, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 248VMware (Broadcom) VMware Tools

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 30, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 249Microsoft Windows

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 14, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 250Microsoft Windows

Microsoft Windows Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 14, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 251Linux Kernel

CVE from 2021, added in 2025

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 252Microsoft Windows

RansomwareCVE from 2021, added in 2025

Microsoft Windows Privilege Escalation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 6, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 253Sudo

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Added in the last 12 months: ranked by severity.

Added

Sep 29, 2025

CISA deadline

21 days

CVSS severity

7.8 (high)

Rank 254Cisco IOS / IOS XE

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Added in the last 12 months: ranked by severity.

Added

Sep 29, 2025

CISA deadline

21 days

CVSS severity

7.7 (high)

Rank 255Apache Tomcat

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 4, 2026

CISA deadline

3 days

CVSS severity

7.5 (high)

Rank 256KNX Association Protocole KNX

CVE from 2023, added in 2026

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 15, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 257SolarWinds Serv-U

SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 5, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 258Oracle WebLogic Server

CVE from 2024, added in 2026

Oracle WebLogic Server Unspecified Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 1, 2026

CISA deadline

3 days

CVSS severity

7.5 (high)

Rank 259Microsoft Defender

Microsoft Defender Denial of Service Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 20, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 260PaperCut NG / MF

RansomwareCVE from 2023, added in 2026

PaperCut NG/MF Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 261Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

3 days

CVSS severity

7.5 (high)

Rank 262Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

3 days

CVSS severity

7.5 (high)

Rank 263Omnissa (ex-VMware EUC) Workspace ONE UEM (AirWatch)

CVE from 2021, added in 2026

Omnissa Workspace ONE Server-Side Request Forgery

Added in the last 12 months: ranked by severity.

Added

Mar 9, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 264Ivanti Endpoint Manager (EPM)

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 9, 2026

CISA deadline

14 days

CVSS severity

7.5 (high)

Rank 265Notepad++

Notepad++ Download of Code Without Integrity Check Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 12, 2026

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 266GitLab Community / Enterprise Edition (CE/EE)

CVE from 2021, added in 2026

GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 3, 2026

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 267Vite

Vite Vitejs Improper Access Control Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 22, 2026

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 268Versa Networks Concerto

Versa Concerto Improper Authentication Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 22, 2026

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 269Prettier eslint-config-prettier

Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 22, 2026

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 270MongoDB Server

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 29, 2025

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 271Gladinet CentreStack / Triofox

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 4, 2025

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 272Oracle E-Business Suite

Ransomware

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 20, 2025

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 273Grafana Labs Grafana

CVE from 2021, added in 2025

Grafana Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 9, 2025

CISA deadline

21 days

CVSS severity

7.5 (high)

Rank 274N-able N-central

Hunt for compromise (CISA)

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 4, 2026

CISA deadline

3 days

CVSS severity

7.4 (high)

Rank 275JetBrains TeamCity

RansomwareCVE from 2024, added in 2026

JetBrains TeamCity Relative Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

14 days

CVSS severity

7.3 (high)

Rank 276SonicWall SMA 1000

Hunt for compromise (CISA)Ransomware

SonicWall SMA1000 Appliances Code Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 14, 2026

CISA deadline

3 days

CVSS severity

7.2 (high)

Rank 277Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron)

Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 7, 2026

CISA deadline

3 days

CVSS severity

7.2 (high)

Rank 278SimpleHelp

RansomwareCVE from 2024, added in 2026

SimpleHelp Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 24, 2026

CISA deadline

14 days

CVSS severity

7.2 (high)

Rank 279D-Link Routers (DIR, DWR, DSR)

D-Link DIR-823X Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 24, 2026

CISA deadline

14 days

CVSS severity

7.2 (high)

Rank 280Kentico Xperience

Kentico Xperience Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

14 days

CVSS severity

7.2 (high)

Rank 281TeamT5 ThreatSonar Anti-Ransomware

CVE from 2024, added in 2026

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 17, 2026

CISA deadline

21 days

CVSS severity

7.2 (high)

Rank 282Sangoma FreePBX

Sangoma FreePBX OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 3, 2026

CISA deadline

21 days

CVSS severity

7.2 (high)

Rank 283Fortinet FortiWeb

Fortinet FortiWeb OS Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 18, 2025

CISA deadline

7 days

CVSS severity

7.2 (high)

Rank 284Adminer

CVE from 2021, added in 2025

Adminer Server-Side Request Forgery Vulnerability

Added in the last 12 months: ranked by severity.

Added

Sep 29, 2025

CISA deadline

21 days

CVSS severity

7.2 (high)

Rank 285Microsoft Windows

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 11, 2026

CISA deadline

14 days

CVSS severity

7.0 (high)

Rank 286Microsoft Windows

Microsoft Windows Race Condition Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 12, 2025

CISA deadline

21 days

CVSS severity

7.0 (high)

Rank 287Trend Micro Apex One (ex-OfficeScan)

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 21, 2026

CISA deadline

14 days

CVSS severity

6.7 (medium)

Rank 288SonicWall SMA 1000

SonicWall SMA1000 Missing Authorization Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 17, 2025

CISA deadline

7 days

CVSS severity

6.6 (medium)

Rank 289Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 15, 2026

CISA deadline

14 days

CVSS severity

6.5 (medium)

Rank 290Microsoft SharePoint Server

Microsoft SharePoint Server Improper Input Validation Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 14, 2026

CISA deadline

14 days

CVSS severity

6.5 (medium)

Rank 291Microsoft Windows

Microsoft Windows NULL Pointer Dereference Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 10, 2026

CISA deadline

21 days

CVSS severity

6.2 (medium)

Rank 292Microsoft Exchange Server

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

May 15, 2026

CISA deadline

14 days

CVSS severity

6.1 (medium)

Rank 293Zimbra (Synacor) Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

3 days

CVSS severity

6.1 (medium)

Rank 294Zimbra (Synacor) Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 18, 2026

CISA deadline

14 days

CVSS severity

6.1 (medium)

Rank 295Roundcube Webmail

RoundCube Webmail Cross-site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

Feb 20, 2026

CISA deadline

21 days

CVSS severity

6.1 (medium)

Rank 296Libraesva Email Security Gateway

Libraesva Email Security Gateway Command Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Sep 29, 2025

CISA deadline

21 days

CVSS severity

6.1 (medium)

Rank 297Fortinet FortiOS / FortiProxy (FortiGate)

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 27, 2026

CISA deadline

14 days

CVSS severity

5.9 (medium)

Rank 298WordPress Core

WordPress Core SQL Injection Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 21, 2026

CISA deadline

14 days

CVSS severity

5.9 (medium)

Rank 299Arista EOS

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jun 9, 2026

CISA deadline

14 days

CVSS severity

5.8 (medium)

Rank 300Apple iOS / iPadOS / macOS

Apple Multiple Products Classic Buffer Overflow Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 20, 2026

CISA deadline

14 days

CVSS severity

5.5 (medium)

Rank 301Microsoft Windows

Microsoft Windows Information Disclosure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jan 13, 2026

CISA deadline

21 days

CVSS severity

5.5 (medium)

Rank 302Google Android

Android Framework Information Disclosure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Dec 2, 2025

CISA deadline

21 days

CVSS severity

5.5 (medium)

Rank 303Cisco Catalyst SD-WAN

Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 20, 2026

CISA deadline

3 days

CVSS severity

5.4 (medium)

Rank 304OpenPLC ScadaBR

CVE from 2021, added in 2025

OpenPLC ScadaBR Cross-site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

Nov 28, 2025

CISA deadline

21 days

CVSS severity

5.4 (medium)

Rank 305Zimbra (Synacor) Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 7, 2025

CISA deadline

21 days

CVSS severity

5.4 (medium)

Rank 306JFrog Artifactory

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 27, 2026

CISA deadline

14 days

CVSS severity

5.3 (medium)

Rank 307Cisco Secure Firewall Management Center (FMC)

Ransomware

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Added in the last 12 months: ranked by severity.

Added

Jul 29, 2026

CISA deadline

3 days

CVSS severity

5.3 (medium)

Rank 308Red Hat libuser

CVE from 2015, added in 2026

Red Hat Libuser Race Condition Vulnerability

Added in the last 12 months: ranked by severity.

Added

Aug 26, 2026

CISA deadline

14 days

CVSS severity

5.1 (medium)

Rank 309IGEL OS

IGEL OS Use of a Key Past its Expiration Date Vulnerability

Added in the last 12 months: ranked by severity.

Added

Oct 14, 2025

CISA deadline

21 days

CVSS severity

4.6 (medium)

Rank 310Microsoft Windows

Microsoft Windows Protection Mechanism Failure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Apr 28, 2026

CISA deadline

14 days

CVSS severity

4.3 (medium)

Rank 311Wing FTP Server

Wing FTP Server Information Disclosure Vulnerability

Added in the last 12 months: ranked by severity.

Added

Mar 16, 2026

CISA deadline

14 days

CVSS severity

4.3 (medium)

Rank 312Apple iOS / iPadOS / macOS

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Added more than a year ago: ranked by severity.

Added

Aug 21, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 313Cisco Identity Services Engine (ISE)

Cisco Identity Services Engine Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 28, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 314Cisco Identity Services Engine (ISE)

Cisco Identity Services Engine Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 28, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 315Wing FTP Server

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 14, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 316Erlang/OTP

Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 9, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 317Commvault Command Center

Commvault Command Center Path Traversal Vulnerability

Added more than a year ago: ranked by severity.

Added

May 2, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 318Apple Safari / WebKit

Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 13, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 319Apple iOS / iPadOS / macOS

Apple Multiple Products Use-After-Free Vulnerability

Added more than a year ago: ranked by severity.

Added

Jan 29, 2025

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 320OSGeo GeoServer

CVE from 2022, added in 2024

OSGeo GeoServer JAI-EXT Code Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 26, 2024

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 321CrushFTP

CrushFTP VFS Sandbox Escape Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 24, 2024

CISA deadline

7 days

CVSS severity

10.0 (critical)

Rank 322Palo Alto Networks PAN-OS / GlobalProtect

Ransomware

Palo Alto Networks PAN-OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 12, 2024

CISA deadline

7 days

CVSS severity

10.0 (critical)

Rank 323ConnectWise ScreenConnect

Ransomware

ConnectWise ScreenConnect Authentication Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 22, 2024

CISA deadline

7 days

CVSS severity

10.0 (critical)

Rank 324Cisco IOS / IOS XE

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Added more than a year ago: ranked by severity.

Added

Oct 16, 2023

CISA deadline

4 days

CVSS severity

10.0 (critical)

Rank 325SAP NetWeaver

SAP Multiple Products HTTP Request Smuggling Vulnerability

Added more than a year ago: ranked by severity.

Added

Aug 18, 2022

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 326Mozilla Firefox

CVE from 2019, added in 2022

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

Added more than a year ago: ranked by severity.

Added

May 23, 2022

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 327Spring Cloud Gateway

VMware Spring Cloud Gateway Code Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

May 16, 2022

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 328Redis Server

Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 28, 2022

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 329Palo Alto Networks PAN-OS / GlobalProtect

RansomwareCVE from 2020, added in 2022

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 25, 2022

CISA deadline

21 days

CVSS severity

10.0 (critical)

Rank 330Microsoft Windows

RansomwareCVE from 2020, added in 2022

Microsoft SMBv3 Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 10, 2022

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 331Elastic Kibana

CVE from 2019, added in 2022

Kibana Arbitrary Code Execution

Added more than a year ago: ranked by severity.

Added

Jan 10, 2022

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 332Apache Log4j

Ransomware

Apache Log4j2 Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Dec 10, 2021

CISA deadline

14 days

CVSS severity

10.0 (critical)

Rank 333SAP NetWeaver

CVE from 2010, added in 2021

SAP NetWeaver Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 334Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)

RansomwareCVE from 2019, added in 2021

Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 335Microsoft Windows

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 336Microsoft Active Directory

Ransomware

Microsoft Netlogon Privilege Escalation Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 337Oracle Solaris

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 338SAP NetWeaver

SAP NetWeaver Missing Authentication for Critical Function Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 339GitLab Community / Enterprise Edition (CE/EE)

Ransomware

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

14 days

CVSS severity

10.0 (critical)

Rank 340Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)

Ransomware

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

181 days

CVSS severity

10.0 (critical)

Rank 341SolarWinds Serv-U

Ransomware

SolarWinds Serv-U Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Nov 3, 2021

CISA deadline

14 days

CVSS severity

10.0 (critical)

Rank 342Cisco ASA / Firepower (FTD)

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Sep 25, 2025

CISA deadline

1 day

CVSS severity

9.9 (critical)

Rank 343Wazuh Server

Wazuh Server Deserialization of Untrusted Data Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 10, 2025

CISA deadline

21 days

CVSS severity

9.9 (critical)

Rank 344Qlik Sense

RansomwareCVE from 2023, added in 2025

Qlik Sense HTTP Tunneling Vulnerability

Added more than a year ago: ranked by severity.

Added

Jan 13, 2025

CISA deadline

21 days

CVSS severity

9.9 (critical)

Rank 345Qlik Sense

Ransomware

Qlik Sense HTTP Tunneling Vulnerability

Added more than a year ago: ranked by severity.

Added

Dec 7, 2023

CISA deadline

21 days

CVSS severity

9.9 (critical)

Rank 346Jenkins Plugins

CVE from 2019, added in 2022

Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 25, 2022

CISA deadline

21 days

CVSS severity

9.9 (critical)

Rank 347Jenkins Plugins

CVE from 2019, added in 2022

Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 25, 2022

CISA deadline

21 days

CVSS severity

9.9 (critical)

Rank 348MongoDB mongo-express

CVE from 2019, added in 2021

MongoDB mongo-express Remote Code Execution Vulnerability

Added more than a year ago: ranked by severity.

Added

Dec 10, 2021

CISA deadline

182 days

CVSS severity

9.9 (critical)

Rank 349Google Chrome / Chromium

Google Chromium V8 Type Confusion Vulnerability

Added more than a year ago: ranked by severity.

Added

Sep 23, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 350Sangoma FreePBX

Sangoma FreePBX Authentication Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Aug 29, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 351Citrix NetScaler ADC / Gateway

Citrix NetScaler Memory Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Aug 26, 2025

CISA deadline

2 days

CVSS severity

9.8 (critical)

Rank 352Trend Micro Apex One (ex-OfficeScan)

Trend Micro Apex One OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Aug 18, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 353SysAid On-Prem

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 22, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 354CrushFTP

CrushFTP Unprotected Alternate Channel Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 22, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 355Microsoft SharePoint Server

Ransomware

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 20, 2025

CISA deadline

1 day

CVSS severity

9.8 (critical)

Rank 356Fortinet FortiWeb

Fortinet FortiWeb SQL Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 18, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 357MRLG (Multi-Router Looking Glass) Multi-Router Looking Glass (MRLG)

CVE from 2014, added in 2025

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 7, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 358PHPMailer

CVE from 2016, added in 2025

PHPMailer Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jul 7, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 359Citrix NetScaler ADC / Gateway

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 30, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 360D-Link Routers (DIR, DWR, DSR)

D-Link DIR-859 Router Path Traversal Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 25, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 361AMI MegaRAC SPx

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 25, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 362ASUS Routers (RT, GT, ZenWiFi)

CVE from 2021, added in 2025

ASUS Routers Improper Authentication Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 363Craft CMS

Craft CMS Code Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jun 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 364Samsung MagicINFO Server

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Added more than a year ago: ranked by severity.

Added

May 22, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 365DrayTek Vigor (routers)

DrayTek Vigor Routers OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

May 15, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 366Fortinet FortiVoice / FortiFone

Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

May 14, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 367GeoVision Cameras and video servers

GeoVision Devices OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

May 7, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 368GeoVision Cameras and video servers

GeoVision Devices OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

May 7, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 369Langflow

Ransomware

Langflow Missing Authentication Vulnerability

Added more than a year ago: ranked by severity.

Added

May 5, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 370Yii Framework Yii

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Added more than a year ago: ranked by severity.

Added

May 2, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 371SAP NetWeaver

Ransomware

SAP NetWeaver Unrestricted File Upload Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 29, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 372Qualitia Active! Mail

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 28, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 373Apple iOS / iPadOS / macOS

Apple Multiple Products Memory Corruption Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 17, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 374Apple iOS / iPadOS / macOS

Apple Multiple Products Arbitrary Read and Write Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 17, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 375Gladinet CentreStack / Triofox

Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 8, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 376CrushFTP

Ransomware

CrushFTP Authentication Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 7, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 377Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)

Ransomware

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 4, 2025

CISA deadline

7 days

CVSS severity

9.8 (critical)

Rank 378Apache Tomcat

Apache Tomcat Path Equivalence Vulnerability

Added more than a year ago: ranked by severity.

Added

Apr 1, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 379Cisco Smart Licensing Utility

Cisco Smart Licensing Utility Static Credential Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 31, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 380Sitecore Experience Platform / Manager (XP / XM)

CVE from 2019, added in 2025

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 26, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 381Edimax IC-7100 IP Camera

Edimax IC-7100 IP Camera OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 19, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 382Hitachi Vantara Pentaho Business Analytics (BA) Server

CVE from 2022, added in 2025

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 3, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 383Progress WhatsUp Gold

Progress WhatsUp Gold Path Traversal Vulnerability

Added more than a year ago: ranked by severity.

Added

Mar 3, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 384Microsoft Partner Center

Microsoft Partner Center Improper Access Control Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 25, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 385Adobe ColdFusion

CVE from 2017, added in 2025

Adobe ColdFusion Deserialization Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 24, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 386Microsoft Power Pages

Microsoft Power Pages Improper Access Control Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 21, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 387SonicWall SonicOS

Ransomware

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 18, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 388Sophos Firewall (SFOS, ex-XG)

CVE from 2020, added in 2025

Sophos XG Firewall Buffer Overflow Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 6, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 389Microsoft Outlook

Microsoft Outlook Improper Input Validation Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 6, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 390Paessler PRTG Network Monitor

CVE from 2018, added in 2025

Paessler PRTG Network Monitor Local File Inclusion Vulnerability

Added more than a year ago: ranked by severity.

Added

Feb 4, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 391SonicWall SMA 1000

Ransomware

SonicWall SMA1000 Appliances Deserialization Vulnerability

Added more than a year ago: ranked by severity.

Added

Jan 24, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)

Rank 392Aviatrix Controller

Aviatrix Controllers OS Command Injection Vulnerability

Added more than a year ago: ranked by severity.

Added

Jan 16, 2025

CISA deadline

21 days

CVSS severity

9.8 (critical)