Trending — Highest Exploitation Probability
CVEs with EPSS ≥ 0.10 — ranked by likelihood of exploitation in the next 30 days.
| CVE | EPSS Score | Percentile | Severity | CVSS | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2022-26134 |
1.0000
|
100.0% | — | — | KEV RW | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability |
CVE-2022-29464 |
1.0000
|
100.0% | — | — | KEV RW | Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execut |
CVE-2023-0669 |
1.0000
|
100.0% | — | — | KEV RW | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code ex |
CVE-2023-1389 |
1.0000
|
100.0% | — | — | KEV | TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote cod |
CVE-2023-1671 |
1.0000
|
100.0% | — | — | KEV | Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handle |
CVE-2023-22518 |
1.0000
|
100.0% | — | — | KEV RW | Atlassian Confluence Data Center and Server contain an improper authorization vulnerabilit |
CVE-2023-27350 |
1.0000
|
100.0% | — | — | KEV RW | PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted |
CVE-2023-32315 |
1.0000
|
100.0% | — | — | KEV | Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenti |
CVE-2023-35078 |
1.0000
|
100.0% | — | — | KEV RW | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an auth |
CVE-2023-35082 |
1.0000
|
100.0% | — | — | KEV RW | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass |
CVE-2023-44487 |
1.0000
|
100.0% | — | — | KEV | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-servic |
CVE-2023-4966 |
1.0000
|
100.0% | — | — | KEV RW | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that al |
CVE-2024-21887 |
1.0000
|
100.0% | — | — | KEV RW | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secu |
CVE-2024-21893 |
1.0000
|
100.0% | — | — | KEV RW | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, |
CVE-2024-23897 |
1.0000
|
100.0% | — | — | KEV RW | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows a |
CVE-2024-3400 |
1.0000
|
100.0% | — | — | KEV RW | Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability |
CVE-2024-7593 |
1.0000
|
100.0% | — | — | KEV | Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows |
CVE-2025-53770 |
1.0000
|
100.0% | — | — | KEV RW | Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulne |
CVE-2026-109618 |
1.0000
|
100.0% | critical | 9.2 | KEV 710 PoC | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated rem |
CVE-2026-109619 |
1.0000
|
100.0% | critical | 9.2 | KEV | PHP contains a stale internal request-state vulnerability that allows for unauthenticated |
CVE-2022-44877 |
1.0000
|
100.0% | — | — | KEV | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnera |
CVE-2024-3273 |
1.0000
|
100.0% | — | — | KEV | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability |
CVE-2025-49704 |
1.0000
|
100.0% | — | — | KEV RW | Microsoft SharePoint contains a code injection vulnerability that could allow an authorize |
CVE-2024-34102 |
0.9999
|
100.0% | — | — | KEV | Adobe Commerce and Magento Open Source contain an improper restriction of XML external ent |
CVE-2024-13159 |
0.9999
|
100.0% | — | — | KEV | Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allow |
CVE-2025-3248 |
0.9999
|
100.0% | — | — | KEV RW | Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endp |
CVE-2023-46604 |
0.9999
|
100.0% | — | — | KEV RW | Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow |
CVE-2023-29300 |
0.9999
|
100.0% | — | — | KEV RW | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows fo |
CVE-2024-27199 |
0.9999
|
100.0% | — | — | KEV RW | JetBrains TeamCity contains a relative path traversal vulnerability that could allow limit |
CVE-2023-42793 |
0.9999
|
100.0% | — | — | KEV RW | JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote |
CVE-2024-4577 |
0.9999
|
100.0% | — | — | KEV RW | PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vul |
CVE-2022-40684 |
0.9998
|
100.0% | — | — | KEV RW | Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vuln |
CVE-2023-22527 |
0.9998
|
100.0% | — | — | KEV RW | Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injec |
CVE-2023-29357 |
0.9998
|
100.0% | — | — | KEV RW | Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthent |
CVE-2023-46805 |
0.9998
|
100.0% | — | — | KEV RW | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secu |
CVE-2024-45195 |
0.9998
|
100.0% | — | — | KEV | Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obt |
CVE-2025-0282 |
0.9998
|
100.0% | — | — | KEV RW | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overfl |
CVE-2025-22457 |
0.9998
|
100.0% | — | — | KEV RW | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overf |
CVE-2024-1709 |
0.9998
|
100.0% | — | — | KEV RW | ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an a |
CVE-2025-59287 |
0.9998
|
100.0% | — | — | KEV | Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted dat |
CVE-2023-4863 |
0.9998
|
100.0% | — | — | KEV | Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a rem |
CVE-2024-24919 |
0.9998
|
100.0% | — | — | KEV RW | Check Point Quantum Security Gateways contain an unspecified information disclosure vulner |
CVE-2024-4879 |
0.9998
|
100.0% | — | — | KEV | ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly templa |
CVE-2025-24893 |
0.9997
|
100.0% | — | — | KEV | XWiki Platform contains an eval injection vulnerability that could allow any guest to perf |
CVE-2025-5777 |
0.9997
|
100.0% | — | — | KEV RW | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insuff |
CVE-2022-41082 |
0.9997
|
100.0% | — | — | KEV RW | Microsoft Exchange Server contains an unspecified vulnerability that allows for authentica |
CVE-2025-31161 |
0.9997
|
100.0% | — | — | KEV RW | CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header |
CVE-2022-47986 |
0.9997
|
100.0% | — | — | KEV RW | IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a |
CVE-2024-38475 |
0.9996
|
100.0% | — | — | KEV | Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite th |
CVE-2022-41040 |
0.9996
|
100.0% | — | — | KEV RW | Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," |
CVE-2023-38035 |
0.9995
|
100.0% | — | — | KEV RW | Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vuln |
CVE-2022-30525 |
0.9994
|
100.0% | — | — | KEV | A command injection vulnerability in the CGI program of some Zyxel firewall versions could |
CVE-2025-24813 |
0.9994
|
100.0% | — | — | KEV | Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to e |
CVE-2024-27198 |
0.9994
|
100.0% | — | — | KEV RW | JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker |
CVE-2024-29824 |
0.9994
|
100.0% | — | — | KEV | Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that a |
CVE-2023-34362 |
0.9993
|
100.0% | — | — | KEV RW | Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauth |
CVE-2025-4427 |
0.9993
|
100.0% | — | — | KEV | Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in t |
CVE-2025-25257 |
0.9992
|
100.0% | — | — | KEV | Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated |
CVE-2024-32113 |
0.9992
|
100.0% | — | — | KEV | Apache OFBiz contains a path traversal vulnerability that could allow for remote code exec |
CVE-2026-10520 |
0.9991
|
100.0% | — | — | KEV | Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulne |
CVE-2024-45519 |
0.9991
|
100.0% | — | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the post |
CVE-2023-21839 |
0.9990
|
100.0% | — | — | KEV | Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticate |
CVE-2022-35405 |
0.9987
|
100.0% | — | — | KEV | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspeci |
CVE-2022-35914 |
0.9985
|
100.0% | — | — | KEV | Teclib GLPI contains a remote code execution vulnerability in the third-party library, htm |
CVE-2026-8037 |
0.9984
|
100.0% | — | — | KEV | Progress LoadMaster contains a command injection vulnerability that allows an un-authentic |
CVE-2022-46169 |
0.9983
|
100.0% | — | — | KEV | Cacti contains a command injection vulnerability that allows an unauthenticated user to ex |
CVE-2025-10035 |
0.9982
|
100.0% | — | — | KEV RW | Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an |
CVE-2023-38831 |
0.9981
|
100.0% | — | — | KEV RW | RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute cod |
CVE-2024-36401 |
0.9981
|
100.0% | — | — | KEV | OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically |
CVE-2023-23752 |
0.9981
|
100.0% | — | — | KEV | Joomla! contains an improper access control vulnerability that allows unauthorized access |
CVE-2025-55182 |
0.9980
|
100.0% | — | — | KEV RW | Meta React Server Components contains a remote code execution vulnerability that could all |
CVE-2025-32432 |
0.9979
|
100.0% | — | — | KEV | Craft CMS contains a code injection vulnerability that allows a remote attacker to execute |
CVE-2023-29298 |
0.9979
|
100.0% | — | — | KEV | Adobe ColdFusion contains an improper access control vulnerability that allows for a secur |
CVE-2024-0012 |
0.9979
|
100.0% | — | — | KEV RW | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based |
CVE-2023-38205 |
0.9976
|
100.0% | — | — | KEV | Adobe ColdFusion contains an improper access control vulnerability that allows for a secur |
CVE-2022-47966 |
0.9975
|
100.0% | — | — | KEV RW | Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulne |
CVE-2023-3519 |
0.9975
|
100.0% | — | — | KEV RW | Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that al |
CVE-2025-61882 |
0.9973
|
100.0% | — | — | KEV RW | Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integrat |
CVE-2025-49113 |
0.9971
|
100.0% | — | — | KEV | RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows r |
CVE-2025-48703 |
0.9966
|
99.9% | — | — | KEV | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnera |
CVE-2024-5217 |
0.9963
|
99.9% | — | — | KEV | ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomple |
CVE-2024-9465 |
0.9963
|
99.9% | — | — | KEV | Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauth |
CVE-2024-28995 |
0.9961
|
99.9% | — | — | KEV | SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access t |
CVE-2023-20198 |
0.9961
|
99.9% | — | — | KEV | Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interfac |
CVE-2026-39987 |
0.9956
|
99.9% | — | — | KEV | Marimo contains an pre-authorization remote code execution vulnerability, allowing an unau |
CVE-2024-4040 |
0.9954
|
99.9% | — | — | KEV | CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacke |
CVE-2025-31324 |
0.9949
|
99.9% | — | — | KEV RW | SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulne |
CVE-2024-23692 |
0.9949
|
99.9% | — | — | KEV RW | Rejetto HTTP File Server contains an improper neutralization of special elements used in a |
CVE-2026-21589 |
0.9948
|
99.9% | critical | 9.3 | KEV | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service M |
CVE-2022-42475 |
0.9947
|
99.9% | — | — | KEV RW | Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnera |
CVE-2023-36884 |
0.9944
|
99.9% | — | — | KEV RW | Microsoft Windows Search contains an unspecified vulnerability that could allow an attacke |
CVE-2024-38856 |
0.9943
|
99.9% | — | — | KEV | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote cod |
CVE-2024-21412 |
0.9941
|
99.9% | — | — | KEV RW | Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allow |
CVE-2024-4885 |
0.9929
|
99.9% | — | — | KEV | Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticat |
CVE-2023-28771 |
0.9928
|
99.9% | — | — | KEV | Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handli |
CVE-2023-34048 |
0.9923
|
99.9% | — | — | KEV | VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation |
CVE-2022-30333 |
0.9923
|
99.9% | — | — | KEV RW | RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an a |
CVE-2023-22515 |
0.9922
|
99.9% | — | — | KEV RW | Atlassian Confluence Data Center and Server contains a broken access control vulnerability |
CVE-2024-27348 |
0.9921
|
99.9% | — | — | KEV | Apache HugeGraph-Server contains an improper access control vulnerability that could allow |
CVE-2022-36804 |
0.9917
|
99.9% | — | — | KEV | Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command inj |