{
 "generated_on": "2026-11-09",
 "list_definition": "CISA KEV entries ranked by EPSS score (desc), then EPSS percentile (desc), then KEV date added (earlier first), then CVE id.",
 "kev": {
  "catalog_version": "2026.11.09",
  "date_released": "2026-11-09T16:16:16.4275Z",
  "count_in_feed_field": 1772,
  "count_entries": 1772,
  "entries_without_epss_score": 0,
  "cves_without_epss_score": []
 },
 "epss": {
  "model_version": "v2026.06.15",
  "score_date": "2026-11-09T12:00:23Z",
  "epss_date_values": [
   "2026-11-09"
  ]
 },
 "list_size": 1000,
 "epss_range_in_list": {
  "max": 0.99999,
  "min": 0.37858
 },
 "ransomware": {
  "counts": {
   "Known": 262,
   "Unknown": 738
  },
  "known_share_pct": 26.2
 },
 "by_vendor": [
  [
   "Microsoft",
   207
  ],
  [
   "Adobe",
   59
  ],
  [
   "Apache",
   41
  ],
  [
   "Oracle",
   37
  ],
  [
   "Cisco",
   36
  ],
  [
   "Ivanti",
   33
  ],
  [
   "D-Link",
   23
  ],
  [
   "Google",
   23
  ],
  [
   "Fortinet",
   21
  ],
  [
   "VMware",
   16
  ],
  [
   "Citrix",
   14
  ],
  [
   "Atlassian",
   14
  ],
  [
   "Synacor",
   12
  ],
  [
   "Palo Alto Networks",
   11
  ],
  [
   "Zoho",
   9
  ],
  [
   "Progress",
   9
  ],
  [
   "SolarWinds",
   9
  ],
  [
   "Roundcube",
   9
  ],
  [
   "NETGEAR",
   8
  ],
  [
   "SAP",
   8
  ],
  [
   "Linux",
   8
  ],
  [
   "SonicWall",
   7
  ],
  [
   "Mozilla",
   7
  ],
  [
   "Apple",
   7
  ],
  [
   "Zyxel",
   6
  ],
  [
   "IBM",
   6
  ],
  [
   "Red Hat",
   6
  ],
  [
   "QNAP",
   6
  ],
  [
   "F5",
   5
  ],
  [
   "Jenkins",
   5
  ],
  [
   "GNU",
   5
  ],
  [
   "Sophos",
   5
  ],
  [
   "DrayTek",
   5
  ],
  [
   "RARLAB",
   5
  ],
  [
   "GitLab",
   5
  ],
  [
   "Mitel",
   5
  ],
  [
   "Juniper",
   5
  ],
  [
   "PaperCut",
   4
  ],
  [
   "TP-Link",
   4
  ],
  [
   "Langflow",
   4
  ],
  [
   "Drupal",
   4
  ],
  [
   "JetBrains",
   4
  ],
  [
   "Check Point",
   4
  ],
  [
   "Exim",
   4
  ],
  [
   "WordPress",
   4
  ],
  [
   "SimpleHelp ",
   4
  ],
  [
   "Gladinet",
   4
  ],
  [
   "Ubiquiti",
   4
  ],
  [
   "Nagios",
   4
  ],
  [
   "PHP Group",
   3
  ],
  [
   "Fortra",
   3
  ],
  [
   "PHP",
   3
  ],
  [
   "Realtek",
   3
  ],
  [
   "CrushFTP",
   3
  ],
  [
   "Laravel",
   3
  ],
  [
   "VMware Tanzu",
   3
  ],
  [
   "OSGeo",
   3
  ],
  [
   "Elastic",
   3
  ],
  [
   "SaltStack",
   3
  ],
  [
   "SysAid",
   3
  ],
  [
   "Rails",
   3
  ],
  [
   "Sitecore",
   3
  ],
  [
   "ImageMagick",
   3
  ],
  [
   "Kentico",
   3
  ],
  [
   "Dassault Systèmes",
   3
  ],
  [
   "SmarterTools",
   3
  ],
  [
   "Sangoma",
   3
  ],
  [
   "DotNetNuke (DNN)",
   3
  ],
  [
   "BeyondTrust",
   3
  ],
  [
   "Qlik",
   3
  ],
  [
   "IETF",
   2
  ],
  [
   "Hikvision",
   2
  ],
  [
   "CWP",
   2
  ],
  [
   "Dahua",
   2
  ],
  [
   "ConnectWise",
   2
  ],
  [
   "ServiceNow",
   2
  ],
  [
   "Sudo",
   2
  ],
  [
   "Dasan",
   2
  ],
  [
   "Grafana Labs",
   2
  ],
  [
   "Craft CMS",
   2
  ],
  [
   "vBulletin",
   2
  ],
  [
   "ThinkPHP",
   2
  ],
  [
   "Rejetto",
   2
  ],
  [
   "ASUS",
   2
  ],
  [
   "Sonatype",
   2
  ],
  [
   "Cleo",
   2
  ],
  [
   "Aviatrix",
   2
  ],
  [
   "Metabase",
   2
  ],
  [
   "Paessler",
   2
  ],
  [
   "Hitachi Vantara",
   2
  ],
  [
   "MikroTik",
   2
  ],
  [
   "Unraid",
   2
  ],
  [
   "Zabbix",
   2
  ],
  [
   "NUUO",
   2
  ],
  [
   "CyberPersons",
   2
  ],
  [
   "Wing FTP Server",
   2
  ],
  [
   "WatchGuard",
   2
  ],
  [
   "EyesOfNetwork",
   2
  ],
  [
   "BerriAI",
   2
  ],
  [
   "Veeam",
   2
  ],
  [
   "Kaseya",
   2
  ],
  [
   "Tenda",
   2
  ],
  [
   "MongoDB",
   2
  ],
  [
   "PEAR",
   2
  ],
  [
   "Ahsay",
   2
  ],
  [
   "Telerik",
   2
  ],
  [
   "PTZOptics",
   2
  ],
  [
   "Hewlett Packard (HP)",
   2
  ],
  [
   "TIBCO",
   2
  ],
  [
   "ownCloud",
   2
  ],
  [
   "Android",
   2
  ],
  [
   "OpenPLC",
   2
  ],
  [
   "OpenSSL",
   1
  ],
  [
   "ForgeRock",
   1
  ],
  [
   "PHPUnit",
   1
  ],
  [
   "WSO2",
   1
  ],
  [
   "Ignite Realtime",
   1
  ],
  [
   "Arcadyan",
   1
  ],
  [
   "Perl",
   1
  ],
  [
   "XWiki",
   1
  ],
  [
   "Liferay",
   1
  ],
  [
   "Teclib",
   1
  ],
  [
   "Cacti",
   1
  ],
  [
   "Joomla!",
   1
  ],
  [
   "Marimo",
   1
  ],
  [
   "Meta",
   1
  ],
  [
   "Webmin",
   1
  ],
  [
   "Omnissa",
   1
  ],
  [
   "ISC",
   1
  ],
  [
   "ProFTPD",
   1
  ],
  [
   "Samba",
   1
  ],
  [
   "Redis",
   1
  ],
  [
   "Nostromo",
   1
  ],
  [
   "n8n",
   1
  ],
  [
   "OpenBSD",
   1
  ],
  [
   "Crestron",
   1
  ],
  [
   "Erlang",
   1
  ],
  [
   "WebPros",
   1
  ],
  [
   "Adminer",
   1
  ],
  [
   "XStream",
   1
  ],
  [
   "Ruckus Wireless",
   1
  ],
  [
   "SolarView",
   1
  ],
  [
   "Sunhillo",
   1
  ],
  [
   "Commvault",
   1
  ],
  [
   "Alcatel",
   1
  ],
  [
   "Embedthis",
   1
  ],
  [
   "Nice",
   1
  ],
  [
   "Artifex",
   1
  ],
  [
   "Splunk",
   1
  ],
  [
   "Digiever",
   1
  ],
  [
   "Micro Focus",
   1
  ],
  [
   "phpMyAdmin",
   1
  ],
  [
   "TVT",
   1
  ],
  [
   "ZK Framework",
   1
  ],
  [
   "NAKIVO",
   1
  ],
  [
   "Primetek",
   1
  ],
  [
   "React Native Community",
   1
  ],
  [
   "Wazuh",
   1
  ],
  [
   "Smartbedded",
   1
  ],
  [
   "ZKTeco",
   1
  ],
  [
   "Intel",
   1
  ],
  [
   "Samsung",
   1
  ],
  [
   "ProjectSend",
   1
  ],
  [
   "Quest",
   1
  ],
  [
   "dotCMS",
   1
  ],
  [
   "October CMS",
   1
  ],
  [
   "Npm package",
   1
  ],
  [
   "Hewlett Packard Enterprise (HPE)",
   1
  ],
  [
   "Fuel CMS",
   1
  ],
  [
   "LG",
   1
  ],
  [
   "JoomShaper",
   1
  ],
  [
   "Yiiframework",
   1
  ],
  [
   "Barracuda Networks",
   1
  ],
  [
   "PlaySMS",
   1
  ],
  [
   "NextGen Healthcare",
   1
  ],
  [
   "Widget Factory",
   1
  ],
  [
   "Gogs",
   1
  ],
  [
   "JQuery",
   1
  ],
  [
   "Grandstream",
   1
  ],
  [
   "MinIO",
   1
  ],
  [
   "TerraMaster",
   1
  ],
  [
   "Yealink",
   1
  ],
  [
   "D-Link and TRENDnet",
   1
  ],
  [
   "Ajax.NET Professional",
   1
  ],
  [
   "Versa",
   1
  ],
  [
   "SugarCRM",
   1
  ],
  [
   "Dell",
   1
  ],
  [
   "Pi-hole",
   1
  ],
  [
   "rConfig",
   1
  ],
  [
   "Delta Electronics",
   1
  ],
  [
   "BQE",
   1
  ],
  [
   "Vite",
   1
  ],
  [
   "ChakraCore",
   1
  ],
  [
   "InduSoft",
   1
  ],
  [
   "Edimax",
   1
  ],
  [
   "Collabora",
   1
  ],
  [
   "Plex",
   1
  ],
  [
   "Schneider Electric",
   1
  ],
  [
   "tj-actions",
   1
  ],
  [
   "WebRTC",
   1
  ],
  [
   "Kludex",
   1
  ],
  [
   "Array Networks ",
   1
  ],
  [
   "Meta Platforms",
   1
  ],
  [
   "Veritas",
   1
  ],
  [
   "Arcserve",
   1
  ],
  [
   "Rockwell",
   1
  ],
  [
   "Broadcom",
   1
  ],
  [
   "AMI",
   1
  ],
  [
   "Aquasecurity",
   1
  ],
  [
   "Ray-Project",
   1
  ],
  [
   "Accellion",
   1
  ],
  [
   "Advantive",
   1
  ],
  [
   "Acronis",
   1
  ],
  [
   "FXC",
   1
  ],
  [
   "Zammad GmbH",
   1
  ],
  [
   "Docker",
   1
  ],
  [
   "Reolink",
   1
  ],
  [
   "7-Zip",
   1
  ],
  [
   "PTC",
   1
  ],
  [
   "FatPipe",
   1
  ]
 ],
 "by_cwe": [
  [
   "CWE-78",
   89
  ],
  [
   "CWE-20",
   69
  ],
  [
   "CWE-22",
   65
  ],
  [
   "CWE-502",
   54
  ],
  [
   "CWE-94",
   54
  ],
  [
   "CWE-119",
   52
  ],
  [
   "CWE-787",
   38
  ],
  [
   "CWE-306",
   32
  ],
  [
   "CWE-287",
   31
  ],
  [
   "CWE-416",
   29
  ],
  [
   "CWE-284",
   29
  ],
  [
   "CWE-89",
   26
  ],
  [
   "CWE-77",
   25
  ],
  [
   "CWE-918",
   16
  ],
  [
   "CWE-288",
   16
  ],
  [
   "CWE-79",
   16
  ],
  [
   "CWE-434",
   15
  ],
  [
   "CWE-200",
   14
  ],
  [
   "CWE-122",
   14
  ],
  [
   "CWE-843",
   13
  ],
  [
   "CWE-264",
   12
  ],
  [
   "CWE-74",
   11
  ],
  [
   "CWE-863",
   8
  ],
  [
   "CWE-23",
   7
  ],
  [
   "CWE-862",
   7
  ],
  [
   "CWE-399",
   7
  ],
  [
   "CWE-693",
   6
  ],
  [
   "CWE-290",
   6
  ],
  [
   "CWE-755",
   5
  ],
  [
   "CWE-917",
   5
  ],
  [
   "CWE-611",
   5
  ],
  [
   "CWE-36",
   5
  ],
  [
   "CWE-95",
   5
  ],
  [
   "CWE-138",
   5
  ],
  [
   "CWE-269",
   5
  ],
  [
   "CWE-120",
   5
  ],
  [
   "CWE-59",
   5
  ],
  [
   "CWE-798",
   5
  ],
  [
   "CWE-125",
   4
  ],
  [
   "CWE-121",
   4
  ],
  [
   "CWE-88",
   4
  ],
  [
   "CWE-552",
   4
  ],
  [
   "CWE-444",
   4
  ],
  [
   "CWE-326",
   4
  ],
  [
   "CWE-522",
   4
  ],
  [
   "CWE-190",
   4
  ],
  [
   "CWE-189",
   4
  ],
  [
   "CWE-400",
   3
  ],
  [
   "CWE-824",
   3
  ],
  [
   "CWE-352",
   3
  ],
  [
   "CWE-158",
   3
  ],
  [
   "CWE-1188",
   3
  ],
  [
   "CWE-1336",
   3
  ],
  [
   "CWE-276",
   3
  ],
  [
   "CWE-295",
   3
  ],
  [
   "CWE-73",
   3
  ],
  [
   "CWE-285",
   3
  ],
  [
   "CWE-347",
   3
  ],
  [
   "CWE-1325",
   2
  ],
  [
   "CWE-1419",
   2
  ],
  [
   "CWE-470",
   2
  ],
  [
   "CWE-303",
   2
  ],
  [
   "CWE-425",
   2
  ],
  [
   "CWE-1390",
   2
  ],
  [
   "CWE-420",
   2
  ],
  [
   "CWE-184",
   2
  ],
  [
   "CWE-19",
   2
  ],
  [
   "CWE-362",
   2
  ],
  [
   "CWE-610",
   2
  ],
  [
   "CWE-209",
   2
  ],
  [
   "CWE-35",
   2
  ],
  [
   "CWE-704",
   2
  ],
  [
   "CWE-98",
   2
  ],
  [
   "CWE-473",
   2
  ],
  [
   "CWE-255",
   2
  ],
  [
   "CWE-451",
   2
  ],
  [
   "CWE-807",
   2
  ],
  [
   "CWE-404",
   2
  ],
  [
   "CWE-506",
   2
  ],
  [
   "CWE-829",
   2
  ],
  [
   "CWE-134",
   2
  ],
  [
   "CWE-732",
   2
  ],
  [
   "CWE-27",
   1
  ],
  [
   "CWE-305",
   1
  ],
  [
   "CWE-1287",
   1
  ],
  [
   "CWE-193",
   1
  ],
  [
   "CWE-116",
   1
  ],
  [
   "CWE-44",
   1
  ],
  [
   "CWE-191",
   1
  ],
  [
   "CWE-39",
   1
  ],
  [
   "CWE-351",
   1
  ],
  [
   "CWE-706",
   1
  ],
  [
   "CWE-197",
   1
  ],
  [
   "CWE-330",
   1
  ],
  [
   "CWE-91",
   1
  ],
  [
   "CWE-913",
   1
  ],
  [
   "CWE-55",
   1
  ],
  [
   "CWE-311",
   1
  ],
  [
   "CWE-669",
   1
  ],
  [
   "CWE-294",
   1
  ],
  [
   "CWE-912",
   1
  ],
  [
   "CWE-790",
   1
  ],
  [
   "CWE-565",
   1
  ],
  [
   "CWE-441",
   1
  ],
  [
   "CWE-321",
   1
  ],
  [
   "CWE-93",
   1
  ],
  [
   "CWE-697",
   1
  ],
  [
   "CWE-346",
   1
  ],
  [
   "CWE-25",
   1
  ],
  [
   "CWE-96",
   1
  ],
  [
   "CWE-665",
   1
  ],
  [
   "CWE-647",
   1
  ],
  [
   "CWE-424",
   1
  ],
  [
   "CWE-406",
   1
  ],
  [
   "CWE-130",
   1
  ],
  [
   "CWE-252",
   1
  ],
  [
   "CWE-497",
   1
  ],
  [
   "CWE-782",
   1
  ],
  [
   "CWE-415",
   1
  ],
  [
   "CWE-80",
   1
  ],
  [
   "CWE-648",
   1
  ],
  [
   "CWE-281",
   1
  ],
  [
   "CWE-785",
   1
  ],
  [
   "CWE-259",
   1
  ],
  [
   "CWE-835",
   1
  ],
  [
   "CWE-367",
   1
  ],
  [
   "CWE-1220",
   1
  ],
  [
   "CWE-707",
   1
  ],
  [
   "CWE-749",
   1
  ],
  [
   "CWE-822",
   1
  ],
  [
   "CWE-823",
   1
  ],
  [
   "CWE-1393",
   1
  ],
  [
   "CWE-384",
   1
  ],
  [
   "CWE-178",
   1
  ],
  [
   "CWE-357",
   1
  ],
  [
   "CWE-40",
   1
  ],
  [
   "CWE-1386",
   1
  ],
  [
   "CWE-1285",
   1
  ],
  [
   "CWE-177",
   1
  ]
 ],
 "cves_without_cwe": 84,
 "by_year_added": [
  [
   "2021",
   198
  ],
  [
   "2022",
   328
  ],
  [
   "2023",
   98
  ],
  [
   "2024",
   114
  ],
  [
   "2025",
   128
  ],
  [
   "2026",
   134
  ]
 ],
 "sources": [
  "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
  "https://api.first.org/data/v1/epss",
  "https://epss.empiricalsecurity.com/epss_scores-current.csv.gz"
 ]
}