Skip to content

B13 Threat Intelligence Brief

Generated: 2026-10-16T09:53:36.728719Z

CISA KEV Catalog: 2026.10.15

Priority Model: B13-KEV-v1

Intelligence Summary

Priority Count
CRITICAL 223
HIGH 440
MEDIUM 1083
LOW 0
TOTAL 1746

What Changed

Change Count
NEW 1
CHANGED 0
REMOVED 0
UNCHANGED 1745

Change Priority Breakdown

Priority New Changed
CRITICAL 0 0
HIGH 0 0
MEDIUM 1 0
LOW 0 0

New Intelligence

Showing 1 of 1 records.

Priority CVE Vendor Product EPSS Ransomware
MEDIUM CVE-2026-21589 Atlassian Multiple Products 0.0278 unknown

Updated Intelligence

Showing 0 of 0 records.

No records in this category.

Removed From CISA KEV

Showing 0 of 0 records.

No CISA KEV records were removed.

Top Priorities

1. CVE-2017-5638

  • Priority: CRITICAL
  • Vendor: Apache
  • Product: Struts
  • Title: Apache Struts Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

2. CVE-2018-13379

  • Priority: CRITICAL
  • Vendor: Fortinet
  • Product: FortiOS
  • Title: Fortinet FortiOS SSL VPN Path Traversal Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

3. CVE-2019-0708

  • Priority: CRITICAL
  • Vendor: Microsoft
  • Product: Remote Desktop Services
  • Title: Microsoft Remote Desktop Services Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

4. CVE-2019-11510

  • Priority: CRITICAL
  • Vendor: Ivanti
  • Product: Pulse Connect Secure
  • Title: Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

5. CVE-2019-19781

  • Priority: CRITICAL
  • Vendor: Citrix
  • Product: Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
  • Title: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

6. CVE-2020-5902

  • Priority: CRITICAL
  • Vendor: F5
  • Product: BIG-IP
  • Title: F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

7. CVE-2021-21985

  • Priority: CRITICAL
  • Vendor: VMware
  • Product: vCenter Server
  • Title: VMware vCenter Server Improper Input Validation Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 0.9999
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

8. CVE-2021-22005

  • Priority: CRITICAL
  • Vendor: VMware
  • Product: vCenter Server
  • Title: VMware vCenter Server File Upload Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

9. CVE-2021-26084

  • Priority: CRITICAL
  • Vendor: Atlassian
  • Product: Confluence Server and Data Center
  • Title: Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 0.9999
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

10. CVE-2021-34473

  • Priority: CRITICAL
  • Vendor: Microsoft
  • Product: Exchange Server
  • Title: Microsoft Exchange Server Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

11. CVE-2021-35464

  • Priority: CRITICAL
  • Vendor: ForgeRock
  • Product: Access Management (AM)
  • Title: ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 0.9999
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

12. CVE-2021-40438

  • Priority: CRITICAL
  • Vendor: Apache
  • Product: Apache
  • Title: Apache HTTP Server-Side Request Forgery (SSRF)
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

13. CVE-2021-44228

  • Priority: CRITICAL
  • Vendor: Apache
  • Product: Log4j2
  • Title: Apache Log4j2 Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

14. CVE-2022-26134

  • Priority: CRITICAL
  • Vendor: Atlassian
  • Product: Confluence Server/Data Center
  • Title: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 0.9999
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.

15. CVE-2022-29464

  • Priority: CRITICAL
  • Vendor: WSO2
  • Product: Multiple Products
  • Title: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 0.9999
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

16. CVE-2023-0669

  • Priority: CRITICAL
  • Vendor: Fortra
  • Product: GoAnywhere MFT
  • Title: Fortra GoAnywhere MFT Remote Code Execution Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

17. CVE-2023-22518

  • Priority: CRITICAL
  • Vendor: Atlassian
  • Product: Confluence Data Center and Server
  • Title: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

18. CVE-2023-27350

  • Priority: CRITICAL
  • Vendor: PaperCut
  • Product: MF/NG
  • Title: PaperCut MF/NG Improper Access Control Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply updates per vendor instructions.

19. CVE-2023-35078

  • Priority: CRITICAL
  • Vendor: Ivanti
  • Product: Endpoint Manager Mobile (EPMM)
  • Title: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

20. CVE-2023-35082

  • Priority: CRITICAL
  • Vendor: Ivanti
  • Product: Endpoint Manager Mobile (EPMM) and MobileIron Core
  • Title: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
  • EPSS: 1.0000
  • EPSS Percentile: 1.0000
  • Known ransomware use: known

Why B13 prioritized this:

  • CISA KEV confirms exploitation in the wild
  • CISA KEV reports known ransomware campaign use
  • EPSS probability is at or above 0.90

CISA required action:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Sources

  • CISA Known Exploited Vulnerabilities
  • FIRST Exploit Prediction Scoring System

This brief is generated for defensive prioritization and threat-intelligence analysis.