Exploit Prediction Scoring System (EPSS)

  1. Home
  2. Exploit Predictions
Exploit Predictions

EPSS is a system that predicts the likelihood of a vulnerability being exploited in the wild. It uses machine learning models to predict the likelihood of a vulnerability being exploited in the wild. The system uses data from the National Vulnerability Database (NVD) and the Common Vulnerability Scoring System (CVSS) to train the models.

Top-rated Vulnerabilities from the last two days


windows 10

CVE-2020-0796

Prediction +94.42

10.0 CRITICAL

linear emerge essential f

CVE-2019-7256

Prediction +94.40

10.0 HIGH

application delivery cont

CVE-2020-8193

Prediction +94.39

6.5 MEDIUM

r6700 firmware

CVE-2016-6277

Prediction +94.33

9.3 HIGH

windows 7

CVE-2021-34527

Prediction +94.24

9.0 HIGH

pan os

CVE-2017-15944

Prediction +94.10

9.8 CRITICAL

playsms

CVE-2020-8644

Prediction +94.06

9.8 CRITICAL

exchange server

CVE-2021-34523

Prediction +94.06

9.8 CRITICAL

exchange server

CVE-2021-26855

Prediction +94.03

9.8 CRITICAL

pan os

CVE-2017-15944

Prediction +94.00

9.8 CRITICAL

dir 615 firmware

CVE-2014-8361

Prediction +93.99

10.0 HIGH

mirth connect

CVE-2023-37679

Prediction +93.78

9.8 CRITICAL

Top 10 Vulnerabilities with the highest Delta (score shifts over the last two days)

EPSS Scoring Date CVE Id Vendor Score CVE Published Date Delta
April 18, 2026 CVE-2002-1148 Apache 67.27 Oct. 11, 2002, 4 a.m.

30.58

April 18, 2026 CVE-2017-6738 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6738 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6743 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6743 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6737 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6737 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6739 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2017-6739 Cisco 10.03 July 17, 2017, 9:29 p.m.

-24.14

April 18, 2026 CVE-2016-5696 Google 51.99 Aug. 6, 2016, 8:59 p.m.

22.83