boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Saturday, May 23, 2026 · all times UTC← 2026-05-22 · archive · 2026-05-24 →

41 CVEs published, led by Edimax (5).

41 CVEs published May 23, 2026: 2 critical, 23 high, 3 medium, 13 low; 0 in the KEV catalog at press time; 1 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 16 in the results table.

Standings

League
MTDYTD2025 same span2025 full
CVEs published1111230310112564
KEV catalog size1671

38 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
linux227554674483602720.47.8.0014+130 ▲
microsoft164539463711112380275.07.8.0048-21 ▼
apple134001022194717.56.2.0037+13 ▲
red hat93251782400.07.5.0041-2 ▼
google16220136074418.28.4.0035+15 ▲
freebsd770520000.07.8.0020+7 ▲
suse220200000.08.2.0020+2 ▲
android000000150———0
Network & Infrastructure
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
cisco513312096861.58.6.1247+2 ▲
fortinet16130028350.07.9.4330-2 ▼
ivanti25010033480.08.8.8056+1 ▲
f52320007133.39.2.0996+2 ▲
ubiquiti231200400.08.8.0068+2 ▲
broadcom02000042100.0—.19900
palo alto networks110000141100.0—.3207+1 ▲
citrix010000191100.0—.84470
Open Source Ecosystems
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
apache920412404015.07.5.0090+6 ▲
mozilla5532001300.09.6.0045+5 ▲
docker330300100.08.8.0022+3 ▲
drupal3310205133.35.1.0021+3 ▲
gitlab02000042100.0—.44510
jenkins00000060———0
joomla00000010———0
wordpress00000050———0
Enterprise Applications
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
progress440400900.07.5.0036+4 ▲
adobe14010075375.08.6.2776-2 ▼
solarwinds031000113100.09.8.83620
oracle0202004000.07.5.00660
zohocorp110100000.08.4.0170+1 ▲
atlassian000000130———0
ibm00000070———0
sap000000120———0
Industrial & Embedded
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
d-link12010026150.08.7.4511+1 ▲
siemens110100100.08.7.0032+1 ▲
hikvision01000021100.0—1.00000
dahua00000020———0
qnap00000080———0
schneider electric00000010———0
tp-link00000060———0
Other
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
concrete cms4444191321000.05.7.0015+44 ▲
open ises3737214210000.06.9.0021+37 ▲
netatalk3333113910000.06.4.0030+33 ▲
grafana102727162000.06.5.0033+7 ▲
dell121806110215.66.7.0019+7 ▲
nvidia16167900000.08.4.0059+16 ▲
trend micro1616213101216.37.8.0030+16 ▲
givanz11152760000.08.3.0028+7 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVEEPSS%ileCVSS
CVE-2026-31431.9991100.07.8
CVE-2008-4250.987599.9—
CVE-2026-41940.979399.99.3
CVE-2026-43284.932499.88.8
CVE-2026-43500.928599.87.8
CVE-2024-7399.919499.8—
CVE-2010-0249.918899.8—
CVE-2026-20182.915299.8—
CVE-2025-29635.896499.8—
CVE-2026-42208.894299.8—
Highest CVSS
CVECVSSEPSSNote
CVE-2026-4399710.0.0098
CVE-2026-4282610.0.0084
CVE-2026-2022310.0.0083
CVE-2026-4400510.0.0083
CVE-2026-4400610.0.0081
CVE-2026-4659510.0.0050
CVE-2026-4282210.0.0049
CVE-2026-3371210.0.0035
CVE-2026-915210.0.0034
CVE-2026-4290110.0.0030
Most disclosures (vendor)
VendorCVEs
linux295
microsoft166
concrete cms44
open ises37
netatalk33
google16
nvidia16
trend micro16
apache15
apple13
Most KEV additions (YTD)
VendorKEV
microsoft27
cisco8
apple7
google4
ivanti4
synacor4
adobe3
fortinet3
smartertools3
solarwinds3
Most-affected ecosystems
EcosystemAdvisories
Maven4
PyPI1
npm1
Fastest to KEV
CVEVendorDays
CVE-2008-4250Microsoft0
CVE-2009-1537Microsoft0
CVE-2009-3459Adobe0
CVE-2010-0249Microsoft0
CVE-2010-0806Microsoft0
CVE-2024-1708ConnectWise0
CVE-2024-57726n/a0
CVE-2024-57728n/a0
CVE-2024-7399Samsung0
CVE-2025-29635D-Link0
Longest unpatched (KEV due date passed)
CVEVendorDueDays over
CVE-2021-27104Accellion2021-11-171648
CVE-2021-27102Accellion2021-11-171648
CVE-2021-27101Accellion2021-11-171648
CVE-2021-27103Accellion2021-11-171648
CVE-2021-21017Adobe2021-11-171648
CVE-2021-28550Adobe2021-11-171648
CVE-2021-42013Apache2021-11-171648
CVE-2021-41773Apache2021-11-171648
CVE-2021-30858Apple2021-11-171648
CVE-2021-30860Apple2021-11-171648

Transactions

No status changes recorded.

Yesterday's Results

How to read these box scores · glossary

41 CVEs published. 25 box scores, 16 table rows — nothing truncated.

CVE-2026-46300HIGH
Linux Linux — net: skbuff: preserve shared-frag marker during coalescing
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0701   93.6     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    cef401de7be8c4e155c6746bfccf721a4fa5fab9 –  —
  Linux    3.9 –                                       5.10.257
TIMELINE
  May 13  Reserved by CNA
  May 23  Published (CNA: Linux)
CWE-787, CWE-123 · CNA: Linux · CVSS v3.1 · 50 references · NVD status: Modified
CVE-2018-25357CRITICAL
Dolibarr ERP CRM 7.0.3 Remote Code Execution via install/step1.php
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0170   75.4     —
AFFECTED
  Product           Versions     Fixed
  Dolibarr ERP CRM  unspecified  —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-94 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Analyzed
CVE-2026-9343LOW
Edimax EW-7438RPn webs formWpsStart os command injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0152   72.5     —
AFFECTED
  Product     Versions  Fixed
  EW-7438RPn  1.0 –     —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred
CVE-2026-9297LOW
Edimax BR-6428NS POST Request formWlbasic command injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0140   70.3     —
AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-9296LOW
Edimax BR-6428NS POST Request formWlanM system command injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0116   64.6     —
AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25358HIGH
D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0059   45.4     —
AFFECTED
  Product  Versions     Fixed
  DIR-601  unspecified  —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-497 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Awaiting Analysis
CVE-2026-9294HIGH
Edimax BR-6428NS POST Request formWanTcpipSetup buffer overflow
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0054   43.2     —
AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-119, CWE-120 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-9295HIGH
Edimax BR-6428NS POST Request formWirelessTbl buffer overflow
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0054   43.2     —
AFFECTED
  Product    Versions  Fixed
  BR-6428NS  1.10 –    —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-119, CWE-120 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25353HIGH
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0045   37.7     —
AFFECTED
  Product               Versions     Fixed
  Redaxo CMS Mediapool  unspecified  —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-863 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25350CRITICAL
userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0043   36.3     —
AFFECTED
  Product    Versions  Fixed
  userSpice  4.3.24 –  —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-204 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred
CVE-2026-9284HIGH
WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  L  N    8.2   .0040   33.5     —
AFFECTED
  Product                      Versions     Fixed
  WooCommerce PayPal Payments  unspecified  —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: Wordfence)
CWE-862 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Deferred
CVE-2018-25348HIGH
harmistechnology Ek Rishta — Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0036   29.1     —
AFFECTED
  Product    Versions  Fixed
  Ek Rishta  2.10 –    —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-89 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25351HIGH
harmistechnology EkRishta — Joomla! Component EkRishta 2.10 SQL Injection via username
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0036   29.1     —
AFFECTED
  Product   Versions  Fixed
  EkRishta  2.10 –    —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-89 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-43503HIGH
Linux Linux — net: skbuff: propagate shared-frag marker through frag-transfer helpers
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  C  H  H  H    8.8   .0034   26.7     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    cef401de7be8c4e155c6746bfccf721a4fa5fab9 –  —
  Linux    3.9 –                                       5.10.257
TIMELINE
  May 1   Reserved by CNA
  May 23  Published (CNA: Linux)
CWE-664 · CNA: Linux · CVSS v3.1 · 41 references · NVD status: Modified
CVE-2018-25340HIGH
Behance Smartshop — Smartshop 1 SQL Injection via category.php
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.4     —
AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-89 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25341HIGH
Behance Smartshop — Smartshop 1 SQL Injection via product.php id Parameter
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.4     —
AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-89 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2018-25342HIGH
Behance Smartshop — Smartshop 1 SQL Injection via search.php
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   L   N    8.8   .0033   26.4     —
AFFECTED
  Product    Versions  Fixed
  Smartshop  1.0 –     —
TIMELINE
  May 23  Reserved by CNA
  May 23  Published (CNA: VulnCheck)
CWE-89 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-9306LOW
QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   N   N    2.9   .0029   21.7     —
AFFECTED
  Product  Versions  Fixed
  new-api  0.12.0 –  —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-285, CWE-639 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-6419HIGH
Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0026   17.6     —
AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —
TIMELINE
  Apr 16  Reserved by CNA
  May 23  Published (CNA: Wordfence)
CWE-269 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred
CVE-2026-6895HIGH
Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0025   16.4     —
AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —
TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)
CWE-269 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred
CVE-2026-6897HIGH
Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0024   15.9     —
AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —
TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)
CWE-269 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred
CVE-2026-6898HIGH
WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0024   15.9     —
AFFECTED
  Product          Versions     Fixed
  Wishlist Member  unspecified  —
TIMELINE
  Apr 23  Reserved by CNA
  May 23  Published (CNA: Wordfence)
CWE-269 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred
CVE-2026-9302LOW
546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0024   15.0     —
AFFECTED
  Product                   Versions                                    Fixed
  vps-inventory-monitoring  98c00b370668c96ae75e91c15548d9ea113652d9 –  —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-74, CWE-94 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-9299LOW
omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0023   13.9     —
AFFECTED
  Product  Versions  Fixed
  amf      2.1.0 –   —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-119 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-9300LOW
omec-project amf NGSetupRequest memory corruption
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0023   13.9     —
AFFECTED
  Product  Versions  Fixed
  amf      2.1.0 –   —
TIMELINE
  May 22  Reserved by CNA
  May 23  Published (CNA: VulDB)
CWE-119 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
Remainder (ranked, continued)
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-93012.113.9omec-projectamfCWE-119omec-project amf NGReset Message memory corruption
CVE-2026-92982.113.9omec-projectamfCWE-119omec-project amf PathSwitchRequest memory corruption
CVE-2018-253477.112.0web-doradoContact Form MakerCWE-89WordPress Contact Form Maker Plugin 1.12.20 SQL Injection
CVE-2018-253527.112.0ultimate-form-builder-liteUltimate Form Builder LiteCWE-89WordPress Ultimate Form Builder Lite 1.3.7 SQL Injection via entry_id
CVE-2026-93041.310.0calcomcal.diyCWE-918calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery
CVE-2018-253467.19.810WebForm MakerCWE-89WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php
CVE-2026-93032.19.4calcomcal.diyCWE-352calcom cal.diy cross-site request forgery
CVE-2026-93052.19.3QuantumNousnew-apiCWE-74QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection
CVE-2026-93422.19.3SourceCodesterHospitals Patient Records Management SystemCWE-74SourceCodester Hospitals Patient Records Management System view_history.php s…
CVE-2018-253458.66.310-StrikeNetwork ScannerCWE-12010-Strike Network Scanner 3.0 Local Buffer Overflow SEH
CVE-2018-253448.65.910-StrikeNetwork Inventory ExplorerCWE-12110-Strike Network Inventory Explorer 8.54 Buffer Overflow SEH
CVE-2018-253558.65.9AudiograbberAudiograbberCWE-120Audiograbber 1.83 Local Buffer Overflow via SEH
CVE-2018-253568.65.9SippSIPpCWE-120SIPp 3.6 Local Buffer Overflow via Command-line Arguments
CVE-2018-253495.15.1UserSpiceuserSpiceCWE-79userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header
CVE-2018-253435.33.2BehanceSmartshopCWE-352Smartshop 1 Cross-Site Request Forgery via editprofile.php
CVE-2018-253545.33.2JomresJomresCWE-352Joomla Component jomres 9.11.2 Cross-Site Request Forgery

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-05-23 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion.