Security Box Score — May 26, 2026

275 CVEs published, led by IBM (20).

275 CVEs published May 26, 2026: 30 critical, 94 high, 119 medium, 32 low; 1 in the KEV catalog at press time; 20 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 250 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	1643	2855	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

79 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	230	556	67	448	41	0	11	2	0.4	7.8	.0014	+67 ▲
microsoft	160	530	46	371	111	2	286	19	3.6	7.8	.0047	-23 ▼
red hat	17	69	7	30	25	7	2	0	0.0	7.1	.0041	-2 ▼
apple	22	52	1	17	33	1	88	7	13.5	6.2	.0023	+22 ▲
google	16	23	0	17	6	0	77	4	17.4	8.8	.0034	+15 ▲
freebsd	7	7	0	5	2	0	0	0	0.0	7.8	.0020	+7 ▲
suse	2	2	0	2	0	0	0	0	0.0	8.2	.0020	+2 ▲
ubuntu	0	1	0	0	0	1	1	0	0.0	2.7	.0218	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	5	12	5	3	4	56	8	66.7	7.8	.1576	+5 ▲
fortinet	1	7	4	3	0	28	3	42.9	9.1	.8584	-2 ▼
checkpoint	6	6	0	3	3	3	0	0.0	6.5	.0338	+6 ▲
ivanti	2	5	2	3	0	25	4	80.0	8.8	.8056	+2 ▲
ubiquiti	2	3	1	2	0	3	0	0.0	8.8	.0068	+2 ▲
f5	2	2	2	0	0	4	1	50.0	9.2	.3901	+2 ▲
palo alto networks	2	2	1	1	0	13	1	50.0	8.6	.6281	+2 ▲
zyxel	1	1	0	0	1	9	0	0.0	6.5	.0023	+1 ▲

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	19	32	4	14	13	33	1	3.1	7.3	.0064	+16 ▲
mozilla	6	6	3	2	1	9	0	0.0	8.8	.0042	+6 ▲
docker	3	3	0	3	0	0	0	0.0	8.8	.0022	+3 ▲
drupal	3	3	1	0	2	4	1	33.3	5.1	.0021	+3 ▲
github	1	1	0	1	0	0	0	0.0	7.0	.0039	+1 ▲
gitlab	0	0	0	0	0	4	2	—	—	—	0
wordpress	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
ibm	20	20	6	10	4	6	0	0.0	7.5	.0027	+20 ▲
progress	4	4	0	4	0	6	0	0.0	7.5	.0036	+4 ▲
oracle	0	3	1	2	0	27	0	0.0	7.5	.0088	0
solarwinds	0	3	2	1	0	10	3	100.0	9.8	.8362	0
zohocorp	2	2	0	1	1	0	0	0.0	7.1	.0104	+2 ▲
adobe	0	2	0	2	0	19	2	100.0	8.6	.0368	-2 ▼
atlassian	0	0	0	0	0	13	0	—	—	—	0
sap	0	0	0	0	0	6	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	H	M	KEV	KEV/100	Med CVSS	Med EPSS	Δ
hitachi energy	2	2	0	2	0	0.0	5.7	.0014	+2 ▲
d-link	1	1	1	0	3	0.0	8.7	.0059	+1 ▲
siemens	1	1	1	0	0	0.0	8.7	.0032	+1 ▲
tp-link	0	0	0	0	1	—	—	—	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
concrete cms	44	44	1	9	13	21	0	5.7	.0015	+44 ▲
edimax	44	44	0	27	0	17	1	7.4	.0059	+44 ▲
open ises	37	37	2	14	21	0	0	6.9	.0021	+37 ▲
totolink	34	34	0	25	0	9	0	8.9	.0191	+34 ▲
netatalk	33	33	1	13	9	10	0	6.4	.0030	+33 ▲
nvidia	33	33	8	18	7	0	0	7.8	.0038	+33 ▲
grafana	10	27	2	7	16	2	2	6.5	.0033	+6 ▲
joomla! project	20	21	1	8	12	0	1	6.9	.0024	+19 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-31431	.9991	100.0	7.8
CVE-2026-41940	.9853	99.9	9.3
CVE-2026-0257	.9391	99.8	7.8
CVE-2026-43284	.9324	99.8	8.8
CVE-2026-43500	.9285	99.8	7.8
CVE-2026-20182	.9152	99.8	10.0
CVE-2026-42208	.8942	99.8	9.3
CVE-2026-9082	.8832	99.8	9.8
CVE-2024-1708	.8756	99.7	8.4
CVE-2026-42271	.8354	99.7	8.7

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-20182	10.0	.9152	KEV
CVE-2026-48172	10.0	.1891	KEV
CVE-2026-43997	10.0	.0098
CVE-2026-42826	10.0	.0084
CVE-2026-20223	10.0	.0083
CVE-2026-44005	10.0	.0083
CVE-2026-44006	10.0	.0081
CVE-2026-46595	10.0	.0050
CVE-2026-42822	10.0	.0049
CVE-2026-33712	10.0	.0035

Most disclosures (vendor)
Vendor	CVEs
linux	232
microsoft	161
concrete cms	44
edimax	44
open ises	37
totolink	34
netatalk	33
nvidia	33
apache	25
apple	22

Most KEV additions (YTD)
Vendor	KEV
microsoft	19
cisco	8
apple	7
google	4
ivanti	4
fortinet	3
smartertools	3
solarwinds	3
adobe	2
berriai	2

Most-affected ecosystems
Ecosystem	Advisories
Maven	10
crates.io	2
npm	2
PyPI	1

Fastest to KEV
CVE	Vendor	Days
CVE-2024-1708	ConnectWise	0
CVE-2026-31431	Linux	0
CVE-2026-32202	Microsoft	0
CVE-2026-34926	Trend Micro, Inc.	0
CVE-2026-41091	Microsoft	0
CVE-2026-41940	WebPros	0
CVE-2026-42208	BerriAI	0
CVE-2026-42897	Microsoft	0
CVE-2026-45498	Microsoft	0
CVE-2026-48172	LiteSpeed Technologies	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1651
CVE-2021-27102	n/a	2021-11-17	1651
CVE-2021-27101	n/a	2021-11-17	1651
CVE-2021-27103	n/a	2021-11-17	1651
CVE-2021-21017	Adobe	2021-11-17	1651
CVE-2021-28550	Adobe	2021-11-17	1651
CVE-2021-42013	Apache Software Foundation	2021-11-17	1651
CVE-2021-41773	Apache Software Foundation	2021-11-17	1651
CVE-2021-30858	Apple	2021-11-17	1651
CVE-2021-30860	Apple	2021-11-17	1651

Transactions

EXPLOIT PUBLISHED — lepture mistune: 4 CVEs (CVE-2026-44708, CVE-2026-44897, CVE-2026-44898, CVE-2026-44899). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2026-25104 (MediaArea MediaInfoLib). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-25713 (MediaArea MediaInfoLib). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-40033 (FreeRDP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44214 (rexxars eventsource-encoder). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44723 (VowpalWabbit vowpal_wabbit). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44729 (twentyhq twenty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44788 (adamhathcock sharpcompress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44837 (ViewComponent view_component). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44966 (shepherdwind velocity.js). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44985 (amir20 dozzle). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-45298 (amir20 dozzle). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-46624 (twentyhq twenty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48687. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48689. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48710 (Kludex starlette). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48864 (Red Hat Enterprise Linux 10). Public exploit reference added.

Yesterday's Results

How to read these box scores · glossary

275 CVEs published. 25 box scores, 250 table rows — nothing truncated.

CVE-2026-48172CRITICAL

LiteSpeed cPanel Plugin

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .1891   97.1   YES

AFFECTED
  Product        Versions     Fixed
  cPanel Plugin  2.3 –        —
  WHM Plugin     unspecified  —

TIMELINE
  May 21  Reserved by CNA
  May 26  Added to CISA KEV, due May 29
  May 26  Published (CNA: mitre)

CWE-266 · CNA: mitre · CVSS v4.0 · 4 references · NVD status: Analyzed · KEV due May 29, 2026

CVE-2026-4480CRITICAL

Red Hat Red Hat Enterprise Linux 10 — Samba: samba: remote code execution in printing subsystem via unescaped job description

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  C  H  H  H    9.0   .1393   96.2     —

AFFECTED
  Product                                                                Versions     Fixed
  Red Hat Enterprise Linux 10                                            unspecified  0:4.23.5-109.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support                  unspecified  0:4.21.3-114.el10_0.1
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:4.10.16-26.el7_9.1
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:4.10.16-26.el7_9.1
  Red Hat Enterprise Linux 8                                             unspecified  0:4.19.4-16.el8_10
  Red Hat Enterprise Linux 8                                             unspecified  0:4.19.4-16.el8_10
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:4.13.3-12.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:4.13.3-12.el8_4.1
  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support  unspecified  0:4.15.5-16.el8_6.1
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On  unspecified  0:4.15.5-16.el8_6.1
  + 10 more

TIMELINE
  Mar 19  Reserved by CNA
  May 26  Published (CNA: redhat)

CWE-78 · CNA: redhat · CVSS v3.1 · 15 references · NVD status: Modified

CVE-2026-9531LOW

Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .1081   95.5     —

AFFECTED
  Product    Versions    Fixed
  CA750-PoE  6.2c.510 –  —

TIMELINE
  May 25  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-9532LOW

Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .1081   95.5     —

AFFECTED
  Product    Versions    Fixed
  CA750-PoE  6.2c.510 –  —

TIMELINE
  May 25  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-9533LOW

Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .1081   95.5     —

AFFECTED
  Product    Versions    Fixed
  CA750-PoE  6.2c.510 –  —

TIMELINE
  May 25  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-9534LOW

Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .1081   95.5     —

AFFECTED
  Product    Versions    Fixed
  CA750-PoE  6.2c.510 –  —

TIMELINE
  May 25  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-46368HIGH

mossdef-org luci-app-https-dns-proxy — luci-app-https-dns-proxy Authenticated Command Injection via setInitAction

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0658   93.3     —

AFFECTED
  Product                   Versions     Fixed
  luci-app-https-dns-proxy  unspecified  —

TIMELINE
  May 13  Reserved by CNA
  May 26  Published (CNA: VulnCheck)

CWE-77 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Deferred

CVE-2026-48133HIGH

checkpoint Quantum Security Gateway — Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0475   91.2     —

AFFECTED
  Product                   Versions                                    Fixed
  Quantum Security Gateway  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-98 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-48134MEDIUM

checkpoint Quantum Security Gateway — SQL injection issue in UserCheck Portal when DLP Software Blade is active

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  L  L  L    5.6   .0436   90.5     —

AFFECTED
  Product                   Versions                                    Fixed
  Quantum Security Gateway  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-89 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-48136MEDIUM

checkpoint Quantum Security Management — Authenticated Administrator Role-Based Access Control Bypass in Compliance

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   H   N  U  L  L  L    4.1   .0410   90.0     —

AFFECTED
  Product                      Versions                                    Fixed
  Quantum Security Management  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-89 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-48131HIGH

checkpoint Quantum Security Gateway — VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0266   84.5     —

AFFECTED
  Product                   Versions                                    Fixed
  Quantum Security Gateway  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-122 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-48135MEDIUM

checkpoint Quantum Security Gateway — HTTP service can incorrectly process malformed HTTP requests

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  L    5.3   .0261   84.2     —

AFFECTED
  Product                   Versions                                    Fixed
  Quantum Security Gateway  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-122 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-48132HIGH

checkpoint Quantum Security Gateway — VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0214   80.6     —

AFFECTED
  Product                   Versions                                    Fixed
  Quantum Security Gateway  R82.10 with Jumbo Hotfix Take 6 or below –  —

TIMELINE
  May 20  Reserved by CNA
  May 26  Published (CNA: checkpoint)

CWE-125 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-9543HIGH

Totolink N300RH Web Management cstecgi.cgi setPasswordCfg os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    8.9   .0213   80.6     —

AFFECTED
  Product  Versions               Fixed
  N300RH   6.1c.1353_B20190305 –  —

TIMELINE
  May 26  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-48710MEDIUM

Kludex starlette — Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  L  L  N    6.5   .0191   78.1     —

AFFECTED
  Product    Versions   Fixed
  starlette  < 1.0.1 –  —

TIMELINE
  May 22  Reserved by CNA
  May 26  Public exploit reference published
  May 26  Published (CNA: GitHub_M)

CWE-444 · CNA: GitHub_M · CVSS v3.1 · 24 references · NVD status: Modified

CVE-2026-48687CRITICAL

n/a n/a — FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper ro…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0164   74.6     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  May 22  Reserved by CNA
  May 26  Public exploit reference published
  May 26  Published (CNA: mitre)

CWE-78 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Modified

CVE-2026-45298HIGH

amir20 dozzle — Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  N  N    8.6   .0149   72.1     —

AFFECTED
  Product  Versions    Fixed
  dozzle   < 10.5.2 –  —

TIMELINE
  May 11  Reserved by CNA
  May 26  Public exploit reference published
  May 26  Published (CNA: GitHub_M)

CWE-918 · CNA: GitHub_M · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-44680HIGH

mikro-orm mikro-orm — MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  L  L    7.6   .0145   71.3     —

AFFECTED
  Product    Versions                   Fixed
  mikro-orm  >= 7.0.0-rc.0, < 7.0.14 –  —
  knex       < 6.6.14 –                 —
  sql        < 7.0.14 –                 —

TIMELINE
  May 7   Reserved by CNA
  May 26  Published (CNA: GitHub_M)

CWE-89 · CNA: GitHub_M · CVSS v3.1 · 5 references · NVD status: Deferred

CVE-2026-48695HIGH

n/a n/a — FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik r…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  N    8.1   .0107   62.3     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  May 22  Reserved by CNA
  May 26  Published (CNA: mitre)

CWE-78 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Analyzed

CVE-2026-9565LOW

haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0105   61.7     —

AFFECTED
  Product   Versions  Fixed
  WorkClaw  0.6.0 –   —

TIMELINE
  May 26  Reserved by CNA
  May 26  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-40033HIGH

FreeRDP - Heap-buffer-overflow in gdi_CacheToSurface via rectangle validation bypass

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   H   H   H    8.7   .0104   61.3     —

AFFECTED
  Product  Versions     Fixed
  FreeRDP  unspecified  3.26.0

TIMELINE
  Apr 8   Reserved by CNA
  May 26  Public exploit reference published
  May 26  Published (CNA: VulnCheck)

CWE-122, CWE-787 · CNA: VulnCheck · CVSS v4.0 · 9 references · NVD status: Modified

CVE-2026-8633CRITICAL

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0085   55.3     —

AFFECTED
  Product                                                                     Versions    Fixed
  Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty  8.5, 9.0 –  —

TIMELINE
  May 14  Reserved by CNA
  May 26  Published (CNA: ibm)

CWE-94 · CNA: ibm · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-7374CRITICAL

Red Hat Red Hat Container Native Virtualization 4.12 — Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  H    9.9   .0074   51.9     —

AFFECTED
  Product                                       Versions     Fixed
  Red Hat Container Native Virtualization 4.12  unspecified  1779375376
  Red Hat Container Native Virtualization 4.13  unspecified  1778999881
  Red Hat Container Native Virtualization 4.14  unspecified  1779321599
  Red Hat Container Native Virtualization 4.15  unspecified  1778859977
  Red Hat Container Native Virtualization 4.16  unspecified  1778861274
  Red Hat Container Native Virtualization 4.17  unspecified  1779174925
  Red Hat Container Native Virtualization 4.18  unspecified  1778887155
  Red Hat Container Native Virtualization 4.19  unspecified  1779289071
  Red Hat Container Native Virtualization 4.20  unspecified  1779288737
  Red Hat Container Native Virtualization 4.21  unspecified  1779420069

TIMELINE
  Apr 29  Reserved by CNA
  May 26  Published (CNA: redhat)

CWE-59 · CNA: redhat · CVSS v3.1 · 13 references · NVD status: Awaiting Analysis

CVE-2026-5260HIGH

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  L  N  H    8.2   .0073   51.4     —

AFFECTED
  Product                                                                Versions     Fixed
  gnutls                                                                 unspecified  —
  Red Hat Enterprise Linux 10                                            unspecified  0:3.8.10-4.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support                  unspecified  0:3.8.9-9.el10_0.19
  Red Hat Enterprise Linux 8                                             unspecified  0:3.6.16-8.el8_10.6
  Red Hat Enterprise Linux 8                                             unspecified  0:3.6.16-8.el8_10.6
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:3.6.14-10.el8_4.1
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:4.13-3.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:3.6.14-10.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:4.13-3.el8_4.1
  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support  unspecified  0:3.6.16-5.el8_6.5
  + 24 more

TIMELINE
  Mar 31  Reserved by CNA
  May 26  Published (CNA: redhat)

CWE-126 · CNA: redhat · CVSS v3.1 · 17 references · NVD status: Awaiting Analysis

CVE-2026-42015MEDIUM

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  L    5.3   .0073   51.4     —

AFFECTED
  Product                                                                Versions     Fixed
  gnutls                                                                 unspecified  —
  Red Hat Enterprise Linux 10                                            unspecified  0:3.8.10-4.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support                  unspecified  0:3.8.9-9.el10_0.19
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:3.3.29-9.el7_9.2
  Red Hat Enterprise Linux 8                                             unspecified  0:3.6.16-8.el8_10.6
  Red Hat Enterprise Linux 8                                             unspecified  0:3.6.16-8.el8_10.6
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:3.6.14-10.el8_4.1
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:4.13-3.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:3.6.14-10.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:4.13-3.el8_4.1
  + 23 more

TIMELINE
  Apr 23  Reserved by CNA
  May 26  Published (CNA: redhat)

CWE-193 · CNA: redhat · CVSS v3.1 · 17 references · NVD status: Awaiting Analysis

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-42785	8.6	49.6	Openkm	OpenKM Community Edition	CWE-94	OpenKM 6.3.12 Remote Code Execution via Administrative Scripting
CVE-2026-48689	9.8	49.5	n/a	n/a	CWE-787	FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based …
CVE-2026-24212	9.8	48.6	NVIDIA	Isaac Launchable	CWE-319	NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive in…
CVE-2026-42425	8.6	47.9	Openkm	OpenKM Community Edition	CWE-89	OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery
CVE-2026-3660	9.8	45.1	IBM	Engineering Lifecycle Management	CWE-863	IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authe…
CVE-2026-9560	9.4	44.8	OpenVPN Inc	OpenVPN Connect	CWE-78	Privilege escalation via background service of OpenVPN Connect 3.5.1 through …
CVE-2026-48686	9.8	44.3	n/a	n/a	CWE-120	FastNetMon Community Edition through 1.2.9 contains a stack-based buffer over…
CVE-2026-44966	9.8	43.3	shepherdwind	velocity.js	CWE-1321	Velocity.js: Prototype Pollution in #set path assignment
CVE-2026-41401	7.1	41.8	libyang	libyang	CWE-416	libyang - Heap Use-After-Free Write in XML Metadata Parsing
CVE-2026-9550	5.5	41.7	Acrel Electrical	EEMS Enterprise Power Operation and Maintenance Cloud Platform	CWE-22	Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platfo…
CVE-2026-40383	7.5	40.5	Joomla! Project	Joomla! CMS	CWE-22	Joomla! Core - [20260509] - LFI in HTMLView layout parameter
CVE-2026-48592	5.3	40.5	oban-bg	oban_web	CWE-862	Missing authorization check on save-job event handler in oban_web
CVE-2026-7251	9.3	40.4	Eppendorf	BioFlo 320	CWE-259	Eppendorf BioFlo 320 Use of hard-coded password
CVE-2026-8890	8.8	39.9	code100x	code100x	CWE-639	code100x Mobile API Authentication Bypass via Header Spoofing
CVE-2026-40564	6.5	39.9	Apache Software Foundation	Apache Flink Kubernetes Operator	CWE-552	Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file …
CVE-2026-9170	9.8	39.8	IBM	HTTP Server	CWE-94	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-46624	9.9	39.4	twentyhq	twenty	CWE-78	Twenty: SQL Injection via the timeZone field
CVE-2026-44723	9.9	38.5	VowpalWabbit	vowpal_wabbit	CWE-78	Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allo…
CVE-2026-8855	9.8	37.7	IBM	HTTP Server	CWE-94	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-44449	9.1	37.3	prolix-oc	Lumiverse	CWE-88	Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape
CVE-2026-9538	7.5	37.1	BINGOS	Archive::Tar	CWE-789	Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attack…
CVE-2026-8047	8.7	36.9	CODESYS	CODESYS Control RTE (SL)	CWE-1284	Out-of-bounds Write in CODESYS Control
CVE-2026-40384	5.9	36.8	Joomla! Project	Joomla! CMS	CWE-22	Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint
CVE-2026-45721	9.0	36.2	xyproto	algernon	CWE-20	Algernon: handler.lua discovery walks parent directories above the server root
CVE-2026-42496	9.1	35.6	BINGOS	Archive::Tar	CWE-59	Archive::Tar versions before 3.08 for Perl extract symlinks with attacker con…
CVE-2026-9540	5.5	35.4	vllm-project	vllm	CWE-404	vllm-project vllm OpenAI-compatible Serving Path denial of service
CVE-2026-42013	8.2	35.0	—	gnutls	CWE-295	Gnutls: gnutls: certificate validation bypass due to oversized subject altern…
CVE-2026-44209	7.5	35.1	masci	banks	CWE-1336	Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI
CVE-2026-39661	7.5	34.5	Magentech	SW Core	CWE-98	WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability
CVE-2026-42497	7.5	34.5	BINGOS	Archive::Tar	CWE-59	Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker cont…
CVE-2026-48593	5.9	34.5	oban-bg	oban_web	CWE-400	Unbounded range expansion in cron describe causes memory exhaustion in oban_web
CVE-2026-24162	7.8	34.4	NVIDIA	Merlin Transformers4Rec	CWE-502	NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker …
CVE-2026-44837	7.5	34.0	ViewComponent	view_component	CWE-187	view_component: System Test Entry Point Path Check Allows Sibling Directory E…
CVE-2026-44843	8.2	33.5	langchain-ai	langchain	CWE-502	LangChain: Unsafe deserialization of attacker-controlled LangChain objects th…
CVE-2026-9521	2.9	32.9	fraillt	bitsery	CWE-20	fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of sp…
CVE-2026-44844	6.3	32.4	GOVCERT-LU	eml_parser	CWE-674	eml_parser: Recursion DoS via nested message/rfc822 attachments
CVE-2026-44895	9.2	32.0	yoda-digital	mcp-gitlab-server	CWE-306	GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exp…
CVE-2026-9517	5.5	31.8	hemant6488	CodeIgniter-StudentManagementSystem	CWE-266	hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentV…
CVE-2026-41917	6.9	31.5	Openkm	OpenKM Community Edition	CWE-22	OpenKM 6.3.12 Local File Inclusion via Admin Scripting
CVE-2026-8606	7.0	31.4	GitHub	Enterprise Server	CWE-918	Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package …
CVE-2026-8850	7.5	30.7	IBM	HTTP Server	CWE-476	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-44450	9.9	30.4	prolix-oc	Lumiverse	CWE-88	Lumiverse: RCE via MCP stdio argument injection
CVE-2026-8174	5.7	29.8	Zohocorp	Zoho Mail wordpress plugin	CWE-352	Cross-site Request Forgery
CVE-2026-44444	9.1	29.7	prolix-oc	Lumiverse	CWE-78	Lumiverse: Spindle extension install runs untrusted lifecycle scripts before …
CVE-2026-4051	7.2	29.5	IBM	Engineering Lifecycle Management	CWE-749	IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Serve…
CVE-2026-44668	9.8	29.1	factionsecurity	faction	CWE-306	Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates
CVE-2026-2264	9.2	28.6	Google Cloud	Apigee-X	CWE-918	Server-Side Request Forgery and Credential Exfiltration in Google Cloud Apige…
CVE-2026-9495	5.5	28.7	n/a	@koa/router	CWE-284	Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnera…
CVE-2026-8854	7.5	28.6	IBM	HTTP Server	CWE-825	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-3603	7.1	28.1	IBM	Engineering Lifecycle Management	CWE-611	IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML e…
CVE-2026-42012	7.1	28.0	—	gnutls	CWE-295	Gnutls: gnutls: certificate validation bypass due to improper handling of uri…
CVE-2026-40034	8.5	27.7	gitoxide	gitoxide	CWE-77	gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule
CVE-2026-35223	8.6	27.3	Joomla! Project	Joomla! CMS	CWE-284	Joomla! Core - [20260508] - Improper access check in com_config webservice en…
CVE-2026-8046	7.2	27.4	CODESYS	CODESYS Control RTE (SL)	CWE-863	Incorrect Authorization in CODESYS Control
CVE-2026-9496	7.7	27.1	n/a	pacote	CWE-1333	Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable t…
CVE-2026-43982	8.7	27.0	xyproto	algernon	CWE-22	Algernon: Path traversal file write via savein()
CVE-2026-44707	6.8	26.9	chatwoot	chatwoot	CWE-283	Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts
CVE-2026-44836	6.5	26.9	ViewComponent	view_component	CWE-749	view_component: Preview Route Can Dispatch Inherited Helper Methods
CVE-2026-9605	5.5	26.4	GNU	libredwg	CWE-119	GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
CVE-2026-9518	2.1	26.0	hemant6488	CodeIgniter-StudentManagementSystem	CWE-79	hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_stude…
CVE-2026-9519	2.1	26.0	stonith404	pingvin-share	CWE-79	stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps …
CVE-2026-9520	2.1	26.0	blitz-js	blitz	CWE-79	blitz-js blitz Sign-in LoginForm.tsx cross site scripting
CVE-2026-9527	2.1	26.0	itsourcecode	Electronic Judging System	CWE-79	itsourcecode Electronic Judging System judges.php cross site scripting
CVE-2026-48126	8.2	25.9	xyproto	algernon	CWE-22	Algernon: Host header path traversal in --domain mode reads files and runs Lu…
CVE-2026-48683	6.5	25.5	n/a	n/a	CWE-125	FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vul…
CVE-2026-9523	5.5	25.3	Acrel Electrical	EEMS Enterprise Power Operation and Maintenance Cloud Platform	CWE-74	Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platfo…
CVE-2026-46740	5.3	24.9	RRWO	Mojolicious::Plugin::Statsd	CWE-93	Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric inj…
CVE-2026-9603	5.5	24.8	SourceCodester	eDoc Doctor Appointment System	CWE-862	SourceCodester eDoc Doctor Appointment System delete-session.php authorization
CVE-2025-11482	8.7	24.4	B&R Industrial Automation GmbH	PPT30 Operating System	CWE-770	Allocation of Resources Without Limits or Throttling in the OPC-UA Server
CVE-2026-35221	6.9	24.4	Joomla! Project	Joomla! CMS	CWE-89	Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder
CVE-2026-9525	5.5	24.1	itsourcecode	Electronic Judging System	CWE-74	itsourcecode Electronic Judging System edit_judge.php sql injection
CVE-2026-9526	5.5	24.1	itsourcecode	Electronic Judging System	CWE-74	itsourcecode Electronic Judging System edit_team.php sql injection
CVE-2026-9528	5.5	24.1	itsourcecode	Electronic Judging System	CWE-74	itsourcecode Electronic Judging System delete_judge.php sql injection
CVE-2026-9551	5.5	24.0	Das	Parking Management System 停车场管理系统	CWE-74	Das Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cm…
CVE-2026-9552	5.5	24.0	Das	Parking Management System 停车场管理系统	CWE-74	Das Parking Management System 停车场管理系统 Search API Endpoint sql injection
CVE-2026-44730	7.2	23.8	OpenCTI-Platform	opencti	CWE-284	OpenCTI: Privilege escalation via graphQL API abusable by organization admins…
CVE-2026-44832	8.7	23.6	grokability	snipe-it	CWE-281	Snipe-IT: Privilege Escalation via API Permissions Assignment
CVE-2026-44788	6.5	23.5	adamhathcock	sharpcompress	CWE-22	SharpCompress: Directory traversal via directory entries in WriteToDirectory …
CVE-2025-36220	9.8	23.1	IBM	Cloud Pak for Data System - Cyclops	CWE-89	Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
CVE-2026-35222	6.9	23.1	Joomla! Project	Joomla! CMS	CWE-89	Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags
CVE-2026-48691	9.8	22.9	n/a	n/a	CWE-190	FastNetMon Community Edition through 1.2.9 contains an integer overflow in th…
CVE-2026-45728	7.5	22.3	xyproto	algernon	CWE-209	Algernon: Single-file mode unconditionally enables debug mode
CVE-2026-45082	7.6	22.0	karakeep-app	karakeep	CWE-918	Karakeep has a SSRF Protection Bypass via Redirect Handling
CVE-2026-48896	8.2	21.7	Joomla! Project	Joomla! CMS	CWE-287	Joomla! Core - [20260511] - MFA Authentication Bypass
CVE-2026-43935	8.1	21.7	e107inc	e107	CWE-20	e107: Host Header Injection in e107 password reset enables phishing
CVE-2026-48685	6.5	21.5	n/a	n/a	CWE-130	FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access be…
CVE-2026-48904	8.2	21.1	Joomla! Project	Joomla! CMS	CWE-284	Joomla! Core - [20260514] - Privilege escalation through com_users webservice…
CVE-2026-9580	5.5	21.0	n/a	JeecgBoot	CWE-266	JeecgBoot selectDepart LoginController.selectDepart access control
CVE-2026-9562	5.5	20.8	sambitraj	STUDENT-MANAGEMENT-SYSTEM	CWE-266	sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control
CVE-2026-44502	4.3	20.6	bugsink	bugsink	CWE-918	Bugsink: SSRF bypass in `validate_webhook_url`
CVE-2026-48688	7.5	20.2	n/a	n/a	CWE-125	FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds re…
CVE-2026-9566	2.1	20.1	teableio	teable	CWE-79	teableio teable Sign-up LoginPage.tsx cross site scripting
CVE-2026-44775	6.9	20.0	Kareadita	Kavita	CWE-306	Kavita: No authentication at /api/Reader/image
CVE-2026-8620	7.5	19.9	IBM	Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty	CWE-444	IBM WebSphere Application Server and WebSphere Application Server Liberty are…
CVE-2026-44214	5.3	19.6	rexxars	eventsource-encoder	CWE-93	eventsource-encoder: SSE event injection via unsanitized event and id fields
CVE-2026-44847	7.5	18.8	1Panel-dev	MaxKB	CWE-287	MaxKB: Webhook Trigger Authentication Bypass
CVE-2025-36221	7.5	18.5	IBM	Cloud Pak for Data System - Cyclops	CWE-1392	Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.
CVE-2026-48898	8.2	18.5	Joomla! Project	Joomla! CMS	CWE-284	Joomla! Core - [20260513] - Privilege escalation through com_users batch task
CVE-2026-48684	6.5	17.8	n/a	n/a	CWE-125	FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in …
CVE-2025-71310	1.8	17.9	BackdropCMS	GDPR cookies module for Backdrop CMS	CWE-80	The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficien…
CVE-2026-8834	8.0	17.3	IBM	HTTP Server	CWE-122	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-9544	5.5	17.2	Shenzhen Sixun Software	Sixun Shanghui Group Business Management System	CWE-74	Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayCo…
CVE-2026-9573	5.5	17.2	itsourcecode	Student Transcript Processing System	CWE-74	itsourcecode Student Transcript Processing System index.php sql injection
CVE-2026-9574	5.5	17.2	itsourcecode	Student Transcript Processing System	CWE-74	itsourcecode Student Transcript Processing System trans.php sql injection
CVE-2026-9575	5.5	17.2	itsourcecode	Student Transcript Processing System	CWE-74	itsourcecode Student Transcript Processing System index.php sql injection
CVE-2026-44729	8.7	17.1	twentyhq	twenty	CWE-79	Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Con…
CVE-2026-44749	4.3	17.1	SAP_SE	SAP Gateway	CWE-497	Information Disclosure vulnerability in SAP Gateway
CVE-2026-39642	5.3	16.8	SpabRice	Nyla	CWE-80	WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability
CVE-2026-9584	5.5	16.6	code-projects	Project Management System	CWE-74	code-projects Project Management System Login chk.php sql injection
CVE-2026-9606	5.5	16.6	itsourcecode	Courier Management System	CWE-74	itsourcecode Courier Management System manage_user.php sql injection
CVE-2026-48902	9.8	16.3	Joomla! Project	Joomla! CMS	CWE-319	Joomla! Core - [20260518] - Transport encryption downgrade for password and u…
CVE-2026-8835	7.3	16.4	IBM	HTTP Server	CWE-822	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-44776	5.9	16.1	Kareadita	Kavita	CWE-639	Kavita: IDOR in /api/Download/*
CVE-2025-14361	7.1	15.8	AA-Team	Woocommerce Envato Affiliates	CWE-862	WordPress Woocommerce Envato Affiliates plugin <= 1.2.1 - Settings Change vul…
CVE-2026-36239	4.3	15.7	n/a	n/a	CWE-79	PbootCMS v.3.2.11 contains a code injection vulnerability in its site configu…
CVE-2026-9524	5.3	15.6	xianrendzw	EasyReport	CWE-74	xianrendzw EasyReport REST Endpoint execute sql injection
CVE-2026-24590	5.3	15.6	VideoWhisper.com	Paid Videochat Turnkey Site	CWE-862	WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Contro…
CVE-2026-48901	7.5	15.5	Joomla! Project	Joomla! CMS	CWE-524	Joomla! Core - [20260517] - Incorrect Cache Key Construction for InputFilter …
CVE-2026-9583	2.1	15.1	SourceCodester	CET Automated Grading System with AI Predictive Analytics	CWE-200	SourceCodester CET Automated Grading System with AI Predictive Analytics SQL …
CVE-2026-48694	8.1	14.1	n/a	n/a	CWE-77	FastNetMon Community Edition through 1.2.9 contains a configuration injection…
CVE-2026-4795	6.5	14.0	Zyxel	GS1200-5v3 firmware	CWE-862	A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions t…
CVE-2026-48899	5.3	14.1	Joomla! Project	Joomla! CMS	CWE-284	Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins
CVE-2026-48692	8.1	13.9	n/a	n/a	CWE-306	FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port …
CVE-2026-42335	6.3	13.9	1Panel-dev	MaxKB	CWE-918	MaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy
CVE-2026-39655	5.3	13.8	TeconceTheme	Mayosis Core	CWE-862	WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability
CVE-2026-44451	9.3	13.6	prolix-oc	Lumiverse	CWE-693	Lumiverse: TSX component sandbox escape via DOM ref and string-split identifi…
CVE-2026-44708	6.1	13.4	lepture	mistune	CWE-79	Mistune Math Plugin XSS Escape Bypass
CVE-2026-44897	6.1	13.4	lepture	mistune	CWE-79	Mistune Heading ID Attribute Injection XSS
CVE-2026-44898	6.1	13.4	lepture	mistune	CWE-79	Mistune TOC Anchor Injection XSS
CVE-2026-44899	6.1	13.4	lepture	mistune	CWE-79	Mistune Image Directive CSS Injection Vulnerability
CVE-2026-44706	8.5	13.2	chatwoot	chatwoot	CWE-89	Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribu…
CVE-2026-25104	7.8	13.2	MediaArea	MediaInfoLib	CWE-191	MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability
CVE-2026-25713	7.8	13.2	MediaArea	MediaInfoLib	CWE-122	MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability
CVE-2026-48864	7.8	13.2	Red Hat	Red Hat Enterprise Linux 10	CWE-787	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompre…
CVE-2026-8647	4.8	12.6	MIK	Crypt::ScryptKDF	CWE-338	Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number …
CVE-2026-9604	2.1	12.5	n/a	JeecgBoot	CWE-266	JeecgBoot AiragModelController access control
CVE-2026-24190	7.8	12.4	NVIDIA	GeForce	CWE-862	NVIDIA Display Driver for Windows and Linux contains a vulnerability in the k…
CVE-2026-38587	4.3	12.5	n/a	n/a	CWE-639	An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ON…
CVE-2026-46431	4.3	12.2	xyproto	algernon	CWE-942	Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *
CVE-2026-9568	2.3	12.2	n/a	ThingsBoard	CWE-74	ThingsBoard YAML provision getGatewayDockerComposeFile code injection
CVE-2026-44831	5.4	12.1	grokability	snipe-it	CWE-79	Snipe-IT: XSS vulnerability in component notes
CVE-2026-24638	4.3	12.0	Webful Creations	RepairBuddy	CWE-862	WordPress RepairBuddy plugin <= 4.1121 - Broken Access Control vulnerability
CVE-2026-44667	8.7	11.2	factionsecurity	faction	CWE-79	Faction: Stored XSS in Remediation Verification Attachment Filename Preview R…
CVE-2026-44669	8.7	11.2	factionsecurity	faction	CWE-79	Faction: Stored XSS in Assessment Attachment Filename Preview Rendering
CVE-2026-48897	8.2	11.3	Joomla! Project	Joomla! CMS	CWE-287	Joomla! Core - [20260512] - MFA Authentication Bypass
CVE-2026-9579	2.1	11.0	n/a	JeecgBoot	CWE-266	JeecgBoot SysUser userEdit user.getUsername access control
CVE-2026-9581	2.1	11.0	n/a	JeecgBoot	CWE-266	JeecgBoot add access control
CVE-2026-44213	6.5	10.7	open-telemetry	opentelemetry-dotnet-contrib	CWE-295	OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a pro…
CVE-2026-45412	6.3	10.7	1Panel-dev	MaxKB	CWE-918	MaxKB: Unauthenticated SSRF via Workflow Template Import
CVE-2026-42337	5.3	10.7	1Panel-dev	MaxKB	CWE-862	MaxKB: Broken Access Control in MaxKB OSS URL Fetch API
CVE-2026-24192	7.8	10.5	NVIDIA	GeForce	CWE-681	NVIDIA Display Driver for Linux contains a vulnerability where an attacker co…
CVE-2026-44903	5.1	10.3	prometheus	prometheus	CWE-79	Prometheus: Stored XSS via crafted histogram bucket label values in the heatm…
CVE-2026-8676	8.8	10.1	silabs.com	Simplicity SDK	CWE-290	An attacker is able to downgrade the security of a Bluetooth LE connection by…
CVE-2026-44905	7.5	10.1	riebl	vanetza	CWE-248	Vanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryp…
CVE-2026-9564	1.9	10.0	SourceCodester	Hospitals Patient Records Management System	CWE-79	SourceCodester/oretnom23 Hospitals Patient Records Management System view_pat…
CVE-2026-44896	5.3	9.6	lepture	mistune	CWE-79	Mistune: XSS via unescaped figclass/figwidth in Figure directive
CVE-2026-8856	9.1	9.4	IBM	HTTP Server	CWE-400	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-24193	7.8	9.5	NVIDIA	GeForce	CWE-787	NVIDIA Display Driver for Windows and Linux contains a vulnerability where an…
CVE-2026-8852	7.5	9.4	IBM	HTTP Server	CWE-617	IBM HTTP Server is affected by multiple vulnerabilities
CVE-2026-46430	4.3	9.4	xyproto	algernon	CWE-668	Algernon: Auto-refresh SSE event server binds to all interfaces by default on…
CVE-2026-42448	3.5	9.4	magic-wormhole	magic-wormhole	CWE-22	wormhole receive, with --output pointing at an existing directory can be path…
CVE-2026-9542	2.1	9.4	CodeAstro	Leave Management System	CWE-74	CodeAstro Leave Management System add_staff.php sql injection
CVE-2026-44985	8.7	9.2	amir20	dozzle	CWE-346	Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypas…
CVE-2025-36148	6.1	9.0	IBM	Financial Transaction Manager for SWIFT Services for Multiplatforms	CWE-79	IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vu…
CVE-2026-43936	4.3	9.0	e107inc	e107	CWE-918	e107: Server-Side Request Forgery (SSRF) in the remote file fetcher
CVE-2026-25426	5.3	8.7	Magepeople inc.	Taxi Booking Manager for WooCommerce	CWE-862	WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Acces…
CVE-2025-68708	2.4	8.6	n/a	n/a	CWE-288	SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local a…
CVE-2026-24187	8.8	8.4	NVIDIA	GeForce	CWE-416	NVIDIA Display Driver for Linux contains a vulnerability where an attacker co…
CVE-2026-42336	5.1	8.3	1Panel-dev	MaxKB	CWE-367	MaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL Fetch
CVE-2025-68711	2.4	8.2	n/a	n/a	CWE-288	AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz)…
CVE-2025-36126	7.6	8.0	IBM	Cognos Analytics	CWE-79	IBM Cognos Analytics is affected by Cross-site scripting.
CVE-2026-44314	5.3	8.1	traccar	traccar	CWE-863	Traccar: Missing edit authorization on device image upload allows read-only u…
CVE-2026-43988	7.5	7.9	riebl	vanetza	CWE-248	Vanetza: Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing
CVE-2026-43981	8.2	7.8	xyproto	algernon	CWE-362	Algernon: Race Condition in handle() shared LState
CVE-2026-25900	6.9	7.7	Joomla! Project	Joomla! CMS	CWE-79	Joomla! Core - [20260501] - XSS in feed modules
CVE-2026-30894	6.9	7.7	Joomla! Project	Joomla! CMS	CWE-79	Joomla! Core - [20260503] - XSS in com_contenthistory
CVE-2025-14290	5.4	7.8	IBM	webMethods Integration (on prem) -Integration Server	CWE-918	IBM webMethods Integration Sever is vulnerable to server-side request forgery
CVE-2026-43934	6.5	7.7	e107inc	e107	CWE-284	e107: Broken Access Control in e107 comment edit allows cross-user comment mo…
CVE-2025-68710	2.4	7.5	n/a	n/a	CWE-288	Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9…
CVE-2026-47728	4.3	7.3	bugsink	bugsink	CWE-862	Bugsink: Project scoping missing in sourcemap and debug-file lookup
CVE-2025-68709	5.2	7.2	n/a	n/a	CWE-79	SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local a…
CVE-2026-25901	6.9	7.0	Joomla! Project	Joomla! CMS	CWE-79	Joomla! Core - [20260502] - XSS in com_associations
CVE-2026-30895	6.9	7.0	Joomla! Project	Joomla! CMS	CWE-79	Joomla! Core - [20260504] - XSS in readmore links
CVE-2025-33221	6.0	7.0	NVIDIA	GeForce	CWE-20	NVIDIA Display Driver for Windows and Linux contains a vulnerability in the k…
CVE-2026-3314	4.6	7.0	Hitachi	Hitachi Ops Center Analyzer	CWE-549	Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi…
CVE-2026-47202	9.3	6.6	Kareadita	Kavita	CWE-287	Kavita: Pre-Auth Account Takeover
CVE-2026-27427	6.5	6.6	Dylan Kuhn	Geo Mashup	CWE-79	WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabi…
CVE-2026-8479	6.9	6.4	Hitachi Energy	RTU500 series CMU firmware	CWE-476	IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL…
CVE-2026-9541	1.9	6.4	n/a	Squirrel	CWE-119	Squirrel Cnut File sqobject.cpp ReadObject heap-based overflow
CVE-2026-24200	7.0	6.2	NVIDIA	Virtual GPU Manager	CWE-416	NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, whe…
CVE-2026-7451	7.8	6.0	Autodesk	3ds Max	CWE-787	TIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max
CVE-2026-7452	7.8	6.0	Autodesk	3ds Max	CWE-120	WRL File Parsing Memory Corruption in Autodesk 3ds Max
CVE-2026-24196	7.1	6.1	NVIDIA	GeForce	CWE-125	NVIDIA Display Driver for Linux contains a vulnerability where a user could c…
CVE-2025-36145	5.3	6.1	IBM	watsonx.data	CWE-923	Multiple Vulnerabilities in watsonx.data
CVE-2026-48697	7.4	5.7	n/a	n/a	CWE-295	FastNetMon Community Edition through 1.2.9 does not verify TLS certificates o…
CVE-2026-44833	7.1	5.7	grokability	snipe-it	CWE-601	Snipe-IT: Open redirect vulnerability
CVE-2026-47672	6.5	5.6	oviva-ag	epa4all-client	CWE-306	epa4all-client: Unauthenticated REST API for Patient Record Writes
CVE-2026-24195	5.5	5.6	NVIDIA	Guest driver	CWE-20	NVIDIA Display Driver for Linux contains a vulnerability in UVM, where a user…
CVE-2026-9572	1.9	5.5	n/a	GPAC	CWE-401	GPAC MP4Box media.c Media_GetSample memory leak
CVE-2026-24197	6.5	5.3	NVIDIA	GeForce	CWE-1188	NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instanc…
CVE-2026-48900	6.4	5.4	Joomla! Project	Joomla! CMS	CWE-284	Joomla! Core - [20260516] - Incorrect Access Control in com_scheduler
CVE-2026-9582	2.1	5.2	SourceCodester	CET Automated Grading System with AI Predictive Analytics	CWE-352	SourceCodester CET Automated Grading System with AI Predictive Analytics cros…
CVE-2026-27331	6.3	5.0	Magepeople inc.	WpTravelly	CWE-862	WordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability
CVE-2026-24198	5.6	4.9	NVIDIA	GeForce	CWE-200	NVIDIA GPU Display Driver for Linux contains a vulnerability where an advance…
CVE-2026-7450	5.5	4.8	Autodesk	3ds Max	CWE-476	PAR File Parsing NULL Pointer Dereference in Autodesk 3ds Max
CVE-2026-7453	5.5	4.8	Autodesk	3ds Max	CWE-674	WRL File Parsing Memory Exhaustion in Autodesk 3ds Max
CVE-2026-24520	4.3	4.9	bPlugins	Tiktok Feed	CWE-862	WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-25444	4.3	4.9	Magepeople inc.	WpBookingly	CWE-862	WordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability
CVE-2026-47715	3.1	4.8	bugsink	bugsink	CWE-639	Bugsink: Issue event views can show an event from another project if its UUID…
CVE-2026-24194	7.8	4.6	NVIDIA	GeForce	CWE-281	NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode lay…
CVE-2026-44983	7.3	4.5	servo	smallbitvec	CWE-122	smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow
CVE-2025-46307	5.5	4.4	Apple	macOS	CWE-284	A logic issue was addressed with improved restrictions. This issue is fixed i…
CVE-2026-48903	6.9	4.3	Joomla! Project	Joomla! Framework Filter package	CWE-79	Joomla! Framework - [20260519] - Inadequate content filtering within the chec…
CVE-2026-48905	6.9	4.3	Joomla! Project	Joomla! Framework Filter package	CWE-79	Joomla! Framework - [20260520] - Inadequate content filtering within the clea…
CVE-2026-47716	3.1	4.1	bugsink	bugsink	CWE-639	Bugsink: Issue bulk actions can affect another project’s issue if its UUID is…
CVE-2026-25112	7.8	4.0	Genetec Inc.	Genetec RabbitMQ	CWE-732	A high-severity vulnerability in the deployment of Genetec RabbitMQ that allo…
CVE-2026-24201	5.8	3.8	NVIDIA	Virtual GPU Manager	CWE-787	NVIDIA vGPU software contains a vulnerability in the virtual GPU manager, whe…
CVE-2026-9529	1.9	3.8	GNU	LibreDWG	CWE-404	GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer derefe…
CVE-2026-9530	1.9	3.8	GNU	LibreDWG	CWE-119	GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds
CVE-2025-43289	5.5	3.5	Apple	macOS	CWE-285	A logic issue was addressed with improved validation. This issue is fixed in …
CVE-2026-45574	8.1	3.4	oviva-ag	epa4all-client	CWE-295	epa4all-client: TLS Certificate Validation Disabled in Production
CVE-2026-24191	7.8	3.4	NVIDIA	GeForce	CWE-367	NVIDIA Display Driver for Windows contains a vulnerability where an attacker …
CVE-2025-46280	5.5	3.3	Apple	macOS	CWE-125	An out-of-bounds read was addressed with improved bounds checking. This issue…
CVE-2025-43306	7.8	3.2	Apple	macOS	CWE-269	A logic issue was addressed with improved checks. This issue is fixed in macO…
CVE-2025-43451	5.5	3.2	Apple	macOS	CWE-284	A permissions issue was addressed by removing the vulnerable code. This issue…
CVE-2026-46620	6.5	3.0	e107inc	e107	CWE-285	e107: CSRF in comment.php moderation endpoints via token-optional validation …
CVE-2026-7454	7.8	3.0	Autodesk	3ds Max	CWE-120	WRL File Parsing Memory Corruption in Autodesk 3ds Max
CVE-2026-44410	3.8	2.9	ZTE	ZXUniPOS NDS-LTE	CWE-1240	Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE
CVE-2025-43290	5.5	2.7	Apple	macOS	CWE-732	A permissions issue was addressed with additional restrictions. This issue is…
CVE-2026-48693	5.5	2.6	n/a	n/a	CWE-59	FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink a…
CVE-2026-44728	7.8	2.4	babel	babel	CWE-94	Improper Control of Generation of Code when compiling specifically crafted ma…
CVE-2026-24182	6.5	2.5	NVIDIA	GeForce	CWE-667	NVIDIA Display Driver for Windows and Linux contains a vulnerability where an…
CVE-2026-48696	6.2	2.4	n/a	n/a	CWE-120	FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different…
CVE-2026-44468	8.5	2.3	CODESYS	CODESYS Development System	CWE-276	Incorrect Default Permissions in CODESYS Development System
CVE-2026-45834	5.5	2.3	Linux	Linux	CWE-476	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
CVE-2026-45835	5.5	2.3	Linux	Linux	CWE-476	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
CVE-2026-45836	5.5	2.3	Linux	Linux	CWE-476	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
CVE-2026-44900	8.1	2.1	oviva-ag	epa4all-client	CWE-295	epa4all-client: VAU Signature bypass
CVE-2026-45575	7.4	1.9	oviva-ag	epa4all-client	CWE-347	epa4all-client: Improper Verification of Cryptographic Signature
CVE-2026-44443	4.8	1.9	prolix-oc	Lumiverse	CWE-362	Lumiverse: Sign-up nonce race condition allows unauthorized account registration
CVE-2026-48690	7.1	1.8	n/a	n/a	CWE-122	FastNetMon Community Edition through 1.2.9 contains an integer overflow vulne…
CVE-2026-9567	1.9	1.7	n/a	GPAC	CWE-404	GPAC MP4Box isom_intern.c MergeFragment null pointer dereference
CVE-2025-13755	5.5	1.3	IBM	Db2	CWE-532	IBM® Db2® is vulnerable to credential exposure in db2diag when executing spec…
CVE-2026-35220	4.6	1.3	Joomla! Project	Joomla! CMS	CWE-352	Joomla! Core - [20260505] - CSRF in user activation endpoint
CVE-2026-44469	8.5	1.2	CODESYS	CODESYS Development System	CWE-276	Incorrect Default Permissions in CODESYS Development System
CVE-2025-46284	7.0	1.1	Apple	macOS	CWE-362	A race condition was addressed with additional validation. This issue is fixe…
CVE-2026-7310	4.4	1.1	Hitachi Energy	MACH HiDraw	CWE-122	A heap-based buffer overflow vulnerability exists in XML parser functionality…
CVE-2026-24199	4.7	0.6	NVIDIA	GeForce	CWE-362	NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, …
CVE-2026-45413	6.9	0.3	1Panel-dev	MaxKB	CWE-328	MaxKB: Unsalted MD5 Password Hashing
CVE-2026-41164	4.4	0.1	nuts-foundation	nuts-node	CWE-345	nuts-node: JWT type confusion in v1 access token introspection allows VP repl…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-05-26 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.