{
  "day": "2026-05-31",
  "boundary": "UTC calendar day",
  "published_count": 51,
  "by_severity": {
    "CRITICAL": 0,
    "HIGH": 19,
    "MEDIUM": 10,
    "LOW": 22
  },
  "kev_count": 0,
  "exploit_reference_count": 0,
  "awaiting_enrichment_count": 0,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-10187",
      "cvss_base": 8.9,
      "cvss_severity": "HIGH",
      "epss_score": 0.07336,
      "epss_percentile": 0.93883,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Totolink",
      "product": "N300RH",
      "cwe": "CWE-119",
      "title": "Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10187"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-10179",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.03198,
      "epss_percentile": 0.87102,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10179"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-10166",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.01072,
      "epss_percentile": 0.62248,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Edimax",
      "product": "BR-6478AC",
      "cwe": "CWE-74",
      "title": "Edimax BR-6478AC POST Request formWlbasic command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10166"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-10182",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.01072,
      "epss_percentile": 0.62249,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-74",
      "title": "TRENDnet TEW-432BRP formWlanSetup command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10182"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-10180",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.0105,
      "epss_percentile": 0.61587,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-74",
      "title": "TRENDnet TEW-432BRP formSysCmd command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10180"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-10189",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00503,
      "epss_percentile": 0.40967,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "W12",
      "cwe": "CWE-119",
      "title": "Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10189"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-10192",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00503,
      "epss_percentile": 0.40968,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "W12",
      "cwe": "CWE-119",
      "title": "Tenda W12 httpd set_local_time_0 stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10192"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-10188",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00476,
      "epss_percentile": 0.39302,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "W12",
      "cwe": "CWE-119",
      "title": "Tenda W12 httpd cgistaKickOff stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10188"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-10191",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00476,
      "epss_percentile": 0.39303,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "W12",
      "cwe": "CWE-119",
      "title": "Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10191"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-10160",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39034,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10160"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-10161",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39033,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formResetStatistic stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10161"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-10162",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39033,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formSetPassword stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10162"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-10165",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39031,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Edimax",
      "product": "BR-6478AC",
      "cwe": "CWE-119",
      "title": "Edimax BR-6478AC POST Request formWanTcpipSetup stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10165"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-10181",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39034,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formSysCmd stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10181"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-10183",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00472,
      "epss_percentile": 0.39034,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formWlanSetup stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10183"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-8382",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00464,
      "epss_percentile": 0.38484,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpengine",
      "product": "Advanced Custom Fields (ACF®)",
      "cwe": "CWE-862",
      "title": "Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8382"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-10158",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00463,
      "epss_percentile": 0.38421,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formPortFw stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10158"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-10159",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00463,
      "epss_percentile": 0.38422,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-432BRP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-432BRP formSysLog stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10159"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-10163",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00463,
      "epss_percentile": 0.38422,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Edimax",
      "product": "BR-6478AC",
      "cwe": "CWE-119",
      "title": "Edimax BR-6478AC POST Request formUSBAccount buffer overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10163"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-10164",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00463,
      "epss_percentile": 0.38424,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Edimax",
      "product": "BR-6478AC",
      "cwe": "CWE-119",
      "title": "Edimax BR-6478AC POST Request formUSBFolder buffer overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10164"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2026-10157",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00419,
      "epss_percentile": 0.35162,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Open5GS",
      "cwe": "CWE-287",
      "title": "Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10157"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-10167",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00409,
      "epss_percentile": 0.3423,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OUSL-GROUP-BrinaryBrains",
      "product": "School Student Management System",
      "cwe": "CWE-287",
      "title": "OUSL-GROUP-BrinaryBrains School Student Management System MY_Controller Login.php sign_auth_cookie improper authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10167"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-8796",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00399,
      "epss_percentile": 0.33292,
      "kev": false,
      "kev_due_at": null,
      "vendor": "YVES",
      "product": "Sereal::Decoder",
      "cwe": "CWE-125",
      "title": "Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8796"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2026-10190",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00368,
      "epss_percentile": 0.29978,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "W12",
      "cwe": "CWE-404",
      "title": "Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10190"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-10169",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00286,
      "epss_percentile": 0.21153,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OUSL-GROUP-BrinaryBrains",
      "product": "School Student Management System",
      "cwe": "CWE-640",
      "title": "OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10169"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-10173",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00278,
      "epss_percentile": 0.20382,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Orthanc",
      "product": "Explorer 2",
      "cwe": "CWE-79",
      "title": "Orthanc Explorer 2 URL StudyList.vue cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10173"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-10178",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00269,
      "epss_percentile": 0.1912,
      "kev": false,
      "kev_due_at": null,
      "vendor": "code-projects",
      "product": "Online Music Site",
      "cwe": "CWE-74",
      "title": "code-projects Online Music Site AdminEditAlbum.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10178"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-10184",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00269,
      "epss_percentile": 0.19121,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Hospitals Patient Records Management System",
      "cwe": "CWE-74",
      "title": "SourceCodester Hospitals Patient Records Management System Users.php delete sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10184"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-10185",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00269,
      "epss_percentile": 0.19121,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Hospitals Patient Records Management System",
      "cwe": "CWE-74",
      "title": "SourceCodester Hospitals Patient Records Management System Users.php save sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10185"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2026-10186",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00269,
      "epss_percentile": 0.19117,
      "kev": false,
      "kev_due_at": null,
      "vendor": "code-projects",
      "product": "Online Hospital Management System",
      "cwe": "CWE-74",
      "title": "code-projects Online Hospital Management System patient.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10186"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-49489",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00263,
      "epss_percentile": 0.18324,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenCATS",
      "product": "OpenCATS",
      "cwe": "CWE-89",
      "title": "OpenCATS - SQL Injection in DataGrid sortDirection Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49489"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-49490",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00249,
      "epss_percentile": 0.16568,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenCATS",
      "product": "OpenCATS",
      "cwe": "CWE-89",
      "title": "OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49490"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-48210",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00248,
      "epss_percentile": 0.164,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OTRS AG",
      "product": "OTRS",
      "cwe": "CWE-200",
      "title": "Possible information disclosure via External Interface",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48210"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2026-10194",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00247,
      "epss_percentile": 0.16342,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-119",
      "title": "OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10194"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-10170",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00244,
      "epss_percentile": 0.15876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "code-projects",
      "product": "Visitor Management System",
      "cwe": "CWE-74",
      "title": "code-projects Visitor Management System phone_0.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10170"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-10168",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00243,
      "epss_percentile": 0.15727,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OUSL-GROUP-BrinaryBrains",
      "product": "School Student Management System",
      "cwe": "CWE-99",
      "title": "OUSL-GROUP-BrinaryBrains School Student Management System Parents.php marks resource injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10168"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-10175",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00242,
      "epss_percentile": 0.15609,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aider-AI",
      "product": "Aider",
      "cwe": "CWE-74",
      "title": "Aider-AI Aider Architect Mode auth.py editor_coder.run code injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10175"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-10174",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00228,
      "epss_percentile": 0.1388,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aider-AI",
      "product": "Aider",
      "cwe": "CWE-693",
      "title": "Aider-AI Aider Pre-commit Hook args.py protection mechanism",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10174"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-10177",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00209,
      "epss_percentile": 0.11443,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aider-AI",
      "product": "Aider",
      "cwe": "CWE-918",
      "title": "Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10177"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-10172",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00206,
      "epss_percentile": 0.10934,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bdtask",
      "product": "Multi-Store Inventory Management System",
      "cwe": "CWE-284",
      "title": "Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10172"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-10171",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.00206,
      "epss_percentile": 0.10992,
      "kev": false,
      "kev_due_at": null,
      "vendor": "code-projects",
      "product": "Online Music Site",
      "cwe": "CWE-74",
      "title": "code-projects Online Music Site AdminUpdateAlbum.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10171"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-10176",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00204,
      "epss_percentile": 0.10765,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aider-AI",
      "product": "Aider",
      "cwe": "CWE-74",
      "title": "Aider-AI Aider Code Generation Workflow sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10176"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-10193",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00196,
      "epss_percentile": 0.0975,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "OFCMS",
      "cwe": "CWE-74",
      "title": "OFCMS ComnController ComnController.java query sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10193"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-10203",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00196,
      "epss_percentile": 0.09747,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "OFCMS",
      "cwe": "CWE-74",
      "title": "OFCMS JSON Query SystemParamController.java query sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10203"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2026-10202",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00192,
      "epss_percentile": 0.09275,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "OFCMS",
      "cwe": "CWE-74",
      "title": "OFCMS JSON Query SystemDictController.java query sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10202"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-10204",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00192,
      "epss_percentile": 0.09274,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "OFCMS",
      "cwe": "CWE-74",
      "title": "OFCMS JSON Query SysUserController.java query sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10204"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-10200",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00124,
      "epss_percentile": 0.02591,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10200"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-10199",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00118,
      "epss_percentile": 0.0202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Assimp",
      "cwe": "CWE-404",
      "title": "Assimp glTF2Asset.h LazyDict null pointer dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10199"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-10197",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00115,
      "epss_percentile": 0.01821,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Assimp",
      "cwe": "CWE-404",
      "title": "Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10197"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-10198",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00113,
      "epss_percentile": 0.01678,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Assimp",
      "cwe": "CWE-404",
      "title": "Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10198"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-10201",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00112,
      "epss_percentile": 0.01596,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Assimp",
      "cwe": "CWE-369",
      "title": "Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10201"
    }
  ],
  "transactions": [
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-8398",
      "detail": "DUE DATE PASSED — CVE-2026-8398 (Daemon Tools Lite). CISA remediation deadline was May 30, 2026; still in catalog."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}