Security Box Score — June 2, 2026

225 CVEs published, led by Dräger (13).

225 CVEs published June 2, 2026: 14 critical, 85 high, 97 medium, 29 low; 1 in the KEV catalog at press time; 25 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 200 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	601	5062	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

199 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	1	968	79	617	271	1	11	2	0.2	7.8	.0013	-60 ▼
microsoft	1	537	46	375	114	2	286	19	3.5	7.8	.0047	+1 ▲
google	61	236	11	153	61	11	77	5	2.1	8.1	.0021	+61 ▲
red hat	5	99	8	39	43	9	2	0	0.0	6.7	.0037	+5 ▲
apple	0	52	1	17	33	1	88	7	13.5	6.2	.0023	0
canonical	0	14	0	4	5	5	0	0	0.0	5.5	.0009	0
freebsd	0	7	0	5	2	0	0	0	0.0	7.8	.0020	0
suse	0	2	0	2	0	0	0	0	0.0	8.2	.0020	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	0	12	5	3	4	56	8	66.7	7.8	.1576	0
fortinet	0	7	4	3	0	28	3	42.9	9.1	.8584	0
ivanti	1	6	2	4	0	25	4	66.7	8.8	.5751	+1 ▲
checkpoint	0	6	0	3	3	3	0	0.0	6.5	.0338	0
zyxel	2	3	0	0	3	9	0	0.0	6.5	.0017	+2 ▲
ubiquiti	0	3	1	2	0	3	0	0.0	8.8	.0068	0
f5	0	2	2	0	0	4	1	50.0	9.2	.3901	0
palo alto networks	0	2	1	1	0	13	2	100.0	8.6	.6281	0

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	30	64	6	26	29	2	33	1	1.6	6.8	.0053	+30 ▲
mozilla	4	10	3	3	4	0	9	0	0.0	7.4	.0035	+4 ▲
gitlab	0	7	0	1	6	0	4	2	28.6	4.3	.0024	0
drupal	0	5	1	1	3	0	4	1	20.0	5.1	.0026	0
docker	1	4	0	4	0	0	0	0	0.0	8.8	.0022	+1 ▲
github	0	2	1	1	0	0	0	0	0.0	8.1	.0347	0
wordpress	0	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
ibm	5	54	13	26	15	6	0	0.0	7.5	.0031	+5 ▲
oracle	0	28	9	15	4	27	1	3.6	8.1	.0027	0
progress	5	9	1	7	1	6	0	0.0	7.5	.0036	+5 ▲
solarwinds	1	4	2	2	0	10	3	75.0	8.9	.8262	+1 ▲
veeam	0	3	1	2	0	1	0	0.0	8.6	.0051	0
adobe	0	2	0	2	0	19	2	100.0	8.6	.0368	0
zohocorp	0	2	0	1	1	0	0	0.0	7.1	.0104	0
atlassian	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	KEV/100	Med CVSS	Med EPSS	Δ
synology	0	18	2	3	10	3	0	0.0	5.6	.0025	0
d-link	2	4	0	3	1	0	3	0.0	7.4	.0054	+2 ▲
siemens	1	2	0	1	1	0	0	0.0	7.3	.0026	+1 ▲
hitachi energy	0	2	0	0	2	0	0	0.0	5.7	.0014	0
tp-link	0	0	0	0	0	0	1	—	—	—	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
edimax	0	51	0	32	0	19	1	7.4	.0059	0
concrete cms	0	44	1	9	13	21	0	5.7	.0015	0
open ises	0	44	2	21	21	0	0	7.1	.0021	0
helmholz	0	42	0	39	3	0	0	7.1	.0026	0
mb connect line	0	42	0	39	3	0	0	7.1	.0026	0
sourcecodester	15	37	0	0	11	26	0	2.1	.0025	+15 ▲
nvidia	2	35	8	20	7	0	0	7.8	.0029	+2 ▲
totolink	0	35	0	26	0	9	0	8.9	.0191	0

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-0257	.9391	99.8	7.8
CVE-2026-43284	.9324	99.8	8.8
CVE-2026-43500	.9285	99.8	7.8
CVE-2026-20182	.9152	99.8	10.0
CVE-2026-42208	.8942	99.8	9.3
CVE-2026-9082	.8832	99.8	9.8
CVE-2026-42271	.8354	99.7	8.7
CVE-2026-41089	.7962	99.6	9.8
CVE-2026-42897	.7120	99.4	8.1
CVE-2026-42945	.6805	99.3	9.2

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-20182	10.0	.9152	KEV
CVE-2026-48172	10.0	.1891	KEV
CVE-2026-45087	10.0	.1296
CVE-2026-8054	10.0	.0158
CVE-2026-49199	10.0	.0134
CVE-2026-43997	10.0	.0098
CVE-2026-42826	10.0	.0084
CVE-2026-20223	10.0	.0083
CVE-2026-44005	10.0	.0083
CVE-2026-44006	10.0	.0081

Most disclosures (vendor)
Vendor	CVEs
linux	581
google	229
microsoft	167
ibm	54
apache	51
edimax	51
red hat	47
concrete cms	44
open ises	44
helmholz	42

Most KEV additions (YTD)
Vendor	KEV
microsoft	19
cisco	8
apple	7
google	5
ivanti	4
fortinet	3
smartertools	3
solarwinds	3
adobe	2
berriai	2

Most-affected ecosystems
Ecosystem	Advisories
Maven	23
Packagist	7
PyPI	3
crates.io	2
npm	2

Fastest to KEV
CVE	Vendor	Days
CVE-2025-48595	Google	0
CVE-2026-34926	Trend Micro, Inc.	0
CVE-2026-41091	Microsoft	0
CVE-2026-42208	BerriAI	0
CVE-2026-42897	Microsoft	0
CVE-2026-45321	@tanstack	0
CVE-2026-45498	Microsoft	0
CVE-2026-48027	nrwl	0
CVE-2026-48172	LiteSpeed Technologies	0
CVE-2026-9082	Drupal	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1658
CVE-2021-27102	n/a	2021-11-17	1658
CVE-2021-27101	n/a	2021-11-17	1658
CVE-2021-27103	n/a	2021-11-17	1658
CVE-2021-21017	Adobe	2021-11-17	1658
CVE-2021-28550	Adobe	2021-11-17	1658
CVE-2021-42013	Apache Software Foundation	2021-11-17	1658
CVE-2021-41773	Apache Software Foundation	2021-11-17	1658
CVE-2021-30858	Apple	2021-11-17	1658
CVE-2021-30860	Apple	2021-11-17	1658

Transactions

EXPLOIT PUBLISHED — open-telemetry opentelemetry-ebpf-instrumentation: 10 CVEs (CVE-2026-45676, CVE-2026-45678, CVE-2026-45679, CVE-2026-45680, CVE-2026-45681, CVE-2026-45682, CVE-2026-45683, CVE-2026-45684, CVE-2026-45685, CVE-2026-45686). Public exploit references added.

EXPLOIT PUBLISHED — danny-avila LibreChat: 3 CVEs (CVE-2026-32625, CVE-2026-44653, CVE-2026-44654). Public exploit references added.

EXPLOIT PUBLISHED — elixir-tesla tesla: 3 CVEs (CVE-2026-48594, CVE-2026-48595, CVE-2026-48596). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2026-3198 (mlflow/mlflow). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-3514 (prefecthq/prefect). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-35482 (alfio-event alf.io). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-42073 (Gitlawb openclaude). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-42074 (Gitlawb openclaude). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-49443 (goauthentik authentik). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-49448 (goauthentik authentik). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-5422 (jupyter/jupyter). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-7299 (Appsmith). Public exploit reference added.

DUE DATE PASSED — CVE-2026-0257 (Palo Alto Networks PAN-OS). CISA remediation deadline was June 1, 2026; still in catalog.

Yesterday's Results

How to read these box scores · glossary

225 CVEs published. 25 box scores, 200 table rows — nothing truncated.

CVE-2025-48595HIGH

Google Android — Android Framework

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   N  U  H  H  H    8.4   .0171   75.6   YES

AFFECTED
  Product  Versions   Fixed
  Android  16-qpr2 –  —

TIMELINE
  May 22  Reserved by CNA
  Jun 2   Added to CISA KEV, due Jun 5
  Jun 2   Published (CNA: google_android)

CWE-190 · CNA: google_android · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due June 5, 2026

CVE-2026-32625CRITICAL

danny-avila LibreChat — LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  N    9.6   .0294   86.1     —

AFFECTED
  Product    Versions       Fixed
  LibreChat  < 0.8.4-rc1 –  —

TIMELINE
  Mar 12  Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: GitHub_M)

CWE-200 · CNA: GitHub_M · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-5073HIGH

ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0138   70.1     —

AFFECTED
  Product                                                                                               Versions     Fixed
  ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup  unspecified  —

TIMELINE
  Mar 28  Reserved by CNA
  Jun 2   Published (CNA: Wordfence)

CWE-89 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred

CVE-2026-8206CRITICAL

themeum Kirki – Freeform Page Builder, Website Builder & Customizer — Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0128   67.8     —

AFFECTED
  Product                                                      Versions  Fixed
  Kirki – Freeform Page Builder, Website Builder & Customizer  6.0.0 –   —

TIMELINE
  May 9   Reserved by CNA
  Jun 2   Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · CVSS v3.1 · 8 references · NVD status: Deferred

CVE-2026-10550LOW

elunez eladmin Application Deployment App.java command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0107   62.2     —

AFFECTED
  Product  Versions  Fixed
  eladmin  2.0 –     —

TIMELINE
  Jun 1   Reserved by CNA
  Jun 2   Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-47117CRITICAL

maziyarpanahi openmed — OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0092   57.4     —

AFFECTED
  Product  Versions     Fixed
  openmed  unspecified  —

TIMELINE
  May 18  Reserved by CNA
  Jun 2   Published (CNA: VulnCheck)

CWE-94 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred

CVE-2026-10702MEDIUM

Mozilla Firefox — JIT miscompilation in the JavaScript Engine: JIT component

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  N  N  L    4.3   .0086   55.6     —

AFFECTED
  Product  Versions     Fixed
  Firefox  unspecified  151.0.3

TIMELINE
  Jun 2   Reserved by CNA
  Jun 2   Published (CNA: mozilla)

CWE-843, CWE-733 · CNA: mozilla · CVSS v3.1 · 5 references · NVD status: Modified

CVE-2026-35718MEDIUM

n/a n/a — A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmwar…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  N  N    6.5   .0072   51.2     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Apr 6   Reserved by CNA
  Jun 2   Published (CNA: mitre)

CWE-22 · CNA: mitre · CVSS v3.1 · 1 reference · NVD status: Modified

CVE-2026-1829HIGH

jhorowitz Content Visibility for Divi Builder — Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Execution

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0071   50.7     —

AFFECTED
  Product                              Versions     Fixed
  Content Visibility for Divi Builder  unspecified  —

TIMELINE
  Feb 3   Reserved by CNA
  Jun 2   Published (CNA: Wordfence)

CWE-94 · CNA: Wordfence · CVSS v3.1 · 3 references · NVD status: Deferred

CVE-2026-0611CRITICAL

Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   H   H    9.2   .0066   49.0     —

AFFECTED
  Product   Versions  Fixed
  Sentinel  10.5.0 –  —

TIMELINE
  Jan 5   Reserved by CNA
  Jun 2   Published (CNA: VulnCheck)

CWE-306 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Deferred

CVE-2026-10591HIGH

AWS Kiro IDE — Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   A   H   H   H    8.6   .0066   48.9     —

AFFECTED
  Product   Versions     Fixed
  Kiro IDE  unspecified  —

TIMELINE
  Jun 1   Reserved by CNA
  Jun 2   Published (CNA: AMZN)

CWE-732 · CNA: AMZN · CVSS v4.0 · 2 references · NVD status: Analyzed

CVE-2026-30650HIGH

n/a n/a — A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpo…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0060   46.0     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Mar 4   Reserved by CNA
  Jun 2   Published (CNA: mitre)

CWE-120 · CNA: mitre · CVSS v3.1 · 1 reference · NVD status: Modified

CVE-2026-27145MEDIUM

Go standard library crypto/x509 — Inefficient candidate hostname parsing in crypto/x509

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  N  L  H    6.5   .0059   45.6     —

AFFECTED
  Product      Versions     Fixed
  crypto/x509  unspecified  —

TIMELINE
  Feb 17  Reserved by CNA
  Jun 2   Published (CNA: Go)

CWE-606 · CNA: Go · CVSS v3.1 · 75 references · NVD status: Awaiting Analysis

CVE-2026-42074CRITICAL

Gitlawb openclaude — OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0059   45.5     —

AFFECTED
  Product     Versions   Fixed
  openclaude  < 0.5.1 –  —

TIMELINE
  Apr 23  Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: GitHub_M)

CWE-284, CWE-306 · CNA: GitHub_M · CVSS v4.0 · 3 references · NVD status: Analyzed

CVE-2026-42504HIGH

Go standard library mime — Quadratic complexity in WordDecoder.DecodeHeader in mime

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0056   44.1     —

AFFECTED
  Product  Versions     Fixed
  mime     unspecified  —

TIMELINE
  Apr 28  Reserved by CNA
  Jun 2   Published (CNA: Go)

CWE-407 · CNA: Go · CVSS v3.1 · 4 references · NVD status: Awaiting Analysis

CVE-2026-34906CRITICAL

Simple SA Wirtualna Uczelnia — Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0056   43.9     —

AFFECTED
  Product             Versions     Fixed
  Wirtualna Uczelnia  unspecified  —

TIMELINE
  Mar 31  Reserved by CNA
  Jun 2   Published (CNA: CERT-PL)

CWE-1336 · CNA: CERT-PL · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-30652HIGH

n/a n/a — A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interfac…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0052   42.0     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Mar 4   Reserved by CNA
  Jun 2   Published (CNA: mitre)

CWE-120 · CNA: mitre · CVSS v3.1 · 1 reference · NVD status: Modified

CVE-2026-28299HIGH

SolarWinds Web Help Desk Denial-of-Service Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0052   41.9     —

AFFECTED
  Product        Versions                            Fixed
  Web Help Desk  2026.1 and all previous versions –  —

TIMELINE
  Feb 26  Reserved by CNA
  Jun 2   Published (CNA: SolarWinds)

CWE-770 · CNA: SolarWinds · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-10619MEDIUM

sayan365 student-management-system improper authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0050   40.4     —

AFFECTED
  Product                    Versions  Fixed
  student-management-system  n/a –     —

TIMELINE
  Jun 2   Reserved by CNA
  Jun 2   Published (CNA: VulDB)

CWE-287 · CNA: VulDB · CVSS v4.0 · 12 references · NVD status: Deferred

CVE-2026-48595HIGH

elixir-tesla tesla — Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   N   N    8.2   .0049   39.7     —

AFFECTED
  Product  Versions                                    Fixed
  tesla    1.4.0 –                                     —
  tesla    2d937d5813d7cda5cd726f41824985fb655c920f –  —

TIMELINE
  May 22  Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: EEF)

CWE-178 · CNA: EEF · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-3514HIGH

prefecthq prefecthq/prefect — Authentication Bypass in prefecthq/prefect

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0048   39.0     —

AFFECTED
  Product            Versions       Fixed
  prefecthq/prefect  unspecified –  —

TIMELINE
  Mar 4   Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: @huntr_ai)

CWE-863 · CNA: @huntr_ai · CVSS v3.0 · 2 references · NVD status: Analyzed

CVE-2026-7195HIGH

Progress Software Sitefinity — CWE-20: Improper Input Validation in web services in Progress Sitefinity

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  N    8.1   .0047   38.6     —

AFFECTED
  Product     Versions  Fixed
  Sitefinity  14.1.0 –  —

TIMELINE
  Apr 27  Reserved by CNA
  Jun 2   Published (CNA: ProgressSoftware)

CWE-20 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-45685HIGH

open-telemetry opentelemetry-ebpf-instrumentation — OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0046   38.1     —

AFFECTED
  Product                             Versions             Fixed
  opentelemetry-ebpf-instrumentation  >= 0.1.0, < 0.9.0 –  —

TIMELINE
  May 13  Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: GitHub_M)

CWE-20, CWE-248, CWE-704 · CNA: GitHub_M · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-48594HIGH

elixir-tesla tesla — Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   N   N   H    8.2   .0046   37.6     —

AFFECTED
  Product  Versions                                    Fixed
  tesla    0.6.0 –                                     —
  tesla    5bd90bb5cf0d15e375edc2a66fa322292940fce2 –  —

TIMELINE
  May 22  Reserved by CNA
  Jun 2   Public exploit reference published
  Jun 2   Published (CNA: EEF)

CWE-409 · CNA: EEF · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-7198CRITICAL

Progress Software Sitefinity — CWE-284: Improper Access Control in web services in Progress Sitefinity

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0044   36.7     —

AFFECTED
  Product     Versions     Fixed
  Sitefinity  15.4.8623 –  —

TIMELINE
  Apr 27  Reserved by CNA
  Jun 2   Published (CNA: ProgressSoftware)

CWE-284 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-10622	8.2	36.6	Collibra	Collibra Platform (on-prem)	—	CVE-2026-10622
CVE-2026-7312	7.5	36.5	Progress Software	Sitefinity	CWE-522	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sit…
CVE-2026-5422	8.1	36.2	jupyter	jupyter/jupyter	CWE-23	Path Traversal in jupyter/jupyter
CVE-2026-46718	6.5	36.1	Apache Software Foundation	Apache Calcite	CWE-470	Apache Calcite: A user-controled model can load arbitrary classes, leading to…
CVE-2026-10650	5.5	35.5	warmcat	libwebsockets	CWE-400	warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource co…
CVE-2026-5076	9.8	34.7	armember	ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup	CWE-287	ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthentica…
CVE-2026-5385	8.4	34.5	glpi-project	glpi	CWE-79	GLPI 11.0.0 - Stored XSS in knowledge base
CVE-2026-42211	8.1	34.4	remix-run	react-router	CWE-502	React Router's vendored turbo-stream v2 allows arbitrary constructor invocati…
CVE-2025-53440	8.1	34.3	Axiomthemes	Confidant	CWE-98	WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability
CVE-2025-58705	8.1	34.3	Axiomthemes	Crafti	CWE-98	WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability
CVE-2026-49448	9.8	33.4	goauthentik	authentik	CWE-287	authentik: SourceStage bypass via empty POST
CVE-2026-10621	7.5	33.1	Collibra	Collibra Platform (SaaS)	—	CVE-2026-10621
CVE-2026-10617	5.5	32.8	nextlevelbuilder	GoClaw	CWE-287	nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing auth…
CVE-2026-49143	8.7	32.0	browserstack	browserstack-runner	CWE-94	BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler
CVE-2026-48862	8.2	31.1	elixir-mint	mint	CWE-770	Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMI…
CVE-2026-49754	8.2	31.1	elixir-mint	mint	CWE-770	HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation
CVE-2026-30649	7.3	30.4	n/a	n/a	CWE-121	Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remot…
CVE-2026-42507	5.3	29.7	Go standard library	net/textproto	—	Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42849	9.3	28.2	goauthentik	authentik	CWE-79	authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover
CVE-2026-45686	7.5	28.0	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-190	OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can cra…
CVE-2026-10691	2.1	28.0	wonderwhy-er	DesktopCommanderMCP	CWE-400	wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos
CVE-2026-10611	8.2	27.9	misp	misp	CWE-287	OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authe…
CVE-2026-7201	8.8	27.4	Progress Software	Sitefinity	CWE-639	CWE-639: Authorization Bypass Through User-Controlled Key in web services in …
CVE-2026-48597	8.2	27.3	elixir-tesla	tesla	CWE-770	Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint
CVE-2026-45554	5.3	26.8	zauberzeug	nicegui	CWE-248	NiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-comp…
CVE-2026-45678	7.5	26.7	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-20	OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malfor…
CVE-2026-7299	5.4	26.6	Appsmith	Appsmith	CWE-79	CVE-2026-7299
CVE-2025-58707	8.1	26.1	Axiomthemes	Spin	CWE-98	WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-58897	8.1	26.1	Axiomthemes	Fermentio	CWE-98	WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2025-68886	8.1	26.1	androThemes	Cookiteer	CWE-98	WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerability
CVE-2026-39552	8.1	25.8	Code Supply Co.	Blueprint	CWE-98	WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerability
CVE-2026-39553	8.1	25.8	Select-Themes	WaveRide	CWE-98	WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-38967	9.8	25.6	n/a	n/a	CWE-113	CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection v…
CVE-2025-69369	8.1	25.0	Axiomthemes	Racquet	CWE-98	WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability
CVE-2026-35716	6.3	24.5	n/a	n/a	CWE-121	A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8…
CVE-2026-45680	7.5	24.1	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-400	OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can…
CVE-2026-7313	4.9	24.1	Progress Software	Sitefinity	CWE-522	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sit…
CVE-2026-41412	4.9	23.9	alfio-event	alf.io	CWE-22	alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Exten…
CVE-2026-10607	5.5	23.5	n/a	DedeCMS	CWE-74	DedeCMS flink.php dede_htmlspecialchars sql injection
CVE-2026-10692	2.1	23.1	johnhuang316	code-index-mcp	CWE-400	johnhuang316 code-index-mcp search_code_advanced is_safe_regex_pattern redos
CVE-2026-39550	8.1	22.9	Elated-Themes	Aperitif	CWE-502	WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability
CVE-2026-39551	8.1	22.9	Elated-Themes	Töbel	CWE-502	WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability
CVE-2026-5074	6.5	22.9	armember	ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup	CWE-89	ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sS…
CVE-2026-10608	5.5	22.9	n/a	DedeCMS	CWE-74	DedeCMS carbuyaction.php RemoveXSS sql injection
CVE-2026-1871	7.1	22.6	TP-Link Systems Inc.	Tapo C200 v5	CWE-121	Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200
CVE-2026-38978	5.3	22.6	n/a	n/a	CWE-113	transmission through 4.1.1 was found to have a clickjacking weakness in the b…
CVE-2026-10701	7.5	22.1	Mozilla	Firefox	CWE-119	Incorrect boundary conditions in the Graphics: Text component
CVE-2026-49753	6.3	22.1	elixir-mint	mint	CWE-444	HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing
CVE-2025-58024	7.5	22.0	UnboundStudio	Accordion FAQ	CWE-98	WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability
CVE-2026-49943	6.3	22.1	NIC	BIRD	CWE-121	CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buf…
CVE-2026-42684	9.3	21.9	Ahmad	WP Job Portal	CWE-89	WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability
CVE-2026-42342	7.5	21.9	remix-run	react-router	CWE-400	React Router vulnerable to DoS via unbounded path expansion in __manifest end…
CVE-2026-49443	8.8	21.9	goauthentik	authentik	CWE-287	authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are …
CVE-2026-34077	7.5	21.3	remix-run	react-router	CWE-770	React Router vulnerable to Denial of Service via reflected user input in sing…
CVE-2025-53345	8.8	21.3	ThimPress	Thim Core	CWE-862	WordPress Thim Core plugin <= 2.3.3 - Arbitrary Plugin Installation vulnerabi…
CVE-2026-41115	4.3	20.7	Apache Software Foundation	Apache Kafka	CWE-285	Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API
CVE-2026-45681	5.9	20.6	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-125	OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffe…
CVE-2026-34907	5.1	20.4	Simple SA	Wirtualna Uczelnia	CWE-79	Reflected Cross-Site Scripting (XSS) in Wirtualna Uczelnia
CVE-2024-14036	8.7	20.4	Dräger	Core	CWE-400	Dräger Core 1.0.5 Denial of Service via Malformed SDC Message
CVE-2026-35482	9.1	20.1	alfio-event	alf.io	CWE-863	alf.io has an Authenticated RCE via Extension Script Sandbox Escape
CVE-2026-44653	6.5	19.4	danny-avila	LibreChat	CWE-201	LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets
CVE-2025-53209	9.8	19.4	Themeisle	Masteriyo LMS PRO	CWE-266	WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerabi…
CVE-2026-48598	2.1	19.2	elixir-tesla	tesla	CWE-116	CRLF injection in Tesla.Multipart disposition parameters allows multipart par…
CVE-2026-40314	6.9	19.0	NamelessMC	Nameless	CWE-862	NamelessMC: Reactions on private or blocking profile posts can be read and mo…
CVE-2026-10620	5.5	19.0	code-projects	Student Admission System	CWE-74	code-projects Student Admission System index.php sql injection
CVE-2026-40108	7.1	18.5	glpi-project	glpi	CWE-79	GLPI Vulnerable to Stored XSS in ITIL Costs
CVE-2026-10549	5.3	18.4	Yandex	Yandex Database	CWE-280	Privilege escalation in Yandex Database
CVE-2026-40780	7.5	18.4	Liquid Web / StellarWP	BookIt	CWE-288	WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability
CVE-2026-48682	5.9	18.3	n/a	n/a	CWE-125	FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in …
CVE-2026-44654	5.7	18.0	danny-avila	LibreChat	CWE-863	LibreChat: Shared-agent editor can globally delete owner's file records — bre…
CVE-2026-35717	6.3	17.5	n/a	n/a	CWE-121	A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD…
CVE-2026-3722	6.4	17.0	arunbasillal	Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)	CWE-79	Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Ti…
CVE-2026-39555	8.1	16.7	Elated-Themes	Askka	CWE-502	WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability
CVE-2026-45553	7.5	16.7	zauberzeug	nicegui	CWE-200	NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured…
CVE-2026-42073	6.5	16.7	Gitlawb	openclaude	CWE-352	OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS
CVE-2026-10606	5.5	16.6	n/a	DedeCMS	CWE-74	DedeCMS Feedback feedback.php TrimMsg sql injection
CVE-2026-42670	7.5	16.4	Etoile Web Design Incorporated	Five Star Restaurant Reservations	CWE-862	WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass…
CVE-2026-45080	6.9	16.0	Aiven-Open	klaw	CWE-200	Klaw: Improper Access Control Allows Disclosure of Password Hash
CVE-2026-10661	2.1	15.8	ahujasid	blender-mcp	CWE-74	ahujasid blender-mcp server.py open injection
CVE-2026-3620	4.4	15.6	takien	Word Replacer	CWE-20	Word Replacer <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scrip…
CVE-2026-3198	6.5	15.3	mlflow	mlflow/mlflow	CWE-284	Improper Access Control in mlflow/mlflow
CVE-2026-4080	6.4	15.2	zeshanb	Easy Cart	CWE-79	Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting v…
CVE-2026-10624	2.1	15.1	SourceCodester	Human Resource Management	CWE-99	SourceCodester Human Resource Management Employee View detailview.php resourc…
CVE-2026-4081	6.4	15.0	jhdscript	ZeM STL	CWE-79	ZeM STL <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via…
CVE-2021-4479	6.3	15.0	Dräger	Atlan A350	CWE-1286	Dräger Atlan A350 1.00 <= 1.01 DoS via Medibus Interface
CVE-2026-9844	8.8	14.8	Roche Diagnostics	navify Digital Pathology	CWE-1392	Vulnerability in navify® Digital Pathology
CVE-2026-48596	2.1	14.7	elixir-tesla	tesla	CWE-113	CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header…
CVE-2026-10567	2.0	14.5	1Panel-dev	CordysCRM	CWE-79	1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross s…
CVE-2026-8293	7.5	14.4	Unknown	Really Simple Security	CWE-287	Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP …
CVE-2019-25723	6.3	14.4	Dräger	Perseus A500	CWE-1286	Dräger Perseus A500 2.00-2.02 DoS via Medibus Interface
CVE-2026-35447	5.3	14.3	NamelessMC	Nameless	CWE-201	NamelessMC: Private or blocking profile pages can be bypassed with direct POS…
CVE-2026-44367	2.7	14.4	Aiven-Open	klaw	CWE-20	Klaw: user lockout due to case sensitivity inconsistency
CVE-2026-35049	6.5	14.2	wireapp	wire-ios	CWE-20	wire-ios has Persistent Remote DoS via Integer Underflow
CVE-2026-35443	5.3	14.2	NamelessMC	Nameless	CWE-862	NamelessMC: Forum reactions bypass the "view own topics only" restriction
CVE-2026-40571	5.3	14.2	NamelessMC	Nameless	CWE-862	NamelessMC: Reactions on private or blocking profile posts can be modified wi…
CVE-2026-49120	6.3	13.4	medplum	medplum	CWE-918	Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint
CVE-2026-10558	2.1	13.2	SourceCodester	Pizzafy Ecommerce System	CWE-73	SourceCodester Pizzafy Ecommerce System index.php file inclusion
CVE-2026-10559	2.1	13.2	SourceCodester	Pizzafy Ecommerce System	CWE-73	SourceCodester Pizzafy Ecommerce System index.php file inclusion
CVE-2026-10662	2.1	13.2	ahujasid	blender-mcp	CWE-918	ahujasid blender-mcp ZIP File server.py requests.get server-side request forgery
CVE-2026-10583	2.0	13.2	nextlevelbuilder	GoClaw	CWE-918	nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import serve…
CVE-2026-33398	7.1	13.0	NamelessMC	Nameless	CWE-285	Authenticated users can read hidden forum posts through `/forum/get_quotes`
CVE-2026-8993	6.5	13.0	Ditec a.s.	D.Launcher 2	CWE-74	Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Discl…
CVE-2026-30586	6.1	12.9	n/a	n/a	CWE-79	Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote…
CVE-2026-10565	1.3	12.8	n/a	Open5GS	CWE-362	Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode race condition
CVE-2026-10690	2.1	12.5	wonderwhy-er	DesktopCommanderMCP	CWE-918	wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl serv…
CVE-2026-45679	6.5	11.3	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-117	OpenTelemetry eBPF Instrumentation: Redis error text is exported in span stat…
CVE-2026-35202	2.3	11.4	pterodactyl	panel	CWE-367	Pterodactyl has a database resource limit bypass via race condition in Client…
CVE-2026-40181	6.6	11.2	remix-run	react-router	CWE-601	React Router's same-origin redirect with path starting // causes open redirec…
CVE-2026-10529	1.9	11.1	westboy	CicadasCMS	CWE-79	westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cros…
CVE-2026-49144	7.1	10.8	browserstack	browserstack-runner	CWE-22	BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler
CVE-2026-1451	6.1	10.8	federicocarrara	rognone	CWE-79	rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'a' Parameter
CVE-2026-2425	6.1	10.8	den-media	hiWeb Migration Simple	CWE-79	hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_d…
CVE-2026-7421	4.4	10.9	passeum	Passeum Ticketing	CWE-79	Passeum Ticketing <= 1.0 - Authenticated (Administrator+) Stored Cross-Site S…
CVE-2026-42654	7.1	10.7	WP Swings	Wallet System for WooCommerce	CWE-288	WordPress Wallet System for WooCommerce plugin <= 2.7.5 - Broken Authenticati…
CVE-2026-31942	7.1	10.5	danny-avila	LibreChat	CWE-862	LibreChat has IDOR in API Keys Management that allows any authenticated user …
CVE-2026-10616	2.1	10.5	nextlevelbuilder	GoClaw	CWE-862	nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTask…
CVE-2026-1450	6.1	10.3	federicocarrara	rognone	CWE-79	rognone <= 0.6.2 - Reflected Cross-Site Scripting via 'mode' Parameter
CVE-2019-25717	5.3	10.1	Dräger	Infinity Delta	CWE-538	Dräger Infinity Delta/Kappa Patient Monitors Unauthenticated Log File Disclosure
CVE-2026-42669	7.5	10.0	EventPrime	EventPrime	CWE-862	WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
CVE-2025-5085	5.5	9.9	ariyes	WP Nano AD	CWE-79	wp-nano-ad <= 1.31 - Authenticated (Administrator+) Stored Cross-Site Scripti…
CVE-2026-10581	2.1	9.9	n/a	DedeCMS	CWE-918	DedeCMS download.php base64_decode server-side request forgery
CVE-2026-10568	2.1	9.8	itsourcecode	Fees Management System	CWE-74	itsourcecode Fees Management System manage_payment.php sql injection
CVE-2026-49782	5.4	9.6	Elementor	Elementor Website Builder	CWE-862	WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control v…
CVE-2026-9234	4.3	9.6	ntbyk	JTL-Connector for WooCommerce	CWE-862	JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticat…
CVE-2026-1784	8.8	9.1	Red Hat	Red Hat OpenShift Container Platform 4.13	CWE-15	Ose-cluster-ingress-operator: remote code execution through haproxy configura…
CVE-2026-41918	5.9	9.1	Siemens	RUGGEDCOM RST2428P	CWE-525	A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (Al…
CVE-2019-25722	7.2	9.0	Dräger	SC 6002XL	CWE-798	Dräger SC Monitoring Devices Hard-coded Credentials and DoS
CVE-2026-2382	6.4	8.8	frankpw	FPW Category Thumbnails	CWE-79	FPW Category Thumbnails <= 1.9.5 - Authenticated (Subscriber+) Stored Cross-S…
CVE-2026-41569	6.9	8.7	goauthentik	authentik	CWE-601	authentik: WS-Federation wreply origin bypass can exfiltrate signed login res…
CVE-2026-33245	4.7	8.5	remix-run	react-router	CWE-79	React Router vulnerable to XSS in unstable RSC redirect handling via javascri…
CVE-2019-25721	7.1	8.3	Dräger	Infinity M300	CWE-400	Dräger Infinity M300 VG2.3.1 Network-Based Denial of Service
CVE-2025-53302	5.3	8.3	Anton Shevchuk	Constructor	CWE-862	WordPress Constructor theme <= 1.6.5 - Broken Access Control Vulnerability
CVE-2026-32250	4.3	8.0	NamelessMC	Nameless	CWE-79	NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index…
CVE-2026-9590	5.3	8.0	Devolutions	Server	CWE-284	Improper access control in the permission validation component in Devolutions…
CVE-2026-10100	4.4	7.9	pattihis	Simple Custom Login Page	CWE-79	Simple Custom Login Page <= 1.0.3 - Authenticated (Admin+) Stored Cross-Site …
CVE-2026-47201	8.5	7.7	goauthentik	authentik	CWE-347	authentik: XML Signature Wrapping in SAML Source ACS allows authentication as…
CVE-2026-8885	6.4	7.7	marcqueralt	DeMomentSomTres Shortcodes	CWE-79	DeMomentSomTres Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cro…
CVE-2026-34993	7.3	7.4	aio-libs	aiohttp	CWE-502	AIOHTTP Vulnerable to Deserialization of Untrusted Data
CVE-2026-25861	8.2	7.4	QloApps	QloApps	CWE-916	QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php
CVE-2026-10688	2.0	7.3	ahujasid	blender-mcp	CWE-74	ahujasid blender-mcp server.py execute_blender_code code injection
CVE-2019-25724	7.1	6.9	Dräger	Infinity M300	CWE-400	Dräger Infinity M300 VG2.x Network-Based Denial of Service
CVE-2026-10629	7.4	6.9	Verizon	VoLTE	—	CVE-2026-10629
CVE-2025-52766	6.5	6.9	Printeers	Printeers Print & Ship	CWE-862	WordPress Printeers Print & Ship plugin <= 1.17.0 - Broken Access Control vul…
CVE-2026-45683	3.8	6.9	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-127	OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memor…
CVE-2026-24237	7.8	6.8	NVIDIA	NVTabular	CWE-502	NVIDIA NVTabular contains a vulnerability where an attacker could cause impro…
CVE-2026-45684	5.3	6.6	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-126	OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and…
CVE-2026-24221	7.8	6.4	NVIDIA	NVTabular	CWE-502	NVIDIA NVTabular contains a vulnerability where an attacker could cause impro…
CVE-2025-15653	7.0	6.4	Dräger	Zeus IE	CWE-668	Dräger Zeus IE Anesthesia Workstation USB Interface Privilege Escalation
CVE-2026-41577	6.9	6.4	goauthentik	authentik	CWE-345	authentik: SAML source does not validate Conditions, timing, or audience on a…
CVE-2026-3870	6.5	6.2	Zyxel	VMG4005-B50B firmware	CWE-120	A buffer overflow vulnerability in the UPnP AddPortMapping() command in Zyxel…
CVE-2026-3871	6.5	6.2	Zyxel	VMG4005-B50B firmware	CWE-120	A buffer overflow vulnerability in the UPnP DeletePortMapping() command in Zy…
CVE-2026-48861	2.1	6.1	elixir-mint	mint	CWE-93	CRLF injection in HTTP/1 request line via unvalidated method in Mint
CVE-2026-33553	6.1	6.1	n/a	n/a	CWE-79	Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27…
CVE-2026-27351	5.4	5.9	Sekander Badsha	Crew HRM	CWE-862	WordPress Crew HRM plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-45676	5.5	5.6	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-20	OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed E…
CVE-2026-45682	5.5	5.5	open-telemetry	opentelemetry-ebpf-instrumentation	CWE-401	OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after …
CVE-2022-4992	8.8	5.4	Dräger	Infinity Acute Care System	CWE-345	Dräger Infinity M540 VG4.1.1 Spoofed Network Message Handling DoS/Tampering
CVE-2026-10510	6.1	4.8	TECNO Mobile	com.transsion.aiassistantlifestyle	CWE-79	GeniexWebView XSS in com.transsion.aiassistantlifestyle
CVE-2026-40713	6.1	4.6	Dell	ThinOS 10	CWE-284	Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper …
CVE-2026-43965	5.6	4.5	Gleam	Gleam	CWE-22	Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Del…
CVE-2026-32685	4.6	4.5	Gleam	Gleam	CWE-22	Path Traversal in gleam docs build via documentation.pages Allows Arbitrary F…
CVE-2025-53346	4.3	4.6	ThimPress	Thim Core	CWE-862	WordPress Thim Core Plugin <= 2.3.3 - Broken Access Control Vulnerability
CVE-2024-42206	3.1	4.5	HCL	iReflection	CWE-1395	HCL iReflection Use of Third party vulnerable and outdated components issue w…
CVE-2026-47265	6.6	4.4	aio-libs	aiohttp	CWE-346	AIOHTTP vulnerable to cross-origin redirect with per-request cookies
CVE-2026-35212	5.3	4.3	OpenCTI-Platform	opencti	CWE-79	OpenCTI has XSS in the rendering of email-message observable body data
CVE-2025-52759	7.1	4.1	UnboundStudio	Accordion FAQ	CWE-79	WordPress Accordion FAQ plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerab…
CVE-2026-42685	7.1	4.1	Ahmad	WP Job Portal	CWE-79	WordPress WP Job Portal plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerab…
CVE-2026-33244	5.4	4.0	remix-run	react-router	CWE-79	React Router has stored XSS via unescaped Location header in prerendered redi…
CVE-2026-45289	5.3	3.6	CloudburstMC	Protocol	CWE-287	CloudburstMC Protocol: Partially missing validation for FULL type authenticat…
CVE-2026-10548	1.9	3.5	NousResearch	hermes-agent	CWE-287	NousResearch hermes-agent Credential Pool Synchronization credential_pool.py …
CVE-2026-9522	5.4	3.4	Devolutions	Server	CWE-284	Improper access control in the PAM account discovery feature in Devolutions S…
CVE-2026-28116	5.9	3.2	Emilia Projects	Progress Planner	CWE-79	WordPress Progress Planner plugin <= 1.9.0 - Cross Site Scripting (XSS) vulne…
CVE-2026-5191	5.4	3.1	raja3c	Tiled Gallery Carousel Without JetPack	CWE-79	Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) …
CVE-2019-25719	8.8	3.0	Dräger	Infinity Acute Care System	CWE-924	Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling
CVE-2026-42795	5.1	3.0	Gleam	Gleam	CWE-59	Symlink Following in Hex Package Export Allows Embedding Files Outside Projec…
CVE-2026-8422	4.3	3.0	mr_mat	Remove meta boxes per user role	CWE-352	Remove meta boxes per user role <= 1.01 - Cross-Site Request Forgery to Setti…
CVE-2026-4071	4.3	2.9	birdseedapp	BirdSeed	CWE-352	BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Change
CVE-2026-9722	4.3	2.9	pcis	Laiser Tag	CWE-352	Laiser Tag <= 1.2.5 - Cross-Site Request Forgery to Plugin Settings Update vi…
CVE-2026-9730	4.3	2.9	jamesmuga	Remove NoFollow Commenter URL	CWE-352	Remove NoFollow Commenter URL <= 1.0 - Cross-Site Request Forgery to Settings…
CVE-2026-9599	4.3	2.7	russellr	Tectite Forms	CWE-352	Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update
CVE-2026-9723	4.3	2.7	ddd2500	Google Plus One Bottom	CWE-352	Google Plus One Bottom <= 0.0.2 - Cross-Site Request Forgery to Plugin Settin…
CVE-2026-9732	4.3	2.7	planetshaker	EmergencyWP – Dead Man's switch & legacy deliverance	CWE-352	EmergencyWP <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2026-10528	1.9	2.4	Orthanc	DICOM Server	CWE-119	Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow
CVE-2021-4478	8.3	2.2	Dräger	CC-Vision Basic	CWE-787	Dräger CC-Vision Basic and CC-Vision E-Cal Out-of-Bounds Write via Malicious …
CVE-2026-10566	1.9	2.2	FoundationAgents	MetaGPT	CWE-20	FoundationAgents MetaGPT schema.py Message.check_instruct_content deserializa…
CVE-2026-10046	8.5	1.9	Bitdefender	Napoca bare-metal hypervisor	CWE-787	Out-of-bounds write in Napoca BIOS INT 0x15 E820 memory map handler (VA-13905)
CVE-2026-10047	8.5	1.9	Bitdefender	Napoca bare-metal hypervisor	CWE-787	Out-of-bounds write in Napoca real-mode hook handler via guest-controlled SS:…
CVE-2026-8936	8.2	1.7	Docker	Docker Desktop	CWE-674	Unbounded recursion in grpcfuse kernel module allows container to crash Docke…
CVE-2026-40619	7.8	1.7	Genetec Inc.	Genetec Security Center	CWE-532	A high security vulnerability affecting Security Center main server installat…
CVE-2026-34460	5.4	1.6	NamelessMC	Nameless	CWE-302	NamelessMC: OAuth callback `state` is not validated, allowing login CSRF / se…
CVE-2026-10718	4.6	1.6	—	openSeaChest	CWE-787	Open Seachest/Seachest NVMe Trim (Deallocate) Vulnerability
CVE-2026-8036	8.4	1.2	NI	NI-PAL	CWE-1285	Local privilege escalation in NI-PAL
CVE-2021-4480	8.3	1.3	Dräger	Protector Software	CWE-732	Dräger Protector Software Local Privilege Escalation via Insecure File Permis…
CVE-2021-4481	8.3	1.3	Dräger	Protector Software	CWE-732	Dräger Protector Software Local Privilege Escalation via Insecure File Permis…
CVE-2026-10717	1.8	1.0	—	openSeaChest	CWE-787	Open-Seachest/Seachest show SCSI Defect List Vulnerability
CVE-2026-10719	1.8	1.0	—	openSeaChest	CWE-787	Open Seachest/Seachest NVMe show Format Descriptors Vulnerability
CVE-2026-10584	8.2	1.0	AWS	Graph Explorer	CWE-319	HTTPS Fallback to HTTP in Graph Explorer
CVE-2026-40715	7.8	0.9	Dell	ThinOS 10	CWE-284	Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper …
CVE-2026-8035	6.9	0.8	NI	NI-PAL	CWE-476	NULL pointer dereference in NI-PAL
CVE-2025-64390	7.4	0.4	Sony	PS4	CWE-367	A privilege escalation vulnerability exists in PlayStation 4 firmware version…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-06-02 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.