Security Box Score — July 4, 2026

69 CVEs published, led by picklescan (16).

69 CVEs published July 4, 2026: 1 critical, 30 high, 14 medium, 24 low; 0 in the KEV catalog at press time; 3 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 44 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	879	13282	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

574 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	37	1517	120	866	530	1	11	2	0.1	7.5	.0014	+4 ▲
google	52	1317	148	590	542	37	77	6	0.5	7.8	.0024	-436 ▼
microsoft	50	807	61	552	188	6	286	20	2.5	7.8	.0046	+43 ▲
red hat	15	237	12	93	118	14	2	0	0.0	6.5	.0030	+7 ▲
apple	0	104	2	28	72	2	88	7	6.7	6.5	.0032	0
canonical	0	20	2	5	8	5	0	0	0.0	5.5	.0011	0
freebsd	0	16	0	12	4	0	0	0	0.0	7.8	.0016	0
suse	2	15	4	8	3	0	0	0	0.0	8.8	.0042	+2 ▲

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
ubiquiti	25	36	14	21	1	0	3	3	8.3	8.8	.0049	+25 ▲
cisco	8	30	6	14	10	0	56	11	36.7	7.5	.0057	+6 ▲
netgear	0	17	0	0	16	1	0	0	0.0	4.3	.0024	0
palo alto networks	0	11	1	2	7	1	13	2	18.2	5.9	.0022	0
checkpoint	0	9	1	5	3	0	3	1	11.1	7.5	.0410	0
fortinet	0	9	4	3	2	0	28	3	33.3	8.3	.0076	0
ivanti	0	9	4	5	0	0	25	5	55.6	8.8	.5187	-1 ▼
f5	0	8	4	3	1	0	4	1	12.5	8.9	.0225	0

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	5	160	24	61	64	10	33	1	0.6	7.3	.0053	-27 ▼
mozilla	2	58	12	18	28	0	9	0	0.0	7.3	.0026	-2 ▼
gitlab	0	31	0	5	21	5	4	2	6.5	4.4	.0029	0
github	1	7	1	1	5	0	0	0	0.0	6.0	.0039	+1 ▲
docker	0	7	0	5	2	0	0	0	0.0	8.2	.0016	-1 ▼
drupal	0	5	1	1	3	0	4	1	20.0	5.1	.0026	0
wordpress	0	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	270	132	116	18	4	27	2	0.7	8.8	.0040	0
adobe	0	144	11	53	78	2	19	2	1.4	5.8	.0021	0
ibm	0	124	36	42	46	0	6	0	0.0	7.5	.0034	-5 ▼
progress	2	11	1	9	1	0	6	0	0.0	7.5	.0036	-3 ▼
solarwinds	0	7	2	3	2	0	10	4	57.1	7.5	.4001	-1 ▼
veeam	0	4	2	2	0	0	1	0	0.0	9.0	.0052	0
zohocorp	0	3	1	1	1	0	0	0	0.0	8.4	.0170	0
atlassian	0	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
synology	23	2	5	13	3	0	5.6	.0025	-5 ▼
d-link	12	0	5	2	5	3	5.8	.0058	-2 ▼
siemens	9	0	4	5	0	0	6.9	.0021	-1 ▼
rockwell automation	7	1	5	1	0	0	8.7	.0030	0
abb	6	0	4	2	0	0	7.2	.0018	-4 ▼
schneider electric	6	0	4	2	0	0	7.8	.0042	0
moxa	5	0	3	2	0	0	7.0	.0029	0
dahua	3	0	1	1	1	0	6.9	.0036	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
sourcecodester	7	78	0	0	41	37	0	0	0.0	5.5	.0027	-13 ▼
dell	20	76	2	34	38	2	2	1	1.3	6.7	.0018	+17 ▲
spring	0	73	2	31	39	1	0	0	0.0	6.5	.0024	-2 ▼
openclaw	0	67	0	35	22	10	0	0	0.0	7.0	.0021	0
edimax	0	65	0	39	0	26	1	0	0.0	7.4	.0080	0
capgo	0	61	2	31	27	1	0	0	0.0	7.1	.0039	0
themerex	2	60	5	54	1	0	0	0	0.0	8.1	.0043	+2 ▲
nvidia	17	56	11	38	7	0	0	0	0.0	7.8	.0038	+15 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-10520	.9991	100.0	10.0
CVE-2026-20253	.9694	99.9	9.8
CVE-2026-35273	.9547	99.9	9.8
CVE-2026-20230	.8820	99.8	8.6
CVE-2026-34910	.8747	99.7	10.0
CVE-2026-34908	.8519	99.7	10.0
CVE-2026-50751	.8377	99.7	9.3
CVE-2026-48907	.7810	99.5	10.0
CVE-2026-45659	.7608	99.5	8.8
CVE-2026-34909	.6390	99.2	10.0

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-10520	10.0	.9991	KEV
CVE-2026-34910	10.0	.8747	KEV
CVE-2026-34908	10.0	.8519	KEV
CVE-2026-48907	10.0	.7810	KEV
CVE-2026-34909	10.0	.6390	KEV
CVE-2026-13773	10.0	.0610
CVE-2026-56415	10.0	.0436
CVE-2026-56413	10.0	.0419
CVE-2026-53576	10.0	.0330
CVE-2026-53753	10.0	.0290

Most disclosures (vendor)
Vendor	CVEs
google	654
linux	517
microsoft	264
oracle	242
adobe	142
red hat	135
apache	94
ibm	70
spring	70
capgo	61

Most KEV additions (YTD)
Vendor	KEV
microsoft	20
cisco	11
apple	7
google	6
ivanti	5
solarwinds	4
berriai	3
fortinet	3
smartertools	3
ubiquiti	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	38
Packagist	15
npm	6
NuGet	3
PyPI	3

Fastest to KEV
CVE	Vendor	Days
CVE-2026-10520	ivanti	0
CVE-2026-11645	Google	0
CVE-2026-12569	PTC	0
CVE-2026-20230	Cisco	0
CVE-2026-20245	Cisco	0
CVE-2026-20253	Splunk	0
CVE-2026-20262	Cisco	0
CVE-2026-28318	SolarWinds	0
CVE-2026-34908	Ubiquiti Inc	0
CVE-2026-34909	Ubiquiti Inc	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1690
CVE-2021-27102	n/a	2021-11-17	1690
CVE-2021-27101	n/a	2021-11-17	1690
CVE-2021-27103	n/a	2021-11-17	1690
CVE-2021-21017	Adobe	2021-11-17	1690
CVE-2021-28550	Adobe	2021-11-17	1690
CVE-2021-42013	Apache Software Foundation	2021-11-17	1690
CVE-2021-41773	Apache Software Foundation	2021-11-17	1690
CVE-2021-30858	Apple	2021-11-17	1690
CVE-2021-30860	Apple	2021-11-17	1690

Transactions

EXPLOIT PUBLISHED — CVE-2026-12252 (nltk/nltk). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14534 (trailofbits fickling). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14535 (trailofbits fickling). Public exploit reference added.

Yesterday's Results

How to read these box scores · glossary

69 CVEs published. 25 box scores, 44 table rows — nothing truncated.

CVE-2026-53359HIGH

Linux Linux — KVM: x86: Fix shadow paging use-after-free due to unexpected role

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  C  H  H  H    8.8   .0091   57.2     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    2032a93d66fa282ba0f2ea9152eeff9511fa9a96 –  —
  Linux    2.6.36 –                                    6.1.177

TIMELINE
  Jun 9   Reserved by CNA
  Jul 4   Published (CNA: Linux)

CWE-416 · CNA: Linux · CVSS v3.1 · 8 references · NVD status: Modified

CVE-2026-14637HIGH

kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   H    7.8   .0083   54.8     —

AFFECTED
  Product                          Versions                                    Fixed
  Ecommerce-CodeIgniter-Bootstrap  13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7 –  —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-20, CWE-502 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred

CVE-2025-71364HIGH

picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0083   54.7     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.30

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-14628MEDIUM

NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0077   52.8     —

AFFECTED
  Product       Versions    Fixed
  hermes-agent  2026.5.0 –  —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-14622MEDIUM

jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0069   50.0     —

AFFECTED
  Product                       Versions                                    Fixed
  restaurant-website-php-mysql  521428b5b612449df0cf4a5d15ee40cba67f3d35 –  —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-287, CWE-306 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-12195HIGH

myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can inser…

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   N   N    8.5   .0066   48.6     —

AFFECTED
  Product  Versions     Fixed
  vesta    unspecified  —

TIMELINE
  Jun 14  Reserved by CNA
  Jul 4   Published (CNA: PRJBLK)

CWE-78 · CNA: PRJBLK · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71347HIGH

picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0064   47.8     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.33

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71366HIGH

picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0064   47.8     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.28

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71367HIGH

picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0064   47.8     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.34

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71369HIGH

picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0064   47.8     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.28

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71373HIGH

picklescan - Remote Code Execution via operator.methodcaller Detection Bypass

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0064   47.8     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.33

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-693 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-14635MEDIUM

kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0062   47.1     —

AFFECTED
  Product                          Versions                                    Fixed
  Ecommerce-CodeIgniter-Bootstrap  222ff31c06687b1c6d0e1ab63953f82c3674c52b –  —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred

CVE-2025-71342HIGH

picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0061   46.7     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.30

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71345HIGH

picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0061   46.7     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.30

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-71359HIGH

picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0061   46.7     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.29

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-14534HIGH

trailofbits fickling — Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  H    8.8   .0059   45.8     —

AFFECTED
  Product   Versions     Fixed
  fickling  unspecified  0.1.11

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Public exploit reference published
  Jul 4   Published (CNA: BombadilSystems)

CWE-184, CWE-502 · CNA: BombadilSystems · CVSS v3.1 · 4 references · NVD status: Analyzed

CVE-2025-71380HIGH

n8n - Arbitrary Command Execution via Execute Command Node

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0057   44.6     —

AFFECTED
  Product  Versions     Fixed
  n8n      unspecified  —

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-284 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-14535CRITICAL

trailofbits fickling — Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code()

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0056   44.3     —

AFFECTED
  Product   Versions     Fixed
  fickling  unspecified  0.1.12

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Public exploit reference published
  Jul 4   Published (CNA: BombadilSystems)

CWE-693 · CNA: BombadilSystems · CVSS v3.1 · 4 references · NVD status: Analyzed

CVE-2026-14648MEDIUM

code-projects Online Voting System Login authentication.php test_input sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0056   44.1     —

AFFECTED
  Product               Versions  Fixed
  Online Voting System  0.* –     —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-14627LOW

NousResearch hermes-agent Discord Platform Integration discord.py DiscordAdapter._is_allowed_user improper authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   L   L    2.9   .0055   43.8     —

AFFECTED
  Product       Versions  Fixed
  hermes-agent  0.15.0 –  —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-287 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-14618LOW

n/a Open5GS — Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0054   43.3     —

AFFECTED
  Product  Versions  Fixed
  Open5GS  2.7.0 –   —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2026-14623LOW

omec-project amf NGAP Message RRCInactiveTransitionReport denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0054   43.3     —

AFFECTED
  Product  Versions  Fixed
  amf      2.1.0 –   —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2026-14624LOW

omec-project amf NGSetupRequest handler.go denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0054   43.3     —

AFFECTED
  Product  Versions  Fixed
  amf      2.0.0 –   —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2025-71372HIGH

Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0054   43.2     —

AFFECTED
  Product     Versions     Fixed
  Picklescan  unspecified  0.0.33

TIMELINE
  Jun 20  Reserved by CNA
  Jul 4   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-14629LOW

n/a RT-Thread — RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0053   42.6     —

AFFECTED
  Product    Versions  Fixed
  RT-Thread  5.2.0 –   —

TIMELINE
  Jul 3   Reserved by CNA
  Jul 4   Published (CNA: VulDB)

CWE-369, CWE-404 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2025-71375	7.6	42.0	picklescan	picklescan	CWE-502	picklescan - Undetected Remote Code Execution via _operator.methodcaller
CVE-2026-14633	2.1	39.6	kirilkirkov	Ecommerce-CodeIgniter-Bootstrap	CWE-79	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cros…
CVE-2026-14634	2.1	39.6	kirilkirkov	Ecommerce-CodeIgniter-Bootstrap	CWE-79	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Contro…
CVE-2026-14636	5.3	39.0	kirilkirkov	Ecommerce-CodeIgniter-Bootstrap	CWE-22	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.p…
CVE-2026-14626	2.1	38.6	NousResearch	hermes-agent	CWE-404	NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation deni…
CVE-2026-14656	2.1	38.6	code-projects	Assessment Management	CWE-79	code-projects Assessment Management remove-user.php cross site scripting
CVE-2026-14632	2.1	37.9	kirilkirkov	Ecommerce-CodeIgniter-Bootstrap	CWE-601	kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php…
CVE-2026-14641	5.5	36.0	SourceCodester	Class and Exam Timetabling System	CWE-74	SourceCodester Class and Exam Timetabling System edit_course.php sql injection
CVE-2025-71343	7.6	35.7	picklescan	picklescan	CWE-502	picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.…
CVE-2025-71353	7.6	35.7	picklescan	picklescan	CWE-502	picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get
CVE-2025-71356	7.6	35.7	picklescan	picklescan	CWE-502	picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shap…
CVE-2025-71360	7.6	35.7	picklescan	picklescan	CWE-502	picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity
CVE-2025-71362	7.6	35.7	picklescan	picklescan	CWE-502	picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2p…
CVE-2026-14649	6.9	35.7	code-projects	Online Voting System	CWE-74	code-projects Online Voting System saveVote.php test_input sql injection
CVE-2026-14640	5.5	35.7	CodeAstro	Apartment Visitor Management System	CWE-74	CodeAstro Apartment Visitor Management System Login index.php sql injection
CVE-2026-14642	5.5	35.7	SourceCodester	Class and Exam Timetabling System	CWE-74	SourceCodester Class and Exam Timetabling System edit_class2.php sql injection
CVE-2026-14652	5.5	35.7	SourceCodester	Simple and Nice Shopping Cart Script	CWE-74	SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql…
CVE-2026-14653	5.5	35.7	SourceCodester	Simple and Nice Shopping Cart Script	CWE-74	SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.ph…
CVE-2026-14654	5.5	35.7	SourceCodester	Simple and Nice Shopping Cart Script	CWE-74	SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.p…
CVE-2026-14660	5.5	35.7	code-projects	Online Job Portal	CWE-74	code-projects Online Job Portal login.php sql injection
CVE-2026-14647	2.1	35.6	n/a	onnx	CWE-119	onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
CVE-2026-12196	8.3	32.5	hestiacp	hestiacp	CWE-287	HestiaCP Admin Takeover
CVE-2026-14625	2.1	30.6	NousResearch	hermes-agent	CWE-693	NousResearch hermes-agent server.py shell.exec protection mechanism
CVE-2026-12194	2.3	30.5	phpipam	phpipam	CWE-98	PHPIPAM Authenticated LFI
CVE-2026-14655	1.9	29.5	code-projects	Assessment Management	CWE-79	code-projects Assessment Management view-users.php cross site scripting
CVE-2026-14621	1.3	29.2	FederatedAI	FATE	CWE-488	FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStrea…
CVE-2026-14619	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System medicine.php sql injection
CVE-2026-14638	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System patient.php sql injection
CVE-2026-14639	2.1	25.7	CodeAstro	Ecommerce Website	CWE-74	CodeAstro Ecommerce Website my_account.php sql injection
CVE-2026-14657	2.1	25.7	code-projects	Assessment Management	CWE-74	code-projects Assessment Management Database Query marking-scheme.php sql inj…
CVE-2026-14658	2.1	25.7	code-projects	Assessment Management	CWE-74	code-projects Assessment Management marking-scheme.php sql injection
CVE-2026-14659	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System patientappointment.php sql injection
CVE-2024-1248	5.3	22.3	WSO2	WSO2 API Manager	CWE-298	Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enable…
CVE-2025-13475	7.3	19.3	WSO2	WSO2 Identity Server	CWE-288	Cross-Tenant Access via Application Consent Mismanagement in Multiple WSO2 Pr…
CVE-2026-53362	7.8	18.0	Linux	Linux	—	ipv6: account for fraggap on the paged allocation path
CVE-2026-12746	8.1	16.6	BIAFRA	Dancer2::Plugin::Auth::OAuth::Provider	CWE-352	Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not s…
CVE-2026-12252	7.8	14.2	nltk	nltk/nltk	CWE-94	Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk
CVE-2026-12740	8.1	14.1	CORNELIUS	Plack::Middleware::OAuth	CWE-352	Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OA…
CVE-2026-14630	1.3	13.9	ForceInjection	AI-fundermentals	CWE-327	ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_c…
CVE-2026-54424	8.4	8.1	Unity	Parsec	CWE-648	An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows …
CVE-2026-53360	8.8	6.8	Linux	Linux	CWE-125	KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use
CVE-2026-14650	1.9	5.5	connorskees	grass	CWE-404	connorskees grass UTF-8 Character raw_to_parse_error denial of service
CVE-2026-14651	1.9	5.3	connorskees	grass	CWE-404	connorskees grass visitor denial of service
CVE-2026-53361	7.1	2.9	Linux	Linux	—	af_unix: Set gc_in_progress to true in unix_gc().

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-07-04 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.