{
  "day": "2026-08-22",
  "boundary": "UTC calendar day",
  "published_count": 241,
  "by_severity": {
    "CRITICAL": 15,
    "HIGH": 33,
    "MEDIUM": 36,
    "LOW": 5
  },
  "kev_count": 0,
  "exploit_reference_count": 1,
  "awaiting_enrichment_count": 152,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-77988",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.02093,
      "epss_percentile": 0.80206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-823DRU",
      "cwe": "CWE-77",
      "title": "TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77988"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-77945",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.01284,
      "epss_percentile": 0.67894,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-821DAP",
      "cwe": "CWE-74",
      "title": "TRENDnet TEW-821DAP ssi upload.cgi command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77945"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-71513",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00784,
      "epss_percentile": 0.53292,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-502",
      "title": "NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71513"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-47895",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.0067,
      "epss_percentile": 0.49212,
      "kev": false,
      "kev_due_at": null,
      "vendor": "strongSwan",
      "product": "strongSwan",
      "cwe": "CWE-415",
      "title": "In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47895"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-18027",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00644,
      "epss_percentile": 0.48099,
      "kev": false,
      "kev_due_at": null,
      "vendor": "webtoffee",
      "product": "WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels",
      "cwe": "CWE-22",
      "title": "WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18027"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-4703",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00624,
      "epss_percentile": 0.47187,
      "kev": false,
      "kev_due_at": null,
      "vendor": "westguard",
      "product": "WS Form LITE – Drag & Drop Contact Form Builder",
      "cwe": "CWE-502",
      "title": "WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4703"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-77946",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00619,
      "epss_percentile": 0.46955,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TRENDnet",
      "product": "TEW-821DAP",
      "cwe": "CWE-119",
      "title": "TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77946"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-78003",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00572,
      "epss_percentile": 0.44706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mailgun",
      "product": "Mailgun for WordPress",
      "cwe": "CWE-918",
      "title": "Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78003"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-78050",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00569,
      "epss_percentile": 0.44535,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Comfast",
      "product": "CF-N1-S",
      "cwe": "CWE-119",
      "title": "Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78050"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-0551",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00528,
      "epss_percentile": 0.42287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "buildwps",
      "product": "PPWP – Password Protect Pages",
      "cwe": "CWE-502",
      "title": "PPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0551"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-66916",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00509,
      "epss_percentile": 0.41078,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomgalleryfriends.net",
      "product": "JoomGallery extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66916"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-2996",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.0049,
      "epss_percentile": 0.39885,
      "kev": false,
      "kev_due_at": null,
      "vendor": "maartenbelmans",
      "product": "Advanced Product Fields (Product Addons) for WooCommerce",
      "cwe": "CWE-20",
      "title": "Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-2996"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-62384",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00488,
      "epss_percentile": 0.39727,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-22",
      "title": "NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62384"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-63312",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00488,
      "epss_percentile": 0.39727,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-22",
      "title": "NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63312"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-66917",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00466,
      "epss_percentile": 0.38296,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomgalleryfriends.net",
      "product": "JoomGallery extension for Joomla",
      "cwe": "CWE-79",
      "title": "Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66917"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-19221",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00456,
      "epss_percentile": 0.37619,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Forminator Forms",
      "cwe": "CWE-94",
      "title": "Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19221"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-16149",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00425,
      "epss_percentile": 0.35179,
      "kev": false,
      "kev_due_at": null,
      "vendor": "marc4",
      "product": "Security Hardener",
      "cwe": "CWE-269",
      "title": "Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16149"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-77001",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00417,
      "epss_percentile": 0.34438,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Social Login & Sharing buttons with Analytics By SoClever",
      "cwe": "CWE-287",
      "title": "Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77001"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-76604",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00411,
      "epss_percentile": 0.33876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-94",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76604"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-76605",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00411,
      "epss_percentile": 0.33876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-94",
      "title": "Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76605"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2026-78051",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00405,
      "epss_percentile": 0.33325,
      "kev": false,
      "kev_due_at": null,
      "vendor": "alexta69",
      "product": "MeTube",
      "cwe": "CWE-425",
      "title": "alexta69 MeTube Cookie File cookies.txt file access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78051"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-78049",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00397,
      "epss_percentile": 0.32493,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Systerel",
      "product": "S2OPC",
      "cwe": "CWE-119",
      "title": "Systerel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78049"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-3424",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0039,
      "epss_percentile": 0.3177,
      "kev": false,
      "kev_due_at": null,
      "vendor": "properfraction",
      "product": "kk Star Ratings – Rate Post & Collect User Feedbacks",
      "cwe": "CWE-94",
      "title": "kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3424"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2026-19883",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00369,
      "epss_percentile": 0.29536,
      "kev": false,
      "kev_due_at": null,
      "vendor": "etruel",
      "product": "WPeMatico RSS Feed Fetcher",
      "cwe": "CWE-269",
      "title": "WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19883"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-5093",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00355,
      "epss_percentile": 0.28129,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpsoul",
      "product": "Greenshift – animation and page builder blocks",
      "cwe": "CWE-862",
      "title": "Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5093"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-76597",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00352,
      "epss_percentile": 0.27858,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76597"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-76793",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00348,
      "epss_percentile": 0.27339,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Firebase Authentication",
      "cwe": "CWE-287",
      "title": "Firebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76793"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-60084",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00346,
      "epss_percentile": 0.27113,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-22",
      "title": "SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60084"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-66393",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00344,
      "epss_percentile": 0.26896,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-674",
      "title": "NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66393"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2026-75027",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00342,
      "epss_percentile": 0.26688,
      "kev": false,
      "kev_due_at": null,
      "vendor": "themifyme",
      "product": "Themify Builder",
      "cwe": "CWE-862",
      "title": "Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75027"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-77000",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00341,
      "epss_percentile": 0.26673,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "WP Social Media Login",
      "cwe": "CWE-287",
      "title": "WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77000"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-77002",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00341,
      "epss_percentile": 0.26672,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "SmilePass Selfie Login",
      "cwe": "CWE-287",
      "title": "SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77002"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-76789",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.0034,
      "epss_percentile": 0.26499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Slider Hero with Video Background, Animation",
      "cwe": "CWE-79",
      "title": "Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76789"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2026-59808",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00335,
      "epss_percentile": 0.25936,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-306",
      "title": "AVideo Authentication Bypass via Unkeyed Video Hash Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59808"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-62388",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00334,
      "epss_percentile": 0.25823,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-1188",
      "title": "NLTK before 3.10.0 Insecure Default Configuration pathsec",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62388"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-76606",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00331,
      "epss_percentile": 0.25486,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76606"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-19093",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00325,
      "epss_percentile": 0.24824,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Tutor LMS",
      "cwe": "CWE-552",
      "title": "Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19093"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-12710",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00323,
      "epss_percentile": 0.245,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google Cloud",
      "product": "Application Integration",
      "cwe": "CWE-862",
      "title": "Missing Authorization in Application Integration QueryEngineTask",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12710"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-78122",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00322,
      "epss_percentile": 0.24477,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tecnativa",
      "product": "docker-socket-proxy",
      "cwe": "CWE-1220",
      "title": "docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78122"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-62380",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0032,
      "epss_percentile": 0.24208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netty",
      "product": "netty",
      "cwe": "CWE-626",
      "title": "Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62380"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-4559",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00317,
      "epss_percentile": 0.23925,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpchill",
      "product": "Image Photo Gallery Final Tiles Grid",
      "cwe": "CWE-79",
      "title": "Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4559"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-4561",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00317,
      "epss_percentile": 0.23925,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dvankooten",
      "product": "MC4WP: Mailchimp for WordPress",
      "cwe": "CWE-79",
      "title": "MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4561"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-76598",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00311,
      "epss_percentile": 0.23226,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76598"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-76599",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00295,
      "epss_percentile": 0.21509,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76599"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2026-76601",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00295,
      "epss_percentile": 0.2151,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76601"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-76608",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00295,
      "epss_percentile": 0.21508,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76608"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-4245",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.21368,
      "kev": false,
      "kev_due_at": null,
      "vendor": "metaphorcreations",
      "product": "Post Duplicator",
      "cwe": "CWE-863",
      "title": "Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4245"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-62385",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00291,
      "epss_percentile": 0.21063,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-73",
      "title": "NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62385"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-16260",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0029,
      "epss_percentile": 0.20975,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Post Grid, Slider & Carousel Ultimate",
      "cwe": "CWE-79",
      "title": "Post Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title Field",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16260"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-65915",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00286,
      "epss_percentile": 0.20562,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-284",
      "title": "NLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65915"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-62382",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00276,
      "epss_percentile": 0.19508,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pglombardo",
      "product": "PasswordPusher",
      "cwe": "CWE-863",
      "title": "PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62382"
    },
    {
      "rank": 52,
      "cve_id": "CVE-2026-76571",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00271,
      "epss_percentile": 0.18771,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-89",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76571"
    },
    {
      "rank": 53,
      "cve_id": "CVE-2026-18052",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00271,
      "epss_percentile": 0.18975,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "ManageWP Worker",
      "cwe": "CWE-287",
      "title": "ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18052"
    },
    {
      "rank": 54,
      "cve_id": "CVE-2026-59256",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0027,
      "epss_percentile": 0.18667,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-200",
      "title": "WWBN AVideo Unbound Token Authorization Bypass via Gallery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59256"
    },
    {
      "rank": 55,
      "cve_id": "CVE-2026-77992",
      "cvss_base": 9.5,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00262,
      "epss_percentile": 0.17568,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-94",
      "title": "Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77992"
    },
    {
      "rank": 56,
      "cve_id": "CVE-2026-19222",
      "cvss_base": 6.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0026,
      "epss_percentile": 0.17295,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Forminator Forms",
      "cwe": "CWE-269",
      "title": "Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19222"
    },
    {
      "rank": 57,
      "cve_id": "CVE-2026-77027",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00258,
      "epss_percentile": 0.17072,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-79",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77027"
    },
    {
      "rank": 58,
      "cve_id": "CVE-2026-76057",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.16657,
      "kev": false,
      "kev_due_at": null,
      "vendor": "rubengc",
      "product": "AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress",
      "cwe": "CWE-862",
      "title": "AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76057"
    },
    {
      "rank": 59,
      "cve_id": "CVE-2026-16612",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00251,
      "epss_percentile": 0.16197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "FiboSearch",
      "cwe": "CWE-200",
      "title": "FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16612"
    },
    {
      "rank": 60,
      "cve_id": "CVE-2026-76602",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00249,
      "epss_percentile": 0.15948,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-89",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76602"
    },
    {
      "rank": 61,
      "cve_id": "CVE-2026-63311",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00249,
      "epss_percentile": 0.15965,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-918",
      "title": "NLTK before 3.10.0 SSRF via DNS Resolution Failure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63311"
    },
    {
      "rank": 62,
      "cve_id": "CVE-2026-59809",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00244,
      "epss_percentile": 0.15277,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-201",
      "title": "SiYuan before v3.8.0 Secret Exfiltration via http_request URL",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59809"
    },
    {
      "rank": 63,
      "cve_id": "CVE-2026-16738",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14899,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Conekta Payment Gateway",
      "cwe": "CWE-284",
      "title": "Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16738"
    },
    {
      "rank": 64,
      "cve_id": "CVE-2026-76607",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00239,
      "epss_percentile": 0.14775,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76607"
    },
    {
      "rank": 65,
      "cve_id": "CVE-2026-76596",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00239,
      "epss_percentile": 0.14775,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76596"
    },
    {
      "rank": 66,
      "cve_id": "CVE-2026-76600",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00239,
      "epss_percentile": 0.14773,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76600"
    },
    {
      "rank": 67,
      "cve_id": "CVE-2026-76603",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00239,
      "epss_percentile": 0.14775,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76603"
    },
    {
      "rank": 68,
      "cve_id": "CVE-2026-76609",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00239,
      "epss_percentile": 0.14776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fabrikar.com",
      "product": "Fabrik extension for Joomla",
      "cwe": "CWE-284",
      "title": "Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76609"
    },
    {
      "rank": 69,
      "cve_id": "CVE-2026-76074",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00233,
      "epss_percentile": 0.13947,
      "kev": false,
      "kev_due_at": null,
      "vendor": "rubengc",
      "product": "AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress",
      "cwe": "CWE-862",
      "title": "AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76074"
    },
    {
      "rank": 70,
      "cve_id": "CVE-2026-75866",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00232,
      "epss_percentile": 0.1383,
      "kev": false,
      "kev_due_at": null,
      "vendor": null,
      "product": "Punk-OAuth2",
      "cwe": "CWE-862",
      "title": "Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75866"
    },
    {
      "rank": 71,
      "cve_id": "CVE-2026-60083",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00231,
      "epss_percentile": 0.13682,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-863",
      "title": "SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-60083"
    },
    {
      "rank": 72,
      "cve_id": "CVE-2026-14187",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00218,
      "epss_percentile": 0.12043,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Tutor LMS",
      "cwe": "CWE-639",
      "title": "Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14187"
    },
    {
      "rank": 73,
      "cve_id": "CVE-2026-75870",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00217,
      "epss_percentile": 0.11899,
      "kev": false,
      "kev_due_at": null,
      "vendor": null,
      "product": "Punk",
      "cwe": "CWE-1394",
      "title": "Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75870"
    },
    {
      "rank": 74,
      "cve_id": "CVE-2026-56380",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00214,
      "epss_percentile": 0.11605,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-200",
      "title": "AVideo feed/index.php Exposure of Channel Owner Email Address",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56380"
    },
    {
      "rank": 75,
      "cve_id": "CVE-2026-74649",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00207,
      "epss_percentile": 0.10668,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "staging: rtl8723bs: fix missing shared-key auth challenge length check",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74649"
    },
    {
      "rank": 76,
      "cve_id": "CVE-2026-4244",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00196,
      "epss_percentile": 0.09298,
      "kev": false,
      "kev_due_at": null,
      "vendor": "metaphorcreations",
      "product": "Post Duplicator",
      "cwe": "CWE-862",
      "title": "Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4244"
    },
    {
      "rank": 77,
      "cve_id": "CVE-2026-74689",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00195,
      "epss_percentile": 0.09203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/atm: fix slab-out-of-bounds read in vcc_setsockopt()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74689"
    },
    {
      "rank": 78,
      "cve_id": "CVE-2026-74730",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00193,
      "epss_percentile": 0.08961,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "NFS: Pin the 'struct nfs_server' during a FREE_STATEID call",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74730"
    },
    {
      "rank": 79,
      "cve_id": "CVE-2026-74683",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0019,
      "epss_percentile": 0.08652,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "Input: evdev - sanitize event type index when fetching event masks",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74683"
    },
    {
      "rank": 80,
      "cve_id": "CVE-2026-74686",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00189,
      "epss_percentile": 0.08591,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "rqspinlock: Reset tail when preserving queue on deadlock",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74686"
    },
    {
      "rank": 81,
      "cve_id": "CVE-2026-74601",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00185,
      "epss_percentile": 0.08126,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ring-buffer: Use current_context for safe per-CPU buffer swap",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74601"
    },
    {
      "rank": 82,
      "cve_id": "CVE-2026-74667",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00185,
      "epss_percentile": 0.08125,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/packet: reset the MAC header on the packet-socket transmit path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74667"
    },
    {
      "rank": 83,
      "cve_id": "CVE-2026-74679",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00185,
      "epss_percentile": 0.08125,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "usb: gadget: f_ncm: Use unsigned int for ndp_index",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74679"
    },
    {
      "rank": 84,
      "cve_id": "CVE-2026-74732",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00183,
      "epss_percentile": 0.07914,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "drm/amd/display: Check for tg ops in dce110_set_avmute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74732"
    },
    {
      "rank": 85,
      "cve_id": "CVE-2026-74585",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07201,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "thunderbolt: Bound the DROM dual link port number before indexing sw->ports",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74585"
    },
    {
      "rank": 86,
      "cve_id": "CVE-2026-74586",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sctp: clear new_transport when removing a peer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74586"
    },
    {
      "rank": 87,
      "cve_id": "CVE-2026-74587",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07201,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sctp: fix use-after-free of cached ASCONF chunk",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74587"
    },
    {
      "rank": 88,
      "cve_id": "CVE-2026-74588",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.072,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sctp: keep chunk->transport in step with the list it is queued on",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74588"
    },
    {
      "rank": 89,
      "cve_id": "CVE-2026-74589",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74589"
    },
    {
      "rank": 90,
      "cve_id": "CVE-2026-74594",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07215,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74594"
    },
    {
      "rank": 91,
      "cve_id": "CVE-2026-74597",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07214,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ip6_tunnel: clear skb2->cb[] in ip6ip6_err()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74597"
    },
    {
      "rank": 92,
      "cve_id": "CVE-2026-74598",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipv6: fix Route Information option length validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74598"
    },
    {
      "rank": 93,
      "cve_id": "CVE-2026-74609",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tipc: read le->link under the node lock in tipc_node_link_down()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74609"
    },
    {
      "rank": 94,
      "cve_id": "CVE-2026-74613",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07204,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vsock/virtio: avoid refilling the RX queue after teardown",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74613"
    },
    {
      "rank": 95,
      "cve_id": "CVE-2026-74615",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vxlan: do not arm the ageing timer on a device that is down",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74615"
    },
    {
      "rank": 96,
      "cve_id": "CVE-2026-74620",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/sched: act_gact, act_police: range check the fallback control action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74620"
    },
    {
      "rank": 97,
      "cve_id": "CVE-2026-74622",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07212,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: atlantic: free RX pages of consumed but not refilled buffers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74622"
    },
    {
      "rank": 98,
      "cve_id": "CVE-2026-74623",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07201,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: atlantic: free stranded TX buffers on ring deinit",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74623"
    },
    {
      "rank": 99,
      "cve_id": "CVE-2026-74625",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07207,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "netfilter: bridge: release template ct on non-IP path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74625"
    },
    {
      "rank": 100,
      "cve_id": "CVE-2026-74630",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07207,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74630"
    },
    {
      "rank": 101,
      "cve_id": "CVE-2026-74631",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: smc: fix splice entry lifetime imbalance in smc_rx_splice",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74631"
    },
    {
      "rank": 102,
      "cve_id": "CVE-2026-74635",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "fbdev: bitblit: bound-check glyph index in bit_cursor()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74635"
    },
    {
      "rank": 103,
      "cve_id": "CVE-2026-74641",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ALSA: usx2y: bound the hwdep mmap fault offset",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74641"
    },
    {
      "rank": 104,
      "cve_id": "CVE-2026-74648",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "staging: rtl8723bs: validate monitor transmit frame lengths",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74648"
    },
    {
      "rank": 105,
      "cve_id": "CVE-2026-74651",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74651"
    },
    {
      "rank": 106,
      "cve_id": "CVE-2026-74654",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "serial: 8250_dma: Clear stale RX state on shutdown",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74654"
    },
    {
      "rank": 107,
      "cve_id": "CVE-2026-74656",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipv4: fix use-after-free in fib_nhc_update_mtu()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74656"
    },
    {
      "rank": 108,
      "cve_id": "CVE-2026-74658",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "futex: Prevent robust futex exit race some more",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74658"
    },
    {
      "rank": 109,
      "cve_id": "CVE-2026-74660",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "netfilter: ebt_nflog: pin the NFLOG backend",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74660"
    },
    {
      "rank": 110,
      "cve_id": "CVE-2026-74664",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07207,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: openvswitch: reallocate update replies for mismatched IDs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74664"
    },
    {
      "rank": 111,
      "cve_id": "CVE-2026-74669",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74669"
    },
    {
      "rank": 112,
      "cve_id": "CVE-2026-74671",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ima: fix out-of-bounds read in xattr_verify()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74671"
    },
    {
      "rank": 113,
      "cve_id": "CVE-2026-74673",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "Input: evdev - fix information leak in evdev_pass_values()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74673"
    },
    {
      "rank": 114,
      "cve_id": "CVE-2026-74675",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74675"
    },
    {
      "rank": 115,
      "cve_id": "CVE-2026-74676",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vt: add permission check for KDSKBMETA ioctl",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74676"
    },
    {
      "rank": 116,
      "cve_id": "CVE-2026-74680",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07276,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74680"
    },
    {
      "rank": 117,
      "cve_id": "CVE-2026-74682",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07196,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ALSA: usb-audio: fix OOB write on Type II inbound URBs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74682"
    },
    {
      "rank": 118,
      "cve_id": "CVE-2026-74688",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07276,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sctp: clear control chunk transport if it is being removed",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74688"
    },
    {
      "rank": 119,
      "cve_id": "CVE-2026-74693",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07196,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: prestera: validate firmware header length",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74693"
    },
    {
      "rank": 120,
      "cve_id": "CVE-2026-74694",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07195,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74694"
    },
    {
      "rank": 121,
      "cve_id": "CVE-2026-74701",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07277,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/openvswitch: check Ethernet header length in key_extract()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74701"
    },
    {
      "rank": 122,
      "cve_id": "CVE-2026-74704",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74704"
    },
    {
      "rank": 123,
      "cve_id": "CVE-2026-74705",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "udp: fix potential use-after-free in tunnel segmentation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74705"
    },
    {
      "rank": 124,
      "cve_id": "CVE-2026-74717",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/mlx5: fw_tracer, return NULL on create error",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74717"
    },
    {
      "rank": 125,
      "cve_id": "CVE-2026-74719",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.072,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74719"
    },
    {
      "rank": 126,
      "cve_id": "CVE-2026-74720",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bpf: Preserve pointer state for commuted arithmetic",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74720"
    },
    {
      "rank": 127,
      "cve_id": "CVE-2026-74726",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00177,
      "epss_percentile": 0.07199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74726"
    },
    {
      "rank": 128,
      "cve_id": "CVE-2026-74707",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00176,
      "epss_percentile": 0.07144,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xsk: validate metadata when processing requests",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74707"
    },
    {
      "rank": 129,
      "cve_id": "CVE-2026-74599",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/ptdump: always stabilise against page table freeing using init_mm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74599"
    },
    {
      "rank": 130,
      "cve_id": "CVE-2026-74603",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ptp: ocp: Fix board ID over-read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74603"
    },
    {
      "rank": 131,
      "cve_id": "CVE-2026-74604",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\"",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74604"
    },
    {
      "rank": 132,
      "cve_id": "CVE-2026-74607",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06704,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "KVM: SVM: Serialize accesses to the owner and mirror list with separate lock",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74607"
    },
    {
      "rank": 133,
      "cve_id": "CVE-2026-74608",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06715,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74608"
    },
    {
      "rank": 134,
      "cve_id": "CVE-2026-74612",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06715,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "veth: fix skb length accounting after XDP frag adjustment",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74612"
    },
    {
      "rank": 135,
      "cve_id": "CVE-2026-74614",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06702,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vsock/virtio: read virtqueues under worker locks",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74614"
    },
    {
      "rank": 136,
      "cve_id": "CVE-2026-74616",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06704,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xdp: reject clones that overrun skb_shared_info tailroom",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74616"
    },
    {
      "rank": 137,
      "cve_id": "CVE-2026-74621",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/sched: act_ct: fix sk_buff leak when the header checks reject a packet",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74621"
    },
    {
      "rank": 138,
      "cve_id": "CVE-2026-74624",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06714,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "netfilter: nf_conntrack: defer invalid log until after unlock",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74624"
    },
    {
      "rank": 139,
      "cve_id": "CVE-2026-74628",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06704,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/x25: fix use-after-free of the socket by its timers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74628"
    },
    {
      "rank": 140,
      "cve_id": "CVE-2026-74632",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06702,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/huge_memory: fix huge_zero_pfn race",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74632"
    },
    {
      "rank": 141,
      "cve_id": "CVE-2026-74636",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06702,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tracing: Fix race between update_event_fields and, event_define_fields",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74636"
    },
    {
      "rank": 142,
      "cve_id": "CVE-2026-74650",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "staging: rtl8723bs: fix OOB read in WMM_param_handler()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74650"
    },
    {
      "rank": 143,
      "cve_id": "CVE-2026-74657",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06715,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74657"
    },
    {
      "rank": 144,
      "cve_id": "CVE-2026-74659",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06715,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: bridge: mrp: fix uninitialised bytes on the wire",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74659"
    },
    {
      "rank": 145,
      "cve_id": "CVE-2026-74663",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06714,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/sched: reject overly deep qdisc hierarchies",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74663"
    },
    {
      "rank": 146,
      "cve_id": "CVE-2026-74672",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74672"
    },
    {
      "rank": 147,
      "cve_id": "CVE-2026-74678",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06712,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74678"
    },
    {
      "rank": 148,
      "cve_id": "CVE-2026-74691",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06712,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: thunderbolt: Tear down DMA paths before stopping the rings",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74691"
    },
    {
      "rank": 149,
      "cve_id": "CVE-2026-74692",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06711,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/smc: fix TOCTOU race between smc_listen_out() and listener close",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74692"
    },
    {
      "rank": 150,
      "cve_id": "CVE-2026-74696",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.0671,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tcp: fix TFO max_qlen accounting across reuseport migration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74696"
    },
    {
      "rank": 151,
      "cve_id": "CVE-2026-74697",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06772,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bnxt_en: Disable EOP for TPA on all chips to prevent data corruption",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74697"
    },
    {
      "rank": 152,
      "cve_id": "CVE-2026-74714",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06713,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74714"
    },
    {
      "rank": 153,
      "cve_id": "CVE-2026-74722",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00173,
      "epss_percentile": 0.06713,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "btrfs: fix memory leak in btrfs_do_encoded_write()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74722"
    },
    {
      "rank": 154,
      "cve_id": "CVE-2026-74728",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0017,
      "epss_percentile": 0.06395,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xfs: handle NULL b_addr in xfs_buf_free",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74728"
    },
    {
      "rank": 155,
      "cve_id": "CVE-2026-74729",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0017,
      "epss_percentile": 0.06431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74729"
    },
    {
      "rank": 156,
      "cve_id": "CVE-2026-74731",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0017,
      "epss_percentile": 0.06431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sched_ext: Skip sub-disable teardown for never-linked sub-schedulers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74731"
    },
    {
      "rank": 157,
      "cve_id": "CVE-2026-74733",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0017,
      "epss_percentile": 0.06432,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74733"
    },
    {
      "rank": 158,
      "cve_id": "CVE-2026-74584",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "RDMA/bnxt_re: zero shared page before exposing to userspace",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74584"
    },
    {
      "rank": 159,
      "cve_id": "CVE-2026-74590",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74590"
    },
    {
      "rank": 160,
      "cve_id": "CVE-2026-74592",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06204,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ima: Instantiate file_truncate and path_truncate hooks",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74592"
    },
    {
      "rank": 161,
      "cve_id": "CVE-2026-74602",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06218,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74602"
    },
    {
      "rank": 162,
      "cve_id": "CVE-2026-74606",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06219,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "eventfs: Fix use-after-free in eventfs_remove_rec()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74606"
    },
    {
      "rank": 163,
      "cve_id": "CVE-2026-74610",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06215,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tls: don't leave a full plaintext sk_msg ring unpushed",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74610"
    },
    {
      "rank": 164,
      "cve_id": "CVE-2026-74618",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "binfmt_misc: don't warn when the mount is completed from another user namespace",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74618"
    },
    {
      "rank": 165,
      "cve_id": "CVE-2026-74619",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ovl: don't warn when the mount is completed from another user namespace",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74619"
    },
    {
      "rank": 166,
      "cve_id": "CVE-2026-74634",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06211,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ring-buffer: Prevent subbuf order change when resizing is disabled",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74634"
    },
    {
      "rank": 167,
      "cve_id": "CVE-2026-74637",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06214,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "perf/core: Fix group leader use-after-free after sibling detach",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74637"
    },
    {
      "rank": 168,
      "cve_id": "CVE-2026-74642",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ALSA: usb: Fix UAF at delayed release of MIDI2 EPs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74642"
    },
    {
      "rank": 169,
      "cve_id": "CVE-2026-74644",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.062,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/damon/ops-common: putback folios on invalid migrate nid",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74644"
    },
    {
      "rank": 170,
      "cve_id": "CVE-2026-74646",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06206,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74646"
    },
    {
      "rank": 171,
      "cve_id": "CVE-2026-74647",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06211,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "misc: fastrpc: Remove buffer from list prior to unmap operation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74647"
    },
    {
      "rank": 172,
      "cve_id": "CVE-2026-74655",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06214,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "serial: qcom-geni: fix TX DMA buffer flush",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74655"
    },
    {
      "rank": 173,
      "cve_id": "CVE-2026-74661",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06211,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mac802154: fix netdev use-after-free in beacon worker",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74661"
    },
    {
      "rank": 174,
      "cve_id": "CVE-2026-74665",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: fix skb length accounting after generic XDP frag adjustment",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74665"
    },
    {
      "rank": 175,
      "cve_id": "CVE-2026-74666",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.0621,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "packet: synchronize pressure clearing with ring reconfiguration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74666"
    },
    {
      "rank": 176,
      "cve_id": "CVE-2026-74668",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "packet: use consistent hard_header_len in TX_RING send path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74668"
    },
    {
      "rank": 177,
      "cve_id": "CVE-2026-74670",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipvs: stop estimator after disabled calc phase",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74670"
    },
    {
      "rank": 178,
      "cve_id": "CVE-2026-74677",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: usb: ipheth: fix carrier_work UAF on disconnect",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74677"
    },
    {
      "rank": 179,
      "cve_id": "CVE-2026-74684",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74684"
    },
    {
      "rank": 180,
      "cve_id": "CVE-2026-74685",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "hwmon: (ltc4282) Clamp negative current limits",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74685"
    },
    {
      "rank": 181,
      "cve_id": "CVE-2026-74700",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74700"
    },
    {
      "rank": 182,
      "cve_id": "CVE-2026-74710",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.062,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xsk: require at least 16 bytes of TX metadata",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74710"
    },
    {
      "rank": 183,
      "cve_id": "CVE-2026-74712",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vdpa/mlx5: Fix buffer length in create_direct_keys()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74712"
    },
    {
      "rank": 184,
      "cve_id": "CVE-2026-74718",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "devlink: fix net namespace reference leak in reload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74718"
    },
    {
      "rank": 185,
      "cve_id": "CVE-2026-74725",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00168,
      "epss_percentile": 0.06202,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "enic: fix tx_hang_reset use-after-free on device removal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74725"
    },
    {
      "rank": 186,
      "cve_id": "CVE-2026-74703",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00167,
      "epss_percentile": 0.06086,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vhost-scsi: Validate T10 PI scatterlist counts",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74703"
    },
    {
      "rank": 187,
      "cve_id": "CVE-2026-74709",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00167,
      "epss_percentile": 0.06087,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xsk: clear metadata pointer when no timestamp is requested",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74709"
    },
    {
      "rank": 188,
      "cve_id": "CVE-2026-74591",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06026,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/filemap: __filemap_add_folio() restore index before retrying",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74591"
    },
    {
      "rank": 189,
      "cve_id": "CVE-2026-74593",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06014,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "sched_ext: Take cgroup_lock() first in scx_cgroup_lock()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74593"
    },
    {
      "rank": 190,
      "cve_id": "CVE-2026-74600",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06016,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/page_table_check: skip special zero mappings",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74600"
    },
    {
      "rank": 191,
      "cve_id": "CVE-2026-74611",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74611"
    },
    {
      "rank": 192,
      "cve_id": "CVE-2026-74617",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06015,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "dibs: initialise dibs->lock in dibs_dev_alloc()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74617"
    },
    {
      "rank": 193,
      "cve_id": "CVE-2026-74626",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06012,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "NTB: ntb_netdev: Preserve RX queue depth on allocation failure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74626"
    },
    {
      "rank": 194,
      "cve_id": "CVE-2026-74627",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06012,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net: devmem: prevent net-iov / page mixing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74627"
    },
    {
      "rank": 195,
      "cve_id": "CVE-2026-74629",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06019,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/dibs: Correct freeing of dmb_clientid_arr",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74629"
    },
    {
      "rank": 196,
      "cve_id": "CVE-2026-74633",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06015,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "tracing: Fix NULL pointer dereference in module event cache removal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74633"
    },
    {
      "rank": 197,
      "cve_id": "CVE-2026-74638",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06018,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "drm/v3d: Serialize the scheduler timeout handlers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74638"
    },
    {
      "rank": 198,
      "cve_id": "CVE-2026-74639",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06013,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ALSA: us144mkii: re-anchor capture URBs on resubmission",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74639"
    },
    {
      "rank": 199,
      "cve_id": "CVE-2026-74640",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06023,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ALSA: FCP: fix OOB write in fcp_meter_ctl_get()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74640"
    },
    {
      "rank": 200,
      "cve_id": "CVE-2026-74643",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06022,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "samples/damon/mtier: error out for zero quota goal target values",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74643"
    },
    {
      "rank": 201,
      "cve_id": "CVE-2026-74652",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74652"
    },
    {
      "rank": 202,
      "cve_id": "CVE-2026-74653",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74653"
    },
    {
      "rank": 203,
      "cve_id": "CVE-2026-74662",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06011,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "inet: frags: publish queues before arming timer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74662"
    },
    {
      "rank": 204,
      "cve_id": "CVE-2026-74681",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06015,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74681"
    },
    {
      "rank": 205,
      "cve_id": "CVE-2026-74687",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.0602,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "watchdog: at91sam9_wdt: prevent timer rearm during teardown",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74687"
    },
    {
      "rank": 206,
      "cve_id": "CVE-2026-74690",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06018,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "s390/ism: Fix UAF of sba and ieq during ism_dev_exit()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74690"
    },
    {
      "rank": 207,
      "cve_id": "CVE-2026-74695",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.0602,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74695"
    },
    {
      "rank": 208,
      "cve_id": "CVE-2026-74698",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06024,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "net/mlx5e: fix BQL reset on SQ re-activation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74698"
    },
    {
      "rank": 209,
      "cve_id": "CVE-2026-74702",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06021,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vhost-scsi: reject feature changes after endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74702"
    },
    {
      "rank": 210,
      "cve_id": "CVE-2026-74708",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06023,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "xsk: validate launch-time metadata size",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74708"
    },
    {
      "rank": 211,
      "cve_id": "CVE-2026-74711",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06013,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "hwmon: (pmbus) Fix type confusion in notification logic",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74711"
    },
    {
      "rank": 212,
      "cve_id": "CVE-2026-74727",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00166,
      "epss_percentile": 0.06016,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ovpn: skip rehash for peers already removed from by_id",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74727"
    },
    {
      "rank": 213,
      "cve_id": "CVE-2026-74724",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00165,
      "epss_percentile": 0.05873,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "ipvs: avoid out-of-bounds write in ip_vs_nat_icmp",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74724"
    },
    {
      "rank": 214,
      "cve_id": "CVE-2026-68766",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00162,
      "epss_percentile": 0.05564,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hashcat",
      "product": "hashcat",
      "cwe": "CWE-88",
      "title": "hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68766"
    },
    {
      "rank": 215,
      "cve_id": "CVE-2026-12999",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00159,
      "epss_percentile": 0.05235,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-401",
      "title": "Infineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12999"
    },
    {
      "rank": 216,
      "cve_id": "CVE-2026-74706",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00156,
      "epss_percentile": 0.04968,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bnge: Fix NULL pointer dereference in aux device release",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74706"
    },
    {
      "rank": 217,
      "cve_id": "CVE-2026-62243",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00155,
      "epss_percentile": 0.04834,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netty",
      "product": "netty",
      "cwe": "CWE-297",
      "title": "Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62243"
    },
    {
      "rank": 218,
      "cve_id": "CVE-2026-74596",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04903,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "fs,fsverity: remove check for fsverity being enabled in setattr_prepare()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74596"
    },
    {
      "rank": 219,
      "cve_id": "CVE-2026-74605",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.0491,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "eventfs: Use children field for rcu head and add memory barriers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74605"
    },
    {
      "rank": 220,
      "cve_id": "CVE-2026-74645",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04908,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm/damon/lru_sort: error out for >10000 active_mem_bp",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74645"
    },
    {
      "rank": 221,
      "cve_id": "CVE-2026-74674",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04904,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "mm: fix incorrect flush address in direct page table reclaim",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74674"
    },
    {
      "rank": 222,
      "cve_id": "CVE-2026-74699",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04907,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74699"
    },
    {
      "rank": 223,
      "cve_id": "CVE-2026-74713",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04905,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "vhost_iotlb: bound map allocation in add_range",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74713"
    },
    {
      "rank": 224,
      "cve_id": "CVE-2026-74715",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04905,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "bpf: Fix netns reference imbalance in conntrack kfuncs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74715"
    },
    {
      "rank": 225,
      "cve_id": "CVE-2026-74716",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04906,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74716"
    },
    {
      "rank": 226,
      "cve_id": "CVE-2026-74721",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04904,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74721"
    },
    {
      "rank": 227,
      "cve_id": "CVE-2026-74723",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00155,
      "epss_percentile": 0.04904,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "btrfs: lzo: reject inline extents without valid headers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74723"
    },
    {
      "rank": 228,
      "cve_id": "CVE-2026-57998",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00145,
      "epss_percentile": 0.0402,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jeemok",
      "product": "better-npm-audit",
      "cwe": "CWE-78",
      "title": "better-npm-audit OS Command Injection via registry flag",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57998"
    },
    {
      "rank": 229,
      "cve_id": "CVE-2026-70626",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00143,
      "epss_percentile": 0.03834,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-59",
      "title": "NLTK before 3.9.4 Symlink Escape via CorpusReader",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70626"
    },
    {
      "rank": 230,
      "cve_id": "CVE-2026-71514",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.00143,
      "epss_percentile": 0.03878,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-22",
      "title": "NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71514"
    },
    {
      "rank": 231,
      "cve_id": "CVE-2026-68768",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00141,
      "epss_percentile": 0.03672,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hashcat",
      "product": "hashcat",
      "cwe": "CWE-120",
      "title": "hashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68768"
    },
    {
      "rank": 232,
      "cve_id": "CVE-2026-62383",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00141,
      "epss_percentile": 0.03638,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-22",
      "title": "nltk IPIPANCorpusReader Symlink Arbitrary File Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62383"
    },
    {
      "rank": 233,
      "cve_id": "CVE-2026-58002",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0014,
      "epss_percentile": 0.03606,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-345",
      "title": "WWBN AVideo Authorization Bypass via Users_affiliations add.json.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58002"
    },
    {
      "rank": 234,
      "cve_id": "CVE-2026-68767",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00128,
      "epss_percentile": 0.02663,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hashcat",
      "product": "hashcat",
      "cwe": "CWE-193",
      "title": "hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68767"
    },
    {
      "rank": 235,
      "cve_id": "CVE-2026-74595",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00121,
      "epss_percentile": 0.02133,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74595"
    },
    {
      "rank": 236,
      "cve_id": "CVE-2026-58003",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00113,
      "epss_percentile": 0.01579,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-352",
      "title": "WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58003"
    },
    {
      "rank": 237,
      "cve_id": "CVE-2026-58001",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00111,
      "epss_percentile": 0.01457,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-352",
      "title": "WWBN AVideo Cross-Site Request Forgery via videoEditLight.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58001"
    },
    {
      "rank": 238,
      "cve_id": "CVE-2026-63310",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0011,
      "epss_percentile": 0.01385,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nltk",
      "product": "nltk",
      "cwe": "CWE-494",
      "title": "NLTK before 3.9.3 Missing Post-Download Integrity Verification",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63310"
    },
    {
      "rank": 239,
      "cve_id": "CVE-2026-57944",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00099,
      "epss_percentile": 0.00883,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-352",
      "title": "AVideo channelToGallery.json.php Cross-Site Request Forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57944"
    },
    {
      "rank": 240,
      "cve_id": "CVE-2026-62381",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00076,
      "epss_percentile": 0.00104,
      "kev": false,
      "kev_due_at": null,
      "vendor": "openwrt",
      "product": "luci",
      "cwe": "CWE-122",
      "title": "luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62381"
    },
    {
      "rank": 241,
      "cve_id": "CVE-2026-62204",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00069,
      "epss_percentile": 0.00036,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-345",
      "title": "SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62204"
    }
  ],
  "transactions": [
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-14764",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-14764 (code-projects Hotel and Tourism Reservation). Public exploit reference added."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-33824",
      "detail": "DUE DATE PASSED — CVE-2026-33824 (Microsoft Windows 10 Version 1607). CISA remediation deadline was August 21, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-55040",
      "detail": "DUE DATE PASSED — CVE-2026-55040 (Microsoft SharePoint Enterprise Server 2016). CISA remediation deadline was August 21, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-59310",
      "detail": "DUE DATE PASSED — CVE-2026-59310 (VMware Cloud Foundation). CISA remediation deadline was August 21, 2026; still in catalog."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-65400",
      "detail": "DUE DATE PASSED — CVE-2026-65400 (Apple macOS). CISA remediation deadline was August 21, 2026; still in catalog."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-8836",
      "detail": "RESCORED — CVE-2026-8836 (lwIP). CVSS 9.3 → 8.9 (NVD)."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}