{
  "day": "2026-09-05",
  "boundary": "UTC calendar day",
  "published_count": 131,
  "by_severity": {
    "CRITICAL": 17,
    "HIGH": 32,
    "MEDIUM": 45,
    "LOW": 3
  },
  "kev_count": 0,
  "exploit_reference_count": 0,
  "awaiting_enrichment_count": 34,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-83627",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00824,
      "epss_percentile": 0.54589,
      "kev": false,
      "kev_due_at": null,
      "vendor": "wpmudev",
      "product": "Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN",
      "cwe": "CWE-94",
      "title": "Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83627"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-14975",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00679,
      "epss_percentile": 0.49688,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JoomUnited",
      "product": "WP File Download",
      "cwe": "CWE-22",
      "title": "WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14975"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-19887",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00573,
      "epss_percentile": 0.44984,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uscnanbu",
      "product": "Welcart e-Commerce",
      "cwe": "CWE-502",
      "title": "Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19887"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2024-11080",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00441,
      "epss_percentile": 0.36839,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pickplugins",
      "product": "Post Grid",
      "cwe": "CWE-94",
      "title": "Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-11080"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-13447",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0038,
      "epss_percentile": 0.31049,
      "kev": false,
      "kev_due_at": null,
      "vendor": "inspireui",
      "product": "MStore API – Create Native Android & iOS Apps On The Cloud",
      "cwe": "CWE-287",
      "title": "MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13447"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-83625",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00329,
      "epss_percentile": 0.2559,
      "kev": false,
      "kev_due_at": null,
      "vendor": "supsysticcom",
      "product": "Contact Form by Supsystic",
      "cwe": "CWE-79",
      "title": "Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83625"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-86145",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00316,
      "epss_percentile": 0.23996,
      "kev": false,
      "kev_due_at": null,
      "vendor": "PCRE",
      "product": "PCRE2",
      "cwe": "CWE-424",
      "title": "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86145"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-75018",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00299,
      "epss_percentile": 0.22147,
      "kev": false,
      "kev_due_at": null,
      "vendor": "outlawgt",
      "product": "Custom Contact Forms",
      "cwe": "CWE-862",
      "title": "Custom Contact Forms <= 7.16 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75018"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-77233",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00292,
      "epss_percentile": 0.21446,
      "kev": false,
      "kev_due_at": null,
      "vendor": "iubenda",
      "product": "iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more",
      "cwe": "CWE-79",
      "title": "iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77233"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-78438",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00287,
      "epss_percentile": 0.20861,
      "kev": false,
      "kev_due_at": null,
      "vendor": "boldgrid",
      "product": "W3 Total Cache",
      "cwe": "CWE-79",
      "title": "W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78438"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-18406",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00285,
      "epss_percentile": 0.20655,
      "kev": false,
      "kev_due_at": null,
      "vendor": "brainstormforce",
      "product": "SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz",
      "cwe": "CWE-79",
      "title": "SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18406"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-4361",
      "cvss_base": 5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00275,
      "epss_percentile": 0.19565,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Elegant Themes",
      "product": "Divi",
      "cwe": "CWE-918",
      "title": "Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4361"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-77830",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00273,
      "epss_percentile": 0.19349,
      "kev": false,
      "kev_due_at": null,
      "vendor": "cleantalk",
      "product": "Spam protection, Honeypot, Anti-Spam by CleanTalk",
      "cwe": "CWE-79",
      "title": "Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77830"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-19769",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00247,
      "epss_percentile": 0.15858,
      "kev": false,
      "kev_due_at": null,
      "vendor": "kstover",
      "product": "Ninja Forms – The Contact Form Builder That Grows With You",
      "cwe": "CWE-79",
      "title": "Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19769"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-77263",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00247,
      "epss_percentile": 0.15858,
      "kev": false,
      "kev_due_at": null,
      "vendor": "iubenda",
      "product": "iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more",
      "cwe": "CWE-79",
      "title": "iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77263"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-81543",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00246,
      "epss_percentile": 0.15746,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tyche Softwares",
      "product": "Abandoned Cart Pro for WooCommerce",
      "cwe": "CWE-269",
      "title": "Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81543"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-85414",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00241,
      "epss_percentile": 0.15152,
      "kev": false,
      "kev_due_at": null,
      "vendor": "fooplugins",
      "product": "Gallery : FooGallery",
      "cwe": "CWE-79",
      "title": "Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85414"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-83628",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0024,
      "epss_percentile": 0.14977,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jfarthing84",
      "product": "Theme My Login",
      "cwe": "CWE-862",
      "title": "Theme My Login <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83628"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2025-14945",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00217,
      "epss_percentile": 0.12029,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netweblogic",
      "product": "Events Manager – Calendar, Bookings, Tickets, and more!",
      "cwe": "CWE-79",
      "title": "Events Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event Attributes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14945"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-75586",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00215,
      "epss_percentile": 0.11816,
      "kev": false,
      "kev_due_at": null,
      "vendor": "unitecms",
      "product": "Unlimited Elements For Elementor",
      "cwe": "CWE-79",
      "title": "Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75586"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2026-8623",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00212,
      "epss_percentile": 0.11491,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dearhive",
      "product": "DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer",
      "cwe": "CWE-79",
      "title": "Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8623"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-8625",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00206,
      "epss_percentile": 0.10623,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dearhive",
      "product": "DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer",
      "cwe": "CWE-79",
      "title": "Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8625"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-18404",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00201,
      "epss_percentile": 0.09976,
      "kev": false,
      "kev_due_at": null,
      "vendor": "quadlayers",
      "product": "Social Chat – Click To Chat App Button",
      "cwe": "CWE-79",
      "title": "Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18404"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2026-76573",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00201,
      "epss_percentile": 0.09976,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sc0ttkclark",
      "product": "Pods – Custom Content Types and Fields",
      "cwe": "CWE-79",
      "title": "Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76573"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-15984",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.0019,
      "epss_percentile": 0.08705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Themovation",
      "product": "QuickCal",
      "cwe": "CWE-79",
      "title": "QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15984"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-16649",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.0019,
      "epss_percentile": 0.08705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Gravity Forms",
      "product": "Gravity Forms",
      "cwe": "CWE-79",
      "title": "Gravity Forms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via Post Body Field Value",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16649"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-82304",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0019,
      "epss_percentile": 0.0867,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Music Store",
      "cwe": null,
      "title": "Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82304"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-19861",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00185,
      "epss_percentile": 0.08144,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "JetFormBuilder — Dynamic Blocks Form Builder",
      "cwe": null,
      "title": "JetFormBuilder < 3.6.5.2 - Unauthenticated Stored XSS via WYSIWYG Field in Notification Emails",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19861"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-81404",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00185,
      "epss_percentile": 0.08144,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "IPGP Visitors Origin",
      "cwe": null,
      "title": "IPGP Visitors Origin < 1.6 - Reflected XSS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81404"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2025-15694",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00178,
      "epss_percentile": 0.0745,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Joli Table Of Contents",
      "cwe": null,
      "title": "Joli Table Of Contents 2.0.0 - 2.8.0 - Admin+ Stored XSS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15694"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-18843",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00168,
      "epss_percentile": 0.06391,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Beaver Builder Team",
      "product": "Beaver Builder Plugin (Starter Version)",
      "cwe": "CWE-79",
      "title": "Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18843"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-3853",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00165,
      "epss_percentile": 0.0599,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Elegant Themes",
      "product": "Divi",
      "cwe": "CWE-79",
      "title": "Divi <= 4.27.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Slider 'image_src' Shortcode Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3853"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-86144",
      "cvss_base": 5.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00161,
      "epss_percentile": 0.0562,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-669",
      "title": "In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86144"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2025-15693",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0016,
      "epss_percentile": 0.05498,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "JCH Optimize",
      "cwe": null,
      "title": "JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15693"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-81423",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00159,
      "epss_percentile": 0.05356,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Accept Stripe Payments",
      "cwe": null,
      "title": "Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81423"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-84934",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00158,
      "epss_percentile": 0.05291,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "JCH Optimize",
      "cwe": null,
      "title": "JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84934"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-84898",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00157,
      "epss_percentile": 0.05198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Eventin",
      "cwe": null,
      "title": "Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84898"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-19858",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00156,
      "epss_percentile": 0.051,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "JetFormBuilder — Dynamic Blocks Form Builder",
      "cwe": null,
      "title": "JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19858"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-78149",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00156,
      "epss_percentile": 0.051,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Smart Post",
      "cwe": null,
      "title": "Post Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_id",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78149"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-81348",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00156,
      "epss_percentile": 0.051,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "My Private Site",
      "cwe": null,
      "title": "My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81348"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-84937",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00156,
      "epss_percentile": 0.05083,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Video Player for YouTube",
      "cwe": null,
      "title": "YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84937"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-82846",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04668,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Masteriyo LMS",
      "cwe": null,
      "title": "Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82846"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-83544",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04669,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Greenshift",
      "cwe": null,
      "title": "Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83544"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-84021",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04669,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Bold Page Builder",
      "cwe": null,
      "title": "Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84021"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2026-84022",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.0467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Bold Page Builder",
      "cwe": null,
      "title": "Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element Attributes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84022"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-84221",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04671,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Kirki",
      "cwe": null,
      "title": "Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84221"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-84896",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04671,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "King Addons for Elementor",
      "cwe": null,
      "title": "King Addons for Elementor < 51.1.77 - Contributor+ Stored XSS via Magazine Grid Widget",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84896"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-84899",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.0467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "VikWidgetsLoader",
      "cwe": null,
      "title": "VikWidgetsLoader < 1.12.0 - Contributor+ Stored XSS via Gutenberg Block class_suffix",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84899"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-84930",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04671,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "CatFolders Document Gallery & PDF Library",
      "cwe": null,
      "title": "CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84930"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-84931",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.0467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Joli Table Of Contents",
      "cwe": null,
      "title": "Joli Table Of Contents < 3.0.3 - Author+ Stored XSS via joli-toc Shortcode Theme Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84931"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-84935",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00152,
      "epss_percentile": 0.04669,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "HT Menu",
      "cwe": null,
      "title": "HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84935"
    },
    {
      "rank": 52,
      "cve_id": "CVE-2026-77826",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00146,
      "epss_percentile": 0.04183,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "RegistrationMagic",
      "cwe": null,
      "title": "RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77826"
    },
    {
      "rank": 53,
      "cve_id": "CVE-2026-78362",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00146,
      "epss_percentile": 0.04183,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "SEO Flow by LupsOnline",
      "cwe": null,
      "title": "SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78362"
    },
    {
      "rank": 54,
      "cve_id": "CVE-2026-81424",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00146,
      "epss_percentile": 0.04183,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Accept Stripe Payments",
      "cwe": null,
      "title": "Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81424"
    },
    {
      "rank": 55,
      "cve_id": "CVE-2026-15247",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00142,
      "epss_percentile": 0.03762,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Search Atlas SEO",
      "cwe": null,
      "title": "Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15247"
    },
    {
      "rank": 56,
      "cve_id": "CVE-2026-78150",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00142,
      "epss_percentile": 0.03762,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Smart Post",
      "cwe": null,
      "title": "Post Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78150"
    },
    {
      "rank": 57,
      "cve_id": "CVE-2026-84745",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00139,
      "epss_percentile": 0.03583,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "The Events Calendar",
      "cwe": null,
      "title": "The Events Calendar &lt; 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84745"
    },
    {
      "rank": 58,
      "cve_id": "CVE-2026-84926",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00139,
      "epss_percentile": 0.03583,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "EmbedPress",
      "cwe": null,
      "title": "EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84926"
    },
    {
      "rank": 59,
      "cve_id": "CVE-2026-86140",
      "cvss_base": 8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00136,
      "epss_percentile": 0.03307,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-121",
      "title": "In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86140"
    },
    {
      "rank": 60,
      "cve_id": "CVE-2026-84936",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00136,
      "epss_percentile": 0.03357,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "EmbedPress",
      "cwe": null,
      "title": "EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84936"
    },
    {
      "rank": 61,
      "cve_id": "CVE-2026-86142",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00132,
      "epss_percentile": 0.03049,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-122",
      "title": "In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86142"
    },
    {
      "rank": 62,
      "cve_id": "CVE-2026-83543",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00132,
      "epss_percentile": 0.03075,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Greenshift",
      "cwe": null,
      "title": "Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83543"
    },
    {
      "rank": 63,
      "cve_id": "CVE-2026-84225",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00132,
      "epss_percentile": 0.03076,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Kirki",
      "cwe": null,
      "title": "Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84225"
    },
    {
      "rank": 64,
      "cve_id": "CVE-2026-84901",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00132,
      "epss_percentile": 0.03076,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Eventin",
      "cwe": null,
      "title": "Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84901"
    },
    {
      "rank": 65,
      "cve_id": "CVE-2026-84927",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.00132,
      "epss_percentile": 0.03076,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "EmbedPress",
      "cwe": null,
      "title": "EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84927"
    },
    {
      "rank": 66,
      "cve_id": "CVE-2026-86138",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0012,
      "epss_percentile": 0.01999,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-190",
      "title": "In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86138"
    },
    {
      "rank": 67,
      "cve_id": "CVE-2026-86143",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00119,
      "epss_percentile": 0.01976,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-192",
      "title": "In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86143"
    },
    {
      "rank": 68,
      "cve_id": "CVE-2026-86137",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00116,
      "epss_percentile": 0.01802,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-125",
      "title": "In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86137"
    },
    {
      "rank": 69,
      "cve_id": "CVE-2026-86141",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00116,
      "epss_percentile": 0.01802,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-252",
      "title": "xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86141"
    },
    {
      "rank": 70,
      "cve_id": "CVE-2026-86139",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00108,
      "epss_percentile": 0.0131,
      "kev": false,
      "kev_due_at": null,
      "vendor": "xmlsoft",
      "product": "libxml2",
      "cwe": "CWE-190",
      "title": "In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86139"
    },
    {
      "rank": 71,
      "cve_id": "CVE-2026-10196",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getwpfunnels",
      "product": "Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails",
      "cwe": "CWE-502",
      "title": "Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10196"
    },
    {
      "rank": 72,
      "cve_id": "CVE-2026-86123",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sqlchat",
      "product": "sqlchat",
      "cwe": "CWE-918",
      "title": "SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86123"
    },
    {
      "rank": 73,
      "cve_id": "CVE-2026-86148",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "CP3",
      "cwe": "CWE-77",
      "title": "Tenda CP3 Kylin system.c SystemAsh os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86148"
    },
    {
      "rank": 74,
      "cve_id": "CVE-2026-86149",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "CP3",
      "cwe": "CWE-77",
      "title": "Tenda CP3 NetCheckPing.cpp os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86149"
    },
    {
      "rank": 75,
      "cve_id": "CVE-2026-86151",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "CP3",
      "cwe": "CWE-78",
      "title": "Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86151"
    },
    {
      "rank": 76,
      "cve_id": "CVE-2026-86121",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "trycua",
      "product": "cua-computer-server",
      "cwe": "CWE-306",
      "title": "Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86121"
    },
    {
      "rank": 77,
      "cve_id": "CVE-2026-86124",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HKUDS",
      "product": "AutoAgent",
      "cwe": "CWE-306",
      "title": "AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86124"
    },
    {
      "rank": 78,
      "cve_id": "CVE-2026-86184",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "laradashboard",
      "product": "laradashboard",
      "cwe": "CWE-306",
      "title": "Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86184"
    },
    {
      "rank": 79,
      "cve_id": "CVE-2026-86189",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-73",
      "title": "WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86189"
    },
    {
      "rank": 80,
      "cve_id": "CVE-2026-86190",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-200",
      "title": "WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86190"
    },
    {
      "rank": 81,
      "cve_id": "CVE-2026-67276",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-347",
      "title": "SSH user impersonation possible in Mikrotik RouterOS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67276"
    },
    {
      "rank": 82,
      "cve_id": "CVE-2026-86060",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-88",
      "title": "SSH session privilege manipulation via a crafted username in Mikrotik RouterOS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86060"
    },
    {
      "rank": 83,
      "cve_id": "CVE-2026-86117",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "coollabsio",
      "product": "coolify",
      "cwe": "CWE-287",
      "title": "Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86117"
    },
    {
      "rank": 84,
      "cve_id": "CVE-2026-86119",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "webstudio-is",
      "product": "webstudio",
      "cwe": "CWE-918",
      "title": "Webstudio through 0.296.0 SSRF via /cgi proxy routes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86119"
    },
    {
      "rank": 85,
      "cve_id": "CVE-2025-9049",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "scriptsbundle",
      "product": "Nokri – Job Board WordPress Theme",
      "cwe": "CWE-862",
      "title": "Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authorization to Authenticated (Subscriber +) Privilege Escalation via Account Takeover",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-9049"
    },
    {
      "rank": 86,
      "cve_id": "CVE-2026-67277",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-306",
      "title": "Kernel memory disclosure and denial of service in MikroTik RouterOS btest service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67277"
    },
    {
      "rank": 87,
      "cve_id": "CVE-2026-0799",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-125",
      "title": "OOBR and OOBW in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0799"
    },
    {
      "rank": 88,
      "cve_id": "CVE-2026-67281",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-22",
      "title": "Unauthenticated file read in Mikrotik RouterOS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67281"
    },
    {
      "rank": 89,
      "cve_id": "CVE-2026-86169",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "axolotl-ai-cloud",
      "product": "axolotl",
      "cwe": "CWE-829",
      "title": "Axolotl through 0.18.0 Remote Code Execution via Multipack Patching",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86169"
    },
    {
      "rank": 90,
      "cve_id": "CVE-2026-86173",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mindsdb",
      "product": "mindsdb",
      "cwe": "CWE-918",
      "title": "MindsDB through 26.1.0 Unauthenticated SSRF via Web Crawler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86173"
    },
    {
      "rank": 91,
      "cve_id": "CVE-2026-86177",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pterodactyl",
      "product": "panel",
      "cwe": "CWE-862",
      "title": "Pterodactyl Panel before 1.14.1 Privilege Escalation via Schedule Tasks",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86177"
    },
    {
      "rank": 92,
      "cve_id": "CVE-2026-86193",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav-plugin-api",
      "cwe": "CWE-863",
      "title": "Grav API Plugin Authentication Bypass via Group-Inherited Super",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86193"
    },
    {
      "rank": 93,
      "cve_id": "CVE-2026-86195",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav-plugin-api",
      "cwe": "CWE-269",
      "title": "grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86195"
    },
    {
      "rank": 94,
      "cve_id": "CVE-2026-86196",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav-plugin-api",
      "cwe": "CWE-290",
      "title": "Grav API Plugin before 1.0.20 Authentication Bypass via Host Header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86196"
    },
    {
      "rank": 95,
      "cve_id": "CVE-2026-86185",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bilibili",
      "product": "Bilibili Desktop",
      "cwe": "CWE-295",
      "title": "Bilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86185"
    },
    {
      "rank": 96,
      "cve_id": "CVE-2026-86207",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "N-able",
      "product": "N-central",
      "cwe": "CWE-305",
      "title": "Authentication bypass leads to unauthorised access to N-central",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86207"
    },
    {
      "rank": 97,
      "cve_id": "CVE-2026-86187",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-330",
      "title": "WWBN AVideo Weak PRNG Password Generation via External Login",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86187"
    },
    {
      "rank": 98,
      "cve_id": "CVE-2026-86111",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bookwyrm-social",
      "product": "bookwyrm",
      "cwe": "CWE-639",
      "title": "BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86111"
    },
    {
      "rank": 99,
      "cve_id": "CVE-2026-86113",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bookwyrm-social",
      "product": "bookwyrm",
      "cwe": "CWE-639",
      "title": "BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86113"
    },
    {
      "rank": 100,
      "cve_id": "CVE-2026-86114",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getarcaneapp",
      "product": "arcane",
      "cwe": "CWE-862",
      "title": "Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86114"
    },
    {
      "rank": 101,
      "cve_id": "CVE-2026-86116",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "metabase",
      "product": "metabase",
      "cwe": "CWE-862",
      "title": "Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86116"
    },
    {
      "rank": 102,
      "cve_id": "CVE-2026-86175",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netbox-community",
      "product": "netbox",
      "cwe": "CWE-522",
      "title": "NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86175"
    },
    {
      "rank": 103,
      "cve_id": "CVE-2026-86192",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-639",
      "title": "SiYuan before v3.8.2 Information Disclosure via Attribute-View",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86192"
    },
    {
      "rank": 104,
      "cve_id": "CVE-2026-67279",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-841",
      "title": "SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67279"
    },
    {
      "rank": 105,
      "cve_id": "CVE-2026-86188",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-79",
      "title": "AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86188"
    },
    {
      "rank": 106,
      "cve_id": "CVE-2026-86194",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav-plugin-form",
      "cwe": "CWE-862",
      "title": "Grav Form Plugin before 9.1.22 Cross-Page Form Execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86194"
    },
    {
      "rank": 107,
      "cve_id": "CVE-2026-86206",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "N-able",
      "product": "N-central",
      "cwe": "CWE-791",
      "title": "Access control filter bypass allows unauthorised access to APIs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86206"
    },
    {
      "rank": 108,
      "cve_id": "CVE-2025-15647",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "artem-ogre",
      "product": "CDT",
      "cwe": "CWE-125",
      "title": "CDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15647"
    },
    {
      "rank": 109,
      "cve_id": "CVE-2026-67278",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mikrotik",
      "product": "RouterOS",
      "cwe": "CWE-347",
      "title": "TLS server impersonation possible in Mikrotik RouterOS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67278"
    },
    {
      "rank": 110,
      "cve_id": "CVE-2026-86186",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WWBN",
      "product": "AVideo",
      "cwe": "CWE-307",
      "title": "AVideo API Rate Limit Bypass via Bot User-Agent Header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86186"
    },
    {
      "rank": 111,
      "cve_id": "CVE-2026-82752",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ash-project",
      "product": "ash",
      "cwe": "CWE-1284",
      "title": "Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82752"
    },
    {
      "rank": 112,
      "cve_id": "CVE-2026-6244",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-369",
      "title": "division by zero in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6244"
    },
    {
      "rank": 113,
      "cve_id": "CVE-2026-6554",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-835",
      "title": "infinte loop in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6554"
    },
    {
      "rank": 114,
      "cve_id": "CVE-2026-31911",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-617",
      "title": "abort() in libpcap before 1.10.7 on an invalid BPF opcode",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31911"
    },
    {
      "rank": 115,
      "cve_id": "CVE-2026-31912",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-125",
      "title": "OOBR in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31912"
    },
    {
      "rank": 116,
      "cve_id": "CVE-2026-12843",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "StellarWP",
      "product": "LearnDash LMS",
      "cwe": "CWE-862",
      "title": "LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Course Enrollment via REST Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12843"
    },
    {
      "rank": 117,
      "cve_id": "CVE-2026-86112",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "bookwyrm-social",
      "product": "bookwyrm",
      "cwe": "CWE-639",
      "title": "BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86112"
    },
    {
      "rank": 118,
      "cve_id": "CVE-2026-86115",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "simstudioai",
      "product": "sim",
      "cwe": "CWE-441",
      "title": "Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86115"
    },
    {
      "rank": 119,
      "cve_id": "CVE-2026-86118",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sentriz",
      "product": "gonic",
      "cwe": "CWE-862",
      "title": "gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86118"
    },
    {
      "rank": 120,
      "cve_id": "CVE-2026-86120",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "apitable",
      "product": "apitable",
      "cwe": "CWE-636",
      "title": "APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86120"
    },
    {
      "rank": 121,
      "cve_id": "CVE-2026-86122",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "rowboatlabs",
      "product": "rowboat",
      "cwe": "CWE-918",
      "title": "Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86122"
    },
    {
      "rank": 122,
      "cve_id": "CVE-2026-86174",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "makeplane",
      "product": "plane",
      "cwe": "CWE-639",
      "title": "Plane through 1.4.2 Arbitrary Comment Write via Public Deploy Board",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86174"
    },
    {
      "rank": 123,
      "cve_id": "CVE-2026-86176",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netbox-community",
      "product": "netbox",
      "cwe": "CWE-639",
      "title": "NetBox through 4.7.0 Information Disclosure via REST and GraphQL APIs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86176"
    },
    {
      "rank": 124,
      "cve_id": "CVE-2026-86178",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pixelfed",
      "product": "pixelfed",
      "cwe": "CWE-862",
      "title": "Pixelfed through 0.12.9 Unauthorized Story Access via API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86178"
    },
    {
      "rank": 125,
      "cve_id": "CVE-2026-86191",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-639",
      "title": "SiYuan before v3.8.2 Private Attribute View Key Enumeration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86191"
    },
    {
      "rank": 126,
      "cve_id": "CVE-2026-86197",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "getgrav",
      "product": "grav",
      "cwe": "CWE-79",
      "title": "Grav before 2.0.20 Cross-Site Scripting via Assets Sandbox",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86197"
    },
    {
      "rank": 127,
      "cve_id": "CVE-2026-18238",
      "cvss_base": 5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-126",
      "title": "OOBR in rpcap client in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18238"
    },
    {
      "rank": 128,
      "cve_id": "CVE-2025-15614",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Genivia",
      "product": "ugrep",
      "cwe": "CWE-125",
      "title": "ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-15614"
    },
    {
      "rank": 129,
      "cve_id": "CVE-2026-15550",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Saturday Drive",
      "product": "Ninja Forms - Save Progress",
      "cwe": "CWE-862",
      "title": "Ninja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15550"
    },
    {
      "rank": 130,
      "cve_id": "CVE-2026-18313",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "The Tcpdump Group",
      "product": "libpcap",
      "cwe": "CWE-401",
      "title": "rpcapd memory leak in libpcap before 1.10.7",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18313"
    },
    {
      "rank": 131,
      "cve_id": "CVE-2026-86150",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenda",
      "product": "CP3",
      "cwe": "CWE-259",
      "title": "Tenda CP3 hostapd hard-coded credentials",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86150"
    }
  ],
  "transactions": [
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4740",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4740 (Red Hat multicluster engine for Kubernetes 2.1). Public exploit reference added."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}