{
  "day": "2026-10-08",
  "boundary": "UTC calendar day",
  "published_count": 507,
  "by_severity": {
    "CRITICAL": 51,
    "HIGH": 191,
    "MEDIUM": 223,
    "LOW": 23
  },
  "kev_count": 0,
  "exploit_reference_count": 1,
  "awaiting_enrichment_count": 19,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-105110",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.02788,
      "epss_percentile": 0.85991,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Iskratel",
      "product": "Innbox",
      "cwe": "CWE-78",
      "title": "Iskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105110"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-94579",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0265,
      "epss_percentile": 0.85186,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94579"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-87666",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.01847,
      "epss_percentile": 0.78427,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in underlying shell execution routines. An authenticated user with low-privilege administrative access can exploit this vulnerability by submitting a crafted timezone string containing shell metacharacters. Successful exploitation allows the attacker to escape the restricted management environment and execute arbitrary shell commands with elevated privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87666"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-107459",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.01467,
      "epss_percentile": 0.72914,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Openfind",
      "product": "SecuShare Pro",
      "cwe": "CWE-78",
      "title": "Openfind｜SecuShare Pro - OS Command Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107459"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-94581",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.01297,
      "epss_percentile": 0.69518,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with administrative privileges to configure SSH known host settings can supply specially crafted parameter values containing shell metacharacters to trigger command execution on the host system.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94581"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-94586",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.01248,
      "epss_percentile": 0.68425,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using remote server profiles can supply malicious parameter strings to execute arbitrary shell commands on the switch with root privileges",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94586"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2017-20283",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.01188,
      "epss_percentile": 0.66977,
      "kev": false,
      "kev_due_at": null,
      "vendor": "NXP",
      "product": "MQX",
      "cwe": "CWE-787",
      "title": "NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-20283"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-87680",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.01022,
      "epss_percentile": 0.62339,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87680"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-87673",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00899,
      "epss_percentile": 0.58405,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A privileged user with maintenance account access can exploit this issue by supplying crafted parameters, which results in arbitrary OS command execution with root privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87673"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-87682",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00865,
      "epss_percentile": 0.57391,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87682"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-87665",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00849,
      "epss_percentile": 0.56847,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-121",
      "title": "A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87665"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-87663",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00735,
      "epss_percentile": 0.53033,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-290",
      "title": "An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these commands at an elevated processing level without proper verification of transmitted parameters. This allows an attacker on a single fabric-connected switch to escalate privileges and execute arbitrary root commands locally or across other managed fabric members where remote execution functionality is enabled.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87663"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-87675",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00733,
      "epss_percentile": 0.52939,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download operation, the management daemon will relay configuration parameters, user-supplied relay host strings, and filenames directly to an internal utility script without sufficient character set validation. Because the local utility fails to sanitize shell metacharacters before processing them in a system shell command, a malicious or compromised configuration file can cause arbitrary operating system commands to be executed on a remote local switch when an administrator initiates a configuration download.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87675"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-87677",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00617,
      "epss_percentile": 0.47967,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account deletion, the system invokes an internal maintenance routine to clean up cryptographic keys associated with the target account. Malformed account names previously accepted by Fabric OS can cause the execution of embedded shell metacharacters, triggering command injection.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87677"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-17196",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00533,
      "epss_percentile": 0.43256,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WebRehab",
      "product": "Super Forms – Drag & Drop Form Builder",
      "cwe": "CWE-434",
      "title": "Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17196"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-107446",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00407,
      "epss_percentile": 0.32887,
      "kev": false,
      "kev_due_at": null,
      "vendor": "containerd",
      "product": "overlaybd",
      "cwe": "CWE-190",
      "title": "containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107446"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-4894",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00379,
      "epss_percentile": 0.29788,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Frappe Technologies",
      "product": "Frappe Technologies",
      "cwe": "CWE-290",
      "title": "Authentication bypass in multiple products from Frappe Technologies",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4894"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-94576",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00359,
      "epss_percentile": 0.27596,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-187",
      "title": "An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying another account's access privileges. Exploitation allows a lower-privileged user to assign administrative roles to a target account, leading to localized privilege escalation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94576"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-85097",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00312,
      "epss_percentile": 0.22075,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bricksforge",
      "product": "Bricksforge",
      "cwe": "CWE-434",
      "title": "Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85097"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-17609",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00309,
      "epss_percentile": 0.21741,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WebRehab",
      "product": "Super Forms – Drag & Drop Form Builder",
      "cwe": "CWE-434",
      "title": "Super Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17609"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2023-5648",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00294,
      "epss_percentile": 0.20122,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Active Support Connectivity Gateway",
      "cwe": "CWE-79",
      "title": "In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5648"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-85490",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00273,
      "epss_percentile": 0.18014,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-22",
      "title": "When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85490"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-82627",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00265,
      "epss_percentile": 0.16929,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uncannyowl",
      "product": "Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included",
      "cwe": "CWE-502",
      "title": "Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82627"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2024-8122",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00254,
      "epss_percentile": 0.15521,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WSO2",
      "product": "WSO2 Identity Server",
      "cwe": "CWE-613",
      "title": "Potential brute force vulnerability due to non-expiring SMS OTPs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-8122"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2026-87662",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00238,
      "epss_percentile": 0.13617,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and executed through a system shell interface. Because control characters and shell metacharacters in fields like the host or file path are not stripped or sanitized, an attacker can execute arbitrary shell commands with the firmware management daemon's elevated privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87662"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2026-94578",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00236,
      "epss_percentile": 0.1342,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-269",
      "title": "Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94578"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-87684",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00229,
      "epss_percentile": 0.12572,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-121",
      "title": "A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87684"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-12260",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00228,
      "epss_percentile": 0.12441,
      "kev": false,
      "kev_due_at": null,
      "vendor": "NetBoard CRM",
      "product": "NetBoard CRM Demo Platform",
      "cwe": "CWE-89",
      "title": "SQL injection in the NetBoard CRM demo platform",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12260"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-85486",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00228,
      "epss_percentile": 0.12436,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-95",
      "title": "Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85486"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2026-87671",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00225,
      "epss_percentile": 0.12161,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-125",
      "title": "An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87671"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-89191",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00223,
      "epss_percentile": 0.11899,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SQLView",
      "product": "SQLView KRIS",
      "cwe": "CWE-79",
      "title": "Stored Cross-Site Scripting in SQLView KRIS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89191"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-86828",
      "cvss_base": 6.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00219,
      "epss_percentile": 0.11374,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "BackWPup",
      "cwe": "CWE-22",
      "title": "BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86828"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-107450",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00211,
      "epss_percentile": 0.10493,
      "kev": false,
      "kev_due_at": null,
      "vendor": "stumpapp",
      "product": "Stump",
      "cwe": "CWE-863",
      "title": "In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission and resolve the target list at Reader access (lacking a creator check). Any authenticated user with that permission can overwrite, delete, or take over another user's smart list. (updateSmartList sets creatorId to the caller identity, and can set visibility to PRIVATE, locking out the original owner.) NOTE: this is unrelated to the graphql crate on crates.io.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107450"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2026-102488",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00207,
      "epss_percentile": 0.09899,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Octopus Deploy",
      "product": "Octopus Server",
      "cwe": "CWE-863",
      "title": "In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102488"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-85423",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00207,
      "epss_percentile": 0.09903,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-306",
      "title": "A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85423"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-85487",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00205,
      "epss_percentile": 0.09626,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-22",
      "title": "A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85487"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-107444",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00204,
      "epss_percentile": 0.09557,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Hardened Images",
      "cwe": "CWE-639",
      "title": "Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107444"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-87678",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00201,
      "epss_percentile": 0.09155,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-93",
      "title": "An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter. An authenticated administrator—or an attacker capable of supplying crafted FA configuration files during an import routine—can inject arbitrary web server directives. This can lead to service denial by preventing the web management daemon from starting, or potentially alter web server security controls.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87678"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-87686",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00201,
      "epss_percentile": 0.09087,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-290",
      "title": "An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socket transport layer source IP address. Successful exploitation allows the attacker to bypass IP-filtering access control lists (ACLs) and obtain sensitive device metadata (such as model, serial number, hardware revision, and firmware version) without authentication.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87686"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-103646",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00198,
      "epss_percentile": 0.08825,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Ultimate Multisite",
      "cwe": "CWE-287",
      "title": "Ultimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103646"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-85421",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00194,
      "epss_percentile": 0.0831,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-306",
      "title": "A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states, and modify system configurations, leading to a complete compromise of the streaming service control plane.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85421"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-107466",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00191,
      "epss_percentile": 0.08044,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Enterprise Linux 10",
      "cwe": "CWE-22",
      "title": "Flatpak-builder: local file exfiltration via `file",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107466"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-87687",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.0019,
      "epss_percentile": 0.07917,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-88",
      "title": "An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary fabric identifier. This allows the user to perform unauthorized cross-fabric operations and view configuration details within tenants/Virtual Fabrics to which they have not been granted access.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87687"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-87667",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00189,
      "epss_percentile": 0.07796,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-88",
      "title": "An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search string options before passing them to internal search commands. An authenticated user with low-privilege administrative access can exploit this vulnerability to read arbitrary files on the local operating system, including sensitive configuration files, system password hashes and system secrets.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87667"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2026-85489",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00188,
      "epss_percentile": 0.07707,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-306",
      "title": "An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85489"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-66082",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00188,
      "epss_percentile": 0.07758,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-863",
      "title": "Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66082"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-5047",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00186,
      "epss_percentile": 0.07536,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade SANnav",
      "cwe": "CWE-922",
      "title": "A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5047"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-5048",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00186,
      "epss_percentile": 0.07525,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade SANnav",
      "cwe": "CWE-89",
      "title": "In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5048"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-103309",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00185,
      "epss_percentile": 0.07418,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "GPTranslate",
      "cwe": "CWE-79",
      "title": "GPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation Storage",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103309"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-94575",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00185,
      "epss_percentile": 0.07394,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-483",
      "title": "A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94575"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-94580",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00185,
      "epss_percentile": 0.07443,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-22",
      "title": "An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary files or directories on the switch's local root filesystem, bypassing intended USB mount point boundaries.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94580"
    },
    {
      "rank": 52,
      "cve_id": "CVE-2026-5049",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00178,
      "epss_percentile": 0.06716,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade SANnav",
      "cwe": "CWE-22",
      "title": "A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5049"
    },
    {
      "rank": 53,
      "cve_id": "CVE-2026-66084",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00177,
      "epss_percentile": 0.06618,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-863",
      "title": "Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66084"
    },
    {
      "rank": 54,
      "cve_id": "CVE-2026-87683",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00175,
      "epss_percentile": 0.06445,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-121",
      "title": "Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87683"
    },
    {
      "rank": 55,
      "cve_id": "CVE-2026-107445",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00174,
      "epss_percentile": 0.06287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Hardened Images",
      "cwe": "CWE-639",
      "title": "Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107445"
    },
    {
      "rank": 56,
      "cve_id": "CVE-2026-71895",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00173,
      "epss_percentile": 0.06096,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-862",
      "title": "Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71895"
    },
    {
      "rank": 57,
      "cve_id": "CVE-2026-87424",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00172,
      "epss_percentile": 0.06065,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-321",
      "title": "A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87424"
    },
    {
      "rank": 58,
      "cve_id": "CVE-2026-87681",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00172,
      "epss_percentile": 0.06064,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-269",
      "title": "An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87681"
    },
    {
      "rank": 59,
      "cve_id": "CVE-2026-94585",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00167,
      "epss_percentile": 0.05405,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-288",
      "title": "An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94585"
    },
    {
      "rank": 60,
      "cve_id": "CVE-2026-66087",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00164,
      "epss_percentile": 0.05076,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-863",
      "title": "Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66087"
    },
    {
      "rank": 61,
      "cve_id": "CVE-2026-87668",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00164,
      "epss_percentile": 0.05093,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-121",
      "title": "A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87668"
    },
    {
      "rank": 62,
      "cve_id": "CVE-2026-71896",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00164,
      "epss_percentile": 0.05067,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-863",
      "title": "Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71896"
    },
    {
      "rank": 63,
      "cve_id": "CVE-2026-87661",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00163,
      "epss_percentile": 0.05059,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-93",
      "title": "Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87661"
    },
    {
      "rank": 64,
      "cve_id": "CVE-2026-104646",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00163,
      "epss_percentile": 0.05041,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Image Photo Gallery Final Tiles Grid",
      "cwe": "CWE-79",
      "title": "Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104646"
    },
    {
      "rank": 65,
      "cve_id": "CVE-2026-107449",
      "cvss_base": 3.4,
      "cvss_severity": "LOW",
      "epss_score": 0.00162,
      "epss_percentile": 0.04879,
      "kev": false,
      "kev_due_at": null,
      "vendor": "linuxserver",
      "product": "Heimdall",
      "cwe": "CWE-918",
      "title": "linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions. In some realistic installations, the POST /test_config (and GET /get_stats) endpoints are accessible through CSRF, and thus an unauthenticated attacker can force the server to send requests to arbitrary internal hosts and ports (including 169.254.169.254) and read a status/port oracle in addition to partial response data.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107449"
    },
    {
      "rank": 66,
      "cve_id": "CVE-2026-87679",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00161,
      "epss_percentile": 0.0473,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-122",
      "title": "When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploit this vulnerability via crafted REST API requests containing an excessive number of list delimiters, causing heap corruption that can result in service crash or arbitrary code execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87679"
    },
    {
      "rank": 67,
      "cve_id": "CVE-2026-87426",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00153,
      "epss_percentile": 0.03876,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-200",
      "title": "An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS (FOS) switches. This results in the unauthorized disclosure of the customer's SAN fabric management topology and switch connectivity attributes.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87426"
    },
    {
      "rank": 68,
      "cve_id": "CVE-2026-86827",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00151,
      "epss_percentile": 0.03752,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "BackWPup",
      "cwe": "CWE-862",
      "title": "BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86827"
    },
    {
      "rank": 69,
      "cve_id": "CVE-2026-71183",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0015,
      "epss_percentile": 0.03633,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apache Software Foundation",
      "product": "Apache DolphinScheduler",
      "cwe": "CWE-863",
      "title": "Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71183"
    },
    {
      "rank": 70,
      "cve_id": "CVE-2026-94587",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00149,
      "epss_percentile": 0.03538,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-120",
      "title": "A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using remote server profiles can overflow stack buffers causing a crash of the weblinker daemon.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94587"
    },
    {
      "rank": 71,
      "cve_id": "CVE-2026-105194",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00149,
      "epss_percentile": 0.036,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Easy Digital Downloads",
      "cwe": "CWE-200",
      "title": "Easy Digital Downloads < 3.7.1 - Subscriber+ Sensitive Information Disclosure via User Downloads Block",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105194"
    },
    {
      "rank": 72,
      "cve_id": "CVE-2026-105195",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00149,
      "epss_percentile": 0.03599,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Booking Calendar",
      "cwe": "CWE-200",
      "title": "Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105195"
    },
    {
      "rank": 73,
      "cve_id": "CVE-2026-103692",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00146,
      "epss_percentile": 0.03352,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Frontend Dashboard",
      "cwe": "CWE-269",
      "title": "Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103692"
    },
    {
      "rank": 74,
      "cve_id": "CVE-2026-87685",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00146,
      "epss_percentile": 0.03367,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-73",
      "title": "An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87685"
    },
    {
      "rank": 75,
      "cve_id": "CVE-2026-94584",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00146,
      "epss_percentile": 0.03341,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-362",
      "title": "A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP addresses and switch context numbers. This leads to inaccurate audit records and potential access control bypasses where AAA evaluation or Calling-Station-ID ACL policies rely on client IP attributes.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94584"
    },
    {
      "rank": 76,
      "cve_id": "CVE-2026-86826",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00145,
      "epss_percentile": 0.03287,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "BackWPup",
      "cwe": "CWE-200",
      "title": "BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86826"
    },
    {
      "rank": 77,
      "cve_id": "CVE-2026-94275",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00145,
      "epss_percentile": 0.03286,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Track Orders for WooCommerce",
      "cwe": "CWE-200",
      "title": "Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94275"
    },
    {
      "rank": 78,
      "cve_id": "CVE-2026-87659",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00144,
      "epss_percentile": 0.03168,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-306",
      "title": "A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to bypass administrative authentication. Successful exploitation allows an unauthorized peer switch to execute administrative actions on the target device, including resetting administrative passwords, initiating system reboots, and triggering firmware downloads.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87659"
    },
    {
      "rank": 79,
      "cve_id": "CVE-2026-107448",
      "cvss_base": 3.4,
      "cvss_severity": "LOW",
      "epss_score": 0.00144,
      "epss_percentile": 0.03205,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wizards of the Coast",
      "product": "Magic: The Gathering Arena",
      "cwe": "CWE-99",
      "title": "Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the Windows shell via Application.OpenURL/ShellExecuteW without validating the URI scheme or domain. A hypothetical attacker able to control the carousel content delivered to clients can cause arbitrary registered URI-scheme handlers to be invoked on client hosts with no user interaction. For example, one might expect that the carousel content only has https: URIs, not ms-calculator: URIs.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107448"
    },
    {
      "rank": 80,
      "cve_id": "CVE-2026-104645",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00142,
      "epss_percentile": 0.02989,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Image Photo Gallery Final Tiles Grid",
      "cwe": "CWE-639",
      "title": "Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104645"
    },
    {
      "rank": 81,
      "cve_id": "CVE-2026-87669",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00139,
      "epss_percentile": 0.0282,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-862",
      "title": "A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical switches. An attacker with low-privilege API access can leverage this endpoint to dump chassis-wide system health metrics, port performance violations, and configuration data without appropriate privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87669"
    },
    {
      "rank": 82,
      "cve_id": "CVE-2026-87670",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00139,
      "epss_percentile": 0.0282,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-290",
      "title": "An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers to gain unauthorized access to internal management endpoints. This allows low-privilege users to view sensitive chassis metadata, hardware memory patrolling state, and firmware integrity audit logs.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87670"
    },
    {
      "rank": 83,
      "cve_id": "CVE-2026-94244",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00139,
      "epss_percentile": 0.02826,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Wallet System for WooCommerce",
      "cwe": "CWE-200",
      "title": "Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94244"
    },
    {
      "rank": 84,
      "cve_id": "CVE-2026-94258",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00139,
      "epss_percentile": 0.02826,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "SMS Alert",
      "cwe": "CWE-200",
      "title": "SMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User Actions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94258"
    },
    {
      "rank": 85,
      "cve_id": "CVE-2026-93699",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00134,
      "epss_percentile": 0.02488,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WebPros",
      "product": "WP Toolkit",
      "cwe": "CWE-88",
      "title": "Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93699"
    },
    {
      "rank": 86,
      "cve_id": "CVE-2026-94245",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00132,
      "epss_percentile": 0.02382,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Wallet System for WooCommerce",
      "cwe": "CWE-639",
      "title": "Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94245"
    },
    {
      "rank": 87,
      "cve_id": "CVE-2026-94246",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00132,
      "epss_percentile": 0.02382,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Wallet System for WooCommerce",
      "cwe": "CWE-639",
      "title": "Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94246"
    },
    {
      "rank": 88,
      "cve_id": "CVE-2026-105198",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00132,
      "epss_percentile": 0.02382,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Appointment Booking Plugin",
      "cwe": "CWE-639",
      "title": "LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105198"
    },
    {
      "rank": 89,
      "cve_id": "CVE-2026-105196",
      "cvss_base": 3.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00132,
      "epss_percentile": 0.02383,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Appointment Booking Plugin",
      "cwe": "CWE-639",
      "title": "LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105196"
    },
    {
      "rank": 90,
      "cve_id": "CVE-2026-105197",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": 0.00132,
      "epss_percentile": 0.02383,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Appointment Booking Plugin",
      "cwe": "CWE-639",
      "title": "LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105197"
    },
    {
      "rank": 91,
      "cve_id": "CVE-2026-87660",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00128,
      "epss_percentile": 0.02121,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-732",
      "title": "An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset hardware blades, or disrupt storage fabric operations.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87660"
    },
    {
      "rank": 92,
      "cve_id": "CVE-2026-94582",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00127,
      "epss_percentile": 0.0204,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-120",
      "title": "A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94582"
    },
    {
      "rank": 93,
      "cve_id": "CVE-2026-87664",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00123,
      "epss_percentile": 0.01838,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-306",
      "title": "A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user identifiers, and authorization flags—without verifying the identity or authenticity of the sending process. An attacker can obtain elevated administrative privileges on the web management interface without legitimate authentication.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87664"
    },
    {
      "rank": 94,
      "cve_id": "CVE-2026-87672",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00114,
      "epss_percentile": 0.01358,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-532",
      "title": "An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an authenticated HTTP proxy, the system stores the full proxy URL. Anyone with access to the diagnostic support bundle, such as support personnel or users with access to file shares where support bundles are stored, can extract these cleartext proxy credentials.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87672"
    },
    {
      "rank": 95,
      "cve_id": "CVE-2026-92861",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0011,
      "epss_percentile": 0.01177,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wavedash Co., Ltd.",
      "product": "Ticket Ryutsu Center",
      "cwe": "CWE-798",
      "title": "The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92861"
    },
    {
      "rank": 96,
      "cve_id": "CVE-2026-92862",
      "cvss_base": 4.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0011,
      "epss_percentile": 0.01199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wavedash Co., Ltd.",
      "product": "Ticket Ryutsu Center",
      "cwe": "CWE-939",
      "title": "The Android application \"Ticket Ryutsu Center\" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92862"
    },
    {
      "rank": 97,
      "cve_id": "CVE-2026-94583",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00109,
      "epss_percentile": 0.01144,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-362",
      "title": "A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94583"
    },
    {
      "rank": 98,
      "cve_id": "CVE-2026-87674",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00108,
      "epss_percentile": 0.01114,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-78",
      "title": "A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87674"
    },
    {
      "rank": 99,
      "cve_id": "CVE-2026-87688",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00106,
      "epss_percentile": 0.01046,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-77",
      "title": "An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87688"
    },
    {
      "rank": 100,
      "cve_id": "CVE-2026-85422",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00106,
      "epss_percentile": 0.01025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-798",
      "title": "A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored management credentials or craft forged administrative synchronization messages.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85422"
    },
    {
      "rank": 101,
      "cve_id": "CVE-2026-87425",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00104,
      "epss_percentile": 0.00965,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-295",
      "title": "An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle (MITM) attacks against outbound communications with managed switches and peer nodes.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87425"
    },
    {
      "rank": 102,
      "cve_id": "CVE-2026-105193",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00103,
      "epss_percentile": 0.00929,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Booking Calendar",
      "cwe": "CWE-326",
      "title": "Booking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking Hash",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105193"
    },
    {
      "rank": 103,
      "cve_id": "CVE-2026-94577",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00102,
      "epss_percentile": 0.00862,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-15",
      "title": "A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that can manipulate the process execution environment can bypass Role-Based Access Control (RBAC) validation checks. Successful exploitation allows an attacker to elevate privileges to root",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94577"
    },
    {
      "rank": 104,
      "cve_id": "CVE-2023-5649",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00099,
      "epss_percentile": 0.00781,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-20",
      "title": "An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when collecting “supportsave” from a Brocade Switch.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5649"
    },
    {
      "rank": 105,
      "cve_id": "CVE-2026-87726",
      "cvss_base": 3.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00098,
      "epss_percentile": 0.00722,
      "kev": false,
      "kev_due_at": null,
      "vendor": "NXP",
      "product": "NxpNfcRdLib",
      "cwe": "CWE-787",
      "title": "Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87726"
    },
    {
      "rank": 106,
      "cve_id": "CVE-2026-105260",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00097,
      "epss_percentile": 0.00693,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Database Addon For WPForms ( wpforms entries )",
      "cwe": "CWE-352",
      "title": "Database Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRF",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105260"
    },
    {
      "rank": 107,
      "cve_id": "CVE-2026-87428",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00096,
      "epss_percentile": 0.00642,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-522",
      "title": "In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87428"
    },
    {
      "rank": 108,
      "cve_id": "CVE-2026-87676",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00094,
      "epss_percentile": 0.00566,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Fabric OS",
      "cwe": "CWE-121",
      "title": "A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87676"
    },
    {
      "rank": 109,
      "cve_id": "CVE-2026-85488",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00091,
      "epss_percentile": 0.00467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade Active Support Connectivity Gateway",
      "cwe": "CWE-798",
      "title": "Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the installation path can discover this credential and perform privilege escalation on affected Open Virtual Appliance (OVA) deployments, where default configuration settings remain in place.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85488"
    },
    {
      "rank": 110,
      "cve_id": "CVE-2026-5769",
      "cvss_base": 5.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00067,
      "epss_percentile": 0.00019,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Brocade",
      "product": "Brocade SANnav",
      "cwe": "CWE-313",
      "title": "A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The vulnerability could allow an authenticated admin user with access to the server hosting the SANnav to potentially view the memory swap file and access the password(s).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5769"
    },
    {
      "rank": 111,
      "cve_id": "CVE-2026-96207",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Microsoft Partner Center",
      "cwe": "CWE-295",
      "title": "Microsoft Partner Center Elevation of Privilege Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96207"
    },
    {
      "rank": 112,
      "cve_id": "CVE-2026-94510",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Microsoft Bookings",
      "cwe": "CWE-639",
      "title": "Microsoft Bookings Elevation of Privilege Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94510"
    },
    {
      "rank": 113,
      "cve_id": "CVE-2026-14269",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-122",
      "title": "IBM DataPower Gateway Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14269"
    },
    {
      "rank": 114,
      "cve_id": "CVE-2026-14502",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-287",
      "title": "IBM DataPower Gateway Improper Authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14502"
    },
    {
      "rank": 115,
      "cve_id": "CVE-2026-14991",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14991"
    },
    {
      "rank": 116,
      "cve_id": "CVE-2026-14992",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14992"
    },
    {
      "rank": 117,
      "cve_id": "CVE-2026-15762",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15762"
    },
    {
      "rank": 118,
      "cve_id": "CVE-2026-16340",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16340"
    },
    {
      "rank": 119,
      "cve_id": "CVE-2026-75875",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-22",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75875"
    },
    {
      "rank": 120,
      "cve_id": "CVE-2026-77900",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure App Service for Linux",
      "cwe": "CWE-306",
      "title": "Azure App Service Remote Code Execution Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77900"
    },
    {
      "rank": 121,
      "cve_id": "CVE-2026-78401",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-502",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78401"
    },
    {
      "rank": 122,
      "cve_id": "CVE-2026-78406",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-502",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78406"
    },
    {
      "rank": 123,
      "cve_id": "CVE-2026-80381",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-89",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-80381"
    },
    {
      "rank": 124,
      "cve_id": "CVE-2026-84249",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-306",
      "title": "IBM Guardium Data Protection is affected by vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84249"
    },
    {
      "rank": 125,
      "cve_id": "CVE-2026-84272",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-306",
      "title": "IBM Guardium Data Protection Missing Authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84272"
    },
    {
      "rank": 126,
      "cve_id": "CVE-2026-88131",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Microsoft Dataverse",
      "cwe": "CWE-502",
      "title": "Microsoft Dataverse Remote Code Execution Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88131"
    },
    {
      "rank": 127,
      "cve_id": "CVE-2026-92555",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AKIN Software Computer Import-Export Industry and Trade Co. Ltd.",
      "product": "AKINSOFT WOLVOX Control Panel",
      "cwe": "CWE-201",
      "title": "Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92555"
    },
    {
      "rank": 128,
      "cve_id": "CVE-2026-93034",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SGLang",
      "product": "SGLang",
      "cwe": "CWE-502",
      "title": "CVE-2026-93034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93034"
    },
    {
      "rank": 129,
      "cve_id": "CVE-2026-107722",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-347",
      "title": "fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107722"
    },
    {
      "rank": 130,
      "cve_id": "CVE-2026-69435",
      "cvss_base": 9.6,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure SRE Agent",
      "cwe": "CWE-918",
      "title": "Azure SRE Agent Elevation of Privilege Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69435"
    },
    {
      "rank": 131,
      "cve_id": "CVE-2026-107406",
      "cvss_base": 9.5,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "NetScaler",
      "product": "ADC",
      "cwe": null,
      "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107406"
    },
    {
      "rank": 132,
      "cve_id": "CVE-2026-103663",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Ollama",
      "product": "Ollama",
      "cwe": "CWE-23",
      "title": "Path Traversal leading to Remote Code Execution in Ollama",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103663"
    },
    {
      "rank": 133,
      "cve_id": "CVE-2026-106126",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Tenable, Inc.",
      "product": "Tenable Identity Exposure (SaaS)",
      "cwe": "CWE-78",
      "title": "Command Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106126"
    },
    {
      "rank": 134,
      "cve_id": "CVE-2026-9209",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mJob",
      "product": "mJobTime",
      "cwe": "CWE-250",
      "title": "mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9209"
    },
    {
      "rank": 135,
      "cve_id": "CVE-2026-14990",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6.0",
      "cwe": "CWE-79",
      "title": "IBM DataPower Gateway affected by cross-site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14990"
    },
    {
      "rank": 136,
      "cve_id": "CVE-2026-84244",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-79",
      "title": "IBM Guardium Data Protection Cross-Site Scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84244"
    },
    {
      "rank": 137,
      "cve_id": "CVE-2026-104075",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TVU Networks",
      "product": "TVU Receiver / Transceiver",
      "cwe": "CWE-288",
      "title": "TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104075"
    },
    {
      "rank": 138,
      "cve_id": "CVE-2026-104076",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TVU Networks",
      "product": "TVU Receiver / Transceiver",
      "cwe": "CWE-306",
      "title": "TVU Networks Receiver/Transceiver Missing Authentication via REST API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104076"
    },
    {
      "rank": 139,
      "cve_id": "CVE-2026-107640",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Integrics",
      "product": "Enswitch",
      "cwe": "CWE-640",
      "title": "Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107640"
    },
    {
      "rank": 140,
      "cve_id": "CVE-2026-107699",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "tzwm",
      "product": "ppt2png",
      "cwe": "CWE-78",
      "title": "ppt2png through 0.0.6 OS Command Injection via input and output paths",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107699"
    },
    {
      "rank": 141,
      "cve_id": "CVE-2026-107700",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ntharim",
      "product": "dot-access",
      "cwe": "CWE-94",
      "title": "dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107700"
    },
    {
      "rank": 142,
      "cve_id": "CVE-2026-107703",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "enmaso",
      "product": "@enmaso/node-convert",
      "cwe": "CWE-78",
      "title": "@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107703"
    },
    {
      "rank": 143,
      "cve_id": "CVE-2026-107704",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jtescher",
      "product": "image_optimizer",
      "cwe": "CWE-78",
      "title": "image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107704"
    },
    {
      "rank": 144,
      "cve_id": "CVE-2026-107726",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hazelcast",
      "product": "hazelcast",
      "cwe": "CWE-20",
      "title": "Hazelcast: Arbitrary member memory access by low-privileged client",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107726"
    },
    {
      "rank": 145,
      "cve_id": "CVE-2026-107779",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dromara",
      "product": "skyeye",
      "cwe": "CWE-306",
      "title": "Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107779"
    },
    {
      "rank": 146,
      "cve_id": "CVE-2026-107780",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dromara",
      "product": "skyeye",
      "cwe": "CWE-78",
      "title": "Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107780"
    },
    {
      "rank": 147,
      "cve_id": "CVE-2026-16823",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-287",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16823"
    },
    {
      "rank": 148,
      "cve_id": "CVE-2026-16916",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-693",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16916"
    },
    {
      "rank": 149,
      "cve_id": "CVE-2026-19218",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AKIN Software Computer Import-Export Industry and Trade Co. Ltd.",
      "product": "MyRezzta",
      "cwe": "CWE-640",
      "title": "Password Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19218"
    },
    {
      "rank": 150,
      "cve_id": "CVE-2026-19491",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-287",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19491"
    },
    {
      "rank": 151,
      "cve_id": "CVE-2026-79842",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Hewlett Packard Enterprise",
      "product": "HPE Intelligent Management Center (iMC)",
      "cwe": null,
      "title": "An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79842"
    },
    {
      "rank": 152,
      "cve_id": "CVE-2026-95210",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-295",
      "title": "Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95210"
    },
    {
      "rank": 153,
      "cve_id": "CVE-2026-107510",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Infoblox",
      "product": "NIOS",
      "cwe": "CWE-88",
      "title": "Authenticated argument injection in NIOS command line leading to privilege escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107510"
    },
    {
      "rank": 154,
      "cve_id": "CVE-2026-107781",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "dromara",
      "product": "skyeye",
      "cwe": "CWE-918",
      "title": "Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107781"
    },
    {
      "rank": 155,
      "cve_id": "CVE-2026-18740",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-88",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18740"
    },
    {
      "rank": 156,
      "cve_id": "CVE-2026-19083",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AKIN Software Computer Import-Export Industry and Trade Co. Ltd.",
      "product": "OctoCloud",
      "cwe": "CWE-639",
      "title": "IDOR in AKIN Software's OctoCloud",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19083"
    },
    {
      "rank": 157,
      "cve_id": "CVE-2026-19482",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-88",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19482"
    },
    {
      "rank": 158,
      "cve_id": "CVE-2026-62142",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Melapress",
      "product": "WP 2FA",
      "cwe": "CWE-352",
      "title": "WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62142"
    },
    {
      "rank": 159,
      "cve_id": "CVE-2026-89091",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Migration Toolkit for Applications 8",
      "cwe": "CWE-59",
      "title": "Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89091"
    },
    {
      "rank": 160,
      "cve_id": "CVE-2026-105436",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MainWP",
      "product": "MainWP Child",
      "cwe": "CWE-502",
      "title": "WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105436"
    },
    {
      "rank": 161,
      "cve_id": "CVE-2026-107375",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jhipster",
      "product": "generator-jhipster",
      "cwe": "CWE-89",
      "title": "JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107375"
    },
    {
      "rank": 162,
      "cve_id": "CVE-2026-107701",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ntharim",
      "product": "dot-access",
      "cwe": "CWE-1321",
      "title": "dot-access through 1.0.0 Prototype Pollution via set() path argument",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107701"
    },
    {
      "rank": 163,
      "cve_id": "CVE-2026-44031",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-674",
      "title": "Uncontrolled recursion in the DCMTK DICOM dataset parser allows unauthenticated remote denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44031"
    },
    {
      "rank": 164,
      "cve_id": "CVE-2026-83943",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure API Center",
      "cwe": null,
      "title": "Azure API Center Information Disclosure Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83943"
    },
    {
      "rank": 165,
      "cve_id": "CVE-2026-93858",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenStack",
      "product": "Mistral",
      "cwe": "CWE-78",
      "title": "In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project member can use the standard action-execution API to submit an arbitrary local command as proxy_command; paramiko starts that command as a subprocess on the executor host under the executor's own service account, independent of whether the SSH connection itself ever succeeds. Only Mistral deployments that permit the std.ssh_proxied action, the default configuration, are affected.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93858"
    },
    {
      "rank": 166,
      "cve_id": "CVE-2026-101024",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Satel",
      "product": "Satel Netco Design",
      "cwe": "CWE-23",
      "title": "Satel Netco Design Relative path traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101024"
    },
    {
      "rank": 167,
      "cve_id": "CVE-2026-102784",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "balbooa.com",
      "product": "Gridbox extension for Joomla",
      "cwe": "CWE-352",
      "title": "Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102784"
    },
    {
      "rank": 168,
      "cve_id": "CVE-2026-105672",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TP-Link Systems Inc.",
      "product": "Tapo C325WB v2",
      "cwe": "CWE-287",
      "title": "Unauthenticated JSON API Authorization Bypass Vulnerability in TP-Link Tapo C325WB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105672"
    },
    {
      "rank": 169,
      "cve_id": "CVE-2026-105674",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TP-Link Systems Inc.",
      "product": "Tapo C325WB v2",
      "cwe": "CWE-330",
      "title": "Predictable Media Stream Pre-Shared Key Vulnerability in TP-Link Tapo C325WB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105674"
    },
    {
      "rank": 170,
      "cve_id": "CVE-2026-105830",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "thephpleague",
      "product": "commonmark",
      "cwe": "CWE-400",
      "title": "league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105830"
    },
    {
      "rank": 171,
      "cve_id": "CVE-2026-106433",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "libmongocrypt",
      "cwe": "CWE-843",
      "title": "Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106433"
    },
    {
      "rank": 172,
      "cve_id": "CVE-2026-107378",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kozea",
      "product": "CairoSVG",
      "cwe": "CWE-407",
      "title": "CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107378"
    },
    {
      "rank": 173,
      "cve_id": "CVE-2026-107639",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ILIAS-eLearning e.V.",
      "product": "ILIAS",
      "cwe": "CWE-88",
      "title": "ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107639"
    },
    {
      "rank": 174,
      "cve_id": "CVE-2026-107725",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hazelcast",
      "product": "hazelcast",
      "cwe": "CWE-862",
      "title": "Hazelcast: Authorization bypass in IMap Predicates API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107725"
    },
    {
      "rank": 175,
      "cve_id": "CVE-2026-16159",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16159"
    },
    {
      "rank": 176,
      "cve_id": "CVE-2026-16163",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16163"
    },
    {
      "rank": 177,
      "cve_id": "CVE-2026-81932",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-89",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-81932"
    },
    {
      "rank": 178,
      "cve_id": "CVE-2026-11318",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Zuler Technology",
      "product": "DeskIn",
      "cwe": "CWE-306",
      "title": "Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11318"
    },
    {
      "rank": 179,
      "cve_id": "CVE-2026-104077",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Obsidian",
      "product": "Obsidian Desktop",
      "cwe": "CWE-79",
      "title": "Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104077"
    },
    {
      "rank": 180,
      "cve_id": "CVE-2026-105269",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Satel",
      "product": "Satel Netco Design",
      "cwe": "CWE-79",
      "title": "Satel Netco Design Cross-site Scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105269"
    },
    {
      "rank": 181,
      "cve_id": "CVE-2026-107322",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "aws",
      "product": "databases-on-aws",
      "cwe": "CWE-184",
      "title": "OS command injection in Amazon Agent Plugins for AWS databases-on-aws",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107322"
    },
    {
      "rank": 182,
      "cve_id": "CVE-2026-107707",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Intego",
      "product": "Intego Antivirus",
      "cwe": "CWE-59",
      "title": "Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107707"
    },
    {
      "rank": 183,
      "cve_id": "CVE-2026-107782",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "winsiderss",
      "product": "System Informer",
      "cwe": "CWE-863",
      "title": "System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107782"
    },
    {
      "rank": 184,
      "cve_id": "CVE-2026-84250",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-798",
      "title": "IBM Guardium Data Protection Hard-coded Credentials",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84250"
    },
    {
      "rank": 185,
      "cve_id": "CVE-2026-104078",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Obsidian",
      "product": "Obsidian Desktop",
      "cwe": "CWE-79",
      "title": "Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104078"
    },
    {
      "rank": 186,
      "cve_id": "CVE-2026-107732",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-94",
      "title": "SumatraPDF: Markup/command-link injection into UI notification text",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107732"
    },
    {
      "rank": 187,
      "cve_id": "CVE-2026-105833",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "espocrm",
      "product": "espocrm",
      "cwe": "CWE-522",
      "title": "EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105833"
    },
    {
      "rank": 188,
      "cve_id": "CVE-2026-107705",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "freedesktop",
      "product": "poppler",
      "cwe": "CWE-121",
      "title": "Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107705"
    },
    {
      "rank": 189,
      "cve_id": "CVE-2026-14496",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-125",
      "title": "IBM DataPower Gateway Out-of-bounds Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14496"
    },
    {
      "rank": 190,
      "cve_id": "CVE-2026-14905",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-611",
      "title": "IBM DataPower Gateway XXE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14905"
    },
    {
      "rank": 191,
      "cve_id": "CVE-2026-15824",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15824"
    },
    {
      "rank": 192,
      "cve_id": "CVE-2026-17189",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-79",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17189"
    },
    {
      "rank": 193,
      "cve_id": "CVE-2026-105405",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-763",
      "title": "ImageMagick before 7.1.2-31 Invalid Memory Free in MVG Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105405"
    },
    {
      "rank": 194,
      "cve_id": "CVE-2026-105824",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-416",
      "title": "ImageMagick before 7.1.2-30 Use-After-Free in RSVG Decoder Without Cairo",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105824"
    },
    {
      "rank": 195,
      "cve_id": "CVE-2026-107324",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "Go Driver",
      "cwe": "CWE-190",
      "title": "Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107324"
    },
    {
      "rank": 196,
      "cve_id": "CVE-2026-107325",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "Go Driver",
      "cwe": "CWE-129",
      "title": "Application denial of service via missing BSON array length validation in MongoDB Go Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107325"
    },
    {
      "rank": 197,
      "cve_id": "CVE-2026-107376",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "webonyx",
      "product": "graphql-php",
      "cwe": "CWE-674",
      "title": "webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107376"
    },
    {
      "rank": 198,
      "cve_id": "CVE-2026-107829",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-916",
      "title": "Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107829"
    },
    {
      "rank": 199,
      "cve_id": "CVE-2026-14497",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-347",
      "title": "IBM DataPower Gateway Improper Verification of Cryptographic Signature",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14497"
    },
    {
      "rank": 200,
      "cve_id": "CVE-2026-14888",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-122",
      "title": "IBM DataPower Gateway Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14888"
    },
    {
      "rank": 201,
      "cve_id": "CVE-2026-15784",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15784"
    },
    {
      "rank": 202,
      "cve_id": "CVE-2026-19494",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-287",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19494"
    },
    {
      "rank": 203,
      "cve_id": "CVE-2026-82334",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-125",
      "title": "IBM Guardium Data Protection Out-of-bounds Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82334"
    },
    {
      "rank": 204,
      "cve_id": "CVE-2026-82335",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-119",
      "title": "IBM Guardium Data Protection Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82335"
    },
    {
      "rank": 205,
      "cve_id": "CVE-2026-82344",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-119",
      "title": "IBM Guardium Data Protection Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82344"
    },
    {
      "rank": 206,
      "cve_id": "CVE-2026-82895",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-120",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82895"
    },
    {
      "rank": 207,
      "cve_id": "CVE-2026-82900",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-22",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-82900"
    },
    {
      "rank": 208,
      "cve_id": "CVE-2026-84035",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-121",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84035"
    },
    {
      "rank": 209,
      "cve_id": "CVE-2026-84057",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-78",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84057"
    },
    {
      "rank": 210,
      "cve_id": "CVE-2026-84058",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-119",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84058"
    },
    {
      "rank": 211,
      "cve_id": "CVE-2026-84198",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-120",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84198"
    },
    {
      "rank": 212,
      "cve_id": "CVE-2026-84209",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-89",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84209"
    },
    {
      "rank": 213,
      "cve_id": "CVE-2026-84246",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-120",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84246"
    },
    {
      "rank": 214,
      "cve_id": "CVE-2026-84247",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-22",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84247"
    },
    {
      "rank": 215,
      "cve_id": "CVE-2026-107333",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-863",
      "title": "Incorrect Authorization in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107333"
    },
    {
      "rank": 216,
      "cve_id": "CVE-2026-107384",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mariadb-corporation",
      "product": "mariadb-connector-nodejs",
      "cwe": "CWE-89",
      "title": "MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107384"
    },
    {
      "rank": 217,
      "cve_id": "CVE-2026-107723",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-1287",
      "title": "fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107723"
    },
    {
      "rank": 218,
      "cve_id": "CVE-2026-15781",
      "cvss_base": 8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-121",
      "title": "IBM DataPower Gateway Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15781"
    },
    {
      "rank": 219,
      "cve_id": "CVE-2026-103647",
      "cvss_base": 8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-79",
      "title": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103647"
    },
    {
      "rank": 220,
      "cve_id": "CVE-2026-84245",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-269",
      "title": "IBM Guardium Data Protection Privilege Escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84245"
    },
    {
      "rank": 221,
      "cve_id": "CVE-2026-84271",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-362",
      "title": "IBM Guardium Data Protection Signature Verification Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84271"
    },
    {
      "rank": 222,
      "cve_id": "CVE-2026-103010",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-122",
      "title": "Heap-based Buffer Overflow in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103010"
    },
    {
      "rank": 223,
      "cve_id": "CVE-2026-104658",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-807",
      "title": "Reliance on Untrusted Inputs in a Security Decision in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104658"
    },
    {
      "rank": 224,
      "cve_id": "CVE-2026-104660",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-862",
      "title": "Missing Authorization in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104660"
    },
    {
      "rank": 225,
      "cve_id": "CVE-2026-107573",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-276",
      "title": "Incorrect Default Permissions in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107573"
    },
    {
      "rank": 226,
      "cve_id": "CVE-2026-107612",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GlavSoft",
      "product": "TightVNC",
      "cwe": "CWE-338",
      "title": "World-accessible IPC shared memory with predictable name in TightVNC Server",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107612"
    },
    {
      "rank": 227,
      "cve_id": "CVE-2026-107615",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GlavSoft",
      "product": "TightVNC",
      "cwe": "CWE-427",
      "title": "DLL search order hijacking via screenhooks libraries in TightVNC Server",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107615"
    },
    {
      "rank": 228,
      "cve_id": "CVE-2026-107709",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Bower Decompress-Zip",
      "product": "decompress-zip",
      "cwe": "CWE-22",
      "title": "Bower decompress-zip has a path traversal vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107709"
    },
    {
      "rank": 229,
      "cve_id": "CVE-2026-14507",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 11.0.0",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14507"
    },
    {
      "rank": 230,
      "cve_id": "CVE-2026-83947",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Microsoft",
      "product": "Azure Event Grid System",
      "cwe": "CWE-862",
      "title": "Azure Event Grid Spoofing Vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83947"
    },
    {
      "rank": 231,
      "cve_id": "CVE-2026-93017",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat OpenShift Container Platform 4",
      "cwe": "CWE-269",
      "title": "Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93017"
    },
    {
      "rank": 232,
      "cve_id": "CVE-2026-105076",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Appsbd",
      "product": "Vitepos",
      "cwe": "CWE-89",
      "title": "WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105076"
    },
    {
      "rank": 233,
      "cve_id": "CVE-2026-107295",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-352",
      "title": "`pydantic-ai-slim` web UI `/api/chat` accepts browser-simple cross-origin requests that can trigger agent tool execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107295"
    },
    {
      "rank": 234,
      "cve_id": "CVE-2026-107303",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jhipster",
      "product": "generator-jhipster",
      "cwe": "CWE-79",
      "title": "JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107303"
    },
    {
      "rank": 235,
      "cve_id": "CVE-2026-107638",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ph7software",
      "product": "ph7builder",
      "cwe": "CWE-307",
      "title": "pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107638"
    },
    {
      "rank": 236,
      "cve_id": "CVE-2026-15819",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15819"
    },
    {
      "rank": 237,
      "cve_id": "CVE-2026-15822",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-405",
      "title": "IBM DataPower Gateway Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15822"
    },
    {
      "rank": 238,
      "cve_id": "CVE-2026-16111",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-843",
      "title": "IBM DataPower Gateway Type Confusion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16111"
    },
    {
      "rank": 239,
      "cve_id": "CVE-2026-16161",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-125",
      "title": "IBM DataPower Gateway Out-of-bounds Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16161"
    },
    {
      "rank": 240,
      "cve_id": "CVE-2026-16164",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16164"
    },
    {
      "rank": 241,
      "cve_id": "CVE-2026-16165",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-476",
      "title": "IBM DataPower Gateway NULL Pointer Dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16165"
    },
    {
      "rank": 242,
      "cve_id": "CVE-2026-16167",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16167"
    },
    {
      "rank": 243,
      "cve_id": "CVE-2026-16169",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 11.0.0",
      "cwe": "CWE-400",
      "title": "IBM DataPower Gateway Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16169"
    },
    {
      "rank": 244,
      "cve_id": "CVE-2026-16170",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16170"
    },
    {
      "rank": 245,
      "cve_id": "CVE-2026-16176",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-770",
      "title": "IBM DataPower Gateway Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16176"
    },
    {
      "rank": 246,
      "cve_id": "CVE-2026-16178",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-787",
      "title": "IBM DataPower Gateway Out-of-bounds Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16178"
    },
    {
      "rank": 247,
      "cve_id": "CVE-2026-16179",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-124",
      "title": "IBM DataPower Gateway Buffer Underwrite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16179"
    },
    {
      "rank": 248,
      "cve_id": "CVE-2026-19493",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-22",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19493"
    },
    {
      "rank": 249,
      "cve_id": "CVE-2026-67693",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-367",
      "title": "An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67693"
    },
    {
      "rank": 250,
      "cve_id": "CVE-2026-84230",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-362",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84230"
    },
    {
      "rank": 251,
      "cve_id": "CVE-2026-84275",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-22",
      "title": "IBM Guardium Data Protection Path Traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84275"
    },
    {
      "rank": 252,
      "cve_id": "CVE-2026-84276",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-400",
      "title": "IBM Guardium Data Protection Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84276"
    },
    {
      "rank": 253,
      "cve_id": "CVE-2026-84875",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-119",
      "title": "Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84875"
    },
    {
      "rank": 254,
      "cve_id": "CVE-2026-95184",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-400",
      "title": "Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95184"
    },
    {
      "rank": 255,
      "cve_id": "CVE-2026-95208",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-295",
      "title": "An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95208"
    },
    {
      "rank": 256,
      "cve_id": "CVE-2026-95209",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-400",
      "title": "An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95209"
    },
    {
      "rank": 257,
      "cve_id": "CVE-2026-103649",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-1088",
      "title": "Synchronous Access of Remote Resource without Timeout in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103649"
    },
    {
      "rank": 258,
      "cve_id": "CVE-2026-104659",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-346",
      "title": "Origin Validation Error in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104659"
    },
    {
      "rank": 259,
      "cve_id": "CVE-2026-107286",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-772",
      "title": "Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107286"
    },
    {
      "rank": 260,
      "cve_id": "CVE-2026-107300",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-674",
      "title": "msgpack5: Many buffered values can exhaust the streaming decoder stack",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107300"
    },
    {
      "rank": 261,
      "cve_id": "CVE-2026-107302",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-125",
      "title": "msgpack5: Truncated map32 headers throw an unexpected error",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107302"
    },
    {
      "rank": 262,
      "cve_id": "CVE-2026-107377",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "datamodel-code-generator",
      "product": "datamodel-code-generator",
      "cwe": "CWE-22",
      "title": "datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107377"
    },
    {
      "rank": 263,
      "cve_id": "CVE-2026-107383",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mariadb-corporation",
      "product": "mariadb-connector-nodejs",
      "cwe": "CWE-200",
      "title": "MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107383"
    },
    {
      "rank": 264,
      "cve_id": "CVE-2026-107574",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107574"
    },
    {
      "rank": 265,
      "cve_id": "CVE-2026-107576",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107576"
    },
    {
      "rank": 266,
      "cve_id": "CVE-2026-107577",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-835",
      "title": "Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107577"
    },
    {
      "rank": 267,
      "cve_id": "CVE-2026-107579",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107579"
    },
    {
      "rank": 268,
      "cve_id": "CVE-2026-107589",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Jacamar CI",
      "product": "Jacamar CI",
      "cwe": "CWE-290",
      "title": "Authentication Bypass by Spoofing in Jacamar CI",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107589"
    },
    {
      "rank": 269,
      "cve_id": "CVE-2026-107728",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "strawberry-graphql",
      "product": "strawberry",
      "cwe": "CWE-863",
      "title": "Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107728"
    },
    {
      "rank": 270,
      "cve_id": "CVE-2026-14999",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-347",
      "title": "IBM DataPower Gateway Improper Verification of Cryptographic Signature",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14999"
    },
    {
      "rank": 271,
      "cve_id": "CVE-2026-16181",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-285",
      "title": "IBM DataPower Gateway Improper Authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16181"
    },
    {
      "rank": 272,
      "cve_id": "CVE-2026-104704",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-319",
      "title": "Cleartext Transmission of Sensitive Information in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104704"
    },
    {
      "rank": 273,
      "cve_id": "CVE-2026-107318",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "@fastify/reply-from",
      "product": "@fastify/reply-from",
      "cwe": "CWE-295",
      "title": "@fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107318"
    },
    {
      "rank": 274,
      "cve_id": "CVE-2026-107385",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mariadb-corporation",
      "product": "mariadb-connector-nodejs",
      "cwe": "CWE-89",
      "title": "MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107385"
    },
    {
      "rank": 275,
      "cve_id": "CVE-2026-107584",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-636",
      "title": "Not Failing Securely ('Failing Open') in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107584"
    },
    {
      "rank": 276,
      "cve_id": "CVE-2026-107720",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-20",
      "title": "fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107720"
    },
    {
      "rank": 277,
      "cve_id": "CVE-2026-107724",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-347",
      "title": "fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107724"
    },
    {
      "rank": 278,
      "cve_id": "CVE-2026-91844",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "İzometri IT Services Domestic and Foreign Trade Co. Ltd.",
      "product": "eimzamip",
      "cwe": "CWE-434",
      "title": "Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91844"
    },
    {
      "rank": 279,
      "cve_id": "CVE-2026-107716",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "masci",
      "product": "banks",
      "cwe": "CWE-22",
      "title": "Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107716"
    },
    {
      "rank": 280,
      "cve_id": "CVE-2026-84278",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-78",
      "title": "IBM Guardium Data Protection Command Injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84278"
    },
    {
      "rank": 281,
      "cve_id": "CVE-2026-97147",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenStack",
      "product": "Mistral",
      "cwe": "CWE-863",
      "title": "In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and environments. A project administrator can create a workbook whose embedded ad-hoc action or workflow name collides with a resource of another project, which moves that resource into the caller's project and causes the original owner's subsequent updates of it to fail with server errors. Only deployments exposing the Mistral API are affected.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97147"
    },
    {
      "rank": 282,
      "cve_id": "CVE-2026-40804",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kodezen LLC",
      "product": "aBlocks",
      "cwe": "CWE-79",
      "title": "WordPress aBlocks plugin <= 2.16.0 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40804"
    },
    {
      "rank": 283,
      "cve_id": "CVE-2026-50054",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Zimbra",
      "product": "Zimbra Collaboration Suite",
      "cwe": "CWE-269",
      "title": "Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50054"
    },
    {
      "rank": 284,
      "cve_id": "CVE-2026-66479",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "WPComplete",
      "cwe": "CWE-352",
      "title": "WordPress WPComplete plugin <= 2.9.5.6 - CSRF to Stored XSS vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66479"
    },
    {
      "rank": 285,
      "cve_id": "CVE-2026-93860",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenStack",
      "product": "Mistral",
      "cwe": "CWE-862",
      "title": "In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93860"
    },
    {
      "rank": 286,
      "cve_id": "CVE-2026-104628",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Satel",
      "product": "Satel Netco Design",
      "cwe": "CWE-1333",
      "title": "Satel Netco Design Inefficient Regular Expression Complexity",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104628"
    },
    {
      "rank": 287,
      "cve_id": "CVE-2026-105673",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TP-Link Systems Inc.",
      "product": "Tapo C325WB v2",
      "cwe": "CWE-121",
      "title": "Unauthenticated RTSP Tunnel Denial-of-Service Vulnerability in TP-Link Tapo C325WB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105673"
    },
    {
      "rank": 288,
      "cve_id": "CVE-2026-106429",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "libmongocrypt",
      "cwe": "CWE-191",
      "title": "Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106429"
    },
    {
      "rank": 289,
      "cve_id": "CVE-2026-106611",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WPMU DEV",
      "product": "Forminator",
      "cwe": "CWE-352",
      "title": "WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106611"
    },
    {
      "rank": 290,
      "cve_id": "CVE-2026-107337",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-352",
      "title": "Cross-Site Request Forgery in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107337"
    },
    {
      "rank": 291,
      "cve_id": "CVE-2026-107362",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-918",
      "title": "Server-Side Request Forgery in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107362"
    },
    {
      "rank": 292,
      "cve_id": "CVE-2026-107503",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Eclipse Ditto",
      "product": "Ditto Explorer UI",
      "cwe": "CWE-15",
      "title": "Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then automatically starts a login at the genuine identity provider but exchanges the returned authorization code together with its PKCE code_verifier at an attacker-controlled token endpoint. This lets the attacker redeem the code for the victim's access and refresh tokens. Alternatively, an attacker-controlled api_uri causes the UI to send the victim's bearer token or Basic credentials to the attacker. Because the configuration is persisted, later visits to the UI without the crafted link repeat the token theft.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107503"
    },
    {
      "rank": 293,
      "cve_id": "CVE-2026-107611",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GlavSoft",
      "product": "TightVNC",
      "cwe": "CWE-125",
      "title": "Out-of-bounds read in TightVNC Viewer ZRLE palette decoding",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107611"
    },
    {
      "rank": 294,
      "cve_id": "CVE-2026-107636",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ph7software",
      "product": "ph7builder",
      "cwe": "CWE-472",
      "title": "pH7Builder before 18.5.1 Payment Bypass via Payment Module MainController",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107636"
    },
    {
      "rank": 295,
      "cve_id": "CVE-2026-107695",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-835",
      "title": "FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107695"
    },
    {
      "rank": 296,
      "cve_id": "CVE-2026-107696",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-835",
      "title": "FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107696"
    },
    {
      "rank": 297,
      "cve_id": "CVE-2026-107734",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-20",
      "title": "SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107734"
    },
    {
      "rank": 298,
      "cve_id": "CVE-2026-107778",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MIT",
      "product": "krb5",
      "cwe": "CWE-476",
      "title": "MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107778"
    },
    {
      "rank": 299,
      "cve_id": "CVE-2026-107802",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-88",
      "title": "SumatraPDF — Windows command-line argument injection in AI selection-translate",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107802"
    },
    {
      "rank": 300,
      "cve_id": "CVE-2025-71428",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-89",
      "title": "Jivejdon through 5.0 SQL Injection via username in userListAction",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71428"
    },
    {
      "rank": 301,
      "cve_id": "CVE-2026-105399",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-400",
      "title": "ImageMagick before 7.1.2-31 Denial of Service via MVG Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105399"
    },
    {
      "rank": 302,
      "cve_id": "CVE-2026-105400",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-775",
      "title": "ImageMagick before 7.1.2-31 Unclosed File Pointer via Magick Script",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105400"
    },
    {
      "rank": 303,
      "cve_id": "CVE-2026-105402",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-400",
      "title": "ImageMagick before 7.1.2-31 Denial of Service via XMP Profile Parsing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105402"
    },
    {
      "rank": 304,
      "cve_id": "CVE-2026-105403",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-863",
      "title": "ImageMagick before 7.1.2-31 Security Policy Bypass via Coder Domain",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105403"
    },
    {
      "rank": 305,
      "cve_id": "CVE-2026-105825",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-400",
      "title": "ImageMagick before 7.1.2-30 Denial of Service via Crafted XMP Profile",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105825"
    },
    {
      "rank": 306,
      "cve_id": "CVE-2026-105826",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-409",
      "title": "ImageMagick before 7.1.2-30 Security Policy Bypass via MAT Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105826"
    },
    {
      "rank": 307,
      "cve_id": "CVE-2026-105827",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-674",
      "title": "ImageMagick before 7.1.2-30 Stack Overflow in CALS Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105827"
    },
    {
      "rank": 308,
      "cve_id": "CVE-2026-107634",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aorimn",
      "product": "dislocker",
      "cwe": "CWE-125",
      "title": "Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107634"
    },
    {
      "rank": 309,
      "cve_id": "CVE-2026-107708",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MIT",
      "product": "krb5",
      "cwe": "CWE-476",
      "title": "MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107708"
    },
    {
      "rank": 310,
      "cve_id": "CVE-2026-107828",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-1391",
      "title": "Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107828"
    },
    {
      "rank": 311,
      "cve_id": "CVE-2026-107830",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-799",
      "title": "Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107830"
    },
    {
      "rank": 312,
      "cve_id": "CVE-2026-44033",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-674",
      "title": "Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44033"
    },
    {
      "rank": 313,
      "cve_id": "CVE-2026-44035",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-674",
      "title": "Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44035"
    },
    {
      "rank": 314,
      "cve_id": "CVE-2026-44036",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-674",
      "title": "Uncontrolled recursion in DCMTK xml2dcm allows denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44036"
    },
    {
      "rank": 315,
      "cve_id": "CVE-2026-44037",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-674",
      "title": "Uncontrolled recursion in DCMTK JSON reader allows denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44037"
    },
    {
      "rank": 316,
      "cve_id": "CVE-2026-107275",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "@fastify/jwt",
      "product": "@fastify/jwt",
      "cwe": "CWE-390",
      "title": "@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107275"
    },
    {
      "rank": 317,
      "cve_id": "CVE-2026-107289",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-918",
      "title": "Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifier (incomplete fix for CVE-2026-46678 and CVE-2026-48782)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107289"
    },
    {
      "rank": 318,
      "cve_id": "CVE-2026-107332",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "aws",
      "product": "aws-toolkit-vscode",
      "cwe": "CWE-276",
      "title": "Insecure Default File Permissions on Cached Credentials in AWS Toolkit for Visual Studio Code",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107332"
    },
    {
      "rank": 319,
      "cve_id": "CVE-2026-107394",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "indico",
      "product": "indico",
      "cwe": "CWE-918",
      "title": "Indico: Incomplete Server-Side Request Forgery (SSRF) check",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107394"
    },
    {
      "rank": 320,
      "cve_id": "CVE-2026-107399",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sparklemotion",
      "product": "mechanize",
      "cwe": "CWE-200",
      "title": "Mechanize sends credential headers to another origin after a meta refresh",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107399"
    },
    {
      "rank": 321,
      "cve_id": "CVE-2026-107608",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "AWS",
      "product": "aws-cdk-lib",
      "cwe": "CWE-59",
      "title": "Improper link resolution in asset bundling output handling in aws-cdk-lib",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107608"
    },
    {
      "rank": 322,
      "cve_id": "CVE-2026-107635",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Aorimn",
      "product": "dislocker",
      "cwe": "CWE-191",
      "title": "Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107635"
    },
    {
      "rank": 323,
      "cve_id": "CVE-2026-107715",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sparklemotion",
      "product": "mechanize",
      "cwe": "CWE-200",
      "title": "Mechanize sends credential headers to another host after an HTTP redirect",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107715"
    },
    {
      "rank": 324,
      "cve_id": "CVE-2026-107733",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-476",
      "title": "SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107733"
    },
    {
      "rank": 325,
      "cve_id": "CVE-2026-107736",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-121",
      "title": "SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107736"
    },
    {
      "rank": 326,
      "cve_id": "CVE-2026-107738",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-125",
      "title": "SumatraPDF: Untrusted binary record offset used without lower-bound validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107738"
    },
    {
      "rank": 327,
      "cve_id": "CVE-2026-105570",
      "cvss_base": 6.7,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Docker",
      "product": "Docker Sandboxes",
      "cwe": "CWE-178",
      "title": "Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105570"
    },
    {
      "rank": 328,
      "cve_id": "CVE-2026-107578",
      "cvss_base": 6.7,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-59",
      "title": "Improper Link Resolution Before File Access ('Link Following') in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107578"
    },
    {
      "rank": 329,
      "cve_id": "CVE-2026-10631",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Zimbra",
      "product": "Zimbra Collaboration Suite",
      "cwe": "CWE-639",
      "title": "Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10631"
    },
    {
      "rank": 330,
      "cve_id": "CVE-2026-12859",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Caz Informatics Services Trade Inc.",
      "product": "Advancity ALMS Cloud",
      "cwe": "CWE-862",
      "title": "IDOR in Caz Informatics' Advancity ALMS Cloud",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12859"
    },
    {
      "rank": 331,
      "cve_id": "CVE-2026-13257",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-345",
      "title": "IBM DataPower Gateway Insufficient Verification of Data Authenticity",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13257"
    },
    {
      "rank": 332,
      "cve_id": "CVE-2026-14273",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-863",
      "title": "IBM DataPower Gateway Incorrect Authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14273"
    },
    {
      "rank": 333,
      "cve_id": "CVE-2026-14508",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-416",
      "title": "IBM DataPower Gateway Use After Free",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14508"
    },
    {
      "rank": 334,
      "cve_id": "CVE-2026-14988",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-125",
      "title": "IBM DataPower Gateway Out-of-bounds Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14988"
    },
    {
      "rank": 335,
      "cve_id": "CVE-2026-19878",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-841",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19878"
    },
    {
      "rank": 336,
      "cve_id": "CVE-2026-27420",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Katie Seaborn",
      "product": "Zotpress",
      "cwe": "CWE-79",
      "title": "WordPress Zotpress plugin <= 7.4.4 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27420"
    },
    {
      "rank": 337,
      "cve_id": "CVE-2026-50055",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Zimbra",
      "product": "Zimbra Collaboration Suite",
      "cwe": "CWE-863",
      "title": "Zimbra Collaboration Suite Sieve Notify Filter Action Bypasses Mail Forwarding Restriction via Variable Expansion",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50055"
    },
    {
      "rank": 338,
      "cve_id": "CVE-2026-62127",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MediaRon LLC",
      "product": "WP Plugin Info Card",
      "cwe": "CWE-79",
      "title": "WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62127"
    },
    {
      "rank": 339,
      "cve_id": "CVE-2026-78399",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-770",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78399"
    },
    {
      "rank": 340,
      "cve_id": "CVE-2026-84274",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-200",
      "title": "IBM Guardium Data Protection Information Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84274"
    },
    {
      "rank": 341,
      "cve_id": "CVE-2026-93509",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Wallet System for WooCommerce",
      "cwe": "CWE-20",
      "title": "Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93509"
    },
    {
      "rank": 342,
      "cve_id": "CVE-2026-103011",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-122",
      "title": "Heap-based Buffer Overflow in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103011"
    },
    {
      "rank": 343,
      "cve_id": "CVE-2026-103070",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ShortPixel",
      "product": "ShortPixel Image Optimizer",
      "cwe": "CWE-79",
      "title": "WordPress ShortPixel Image Optimizer plugin <= 6.5.6 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103070"
    },
    {
      "rank": 344,
      "cve_id": "CVE-2026-105078",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WP Store Locator",
      "product": "WP Store Locator",
      "cwe": "CWE-79",
      "title": "WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105078"
    },
    {
      "rank": 345,
      "cve_id": "CVE-2026-105079",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "StylemixThemes",
      "product": "MasterStudy LMS",
      "cwe": "CWE-79",
      "title": "WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105079"
    },
    {
      "rank": 346,
      "cve_id": "CVE-2026-105886",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BdThemes",
      "product": "Ultimate Post Kit",
      "cwe": "CWE-862",
      "title": "WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105886"
    },
    {
      "rank": 347,
      "cve_id": "CVE-2026-105887",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Robosoft",
      "product": "Robo Gallery",
      "cwe": "CWE-79",
      "title": "WordPress Robo Gallery plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105887"
    },
    {
      "rank": 348,
      "cve_id": "CVE-2026-105890",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "Gutenberg Blocks by Kadence Blocks",
      "cwe": "CWE-79",
      "title": "WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105890"
    },
    {
      "rank": 349,
      "cve_id": "CVE-2026-106603",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Groundhogg",
      "product": "HollerBox",
      "cwe": "CWE-639",
      "title": "WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106603"
    },
    {
      "rank": 350,
      "cve_id": "CVE-2026-107287",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-400",
      "title": "Pydantic AI: Excessive resource use when local web fetching converts nested HTML",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107287"
    },
    {
      "rank": 351,
      "cve_id": "CVE-2026-107290",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-1333",
      "title": "Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107290"
    },
    {
      "rank": 352,
      "cve_id": "CVE-2026-107294",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-400",
      "title": "Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107294"
    },
    {
      "rank": 353,
      "cve_id": "CVE-2026-107301",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-1321",
      "title": "msgpack5: Partial options disable prototype protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107301"
    },
    {
      "rank": 354,
      "cve_id": "CVE-2026-107335",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-409",
      "title": "Improper Handling of Highly Compressed Data in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107335"
    },
    {
      "rank": 355,
      "cve_id": "CVE-2026-107336",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-290",
      "title": "Authentication Bypass by Spoofing in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107336"
    },
    {
      "rank": 356,
      "cve_id": "CVE-2026-107379",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "darylldoyle",
      "product": "svg-sanitizer",
      "cwe": "CWE-770",
      "title": "enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107379"
    },
    {
      "rank": 357,
      "cve_id": "CVE-2026-107572",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-1333",
      "title": "Inefficient Regular Expression Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107572"
    },
    {
      "rank": 358,
      "cve_id": "CVE-2026-107580",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107580"
    },
    {
      "rank": 359,
      "cve_id": "CVE-2026-107581",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107581"
    },
    {
      "rank": 360,
      "cve_id": "CVE-2026-107582",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107582"
    },
    {
      "rank": 361,
      "cve_id": "CVE-2026-107583",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107583"
    },
    {
      "rank": 362,
      "cve_id": "CVE-2026-107717",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "masci",
      "product": "banks",
      "cwe": "CWE-20",
      "title": "Banks: User-controlled prompt input can be parsed as privileged chat messages",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107717"
    },
    {
      "rank": 363,
      "cve_id": "CVE-2026-11888",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-94",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11888"
    },
    {
      "rank": 364,
      "cve_id": "CVE-2026-106177",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HP Inc",
      "product": "HP Sure Click Enterprise",
      "cwe": "CWE-122",
      "title": "HP Sure Click Kernel Buffer Overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106177"
    },
    {
      "rank": 365,
      "cve_id": "CVE-2026-107292",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-346",
      "title": "Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107292"
    },
    {
      "rank": 366,
      "cve_id": "CVE-2026-102783",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "balbooa.com",
      "product": "Gridbox extension for Joomla",
      "cwe": "CWE-22",
      "title": "Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102783"
    },
    {
      "rank": 367,
      "cve_id": "CVE-2026-105828",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "parse-community",
      "product": "parse-server",
      "cwe": "CWE-209",
      "title": "Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105828"
    },
    {
      "rank": 368,
      "cve_id": "CVE-2026-106428",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "C Driver",
      "cwe": "CWE-125",
      "title": "Out-of-bounds read in SCRAM response parsing in MongoDB C Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106428"
    },
    {
      "rank": 369,
      "cve_id": "CVE-2026-106436",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "PHP Driver",
      "cwe": "CWE-252",
      "title": "Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106436"
    },
    {
      "rank": 370,
      "cve_id": "CVE-2026-107386",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "rabbitmq",
      "product": "amqp091-go",
      "cwe": "CWE-770",
      "title": "amqp091-go: Pre-negotiation frame limit is not enforced to 4KB",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107386"
    },
    {
      "rank": 371,
      "cve_id": "CVE-2026-107660",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-297",
      "title": "FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107660"
    },
    {
      "rank": 372,
      "cve_id": "CVE-2026-107387",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-789",
      "title": "music-metadata: Uncontrolled memory allocation in APEv2 parser",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107387"
    },
    {
      "rank": 373,
      "cve_id": "CVE-2026-107388",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-789",
      "title": "music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107388"
    },
    {
      "rank": 374,
      "cve_id": "CVE-2026-107389",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-789",
      "title": "music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107389"
    },
    {
      "rank": 375,
      "cve_id": "CVE-2026-107390",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-789",
      "title": "music-metadata: MP4 parser allows memory exhaustion via oversized extended atom length",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107390"
    },
    {
      "rank": 376,
      "cve_id": "CVE-2026-107391",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-400",
      "title": "music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107391"
    },
    {
      "rank": 377,
      "cve_id": "CVE-2026-107392",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Borewit",
      "product": "music-metadata",
      "cwe": "CWE-248",
      "title": "music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of CVE-2026-32256)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107392"
    },
    {
      "rank": 378,
      "cve_id": "CVE-2026-107393",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "freescout-help-desk",
      "product": "freescout",
      "cwe": "CWE-79",
      "title": "FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107393"
    },
    {
      "rank": 379,
      "cve_id": "CVE-2026-107614",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GlavSoft",
      "product": "TightVNC",
      "cwe": "CWE-125",
      "title": "Integer underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107614"
    },
    {
      "rank": 380,
      "cve_id": "CVE-2026-107718",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "adonisjs",
      "product": "http-server",
      "cwe": "CWE-601",
      "title": "AdonisJS: Unencoded route parameters can produce open redirects",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107718"
    },
    {
      "rank": 381,
      "cve_id": "CVE-2026-93861",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenStack",
      "product": "Mistral",
      "cwe": "CWE-863",
      "title": "In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its project_id defaulted to the accepting project rather than the original workflow owner, and thus the owner can neither see nor delete it. The third project can accept this membership (that it had not actually been granted by the owner), and then read and execute the owner's private workflow; only the accepting (not the owning) project can later revoke that access.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93861"
    },
    {
      "rank": 382,
      "cve_id": "CVE-2026-105401",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-122",
      "title": "ImageMagick before 7.1.2-31 Heap Buffer Overflow in Distributed Pixel Cache Server",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105401"
    },
    {
      "rank": 383,
      "cve_id": "CVE-2026-105404",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-94",
      "title": "ImageMagick before 7.1.2-31 Code Injection via PostScript Coders",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105404"
    },
    {
      "rank": 384,
      "cve_id": "CVE-2026-106430",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "C++ Driver",
      "cwe": "CWE-436",
      "title": "Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106430"
    },
    {
      "rank": 385,
      "cve_id": "CVE-2026-107675",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-322",
      "title": "FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107675"
    },
    {
      "rank": 386,
      "cve_id": "CVE-2026-11930",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-285",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11930"
    },
    {
      "rank": 387,
      "cve_id": "CVE-2026-14509",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-400",
      "title": "IBM DataPower Gateway Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14509"
    },
    {
      "rank": 388,
      "cve_id": "CVE-2026-16182",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-476",
      "title": "IBM DataPower Gateway NULL Pointer Dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16182"
    },
    {
      "rank": 389,
      "cve_id": "CVE-2026-19498",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-674",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19498"
    },
    {
      "rank": 390,
      "cve_id": "CVE-2026-84891",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-798",
      "title": "Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84891"
    },
    {
      "rank": 391,
      "cve_id": "CVE-2026-101998",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Docker",
      "product": "Docker Sandboxes",
      "cwe": "CWE-636",
      "title": "Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101998"
    },
    {
      "rank": 392,
      "cve_id": "CVE-2026-105398",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-190",
      "title": "ImageMagick before 7.1.2-31 Heap Buffer Overflow via GetVirtualPixels API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105398"
    },
    {
      "rank": 393,
      "cve_id": "CVE-2026-105452",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Docker",
      "product": "Docker Sandboxes",
      "cwe": "CWE-200",
      "title": "Docker Sandboxes egress proxy could forward unrecognized client credentials to managed hosts",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105452"
    },
    {
      "rank": 394,
      "cve_id": "CVE-2026-106431",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "C Driver",
      "cwe": "CWE-787",
      "title": "One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106431"
    },
    {
      "rank": 395,
      "cve_id": "CVE-2026-106435",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "Python Driver",
      "cwe": "CWE-125",
      "title": "Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106435"
    },
    {
      "rank": 396,
      "cve_id": "CVE-2026-106437",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "C Driver",
      "cwe": "CWE-191",
      "title": "Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106437"
    },
    {
      "rank": 397,
      "cve_id": "CVE-2026-107297",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-407",
      "title": "msgpack5: Quadratic parsing in the streaming decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107297"
    },
    {
      "rank": 398,
      "cve_id": "CVE-2026-107299",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-228",
      "title": "msgpack5: Reserved byte can cause unbounded stream buffering",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107299"
    },
    {
      "rank": 399,
      "cve_id": "CVE-2026-107382",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mariadb-corporation",
      "product": "mariadb-connector-nodejs",
      "cwe": "CWE-248",
      "title": "MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107382"
    },
    {
      "rank": 400,
      "cve_id": "CVE-2026-107587",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-295",
      "title": "Improper Certificate Validation in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107587"
    },
    {
      "rank": 401,
      "cve_id": "CVE-2026-107613",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GlavSoft",
      "product": "TightVNC",
      "cwe": "CWE-476",
      "title": "NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initialization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107613"
    },
    {
      "rank": 402,
      "cve_id": "CVE-2026-107714",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sparklemotion",
      "product": "mechanize",
      "cwe": "CWE-200",
      "title": "Mechanize sends credential headers to a different scheme or port after a redirect",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107714"
    },
    {
      "rank": 403,
      "cve_id": "CVE-2026-107721",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-613",
      "title": "fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107721"
    },
    {
      "rank": 404,
      "cve_id": "CVE-2026-107677",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-835",
      "title": "FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107677"
    },
    {
      "rank": 405,
      "cve_id": "CVE-2026-107678",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-674",
      "title": "FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107678"
    },
    {
      "rank": 406,
      "cve_id": "CVE-2026-107737",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-129",
      "title": "SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107737"
    },
    {
      "rank": 407,
      "cve_id": "CVE-2026-84032",
      "cvss_base": 5.6,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-295",
      "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84032"
    },
    {
      "rank": 408,
      "cve_id": "CVE-2026-12109",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-787",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12109"
    },
    {
      "rank": 409,
      "cve_id": "CVE-2026-61801",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "moby",
      "product": "sys",
      "cwe": "CWE-400",
      "title": "github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61801"
    },
    {
      "rank": 410,
      "cve_id": "CVE-2026-107651",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Enterprise Linux 6",
      "cwe": "CWE-122",
      "title": "Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107651"
    },
    {
      "rank": 411,
      "cve_id": "CVE-2026-107729",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-125",
      "title": "SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107729"
    },
    {
      "rank": 412,
      "cve_id": "CVE-2026-107730",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-190",
      "title": "SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107730"
    },
    {
      "rank": 413,
      "cve_id": "CVE-2026-107731",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-125",
      "title": "SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107731"
    },
    {
      "rank": 414,
      "cve_id": "CVE-2026-13258",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-79",
      "title": "IBM DataPower Gateway Cross-Site Scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13258"
    },
    {
      "rank": 415,
      "cve_id": "CVE-2026-16830",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-89",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16830"
    },
    {
      "rank": 416,
      "cve_id": "CVE-2026-78407",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": null,
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78407"
    },
    {
      "rank": 417,
      "cve_id": "CVE-2026-102368",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TP-Link System Inc.",
      "product": "Tapo S505 v1.6",
      "cwe": "CWE-312",
      "title": "Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102368"
    },
    {
      "rank": 418,
      "cve_id": "CVE-2026-105888",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "Event Tickets",
      "cwe": "CWE-862",
      "title": "WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105888"
    },
    {
      "rank": 419,
      "cve_id": "CVE-2026-107334",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-863",
      "title": "Incorrect Authorization in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107334"
    },
    {
      "rank": 420,
      "cve_id": "CVE-2026-107380",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "darylldoyle",
      "product": "svg-sanitizer",
      "cwe": "CWE-79",
      "title": "enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107380"
    },
    {
      "rank": 421,
      "cve_id": "CVE-2026-107396",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "indico",
      "product": "indico",
      "cwe": "CWE-692",
      "title": "Indico: Cross-Site-Scripting in link fields",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107396"
    },
    {
      "rank": 422,
      "cve_id": "CVE-2026-107735",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "sumatrapdfreader",
      "product": "sumatrapdf",
      "cwe": "CWE-636",
      "title": "SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107735"
    },
    {
      "rank": 423,
      "cve_id": "CVE-2026-16177",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-125",
      "title": "IBM DataPower Gateway Out-of-bounds Read",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16177"
    },
    {
      "rank": 424,
      "cve_id": "CVE-2026-19585",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HashiCorp",
      "product": "Shared library",
      "cwe": "CWE-22",
      "title": "Go-getter vulnerable to a path traversal in S3/GCS directory download handling",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19585"
    },
    {
      "rank": 425,
      "cve_id": "CVE-2026-42698",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Themeum",
      "product": "Tutor LMS",
      "cwe": "CWE-362",
      "title": "WordPress Tutor LMS plugin <= 4.1.1 - Race Condition vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42698"
    },
    {
      "rank": 426,
      "cve_id": "CVE-2026-62128",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Creator LMS",
      "product": "Creator LMS",
      "cwe": "CWE-862",
      "title": "WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62128"
    },
    {
      "rank": 427,
      "cve_id": "CVE-2026-88257",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ScriptKittyOS",
      "product": "beam_mcp",
      "cwe": "CWE-20",
      "title": "beam_mcp: nested tool argument constraints advertised but not enforced",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88257"
    },
    {
      "rank": 428,
      "cve_id": "CVE-2026-103517",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Airwallex Online Payments Gateway",
      "cwe": "CWE-345",
      "title": "Airwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged Webhook",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103517"
    },
    {
      "rank": 429,
      "cve_id": "CVE-2026-104671",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "TutorStarter",
      "cwe": "CWE-862",
      "title": "TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104671"
    },
    {
      "rank": 430,
      "cve_id": "CVE-2026-105190",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "Easy Digital Downloads",
      "cwe": "CWE-862",
      "title": "Easy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration Disabled",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105190"
    },
    {
      "rank": 431,
      "cve_id": "CVE-2026-105275",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Satel",
      "product": "Satel Netco Design",
      "cwe": "CWE-23",
      "title": "Satel Netco Design Relative Path Traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105275"
    },
    {
      "rank": 432,
      "cve_id": "CVE-2026-105829",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "thephpleague",
      "product": "commonmark",
      "cwe": "CWE-80",
      "title": "League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105829"
    },
    {
      "rank": 433,
      "cve_id": "CVE-2026-105831",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "espocrm",
      "product": "espocrm",
      "cwe": "CWE-79",
      "title": "EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105831"
    },
    {
      "rank": 434,
      "cve_id": "CVE-2026-105832",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "espocrm",
      "product": "espocrm",
      "cwe": "CWE-287",
      "title": "EspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105832"
    },
    {
      "rank": 435,
      "cve_id": "CVE-2026-105878",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "YITH",
      "product": "YITH WooCommerce Product Bundles",
      "cwe": "CWE-862",
      "title": "WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105878"
    },
    {
      "rank": 436,
      "cve_id": "CVE-2026-105893",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "Event Tickets",
      "cwe": "CWE-639",
      "title": "WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105893"
    },
    {
      "rank": 437,
      "cve_id": "CVE-2026-106434",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "libmongocrypt",
      "cwe": "CWE-354",
      "title": "Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106434"
    },
    {
      "rank": 438,
      "cve_id": "CVE-2026-106596",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Visual Composer",
      "product": "Visual Composer Website Builder",
      "cwe": "CWE-862",
      "title": "WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106596"
    },
    {
      "rank": 439,
      "cve_id": "CVE-2026-106600",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "GiveWP",
      "cwe": "CWE-862",
      "title": "WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106600"
    },
    {
      "rank": 440,
      "cve_id": "CVE-2026-107298",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-674",
      "title": "msgpack5: Deeply nested input can exhaust the decoder stack",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107298"
    },
    {
      "rank": 441,
      "cve_id": "CVE-2026-107575",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-407",
      "title": "Inefficient Algorithmic Complexity in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107575"
    },
    {
      "rank": 442,
      "cve_id": "CVE-2026-107585",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-770",
      "title": "Allocation of Resources Without Limits or Throttling in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107585"
    },
    {
      "rank": 443,
      "cve_id": "CVE-2026-107637",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ph7software",
      "product": "ph7builder",
      "cwe": "CWE-639",
      "title": "pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107637"
    },
    {
      "rank": 444,
      "cve_id": "CVE-2026-107697",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-693",
      "title": "FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107697"
    },
    {
      "rank": 445,
      "cve_id": "CVE-2026-107698",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-918",
      "title": "FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107698"
    },
    {
      "rank": 446,
      "cve_id": "CVE-2026-107702",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "QloApps",
      "cwe": "CWE-639",
      "title": "QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room Booking",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107702"
    },
    {
      "rank": 447,
      "cve_id": "CVE-2026-107706",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dolibarr",
      "product": "dolibarr",
      "cwe": "CWE-863",
      "title": "Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107706"
    },
    {
      "rank": 448,
      "cve_id": "CVE-2026-107792",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-862",
      "title": "Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Move",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107792"
    },
    {
      "rank": 449,
      "cve_id": "CVE-2026-107793",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-639",
      "title": "Jivejdon through 5.0 IDOR via subSaveAction Subscription Delete",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107793"
    },
    {
      "rank": 450,
      "cve_id": "CVE-2026-107796",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107796"
    },
    {
      "rank": 451,
      "cve_id": "CVE-2026-107797",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107797"
    },
    {
      "rank": 452,
      "cve_id": "CVE-2026-107831",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-352",
      "title": "Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107831"
    },
    {
      "rank": 453,
      "cve_id": "CVE-2026-105331",
      "cvss_base": 5.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Checkmk GmbH",
      "product": "Checkmk",
      "cwe": "CWE-426",
      "title": "mk-oracle: Local privilege escalation via malicious Oracle Instant Client",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105331"
    },
    {
      "rank": 454,
      "cve_id": "CVE-2026-84290",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-119",
      "title": "Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84290"
    },
    {
      "rank": 455,
      "cve_id": "CVE-2026-106438",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "C Driver",
      "cwe": "CWE-682",
      "title": "Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106438"
    },
    {
      "rank": 456,
      "cve_id": "CVE-2026-107565",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Enterprise Linux 10",
      "cwe": "CWE-1284",
      "title": "Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107565"
    },
    {
      "rank": 457,
      "cve_id": "CVE-2026-107798",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107798"
    },
    {
      "rank": 458,
      "cve_id": "CVE-2026-107799",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107799"
    },
    {
      "rank": 459,
      "cve_id": "CVE-2026-107800",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through 5.0 Stored XSS via Private Short Messages",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107800"
    },
    {
      "rank": 460,
      "cve_id": "CVE-2026-107801",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "banq",
      "product": "jivejdon",
      "cwe": "CWE-79",
      "title": "Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107801"
    },
    {
      "rank": 461,
      "cve_id": "CVE-2026-11936",
      "cvss_base": 4.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-79",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11936"
    },
    {
      "rank": 462,
      "cve_id": "CVE-2026-14521",
      "cvss_base": 4.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "DataPower Gateway 10.6CD",
      "cwe": "CWE-918",
      "title": "IBM DataPower Gateway affected by server-side request forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14521"
    },
    {
      "rank": 463,
      "cve_id": "CVE-2026-107604",
      "cvss_base": 4.9,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Build of Keycloak",
      "cwe": "CWE-200",
      "title": "Keycloak-services: keycloak-services: view-clients role allows retrieval of active client secrets via installation provider endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107604"
    },
    {
      "rank": 464,
      "cve_id": "CVE-2026-44034",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-125",
      "title": "Heap out-of-bounds read in DCMTK RLE decodeFrame()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44034"
    },
    {
      "rank": 465,
      "cve_id": "CVE-2026-44038",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OFFIS",
      "product": "DCMTK",
      "cwe": "CWE-125",
      "title": "Global buffer out-of-bounds read in DCMTK JPEG Huffman decoding",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44038"
    },
    {
      "rank": 466,
      "cve_id": "CVE-2026-107676",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FFmpeg",
      "product": "FFmpeg",
      "cwe": "CWE-908",
      "title": "FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107676"
    },
    {
      "rank": 467,
      "cve_id": "CVE-2026-107397",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "indico",
      "product": "indico",
      "cwe": "CWE-79",
      "title": "Indico: Cross-Site-Scripting in minutes editor",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107397"
    },
    {
      "rank": 468,
      "cve_id": "CVE-2026-78388",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-352",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78388"
    },
    {
      "rank": 469,
      "cve_id": "CVE-2026-103072",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "VillaTheme",
      "product": "VillaTheme Core",
      "cwe": "CWE-862",
      "title": "WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-103072"
    },
    {
      "rank": 470,
      "cve_id": "CVE-2026-105891",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Liquid Web / StellarWP",
      "product": "Event Tickets",
      "cwe": "CWE-862",
      "title": "WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105891"
    },
    {
      "rank": 471,
      "cve_id": "CVE-2026-107395",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "indico",
      "product": "indico",
      "cwe": "CWE-862",
      "title": "Indico: Missing access check in legacy session export API",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107395"
    },
    {
      "rank": 472,
      "cve_id": "CVE-2026-107586",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progressive Robot Ltd",
      "product": "hMailServer",
      "cwe": "CWE-770",
      "title": "Allocation of Resources Without Limits or Throttling in hMailServer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107586"
    },
    {
      "rank": 473,
      "cve_id": "CVE-2026-107623",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Build of Keycloak",
      "cwe": "CWE-862",
      "title": "Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107623"
    },
    {
      "rank": 474,
      "cve_id": "CVE-2026-107361",
      "cvss_base": 4.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CISA",
      "product": "Malcolm",
      "cwe": "CWE-288",
      "title": "Authentication Bypass Using an Alternate Path or Channel in Malcolm",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107361"
    },
    {
      "rank": 475,
      "cve_id": "CVE-2026-107719",
      "cvss_base": 4.2,
      "cvss_severity": "MEDIUM",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nearform",
      "product": "fast-jwt",
      "cwe": "CWE-613",
      "title": "fast-jwt: Verifier cache accepts expired JWTs without iat.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107719"
    },
    {
      "rank": 476,
      "cve_id": "CVE-2026-12091",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-125",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12091"
    },
    {
      "rank": 477,
      "cve_id": "CVE-2026-107288",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-918",
      "title": "Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107288"
    },
    {
      "rank": 478,
      "cve_id": "CVE-2026-107296",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mcollina",
      "product": "msgpack5",
      "cwe": "CWE-471",
      "title": "msgpack5: Decoding negative int64 values mutates the input buffer",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107296"
    },
    {
      "rank": 479,
      "cve_id": "CVE-2026-107727",
      "cvss_base": 3.7,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "strawberry-graphql",
      "product": "strawberry",
      "cwe": "CWE-400",
      "title": "Strawberry legacy graphql-ws retains naturally completed subscription slots",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107727"
    },
    {
      "rank": 480,
      "cve_id": "CVE-2026-89290",
      "cvss_base": 3.5,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "İzometri IT Services Domestic and Foreign Trade Co. Ltd.",
      "product": "eimzamip",
      "cwe": "CWE-80",
      "title": "HTML Injection in İzometri Informatics' eimzamip",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89290"
    },
    {
      "rank": 481,
      "cve_id": "CVE-2026-87980",
      "cvss_base": 3.1,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Guardium Data Protection",
      "cwe": "CWE-532",
      "title": "Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87980"
    },
    {
      "rank": 482,
      "cve_id": "CVE-2026-11939",
      "cvss_base": 2.7,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "IBM",
      "product": "Security Verify Access",
      "cwe": "CWE-88",
      "title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11939"
    },
    {
      "rank": 483,
      "cve_id": "CVE-2026-107570",
      "cvss_base": 2.5,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mutt",
      "product": "mutt",
      "cwe": "CWE-823",
      "title": "Use of Out-of-range Pointer Offset in mutt",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107570"
    },
    {
      "rank": 484,
      "cve_id": "CVE-2026-104634",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ScriptKittyOS",
      "product": "beam_mcp",
      "cwe": "CWE-704",
      "title": "beam_mcp: JSON boolean and null tool arguments reach dispatch as strings",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104634"
    },
    {
      "rank": 485,
      "cve_id": "CVE-2026-107291",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-212",
      "title": "Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107291"
    },
    {
      "rank": 486,
      "cve_id": "CVE-2026-107293",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pydantic",
      "product": "pydantic-ai",
      "cwe": "CWE-212",
      "title": "Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107293"
    },
    {
      "rank": 487,
      "cve_id": "CVE-2026-105823",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "ImageMagick",
      "product": "ImageMagick",
      "cwe": "CWE-284",
      "title": "ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105823"
    },
    {
      "rank": 488,
      "cve_id": "CVE-2026-106432",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MongoDB",
      "product": "PHP Driver",
      "cwe": "CWE-681",
      "title": "Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-106432"
    },
    {
      "rank": 489,
      "cve_id": "CVE-2026-56857",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "os",
      "cwe": null,
      "title": "Root.Mkdir(All) can follow junctions out of the root on Windows in os",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56857"
    },
    {
      "rank": 490,
      "cve_id": "CVE-2026-56866",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "HTTP/1 client connection desynchronization after CONNECT rejection in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56866"
    },
    {
      "rank": 491,
      "cve_id": "CVE-2026-78659",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "HTTP/2 server memory exhaustion due to Trailer headers in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78659"
    },
    {
      "rank": 492,
      "cve_id": "CVE-2026-78660",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "HTTP/2 transport accepts malformed framing-related headers in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78660"
    },
    {
      "rank": 493,
      "cve_id": "CVE-2026-78663",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "Double flow control refund on HTTP/2 server streams in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78663"
    },
    {
      "rank": 494,
      "cve_id": "CVE-2026-78667",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "Lack of limit on size of parsed Range headers in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
    },
    {
      "rank": 495,
      "cve_id": "CVE-2026-78669",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "Excessive CPU consumption from repeated initial window changes in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
    },
    {
      "rank": 496,
      "cve_id": "CVE-2026-88647",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": null,
      "title": "A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88647"
    },
    {
      "rank": 497,
      "cve_id": "CVE-2026-88648",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": null,
      "title": "Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88648"
    },
    {
      "rank": 498,
      "cve_id": "CVE-2026-94439",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94439"
    },
    {
      "rank": 499,
      "cve_id": "CVE-2026-94440",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/textproto",
      "cwe": null,
      "title": "Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94440"
    },
    {
      "rank": 500,
      "cve_id": "CVE-2026-94444",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go toolchain",
      "product": "cmd/go",
      "cwe": null,
      "title": "Checksum bypass for golang.org/fips140 in cmd/go",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94444"
    },
    {
      "rank": 501,
      "cve_id": "CVE-2026-94447",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go toolchain",
      "product": "cmd/go",
      "cwe": null,
      "title": "Checksum database bypass for golang.org/toolchain in cmd/go",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94447"
    },
    {
      "rank": 502,
      "cve_id": "CVE-2026-94448",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "html/template",
      "cwe": null,
      "title": "Reset context tracking on consecutive template expressions in html/template",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-94448"
    },
    {
      "rank": 503,
      "cve_id": "CVE-2026-95116",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": null,
      "title": "An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95116"
    },
    {
      "rank": 504,
      "cve_id": "CVE-2026-95125",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": null,
      "title": "libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-95125"
    },
    {
      "rank": 505,
      "cve_id": "CVE-2026-97030",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "html/template",
      "cwe": null,
      "title": "Recognize yield as regexp preceder keyword in html/template",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97030"
    },
    {
      "rank": 506,
      "cve_id": "CVE-2026-97031",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "crypto/tls",
      "cwe": null,
      "title": "Reject malformed ECH outer extension references in crypto/tls",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
    },
    {
      "rank": 507,
      "cve_id": "CVE-2026-97032",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": null,
      "epss_percentile": null,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Go standard library",
      "product": "net/http",
      "cwe": null,
      "title": "HTTP/2 server crash due to HPACK encoder race in net/http",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97032"
    }
  ],
  "transactions": [
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2015-3306",
      "detail": "ADDED TO KEV — CVE-2015-3306. Remediation due October 11, 2026."
    },
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2015-5477",
      "detail": "ADDED TO KEV — CVE-2015-5477. Remediation due October 11, 2026."
    },
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2016-3081",
      "detail": "ADDED TO KEV — CVE-2016-3081. Remediation due October 11, 2026."
    },
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2021-3199",
      "detail": "ADDED TO KEV — CVE-2021-3199. Remediation due October 11, 2026."
    },
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2023-22894",
      "detail": "ADDED TO KEV — CVE-2023-22894. Remediation due October 11, 2026."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2013-7285",
      "detail": "EXPLOIT PUBLISHED — CVE-2013-7285. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2015-20107",
      "detail": "EXPLOIT PUBLISHED — CVE-2015-20107. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2016-5018",
      "detail": "EXPLOIT PUBLISHED — CVE-2016-5018 (Apache Software Foundation Apache Tomcat). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2017-9233",
      "detail": "EXPLOIT PUBLISHED — CVE-2017-9233. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2018-1060",
      "detail": "EXPLOIT PUBLISHED — CVE-2018-1060 ([UNKNOWN] python). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2018-16156",
      "detail": "EXPLOIT PUBLISHED — CVE-2018-16156. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-12086",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-12086. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-12972",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-12972. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-13962",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-13962. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-14250",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-14250. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-15217",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-15217. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-15218",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-15218. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-15219",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-15219. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-16869",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-16869. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-19721",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-19721. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-19965",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-19965. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-20383",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-20383. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-20444",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-20444. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-20445",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-20445. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-20794",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-20794. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-20920",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-20920. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-5459",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-5459 (VLC). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-5460",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-5460 (VLC Media Player). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-8906",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-8906. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-0570",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-0570 (QT Library). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-1054",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-1054 (Microsoft Windows 10 Version 1507). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-12769",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-12769. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-19188",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-19188. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-1967",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-1967 (OpenSSL). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-25639",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-25639 (kernel). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-26116",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-26116. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-26664",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-26664. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-28097",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-28097. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-28500",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-28500 (Lodash). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-29374",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-29374. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35490",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35490. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35491",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35491. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35493",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35493 (binutils). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35494",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35494 (binutils). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35495",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35495 (binutils). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35496",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35496 (binutils). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-35507",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-35507 (binutils). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36183",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36183. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36185",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36185. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36186",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36186. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36187",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36187. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36188",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36188. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36189",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36189. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36327",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36327. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-36558",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-36558. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-5258",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-5258 (dojo). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6071",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6071 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6072",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6072 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6073",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6073 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6077",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6077 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6078",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6078 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-6079",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-6079 (Videolabs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-7598",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-7598 (minimist). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-7639",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-7639 (@eivifj/dot). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-7712",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-7712 (json). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-7788",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-7788 (ini). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2020-8022",
      "detail": "EXPLOIT PUBLISHED — CVE-2020-8022 (SUSE Enterprise Storage 5). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-21290",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-21290 (netty). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-22901",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-22901 (https://github.com/curl/curl). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-23337",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-23337 (Lodash). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-23369",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-23369 (handlebars). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-23383",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-23383 (handlebars). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-23450",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-23450 (dojo). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-27568",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-27568. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-29428",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-29428 (gradle). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-29429",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-29429 (gradle). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-29921",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-29921. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-32537",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-32537 (Realtek HDA driver). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-32751",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-32751 (gradle). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-33624",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-33624. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-34141",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-34141. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-34693",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-34693. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3733",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3733 (python). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3807",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3807 (chalk/ansi-regex). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-38198",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-38198. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3927",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3927 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3928",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3928 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-39537",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-39537. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3968",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3968 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3973",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3973 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-3974",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-3974 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-4136",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-4136 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-4166",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-4166 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-43975",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-43975. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-44533",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-44533 (NodeJS Node). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-44906",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-44906. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-45402",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-45402. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-45949",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-45949. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2021-46195",
      "detail": "EXPLOIT PUBLISHED — CVE-2021-46195. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-0144",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-0144 (shelljs/shelljs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-0213",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-0213 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-0351",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-0351 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-0529",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-0529 (unzip). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-0530",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-0530 (unzip). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-1616",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-1616 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-1619",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-1619 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-1620",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-1620 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-1674",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-1674 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2042",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2042 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2124",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2124 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2125",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2125 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2126",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2126 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2129",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2129 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2175",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2175 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2182",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2182 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2183",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2183 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2206",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2206 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2207",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2207 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2208",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2208 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2210",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2210 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2257",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2257 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2284",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2284 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2285",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2285 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2286",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2286 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2287",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2287 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2304",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2304 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2343",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2343 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2344",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2344 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2345",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2345 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-2522",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-2522 (vim/vim). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-27778",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-27778 (https://github.com/curl/curl). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-27943",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-27943. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-30115",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-30115 (https://github.com/curl/curl). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-32189",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-32189 (Go standard library math/big). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2022-33070",
      "detail": "EXPLOIT PUBLISHED — CVE-2022-33070. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-26119",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-26119 (net.sourceforge.htmlunit:htmlunit). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-30589",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-30589 (NodeJS Node). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-3079",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-3079 (Google Chrome). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-42366",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-42366. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-48161",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-48161. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2023-51764",
      "detail": "EXPLOIT PUBLISHED — CVE-2023-51764. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2025-11371",
      "detail": "EXPLOIT PUBLISHED — CVE-2025-11371 (Gladinet CentreStack and TrioFox). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2025-34267",
      "detail": "EXPLOIT PUBLISHED — CVE-2025-34267 (FlowiseAI Flowise). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2025-34469",
      "detail": "EXPLOIT PUBLISHED — CVE-2025-34469 (Cowrie). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2025-71177",
      "detail": "EXPLOIT PUBLISHED — CVE-2025-71177 (LavaLite CMS). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-0621",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-0621 (Anthropic MCP TypeScript SDK). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-100846",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-100846 (Project-MONAI MONAI). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-102826",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-102826 (steveukx git-js). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-102827",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-102827 (steveukx git-js). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-103001",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-103001 (jpadilla pyjwt). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-105749",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-105749 (docling-project docling). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-105775",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-105775 (vllm-project vLLM). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-105808",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-105808 (SourceCodester Simple Student Information System). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-105920",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-105920 (Kusalkasilva Learning-Management-System). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-105957",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-105957 (SourceCodester Performance Indicator System). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-106201",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-106201 (Google Chrome). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-106273",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-106273 (Google Chrome). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-22680",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-22680 (Volcengine OpenViking). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-32846",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-32846 (OpenClaw). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-39904",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-39904 (gophish). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-40035",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-40035 (obsidianforensics unfurl). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-40036",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-40036 (obsidianforensics unfurl). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-40525",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-40525 (volcengine OpenViking). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-45242",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-45242 (steipete summarize). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-45243",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-45243 (steipete summarize). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-45244",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-45244 (steipete summarize). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-45245",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-45245 (steipete summarize). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-47117",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-47117 (maziyarpanahi openmed). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-57516",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-57516 (Anyscale, Inc Ray). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58372",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58372 (seaweedfs). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58473",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58473 (topoteretes cognee). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58660",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58660 (kanboard). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-59804",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-59804 (web-infra-dev midscene). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-59806",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-59806 (gradio-app gradio). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-59807",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-59807 (ComposioHQ composio). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-61461",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-61461 (langgenius dify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-62238",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-62238 (openremote). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-65899",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-65899 (cure53 DOMPurify). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-66073",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-66073 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67309",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67309 (traefik). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67408",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67408 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67409",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67409 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67410",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67410 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67411",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67411 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-67412",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-67412 (rabbitmq-server). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-78682",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-78682 (nltk). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-79657",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-79657 (nltk). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-85594",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-85594 (traefik). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-85595",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-85595 (traefik). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-85596",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-85596 (traefik). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-85597",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-85597 (traefik). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-86431",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-86431 (thephpleague commonmark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95387",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95387 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95388",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95388 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95389",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95389 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95392",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95392 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95393",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95393 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95394",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95394 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-95395",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-95395 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-96415",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-96415 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-96416",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-96416 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-96417",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-96417 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-96418",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-96418 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-96419",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-96419 (Wireshark Foundation Wireshark). Public exploit reference added."
    },
    {
      "type": "DUE_DATE_PASSED",
      "cve_id": "CVE-2026-88779",
      "detail": "DUE DATE PASSED — CVE-2026-88779 (NetScaler ADC). CISA remediation deadline was October 7, 2026; still in catalog."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2015-20107",
      "detail": "RESCORED — CVE-2015-20107. CVSS 7.8 → 7.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2018-1060",
      "detail": "RESCORED — CVE-2018-1060 ([UNKNOWN] python). CVSS 4.3 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2018-1115",
      "detail": "RESCORED — CVE-2018-1115 (unspecified postgresql). CVSS 4.2 → 9.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2019-10219",
      "detail": "RESCORED — CVE-2019-10219 (hibernate-validator). CVSS 6.5 → 6.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2019-14892",
      "detail": "RESCORED — CVE-2019-14892 (Red Hat jackson-databind). CVSS 7.5 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2019-14893",
      "detail": "RESCORED — CVE-2019-14893 (Red Hat jackson-databind). CVSS 7.5 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2020-5398",
      "detail": "RESCORED — CVE-2020-5398 (Spring Framework). CVSS 8 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2020-5421",
      "detail": "RESCORED — CVE-2020-5421 (Spring by VMware Spring Framework). CVSS 8.7 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2020-7788",
      "detail": "RESCORED — CVE-2020-7788 (ini). CVSS 7.3 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2020-8022",
      "detail": "RESCORED — CVE-2020-8022 (SUSE Enterprise Storage 5). CVSS 7.7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-21290",
      "detail": "RESCORED — CVE-2021-21290 (netty). CVSS 6.2 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-23369",
      "detail": "RESCORED — CVE-2021-23369 (handlebars). CVSS 5.6 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-23383",
      "detail": "RESCORED — CVE-2021-23383 (handlebars). CVSS 5.6 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-23450",
      "detail": "RESCORED — CVE-2021-23450 (dojo). CVSS 7.5 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-29428",
      "detail": "RESCORED — CVE-2021-29428 (gradle). CVSS 8.8 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-29429",
      "detail": "RESCORED — CVE-2021-29429 (gradle). CVSS 4 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-34866",
      "detail": "RESCORED — CVE-2021-34866 (Linux Kernel). CVSS 8.8 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-36323",
      "detail": "RESCORED — CVE-2021-36323 (Dell CPG BIOS). CVSS 7.5 → 6.7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-36324",
      "detail": "RESCORED — CVE-2021-36324 (Dell CPG BIOS). CVSS 7.5 → 6.7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-36325",
      "detail": "RESCORED — CVE-2021-36325 (Dell CPG BIOS). CVSS 7.5 → 6.7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-3927",
      "detail": "RESCORED — CVE-2021-3927 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-3928",
      "detail": "RESCORED — CVE-2021-3928 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-3973",
      "detail": "RESCORED — CVE-2021-3973 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-3974",
      "detail": "RESCORED — CVE-2021-3974 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-41277",
      "detail": "RESCORED — CVE-2021-41277 (metabase). CVSS 10 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-4136",
      "detail": "RESCORED — CVE-2021-4136 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2021-45949",
      "detail": "RESCORED — CVE-2021-45949. CVSS 3.9 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-0213",
      "detail": "RESCORED — CVE-2022-0213 (vim/vim). CVSS 6.8 → 6.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-0351",
      "detail": "RESCORED — CVE-2022-0351 (vim/vim). CVSS 8.4 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-1616",
      "detail": "RESCORED — CVE-2022-1616 (vim/vim). CVSS 7.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-1619",
      "detail": "RESCORED — CVE-2022-1619 (vim/vim). CVSS 6.1 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-1620",
      "detail": "RESCORED — CVE-2022-1620 (vim/vim). CVSS 6.6 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-1674",
      "detail": "RESCORED — CVE-2022-1674 (vim/vim). CVSS 6.6 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-2042",
      "detail": "RESCORED — CVE-2022-2042 (vim/vim). CVSS 7.4 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-2208",
      "detail": "RESCORED — CVE-2022-2208 (vim/vim). CVSS 7.8 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-2287",
      "detail": "RESCORED — CVE-2022-2287 (vim/vim). CVSS 8 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-27544",
      "detail": "RESCORED — CVE-2022-27544 (HCL Software HCL BigFix). CVSS 5 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2022-27545",
      "detail": "RESCORED — CVE-2022-27545 (HCL Software HCL BigFix). CVSS 4.6 → 5.4 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2023-20900",
      "detail": "RESCORED — CVE-2023-20900 (VMware Tools). CVSS 7.1 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2023-23946",
      "detail": "RESCORED — CVE-2023-23946 (git). CVSS 6.2 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2023-35946",
      "detail": "RESCORED — CVE-2023-35946 (gradle). CVSS 6.9 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2023-44387",
      "detail": "RESCORED — CVE-2023-44387 (gradle). CVSS 3.2 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2025-22037",
      "detail": "RESCORED — CVE-2025-22037 (Linux). CVSS 5.5 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2025-58903",
      "detail": "RESCORED — CVE-2025-58903 (Fortinet FortiOS). CVSS 2.5 → 4.9 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-101331",
      "detail": "RESCORED — CVE-2026-101331 (IBM Langflow OSS). CVSS 7.7 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-102677",
      "detail": "RESCORED — CVE-2026-102677 (electron). CVSS 7.8 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-102827",
      "detail": "RESCORED — CVE-2026-102827 (steveukx git-js). CVSS 8.1 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-103360",
      "detail": "RESCORED — CVE-2026-103360 (IBM Langflow OSS). CVSS 8.1 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-105743",
      "detail": "RESCORED — CVE-2026-105743 (docling-project docling). CVSS 4 → 5.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-106188",
      "detail": "RESCORED — CVE-2026-106188 (Google Chrome). CVSS 6.1 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-106218",
      "detail": "RESCORED — CVE-2026-106218 (JetBrains TeamCity). CVSS 8.8 → 10 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-106219",
      "detail": "RESCORED — CVE-2026-106219 (JetBrains TeamCity). CVSS 6.5 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-17643",
      "detail": "RESCORED — CVE-2026-17643 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 8.8 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-17644",
      "detail": "RESCORED — CVE-2026-17644 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 8.8 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-17645",
      "detail": "RESCORED — CVE-2026-17645 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 9.1 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-17646",
      "detail": "RESCORED — CVE-2026-17646 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 8.5 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-18066",
      "detail": "RESCORED — CVE-2026-18066 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 7.9 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-18152",
      "detail": "RESCORED — CVE-2026-18152 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 7.4 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-18153",
      "detail": "RESCORED — CVE-2026-18153 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 5.4 → 7.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-18154",
      "detail": "RESCORED — CVE-2026-18154 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 8 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-26950",
      "detail": "RESCORED — CVE-2026-26950 (Dell SmartFabric Manager). CVSS 8.1 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-54471",
      "detail": "RESCORED — CVE-2026-54471 (Dell SmartFabric Manager). CVSS 3.5 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-54472",
      "detail": "RESCORED — CVE-2026-54472 (Dell Container Storage Modules). CVSS 9.8 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-67101",
      "detail": "RESCORED — CVE-2026-67101 (HCL Software HCL BigFix Service Management). CVSS 9.3 → 5.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-67103",
      "detail": "RESCORED — CVE-2026-67103 (HCL Software HCL BigFix Service Management). CVSS 7.6 → 6.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-70600",
      "detail": "RESCORED — CVE-2026-70600 (electron). CVSS 3.1 → 4.3 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-91802",
      "detail": "RESCORED — CVE-2026-91802 (Foxit Software Inc. Foxit PDF Editor). CVSS 7.8 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-91803",
      "detail": "RESCORED — CVE-2026-91803 (Foxit Software Inc. Foxit PDF Editor). CVSS 8.8 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-91812",
      "detail": "RESCORED — CVE-2026-91812 (Foxit Software Inc. Foxit PDF Editor). CVSS 7.9 → 8.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-91813",
      "detail": "RESCORED — CVE-2026-91813 (Foxit Software Inc. Foxit PDF Editor). CVSS 8.8 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-91818",
      "detail": "RESCORED — CVE-2026-91818 (Foxit Software Inc. Foxit PDF Editor). CVSS 7.8 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-93443",
      "detail": "RESCORED — CVE-2026-93443 (IBM Langflow OSS). CVSS 7.5 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-93445",
      "detail": "RESCORED — CVE-2026-93445 (IBM Langflow OSS). CVSS 8.1 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-93449",
      "detail": "RESCORED — CVE-2026-93449 (IBM Langflow OSS). CVSS 8.5 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-93675",
      "detail": "RESCORED — CVE-2026-93675 (IBM Langflow OSS). CVSS 8.8 → 9.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-93677",
      "detail": "RESCORED — CVE-2026-93677 (IBM Langflow OSS). CVSS 7.7 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-95387",
      "detail": "RESCORED — CVE-2026-95387 (Wireshark Foundation Wireshark). CVSS 8.1 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-96419",
      "detail": "RESCORED — CVE-2026-96419 (Wireshark Foundation Wireshark). CVSS 5.5 → 7.8 (NVD)."
    },
    {
      "type": "REJECTED",
      "cve_id": "CVE-2026-39725",
      "detail": "REJECTED — CVE-2026-39725 (Jonathan Horowitz Content Visibility for Divi Builder). Record withdrawn by the CNA."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-102490",
      "detail": "PATCH SHIPPED — CVE-2026-102490 (Zammad GmbH Zammad). Fixed in Zammad 7.2.2."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-11837",
      "detail": "PATCH SHIPPED — CVE-2026-11837 (Red Hat Enterprise Linux 10.0 Extended Update Support). Fixed in Red Hat Enterprise Linux 10.0 Extended Update Support 0:0.2.3-6.el10_0.2."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-18839",
      "detail": "PATCH SHIPPED — CVE-2026-18839 (rpm-software-management popt). Fixed in Red Hat Hardened Images 1.19-11.2.hum1."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-32582",
      "detail": "PATCH SHIPPED — CVE-2026-32582 (iatoai IATO MCP). Fixed in IATO MCP 1.12.1."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-39723",
      "detail": "PATCH SHIPPED — CVE-2026-39723 (Green Invoice Morning for WooCommerce). Fixed in Morning for WooCommerce 2.4.2."
    },
    {
      "type": "PATCH_SHIPPED",
      "cve_id": "CVE-2026-87853",
      "detail": "PATCH SHIPPED — CVE-2026-87853 (Red Hat Enterprise Linux 10). Fixed in Red Hat Enterprise Linux 10 0:2.12.0-3.el10_2.2."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2013-7285",
      "detail": "ENRICHED — CVE-2013-7285. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2015-6748",
      "detail": "ENRICHED — CVE-2015-6748. Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2015-8859",
      "detail": "ENRICHED — CVE-2015-8859. Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-0718",
      "detail": "ENRICHED — CVE-2016-0718. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-0762",
      "detail": "ENRICHED — CVE-2016-0762 (Apache Software Foundation Apache Tomcat). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-2568",
      "detail": "ENRICHED — CVE-2016-2568. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-3674",
      "detail": "ENRICHED — CVE-2016-3674. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-4472",
      "detail": "ENRICHED — CVE-2016-4472. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-5018",
      "detail": "ENRICHED — CVE-2016-5018 (Apache Software Foundation Apache Tomcat). Received CVSS 9.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-6796",
      "detail": "ENRICHED — CVE-2016-6796 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-6797",
      "detail": "ENRICHED — CVE-2016-6797 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-9063",
      "detail": "ENRICHED — CVE-2016-9063 (Mozilla Firefox). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-9840",
      "detail": "ENRICHED — CVE-2016-9840. Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2016-9841",
      "detail": "ENRICHED — CVE-2016-9841. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-1000158",
      "detail": "ENRICHED — CVE-2017-1000158. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-15095",
      "detail": "ENRICHED — CVE-2017-15095 (FasterXML jackson-databind). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-5645",
      "detail": "ENRICHED — CVE-2017-5645 (Apache Software Foundation Apache Log4j). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-7525",
      "detail": "ENRICHED — CVE-2017-7525 (FasterXML jackson-databind). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-7957",
      "detail": "ENRICHED — CVE-2017-7957. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-8529",
      "detail": "ENRICHED — CVE-2017-8529 (Microsoft Corporation Internet Explorer). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2017-9233",
      "detail": "ENRICHED — CVE-2017-9233. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-0732",
      "detail": "ENRICHED — CVE-2018-0732 (OpenSSL). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-0734",
      "detail": "ENRICHED — CVE-2018-0734 (OpenSSL). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-0735",
      "detail": "ENRICHED — CVE-2018-0735 (OpenSSL). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-1000802",
      "detail": "ENRICHED — CVE-2018-1000802. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-1000879",
      "detail": "ENRICHED — CVE-2018-1000879. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-1000880",
      "detail": "ENRICHED — CVE-2018-1000880. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-11039",
      "detail": "ENRICHED — CVE-2018-11039 (Pivotal Spring Framework). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-11040",
      "detail": "ENRICHED — CVE-2018-11040 (Pivotal Spring Framework). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-11307",
      "detail": "ENRICHED — CVE-2018-11307. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12022",
      "detail": "ENRICHED — CVE-2018-12022. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12116",
      "detail": "ENRICHED — CVE-2018-12116 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12120",
      "detail": "ENRICHED — CVE-2018-12120 (The Node.js Project Node.js). Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12121",
      "detail": "ENRICHED — CVE-2018-12121 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12122",
      "detail": "ENRICHED — CVE-2018-12122 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-12123",
      "detail": "ENRICHED — CVE-2018-12123 (The Node.js Project Node.js). Received CVSS 4.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-1257",
      "detail": "ENRICHED — CVE-2018-1257 (Pivotal Spring Framework). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-1270",
      "detail": "ENRICHED — CVE-2018-1270 (Spring by Pivotal Spring Framework). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-14718",
      "detail": "ENRICHED — CVE-2018-14718. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-14719",
      "detail": "ENRICHED — CVE-2018-14719. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-16156",
      "detail": "ENRICHED — CVE-2018-16156. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-16301",
      "detail": "ENRICHED — CVE-2018-16301 (The Tcpdump Group tcpdump). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-5407",
      "detail": "ENRICHED — CVE-2018-5407 (Processors supporting Simultaneous Multi-Threading). Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-5968",
      "detail": "ENRICHED — CVE-2018-5968. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7158",
      "detail": "ENRICHED — CVE-2018-7158 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7159",
      "detail": "ENRICHED — CVE-2018-7159 (The Node.js Project Node.js). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7160",
      "detail": "ENRICHED — CVE-2018-7160 (The Node.js Project Node.js). Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7161",
      "detail": "ENRICHED — CVE-2018-7161 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7162",
      "detail": "ENRICHED — CVE-2018-7162 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7164",
      "detail": "ENRICHED — CVE-2018-7164 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7166",
      "detail": "ENRICHED — CVE-2018-7166 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-7167",
      "detail": "ENRICHED — CVE-2018-7167 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-0123",
      "detail": "ENRICHED — CVE-2019-0123 (2019.2 IPU – Intel(R) SGX and TXT). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-0124",
      "detail": "ENRICHED — CVE-2019-0124 (2019.2 IPU – Intel(R) SGX and TXT). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-10086",
      "detail": "ENRICHED — CVE-2019-10086 (Apache Commons Beanutils). Received CVSS 7.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-11136",
      "detail": "ENRICHED — CVE-2019-11136 (2019.2 IPU – UEFI). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-11137",
      "detail": "ENRICHED — CVE-2019-11137 (2019.2 IPU – UEFI). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-12086",
      "detail": "ENRICHED — CVE-2019-12086. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-12384",
      "detail": "ENRICHED — CVE-2019-12384. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-12418",
      "detail": "ENRICHED — CVE-2019-12418 (Apache Software Foundation Apache Tomcat). Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-12972",
      "detail": "ENRICHED — CVE-2019-12972. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-13602",
      "detail": "ENRICHED — CVE-2019-13602. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-13962",
      "detail": "ENRICHED — CVE-2019-13962. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14250",
      "detail": "ENRICHED — CVE-2019-14250. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14379",
      "detail": "ENRICHED — CVE-2019-14379. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14439",
      "detail": "ENRICHED — CVE-2019-14439. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14540",
      "detail": "ENRICHED — CVE-2019-14540. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14565",
      "detail": "ENRICHED — CVE-2019-14565 (Intel 2019.2 IPU – Intel(R) SGX). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-14566",
      "detail": "ENRICHED — CVE-2019-14566 (Intel 2019.2 IPU – Intel(R) SGX). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-15217",
      "detail": "ENRICHED — CVE-2019-15217. Received CVSS 4.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-15218",
      "detail": "ENRICHED — CVE-2019-15218. Received CVSS 4.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-15219",
      "detail": "ENRICHED — CVE-2019-15219. Received CVSS 4.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-1551",
      "detail": "ENRICHED — CVE-2019-1551 (OpenSSL). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-1563",
      "detail": "ENRICHED — CVE-2019-1563 (OpenSSL). Received CVSS 3.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-15807",
      "detail": "ENRICHED — CVE-2019-15807. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-16089",
      "detail": "ENRICHED — CVE-2019-16089. Received CVSS 4.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-16335",
      "detail": "ENRICHED — CVE-2019-16335. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-16866",
      "detail": "ENRICHED — CVE-2019-16866. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-16869",
      "detail": "ENRICHED — CVE-2019-16869. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-16942",
      "detail": "ENRICHED — CVE-2019-16942. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-17531",
      "detail": "ENRICHED — CVE-2019-17531. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-17543",
      "detail": "ENRICHED — CVE-2019-17543. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-17563",
      "detail": "ENRICHED — CVE-2019-17563 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-18806",
      "detail": "ENRICHED — CVE-2019-18806. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19054",
      "detail": "ENRICHED — CVE-2019-19054. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19066",
      "detail": "ENRICHED — CVE-2019-19066. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19080",
      "detail": "ENRICHED — CVE-2019-19080. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19081",
      "detail": "ENRICHED — CVE-2019-19081. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19082",
      "detail": "ENRICHED — CVE-2019-19082. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19083",
      "detail": "ENRICHED — CVE-2019-19083. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19244",
      "detail": "ENRICHED — CVE-2019-19244. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19462",
      "detail": "ENRICHED — CVE-2019-19462. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19530",
      "detail": "ENRICHED — CVE-2019-19530. Received CVSS 4.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19721",
      "detail": "ENRICHED — CVE-2019-19721. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-19965",
      "detail": "ENRICHED — CVE-2019-19965. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20095",
      "detail": "ENRICHED — CVE-2019-20095. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20383",
      "detail": "ENRICHED — CVE-2019-20383. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20444",
      "detail": "ENRICHED — CVE-2019-20444. Received CVSS 9.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20445",
      "detail": "ENRICHED — CVE-2019-20445. Received CVSS 9.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20794",
      "detail": "ENRICHED — CVE-2019-20794. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20838",
      "detail": "ENRICHED — CVE-2019-20838. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-20920",
      "detail": "ENRICHED — CVE-2019-20920. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-5459",
      "detail": "ENRICHED — CVE-2019-5459 (VLC). Received CVSS 7.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-5460",
      "detail": "ENRICHED — CVE-2019-5460 (VLC Media Player). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-8906",
      "detail": "ENRICHED — CVE-2019-8906. Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-9674",
      "detail": "ENRICHED — CVE-2019-9674. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-0570",
      "detail": "ENRICHED — CVE-2020-0570 (QT Library). Received CVSS 7.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11494",
      "detail": "ENRICHED — CVE-2020-11494. Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11609",
      "detail": "ENRICHED — CVE-2020-11609. Received CVSS 4.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11619",
      "detail": "ENRICHED — CVE-2020-11619. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11620",
      "detail": "ENRICHED — CVE-2020-11620. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11979",
      "detail": "ENRICHED — CVE-2020-11979 (Apache Ant). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11987",
      "detail": "ENRICHED — CVE-2020-11987 (Apache Batik). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-11996",
      "detail": "ENRICHED — CVE-2020-11996 (Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-12321",
      "detail": "ENRICHED — CVE-2020-12321 (Intel(R) Wireless Bluetooth(R)). Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-12322",
      "detail": "ENRICHED — CVE-2020-12322 (Intel(R) Wireless Bluetooth(R)). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-12357",
      "detail": "ENRICHED — CVE-2020-12357 (Intel(R) Processors). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-12358",
      "detail": "ENRICHED — CVE-2020-12358 (Intel(R) Processors). Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-12769",
      "detail": "ENRICHED — CVE-2020-12769. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-13934",
      "detail": "ENRICHED — CVE-2020-13934 (Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-13935",
      "detail": "ENRICHED — CVE-2020-13935 (Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-13943",
      "detail": "ENRICHED — CVE-2020-13943 (Apache Tomcat). Received CVSS 4.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14060",
      "detail": "ENRICHED — CVE-2020-14060. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14062",
      "detail": "ENRICHED — CVE-2020-14062. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14155",
      "detail": "ENRICHED — CVE-2020-14155. Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14195",
      "detail": "ENRICHED — CVE-2020-14195. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14390",
      "detail": "ENRICHED — CVE-2020-14390 (kernel). Received CVSS 5.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14416",
      "detail": "ENRICHED — CVE-2020-14416. Received CVSS 4.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-14422",
      "detail": "ENRICHED — CVE-2020-14422. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-15523",
      "detail": "ENRICHED — CVE-2020-15523. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-17521",
      "detail": "ENRICHED — CVE-2020-17521 (Apache Software Foundation Apache Groovy). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-17527",
      "detail": "ENRICHED — CVE-2020-17527 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-19188",
      "detail": "ENRICHED — CVE-2020-19188. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-1935",
      "detail": "ENRICHED — CVE-2020-1935 (Apache Tomcat). Received CVSS 4.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-1967",
      "detail": "ENRICHED — CVE-2020-1967 (OpenSSL). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24486",
      "detail": "ENRICHED — CVE-2020-24486 (Intel(R) Processors). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24489",
      "detail": "ENRICHED — CVE-2020-24489 (Intel(R) VT-d products). Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24511",
      "detail": "ENRICHED — CVE-2020-24511 (Intel(R) Processors). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24512",
      "detail": "ENRICHED — CVE-2020-24512 (Intel(R) Processors). Received CVSS 3.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24513",
      "detail": "ENRICHED — CVE-2020-24513 (Intel Atom(R) Processors). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24616",
      "detail": "ENRICHED — CVE-2020-24616. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24742",
      "detail": "ENRICHED — CVE-2020-24742. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-24750",
      "detail": "ENRICHED — CVE-2020-24750. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-25639",
      "detail": "ENRICHED — CVE-2020-25639 (kernel). Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-25649",
      "detail": "ENRICHED — CVE-2020-25649 (jackson-databind). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-26116",
      "detail": "ENRICHED — CVE-2020-26116. Received CVSS 7.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-26140",
      "detail": "ENRICHED — CVE-2020-26140. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-26144",
      "detail": "ENRICHED — CVE-2020-26144. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-26664",
      "detail": "ENRICHED — CVE-2020-26664. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-27170",
      "detail": "ENRICHED — CVE-2020-27170. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-27171",
      "detail": "ENRICHED — CVE-2020-27171. Received CVSS 6.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-27619",
      "detail": "ENRICHED — CVE-2020-27619. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-28097",
      "detail": "ENRICHED — CVE-2020-28097. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-29374",
      "detail": "ENRICHED — CVE-2020-29374. Received CVSS 3.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35490",
      "detail": "ENRICHED — CVE-2020-35490. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35491",
      "detail": "ENRICHED — CVE-2020-35491. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35493",
      "detail": "ENRICHED — CVE-2020-35493 (binutils). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35494",
      "detail": "ENRICHED — CVE-2020-35494 (binutils). Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35495",
      "detail": "ENRICHED — CVE-2020-35495 (binutils). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35496",
      "detail": "ENRICHED — CVE-2020-35496 (binutils). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-35507",
      "detail": "ENRICHED — CVE-2020-35507 (binutils). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36183",
      "detail": "ENRICHED — CVE-2020-36183. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36185",
      "detail": "ENRICHED — CVE-2020-36185. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36186",
      "detail": "ENRICHED — CVE-2020-36186. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36187",
      "detail": "ENRICHED — CVE-2020-36187. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36188",
      "detail": "ENRICHED — CVE-2020-36188. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36189",
      "detail": "ENRICHED — CVE-2020-36189. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36311",
      "detail": "ENRICHED — CVE-2020-36311. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36327",
      "detail": "ENRICHED — CVE-2020-36327. Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-36558",
      "detail": "ENRICHED — CVE-2020-36558. Received CVSS 5.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-3702",
      "detail": "ENRICHED — CVE-2020-3702 (Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6917",
      "detail": "ENRICHED — CVE-2020-6917 (HP Support Assistant). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6918",
      "detail": "ENRICHED — CVE-2020-6918 (HP Support Assistant). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6919",
      "detail": "ENRICHED — CVE-2020-6919 (HP Support Assistant). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6920",
      "detail": "ENRICHED — CVE-2020-6920 (HP Support Assistant). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6921",
      "detail": "ENRICHED — CVE-2020-6921 (HP Support Assistant). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-6922",
      "detail": "ENRICHED — CVE-2020-6922 (HP Support Assistant). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-7598",
      "detail": "ENRICHED — CVE-2020-7598 (minimist). Received CVSS 5.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-7639",
      "detail": "ENRICHED — CVE-2020-7639 (@eivifj/dot). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-8670",
      "detail": "ENRICHED — CVE-2020-8670 (Intel(R) Processors). Received CVSS 6.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-8700",
      "detail": "ENRICHED — CVE-2020-8700 (Intel(R) Processors). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-8840",
      "detail": "ENRICHED — CVE-2020-8840. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2020-9484",
      "detail": "ENRICHED — CVE-2020-9484 (Apache Tomcat). Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-0095",
      "detail": "ENRICHED — CVE-2021-0095 (Intel(R) Processors). Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-0114",
      "detail": "ENRICHED — CVE-2021-0114 (Intel(R) Processors). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-0146",
      "detail": "ENRICHED — CVE-2021-0146 (Intel(R) processors which). Received CVSS 6.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-20193",
      "detail": "ENRICHED — CVE-2021-20193 (tar). Received CVSS 3.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-20320",
      "detail": "ENRICHED — CVE-2021-20320 (kernel). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-22901",
      "detail": "ENRICHED — CVE-2021-22901 (https://github.com/curl/curl). Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-24032",
      "detail": "ENRICHED — CVE-2021-24032 (Facebook Zstandard). Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-24122",
      "detail": "ENRICHED — CVE-2021-24122 (Apache Software Foundation Apache Tomcat). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-25122",
      "detail": "ENRICHED — CVE-2021-25122 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-25329",
      "detail": "ENRICHED — CVE-2021-25329 (Apache Software Foundation Apache Tomcat). Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-27568",
      "detail": "ENRICHED — CVE-2021-27568. Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-28972",
      "detail": "ENRICHED — CVE-2021-28972. Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-29921",
      "detail": "ENRICHED — CVE-2021-29921. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-30640",
      "detail": "ENRICHED — CVE-2021-30640 (Apache Software Foundation Apache Tomcat). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-31879",
      "detail": "ENRICHED — CVE-2021-31879. Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-33037",
      "detail": "ENRICHED — CVE-2021-33037 (Apache Software Foundation Apache Tomcat). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3331",
      "detail": "ENRICHED — CVE-2021-3331. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-33624",
      "detail": "ENRICHED — CVE-2021-33624. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-33656",
      "detail": "ENRICHED — CVE-2021-33656 (openEuler:kernel). Received CVSS 6.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-34141",
      "detail": "ENRICHED — CVE-2021-34141. Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3449",
      "detail": "ENRICHED — CVE-2021-3449 (OpenSSL). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3450",
      "detail": "ENRICHED — CVE-2021-3450 (OpenSSL). Received CVSS 7.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-34556",
      "detail": "ENRICHED — CVE-2021-34556. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-34693",
      "detail": "ENRICHED — CVE-2021-34693. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3520",
      "detail": "ENRICHED — CVE-2021-3520 (lz4). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-35477",
      "detail": "ENRICHED — CVE-2021-35477. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-35517",
      "detail": "ENRICHED — CVE-2021-35517 (Apache Software Foundation Apache Commons Compress). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3572",
      "detail": "ENRICHED — CVE-2021-3572 (python-pip). Received CVSS 5.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-36090",
      "detail": "ENRICHED — CVE-2021-36090 (Apache Software Foundation Apache Commons Compress). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3655",
      "detail": "ENRICHED — CVE-2021-3655 (kernel). Received CVSS 3.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3711",
      "detail": "ENRICHED — CVE-2021-3711 (OpenSSL). Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-37136",
      "detail": "ENRICHED — CVE-2021-37136 (The Netty project Netty). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-37137",
      "detail": "ENRICHED — CVE-2021-37137 (The Netty project Netty). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-37159",
      "detail": "ENRICHED — CVE-2021-37159. Received CVSS 6.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-3733",
      "detail": "ENRICHED — CVE-2021-3733 (python). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-38166",
      "detail": "ENRICHED — CVE-2021-38166. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-38198",
      "detail": "ENRICHED — CVE-2021-38198. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-38199",
      "detail": "ENRICHED — CVE-2021-38199. Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-38206",
      "detail": "ENRICHED — CVE-2021-38206. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-39537",
      "detail": "ENRICHED — CVE-2021-39537. Received CVSS 8.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-4001",
      "detail": "ENRICHED — CVE-2021-4001 (kernel). Received CVSS 4.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-40158",
      "detail": "ENRICHED — CVE-2021-40158 (Inventor). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-40159",
      "detail": "ENRICHED — CVE-2021-40159 (Inventor). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-40690",
      "detail": "ENRICHED — CVE-2021-40690 (Apache Software Foundation Apache Santuario). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-41079",
      "detail": "ENRICHED — CVE-2021-41079 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-4135",
      "detail": "ENRICHED — CVE-2021-4135 (kernel). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-41617",
      "detail": "ENRICHED — CVE-2021-41617. Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-43975",
      "detail": "ENRICHED — CVE-2021-43975. Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-44533",
      "detail": "ENRICHED — CVE-2021-44533 (NodeJS Node). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-44906",
      "detail": "ENRICHED — CVE-2021-44906. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-45402",
      "detail": "ENRICHED — CVE-2021-45402. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2021-46195",
      "detail": "ENRICHED — CVE-2021-46195. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-0264",
      "detail": "ENRICHED — CVE-2022-0264 (kernel). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-0500",
      "detail": "ENRICHED — CVE-2022-0500 (kernel). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-0529",
      "detail": "ENRICHED — CVE-2022-0529 (unzip). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-0530",
      "detail": "ENRICHED — CVE-2022-0530 (unzip). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-0987",
      "detail": "ENRICHED — CVE-2022-0987 (PackageKit). Received CVSS 3.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-1665",
      "detail": "ENRICHED — CVE-2022-1665 (Red Hat Enterprise Linux). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-20153",
      "detail": "ENRICHED — CVE-2022-20153 (Android). Received CVSS 6.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-20154",
      "detail": "ENRICHED — CVE-2022-20154 (Android). Received CVSS 6.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-22950",
      "detail": "ENRICHED — CVE-2022-22950 (Spring Framework). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-22968",
      "detail": "ENRICHED — CVE-2022-22968 (Spring Framework). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-22970",
      "detail": "ENRICHED — CVE-2022-22970 (Spring Framework). Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-22971",
      "detail": "ENRICHED — CVE-2022-22971 (Spring Framework). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23437",
      "detail": "ENRICHED — CVE-2022-23437 (Apache Software Foundation Apache Xerces). Received CVSS 6.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23456",
      "detail": "ENRICHED — CVE-2022-23456. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23924",
      "detail": "ENRICHED — CVE-2022-23924 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23925",
      "detail": "ENRICHED — CVE-2022-23925 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23926",
      "detail": "ENRICHED — CVE-2022-23926 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23927",
      "detail": "ENRICHED — CVE-2022-23927 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23928",
      "detail": "ENRICHED — CVE-2022-23928 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23929",
      "detail": "ENRICHED — CVE-2022-23929 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23930",
      "detail": "ENRICHED — CVE-2022-23930 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23931",
      "detail": "ENRICHED — CVE-2022-23931 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23932",
      "detail": "ENRICHED — CVE-2022-23932 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23933",
      "detail": "ENRICHED — CVE-2022-23933 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23934",
      "detail": "ENRICHED — CVE-2022-23934 (HP PC BIOS). Received CVSS 8.2 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23953",
      "detail": "ENRICHED — CVE-2022-23953 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23954",
      "detail": "ENRICHED — CVE-2022-23954 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23955",
      "detail": "ENRICHED — CVE-2022-23955 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23956",
      "detail": "ENRICHED — CVE-2022-23956 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23957",
      "detail": "ENRICHED — CVE-2022-23957 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23958",
      "detail": "ENRICHED — CVE-2022-23958 (HP ProBook 440 G8 Notebook PC; HP ProDesk 405 G6 Small Form Factor PC). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-23960",
      "detail": "ENRICHED — CVE-2022-23960. Received CVSS 5.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-25762",
      "detail": "ENRICHED — CVE-2022-25762 (Apache Software Foundation Apache Tomcat). Received CVSS 8.6 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-25788",
      "detail": "ENRICHED — CVE-2022-25788 (Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-26488",
      "detail": "ENRICHED — CVE-2022-26488. Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-26878",
      "detail": "ENRICHED — CVE-2022-26878. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-27778",
      "detail": "ENRICHED — CVE-2022-27778 (https://github.com/curl/curl). Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-27867",
      "detail": "ENRICHED — CVE-2022-27867 (Autodesk Inventor, Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-29577",
      "detail": "ENRICHED — CVE-2022-29577. Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-29885",
      "detail": "ENRICHED — CVE-2022-29885 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-30115",
      "detail": "ENRICHED — CVE-2022-30115 (https://github.com/curl/curl). Received CVSS 4.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-32189",
      "detail": "ENRICHED — CVE-2022-32189 (Go standard library math/big). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-32511",
      "detail": "ENRICHED — CVE-2022-32511. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-33070",
      "detail": "ENRICHED — CVE-2022-33070. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-34305",
      "detail": "ENRICHED — CVE-2022-34305 (Apache Software Foundation Apache Tomcat). Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-36227",
      "detail": "ENRICHED — CVE-2022-36227. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-41850",
      "detail": "ENRICHED — CVE-2022-41850. Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2022-44729",
      "detail": "ENRICHED — CVE-2022-44729 (Apache Software Foundation Apache XML Graphics Batik). Received CVSS 7.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-1838",
      "detail": "ENRICHED — CVE-2023-1838 (Kernel). Received CVSS 7.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-2269",
      "detail": "ENRICHED — CVE-2023-2269 (Kernel). Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-30585",
      "detail": "ENRICHED — CVE-2023-30585 (NodeJS Node). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-30589",
      "detail": "ENRICHED — CVE-2023-30589 (NodeJS Node). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-30590",
      "detail": "ENRICHED — CVE-2023-30590 (NodeJS Node). Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-41139",
      "detail": "ENRICHED — CVE-2023-41139 (Autodesk AutoCAD, Advance Steel and Civil 3D). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-42366",
      "detail": "ENRICHED — CVE-2023-42366. Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-42794",
      "detail": "ENRICHED — CVE-2023-42794 (Apache Software Foundation Apache Tomcat). Received CVSS 5.9 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-48161",
      "detail": "ENRICHED — CVE-2023-48161. Received CVSS 7.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-51714",
      "detail": "ENRICHED — CVE-2023-51714. Received CVSS 9.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2023-51764",
      "detail": "ENRICHED — CVE-2023-51764. Received CVSS 5.3 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-106195",
      "detail": "ENRICHED — CVE-2026-106195 (Google Chrome). Received CVSS 9.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-106208",
      "detail": "ENRICHED — CVE-2026-106208 (Google Chrome). Received CVSS 6.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-42616",
      "detail": "ENRICHED — CVE-2026-42616. Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63988",
      "detail": "ENRICHED — CVE-2026-63988 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63989",
      "detail": "ENRICHED — CVE-2026-63989 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63999",
      "detail": "ENRICHED — CVE-2026-63999 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98078",
      "detail": "ENRICHED — CVE-2026-98078 (Linux). Received CVSS 4.4 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98131",
      "detail": "ENRICHED — CVE-2026-98131 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98132",
      "detail": "ENRICHED — CVE-2026-98132 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98133",
      "detail": "ENRICHED — CVE-2026-98133 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98134",
      "detail": "ENRICHED — CVE-2026-98134 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98135",
      "detail": "ENRICHED — CVE-2026-98135 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98136",
      "detail": "ENRICHED — CVE-2026-98136 (Linux). Received CVSS 7.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98137",
      "detail": "ENRICHED — CVE-2026-98137 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98138",
      "detail": "ENRICHED — CVE-2026-98138 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-98139",
      "detail": "ENRICHED — CVE-2026-98139 (Linux). Received CVSS 5.5 and CPE data from NVD."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}