Security Box Score — October 14, 2026

Standings

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

3673 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Leaders (trailing 30 days unless noted)

Transactions

ADDED TO KEV — CVE-2026-0322 (Palo Alto Networks Cloud NGFW). Remediation due October 17, 2026.

ADDED TO KEV — CVE-2026-105133 (AhsayCBS). Remediation due October 17, 2026.

ADDED TO KEV — CVE-2026-105134 (AhsayCBS). Remediation due October 17, 2026.

ADDED TO KEV — CVE-2026-76519 (Cisco Secure Email). Remediation due October 17, 2026.

EXPLOIT PUBLISHED — https://github.com/curl/curl: 45 CVEs (CVE-2020-8169, CVE-2020-8177, CVE-2020-8231, CVE-2020-8285, CVE-2020-8286, CVE-2021-22876, CVE-2021-22890, CVE-2021-22897, CVE-2021-22898, CVE-2021-22901, CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, CVE-2021-22926, CVE-2021-22945, CVE-2021-22946, CVE-2021-22947, CVE-2022-22576, CVE-2022-27774, CVE-2022-27775, CVE-2022-27776, CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27781, CVE-2022-27782, CVE-2022-30115, CVE-2022-32205, CVE-2022-32206, CVE-2022-32207, CVE-2022-32208, CVE-2022-32221, CVE-2022-35252, CVE-2022-35260, CVE-2022-43551, CVE-2022-43552, CVE-2023-23914, CVE-2023-23916, CVE-2023-27533, CVE-2023-27534, CVE-2023-27535, CVE-2023-27536, CVE-2023-27537, CVE-2023-27538). Public exploit references added.

EXPLOIT PUBLISHED — JeecgBoot: 35 CVEs (CVE-2026-108605, CVE-2026-108608, CVE-2026-108610, CVE-2026-108613, CVE-2026-108615, CVE-2026-108618, CVE-2026-108620, CVE-2026-108623, CVE-2026-108625, CVE-2026-108628, CVE-2026-108630, CVE-2026-108633, CVE-2026-108635, CVE-2026-108638, CVE-2026-108640, CVE-2026-108643, CVE-2026-108645, CVE-2026-108648, CVE-2026-108650, CVE-2026-108653, CVE-2026-108655, CVE-2026-108658, CVE-2026-108660, CVE-2026-108663, CVE-2026-108665, CVE-2026-108668, CVE-2026-108670, CVE-2026-108673, CVE-2026-108675, CVE-2026-108678, CVE-2026-108680, CVE-2026-108870, CVE-2026-108875, CVE-2026-108880, CVE-2026-108885). Public exploit references added.

EXPLOIT PUBLISHED — GitLab: 12 CVEs (CVE-2026-7767, CVE-2026-9268, CVE-2026-14210, CVE-2026-14552, CVE-2026-14814, CVE-2026-16275, CVE-2026-16301, CVE-2026-81839, CVE-2026-84284, CVE-2026-85529, CVE-2026-92883, CVE-2026-97229). Public exploit references added.

EXPLOIT PUBLISHED — GNOME GLib: 6 CVEs (CVE-2026-58010, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58015, CVE-2026-58016). Public exploit references added.

EXPLOIT PUBLISHED — Google Chrome: 6 CVEs (CVE-2026-106341, CVE-2026-106342, CVE-2026-106345, CVE-2026-106354, CVE-2026-106360, CVE-2026-106361). Public exploit references added.

EXPLOIT PUBLISHED — kernel: 6 CVEs (CVE-2022-1015, CVE-2022-1462, CVE-2022-2153, CVE-2022-2905, CVE-2022-3628, CVE-2023-3338). Public exploit references added.

EXPLOIT PUBLISHED — TriliumNext Trilium: 6 CVEs (CVE-2026-47727, CVE-2026-48996, CVE-2026-53578, CVE-2026-53579, CVE-2026-53580, CVE-2026-77438). Public exploit references added.

EXPLOIT PUBLISHED — Linux Kernel: 5 CVEs (CVE-2022-2503, CVE-2022-2663, CVE-2022-3303, CVE-2022-3635, CVE-2023-4921). Public exploit references added.

EXPLOIT PUBLISHED — 1Panel-dev CordysCRM: 4 CVEs (CVE-2026-108692, CVE-2026-108700, CVE-2026-108703, CVE-2026-108705). Public exploit references added.

EXPLOIT PUBLISHED — gnutls: 4 CVEs (CVE-2021-20231, CVE-2023-0361, CVE-2026-3832, CVE-2026-3833). Public exploit references added.

EXPLOIT PUBLISHED — Red Hat Enterprise Linux 10: 4 CVEs (CVE-2026-4878, CVE-2026-48864, CVE-2026-55653, CVE-2026-90995). Public exploit references added.

EXPLOIT PUBLISHED — Edimax BR-6208AC: 3 CVEs (CVE-2026-108914, CVE-2026-108918, CVE-2026-108936). Public exploit references added.

EXPLOIT PUBLISHED — GNU Libc glibc: 3 CVEs (CVE-2019-1010023, CVE-2019-1010024, CVE-2019-1010025). Public exploit references added.

EXPLOIT PUBLISHED — Linux: 3 CVEs (CVE-2021-47107, CVE-2026-43502, CVE-2026-53264). Public exploit references added.

EXPLOIT PUBLISHED — Netcore NR268: 3 CVEs (CVE-2026-108906, CVE-2026-108931, CVE-2026-108932). Public exploit references added.

EXPLOIT PUBLISHED — python: 3 CVEs (CVE-2021-3733, CVE-2021-3737, CVE-2022-0391). Public exploit references added.

EXPLOIT PUBLISHED — sahlberg libsmb2: 3 CVEs (CVE-2026-110712, CVE-2026-110713, CVE-2026-110714). Public exploit references added.

EXPLOIT PUBLISHED — Systemd: 3 CVEs (CVE-2020-13529, CVE-2021-3997, CVE-2022-3821). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2013-0340 (libexpat). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2014-9323. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2015-1197. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2015-20107. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2015-2468. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2015-2469. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2015-2470. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2016-15060 (PCMan FTP Server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2016-20099 (l-smash). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2016-3709 (libxml2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2016-9318. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2017-17512. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2017-9047. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2017-9048. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2017-9049. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2017-9050. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-0495 (Libgcrypt before 1.7.10 and 1.8.x before 1.8.3). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-12886. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-19591. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-20482. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-20843. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2018-25032. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-1010022 (GNU C Library glibc). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-1010180 (GNU gdb). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-11360. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-15903. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-16905. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-17498. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-17594. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-17595. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-18224. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-18276. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-19906. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-20367. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-5018 (Sqlite3). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-5094 (E2fsprogs). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-5188 (E2fsprogs). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-5435 (curl). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-5436 (curl). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-7309. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-9169. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-9740. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-9947. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-9948. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-10029. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-11655. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-12243. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-12762. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-13434. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-13435. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-13871. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-15358. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-15778. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19185. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19186. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19187. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19188. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19189. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-19190. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-21913. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-24659. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-24977. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-26116. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-27618. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-29562. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-8492. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-23336 (python/cpython). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-27212. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-27219. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-28153. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-31239. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-3177. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-32292. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-33294. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-33574. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-33910. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-3516 (libxml2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-36084. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-36085. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-36086. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-36087. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-36690. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-37600. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-38604. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-3999 (glibc). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-43396. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-43618. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-44879. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-45960. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-46143. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-46195. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-46848. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-2274 (OpenSSL). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-23218. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-23219. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-25315. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-2586 (The Linux Kernel Organization linux). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-2588 (The Linux Kernel Organization linux). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-27943. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-29155. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-29824. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-32250. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-34918. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-35737. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-36123. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-3715 (bash). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-37434. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-37454. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-41218. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-41222. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-41674. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42703. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42719. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42720. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42721. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42722. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-42898. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-43680. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-45061. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-46908. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-47929. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-47946. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-48303. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-48522. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-48560. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-24329. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-25136. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-25139. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-26604. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-26607. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-27371. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-28484. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-29383. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-29491. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-4039 (Arm Ltd Arm GNU Toolchain). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-4273 (Red Hat Enterprise Linux 9). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-4911 (glibc). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-6606 (Red Hat Enterprise Linux 8). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-7104 (SQLite3). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-23368 (wildfly-core). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-61984 (OpenBSD OpenSSH). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-69263 (pnpm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-69264 (pnpm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-71316 (SQLite sqldiff). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-8110 (Gogs). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-101301 (Unknown WPCode). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-103307 (Unknown Walletdoc Payment Gateway for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-103308 (Unknown Visma Pay for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-104079 (Syed Balkhi Envira Gallery). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-104082 (Smartertools Smartermail). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-104644 (Unknown Image Photo Gallery Final Tiles Grid). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-104751 (Unknown Rank Math SEO). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-105261 (Unknown Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-105969 (Unknown CodeAtoZ B2B Suite for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-105975 (Unknown CamPay Shortcode Payment Gateway). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-106098 (Unknown WP Data Access). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-106099 (Unknown WP Data Access). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-106166 (Unknown NEX-Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-106469 (Unknown Gutenverse Form). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-106646 (Unknown Classified Listing). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107126 (Unknown WP Booking System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107158 (Unknown LTL Freight Quotes). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107160 (Unknown LTL Freight Quotes). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107178 (Unknown Image Photo Gallery Final Tiles Grid). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107319 (Unknown GamiPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107320 (Unknown GamiPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107335 (CISA Malcolm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107388 (Borewit music-metadata). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107390 (Borewit music-metadata). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107508 (Unknown Ultimate Multisite). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107594 (Unknown File Upload to Order). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-107696 (FFmpeg). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108064 (Unknown WP Encryption). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108066 (Unknown WP 2FA). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108069 (Unknown Sunshine Photo Cart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108110 (himovo MOVO). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108112 (ageerle ruoyi-ai). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108114 (strapi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108158 (mynaparrot plugNmeet-server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108522 (Studio-Saelix Sencho). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108540 (OpenSpug Spug). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108545 (SillyTavern). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108682 (zhayujie CowAgent). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108690 (gz-yami mall4j). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108708 (WuKongOpenSource Wukong_HRM). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108769 (zhayujie CowAgent). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108784 (macrozheng mall). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108788 (deepseek-ai deepseek-harness). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108802 (y_project RuoYi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108806 (krupalshah EmployeeRecruitmentSystem). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108810 (tsi-coop tsi-dpdp-cms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108814 (SEMCMS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108818 (agno-agi agno). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108827 (Zen Cart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108894 (Linksys E1700). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108922 (KusalkaSilva Learning-Management-System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108927 (itsourcecode Baptism Information Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108937 (code-projects Online Ticket Reservation System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108938 (code-projects Matrimonial System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108954 (k2-fsa sherpa-onnx). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108958 (TensorLayer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108967 (SourceCodester Performance Indicator System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108971 (D-Link DCS-930L). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-108975 (SourceCodester Library Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109109 (Wavlink WL-WN530BE1-A). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109116 (AdithyaYelloju Restaurant-Management-System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109157 (TRENDnet TEW-432BRP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109165 (TDuckCloud tduck-survey-form). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109167 (TDuckCloud tduck-survey-form). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109172 (guchengwuyue yshop-crm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109177 (moxi624 MoguBlog). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109182 (jishenghua jshERP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109187 (jishenghua jshERP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109425 (tink-crypto tink-go). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109519 (YouTransfer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109523 (girishsaraf Online-Appointment-Booking-System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109605 (SourceCodester Simple Cafe Billing System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-109620 (SourceCodester Online Reviewer System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110097 (ikaros-dev ikaros). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110107 (dromara RuoYi-Cloud-Plus). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110119 (guchengwuyue yshopmall). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110536 (D-Link DIR-868L). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110599 (l-smash). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110604 (Michael R Sweet Mini-XML). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110632 (Report One MyReport Updater). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110633 (Report One MyReport Updater). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110654 (zapping-vbi libzvbi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110655 (miniupnp project miniupnpc). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110656 (miniupnp project miniupnpc). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110657 (Khronos Group nnef). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110658 (freeswitch sofia-sip). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110659 (serge1 ELFIO). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110660 (vgmstream). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110661 (CGNS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110668 (cemtan sar2html). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110669 (cemtan sar2html). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110689 (OpenClaw ClawScan). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110694 (OAID Tengine). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110695 (turboderp ExLlamaV2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110696 (itsmeravitejak Online-Examination-System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110698 (Praat). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110716 (twogood unshield). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110717 (meetecho janus-gateway). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110718 (TurboDocx html-to-docx). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110719 (Portkey-AI gateway). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110763 (zuihou lamp-boot). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110764 (iflytek astron-rpa). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110765 (flexprice). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110766 (colanode). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110767 (coderamp-labs gitingest). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110768 (holaboss-ai holaOS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110769 (holaboss-ai holaOS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110770 (databasus). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110771 (Shopizer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110772 (we-promise sure). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110773 (growchief). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110774 (blinkospace blinko). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110775 (ModelEngine-Group nexent). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110807 (sgl-project SGLang). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-110867 (renovatebot renovate). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-21589 (Atlassian Bamboo Data Center). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-33829 (Microsoft Windows 10 Version 1607). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-35001 (OpenS100 Project OpenS100). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-61511 (vBulletin). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-62388 (nltk). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-82844 (Unknown WPForms Lite). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-85000 (Unknown EmbedPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-85345 (Unknown FV Flowplayer Video Player). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-85429 (moos-ivp). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-85431 (themoos essential-moos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-85433 (themoos essential-moos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-86787 (Unknown affiliate-toolkit). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-86797 (Unknown Pricing Table). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-86799 (Unknown Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-87843 (Unknown Trust Payments Gateway for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-87968 (Unknown Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-87974 (Unknown Asaas Gateway for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-88927 (Unknown rtMedia for WordPress, BuddyPress and bbPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-88998 (Unknown Tickera). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-89288 (Unknown Fast Courier). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-90989 (Unknown Tainacan). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-91076 (Unknown Robokassa payment gateway for Woocommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-92409 (Unknown Donation Thermometer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-92426 (Unknown YITH WooCommerce Popup). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94214 (ST Engineering iDirect iDX). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94216 (ST Engineering iDirect iDX). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94254 (Unknown SellKit). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94260 (Unknown Sifalo Pay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94261 (Unknown Sifalo Pay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-94360 (Unknown Paymentfor Gateway for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-96423 (Wireshark Foundation Wireshark). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-96900 (Unknown Cart Abandonment Recovery for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-96904 (Unknown AWP Classifieds). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-97147 (OpenStack Mistral). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-97315 (Unknown Responsive Blocks). Public exploit reference added.

DUE DATE PASSED — CVE-2026-86950 (Apple iOS and iPadOS). CISA remediation deadline was October 13, 2026; still in catalog.

RESCORED — Linux Kernel: 22 CVEs (CVE-2022-2327, CVE-2022-2503, CVE-2022-3521, CVE-2022-3524, CVE-2022-3545, CVE-2022-3564, CVE-2022-3565, CVE-2022-3606, CVE-2022-3621, CVE-2022-3625, CVE-2022-3629, CVE-2022-3633, CVE-2022-3635, CVE-2022-3646, CVE-2022-3649, CVE-2022-36280, CVE-2022-38096, CVE-2022-42432, CVE-2022-42895, CVE-2022-42896, CVE-2023-5197, CVE-2023-6932). CVSS rescored — before/after on each CVE page.

RESCORED — IBM Guardium Data Protection: 9 CVEs (CVE-2026-81932, CVE-2026-82895, CVE-2026-82900, CVE-2026-84032, CVE-2026-84035, CVE-2026-84057, CVE-2026-84058, CVE-2026-84246, CVE-2026-84247). CVSS rescored — before/after on each CVE page.

RESCORED — The libssh2 Project libssh2: 9 CVEs (CVE-2019-3855, CVE-2019-3856, CVE-2019-3857, CVE-2019-3858, CVE-2019-3859, CVE-2019-3860, CVE-2019-3861, CVE-2019-3862, CVE-2019-3863). CVSS rescored — before/after on each CVE page.

RESCORED — HCL Software HCL BigFix Service Management: 4 CVEs (CVE-2026-56590, CVE-2026-56592, CVE-2026-56595, CVE-2026-56597). CVSS rescored — before/after on each CVE page.

RESCORED — https://github.com/curl/curl: 4 CVEs (CVE-2021-22890, CVE-2022-27780, CVE-2023-27533, CVE-2023-27538). CVSS rescored — before/after on each CVE page.

RESCORED — IBM DataPower Gateway 10.6CD: 4 CVEs (CVE-2026-14508, CVE-2026-14888, CVE-2026-14988, CVE-2026-14999). CVSS rescored — before/after on each CVE page.

RESCORED — IBM i: 3 CVEs (CVE-2026-17484, CVE-2026-81858, CVE-2026-93886). CVSS rescored — before/after on each CVE page.

RESCORED — Microsoft Windows 10 Version 1607: 3 CVEs (CVE-2026-26167, CVE-2026-32090, CVE-2026-32091). CVSS rescored — before/after on each CVE page.

RESCORED — Microsoft Windows 10 Version 1809: 3 CVEs (CVE-2026-27918, CVE-2026-27927, CVE-2026-32088). CVSS rescored — before/after on each CVE page.

RESCORED — CVE-2019-15903. CVSS 6.5 → 7.5 (NVD).

RESCORED — CVE-2019-5188 (E2fsprogs). CVSS 7.5 → 6.7 (NVD).

RESCORED — CVE-2020-15778. CVSS 7.8 → 7.4 (NVD).

RESCORED — CVE-2020-1751 (Red Hat glibc). CVSS 5.1 → 7 (NVD).

RESCORED — CVE-2021-28861. CVSS 6.5 → 7.4 (NVD).

RESCORED — CVE-2021-46143. CVSS 8.1 → 7.8 (NVD).

RESCORED — CVE-2022-1292 (OpenSSL). CVSS 9.8 → 7.3 (NVD).

RESCORED — CVE-2022-2068 (OpenSSL). CVSS 9.8 → 7.3 (NVD).

RESCORED — CVE-2022-2588 (The Linux Kernel Organization linux). CVSS 5.3 → 7.8 (NVD).

RESCORED — CVE-2022-2602 (The Linux Kernel Organization linux). CVSS 5.3 → 7 (NVD).

RESCORED — CVE-2022-42328 (Linux). CVSS 6.2 → 5.5 (NVD).

RESCORED — CVE-2023-0687 (GNU C Library). CVSS 4.6 → 9.8 (NVD).

RESCORED — CVE-2023-29499 (glib2). CVSS 5.5 → 7.5 (NVD).

RESCORED — CVE-2023-3772 (Red Hat Enterprise Linux 8). CVSS 5.5 → 4.4 (NVD).

RESCORED — CVE-2023-3773 (Red Hat Enterprise Linux 9). CVSS 5.5 → 4.4 (NVD).

RESCORED — CVE-2023-4016 (Linux Kernal). CVSS 2.5 → 3.3 (NVD).

RESCORED — CVE-2023-4273 (Red Hat Enterprise Linux 9). CVSS 6 → 6.7 (NVD).

RESCORED — CVE-2023-7104 (SQLite3). CVSS 5.5 → 7.3 (NVD).

RESCORED — CVE-2025-69263 (pnpm). CVSS 7.5 → 8.8 (NVD).

RESCORED — CVE-2025-69264 (pnpm). CVSS 8.8 → 9.8 (NVD).

RESCORED — CVE-2026-107388 (Borewit music-metadata). CVSS 6.2 → 5.5 (NVD).

RESCORED — CVE-2026-107390 (Borewit music-metadata). CVSS 6.2 → 7.5 (NVD).

RESCORED — CVE-2026-21806 (HCL Software HCL BigFix Service Management). CVSS 3.1 → 9.8 (NVD).

RESCORED — CVE-2026-32176 (Microsoft SQL Server 2016 Service Pack 3 (GDR)). CVSS 6.7 → 7.8 (NVD).

RESCORED — CVE-2026-35001 (OpenS100 Project OpenS100). CVSS 8.4 → 7.1 (NVD).

RESCORED — CVE-2026-45494 (Microsoft Edge (Chromium-based)). CVSS 5.4 → 6.1 (NVD).

RESCORED — CVE-2026-45495 (Microsoft Edge (Chromium-based)). CVSS 8.8 → 9.8 (NVD).

RESCORED — CVE-2026-52296 (FFmpeg). CVSS 2.9 → 7.1 (NVD).

RESCORED — CVE-2026-52297 (FFmpeg). CVSS 2.9 → 7.1 (NVD).

RESCORED — CVE-2026-77532 (Ubiquiti Inc EdgeMAX EdgeSwitch). CVSS 9.6 → 8.8 (NVD).

RESCORED — CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.1 → 4.3 (NVD).

RESCORED — CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.5 → 8.8 (NVD).

RESCORED — CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.7 → 5.3 (NVD).

RESCORED — CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.1 → 8.8 (NVD).

RESCORED — CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 4.3 → 8.8 (NVD).

RESCORED — CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.5 → 7.2 (NVD).

RESCORED — CVE-2026-82103 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 6.5 (NVD).

RESCORED — CVE-2026-82110 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 9.9 (NVD).

RESCORED — CVE-2026-9268 (GitLab). CVSS 2.7 → 4.3 (NVD).

RESCORED — CVE-2026-97783 (Microsoft SharePoint Server 2019). CVSS 8.1 → 6.1 (NVD).

PATCH SHIPPED — Red Hat Enterprise Linux 9: 6 CVEs (CVE-2026-94640, CVE-2026-102556, CVE-2026-102557, CVE-2026-102558, CVE-2026-102559, CVE-2026-102560). Fix versions published.

PATCH SHIPPED — CVE-2025-13465 (lodash). Fixed in lodash 4.17.23.

PATCH SHIPPED — CVE-2026-101258 (Red Hat Enterprise Linux 8). Fixed in Red Hat Enterprise Linux 8 0:9.27-19.el8_10.

PATCH SHIPPED — CVE-2026-28167 (Super Forms). Fixed in Super Forms 6.3.317.

PATCH SHIPPED — CVE-2026-62040 (DEV Institute Restrict User Access – Membership Plugin with Force). Fixed in Restrict User Access – Membership Plugin with Force 2.8.2.

ENRICHED — kernel: 19 CVEs (CVE-2021-3759, CVE-2021-33655, CVE-2022-0171, CVE-2022-1012, CVE-2022-1015, CVE-2022-1184, CVE-2022-1462, CVE-2022-1679, CVE-2022-1852, CVE-2022-1882, CVE-2022-2078, CVE-2022-2153, CVE-2022-2905, CVE-2022-2959, CVE-2022-2978, CVE-2022-3169, CVE-2023-0590, CVE-2023-1206, CVE-2023-2898). Received CVSS/CPE analysis.

ENRICHED — https://github.com/curl/curl: 8 CVEs (CVE-2020-8169, CVE-2020-8231, CVE-2020-8286, CVE-2021-22923, CVE-2022-27776, CVE-2022-27779, CVE-2022-35260, CVE-2023-27537). Received CVSS/CPE analysis.

ENRICHED — libxml2: 5 CVEs (CVE-2016-3709, CVE-2021-3516, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541). Received CVSS/CPE analysis.

ENRICHED — SQLite: 4 CVEs (CVE-2019-8457, CVE-2020-35525, CVE-2020-35527, CVE-2021-20227). Received CVSS/CPE analysis.

ENRICHED — Linux kernel: 3 CVEs (CVE-2022-2663, CVE-2022-3028, CVE-2023-1077). Received CVSS/CPE analysis.

ENRICHED — openldap: 3 CVEs (CVE-2020-25692, CVE-2020-25709, CVE-2020-25710). Received CVSS/CPE analysis.

ENRICHED — OpenSSL: 3 CVEs (CVE-2022-1434, CVE-2022-2097, CVE-2022-2274). Received CVSS/CPE analysis.

ENRICHED — CVE-2013-4235 (shadow). Received CVSS 4.7 and CPE data from NVD.

ENRICHED — CVE-2014-0075. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2014-0096. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2014-0099. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2014-0114. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2014-0119. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2014-0227. Received CVSS 6.4 and CPE data from NVD.

ENRICHED — CVE-2014-0230. Received CVSS 7.8 and CPE data from NVD.

ENRICHED — CVE-2014-0459. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2014-7209. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2014-7810. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2014-9323. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-0085. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-0204. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2015-0254. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2015-0469. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-1197. Received CVSS 1.9 and CPE data from NVD.

ENRICHED — CVE-2015-1683. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-2423. Received CVSS 4.3 and CPE data from NVD.

ENRICHED — CVE-2015-2468. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-2469. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-2470. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-2477. Received CVSS 9.3 and CPE data from NVD.

ENRICHED — CVE-2015-2601. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-2621. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-2625. Received CVSS 2.6 and CPE data from NVD.

ENRICHED — CVE-2015-2627. Received CVSS 2.6 and CPE data from NVD.

ENRICHED — CVE-2015-2628. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-2637. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-2638. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-2664. Received CVSS 6.9 and CPE data from NVD.

ENRICHED — CVE-2015-4731. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-4732. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-4734. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-4748. Received CVSS 7.6 and CPE data from NVD.

ENRICHED — CVE-2015-4760. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-4803. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-4805. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-4806. Received CVSS 6.4 and CPE data from NVD.

ENRICHED — CVE-2015-4835. Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2015-4840. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-4842. Received CVSS 5.0 and CPE data from NVD.

ENRICHED — CVE-2015-4843. Received CVSS 10.0 and CPE data from NVD.

+ 169 more transaction lines — continued on page 2 (of 3). Every change is listed; nothing truncated.

Yesterday's Results

How to read these box scores · glossary

821 CVEs published. 25 box scores and 281 table rows below; the remaining 515 continue on page 3 — every CVE is listed, nothing truncated.

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0174   77.4   YES

AFFECTED
  Product             Versions      Fixed
  Cisco Secure Email  14.0.0-698 –  —

TIMELINE
  Aug 19  Reserved by CNA
  Oct 14  Added to CISA KEV, due Oct 17
  Oct 14  Published (CNA: cisco)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   H   H   H    8.6   .0108   64.3   YES

AFFECTED
  Product        Versions     Fixed
  Cloud NGFW     unspecified  All
  PAN-OS         12.2.0 –     12.2.4
  Prisma Access  unspecified  All

TIMELINE
  Nov 3   Reserved by CNA
  Oct 14  Added to CISA KEV, due Oct 17
  Oct 14  Published (CNA: palo_alto)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .2831   98.1     —

AFFECTED
  Product  Versions  Fixed
  Gitea    1.22 –    —

TIMELINE
  Jul 8   Reserved by CNA
  Oct 14  Published (CNA: Gitea)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   A   L   N   N   N   H   H   H    9.3   .0392   90.2     —

AFFECTED
  Product           Versions  Fixed
  Junos OS Evolved  24.4 –    —

TIMELINE
  Sep 28  Reserved by CNA
  Oct 14  Published (CNA: juniper)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   A   L   N   N   N   H   H   H    8.7   .0392   90.2     —

AFFECTED
  Product           Versions  Fixed
  Junos OS Evolved  24.4 –    —

TIMELINE
  Sep 28  Reserved by CNA
  Oct 14  Published (CNA: juniper)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   A   L   N   N   N   H   H   H    8.7   .0389   90.1     —

AFFECTED
  Product           Versions     Fixed
  Junos OS          unspecified  —
  Junos OS Evolved  unspecified  —

TIMELINE
  Sep 28  Reserved by CNA
  Oct 14  Published (CNA: juniper)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0325   88.1     —

AFFECTED
  Product       Versions     Fixed
  video-stitch  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0304   87.3     —

AFFECTED
  Product           Versions     Fixed
  office-converter  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0299   87.1     —

AFFECTED
  Product    Versions     Fixed
  thumbnail  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0293   86.9     —

AFFECTED
  Product   Versions   Fixed
  DIR-868L  2.01b05 –  —

TIMELINE
  Oct 14  Public exploit reference published
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulDB)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0273   85.8     —

AFFECTED
  Product    Versions     Fixed
  doc-recog  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0273   85.8     —

AFFECTED
  Product          Versions     Fixed
  @mborne/extract  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0273   85.8     —

AFFECTED
  Product       Versions     Fixed
  whisper-node  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0273   85.8     —

AFFECTED
  Product         Versions     Fixed
  nodejs-whisper  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0264   85.3     —

AFFECTED
  Product           Versions     Fixed
  transcribe2texts  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0252   84.6     —

AFFECTED
  Product         Versions     Fixed
  webp-converter  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0252   84.6     —

AFFECTED
  Product  Versions     Fixed
  stills   unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0251   84.5     —

AFFECTED
  Product                        Versions     Fixed
  @runnerty/executor-decompress  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0235   83.4     —

AFFECTED
  Product   Versions     Fixed
  git-diff  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0235   83.4     —

AFFECTED
  Product  Versions     Fixed
  pypdftk  unspecified  —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   H   H    9.2   .0212   81.5     —

AFFECTED
  Product  Versions  Fixed
  snappdf  1.1.0 –   —

TIMELINE
  Oct 14  Reserved by CNA
  Oct 14  Published (CNA: VulnCheck)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0210   81.3     —

AFFECTED
  Product           Versions     Fixed
  Junos OS Evolved  unspecified  —

TIMELINE
  Sep 28  Reserved by CNA
  Oct 14  Published (CNA: juniper)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0170   76.8     —

AFFECTED
  Product  Versions      Fixed
  TR7 ASP  1.0.40.236 –  —
  TR7 ASP  1.6.42.239 –  —

TIMELINE
  Jul 23  Reserved by CNA
  Oct 14  Published (CNA: TR-CERT)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0168   76.5     —

AFFECTED
  Product  Versions      Fixed
  TR7 ASP  1.0.40.236 –  —
  TR7 ASP  1.6.42.239 –  —

TIMELINE
  Jul 23  Reserved by CNA
  Oct 14  Published (CNA: TR-CERT)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   H   N  U  H  H  H    6.7   .0168   76.4     —

AFFECTED
  Product                    Versions     Fixed
  Guardicore Platform Agent  unspecified  —

TIMELINE
  May 14  Reserved by CNA
  Oct 14  Published (CNA: mitre)

Results continue: ranks 307–821.