{ "day": "2026-10-14", "boundary": "UTC calendar day", "published_count": 821, "by_severity": { "CRITICAL": 90, "HIGH": 366, "MEDIUM": 280, "LOW": 27 }, "kev_count": 2, "exploit_reference_count": 1, "awaiting_enrichment_count": 58, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-76519", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01743, "epss_percentile": 0.77354, "kev": true, "kev_due_at": "2026-10-17", "vendor": "Cisco", "product": "Cisco Secure Email", "cwe": "CWE-23", "title": "Cisco Secure Email Gateway Arbitrary File Write Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76519" }, { "rank": 2, "cve_id": "CVE-2026-0322", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.01076, "epss_percentile": 0.64349, "kev": true, "kev_due_at": "2026-10-17", "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-94", "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0322" }, { "rank": 3, "cve_id": "CVE-2026-59774", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.28308, "epss_percentile": 0.98099, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-22", "title": "Gitea Org-mode file disclosure and code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59774" }, { "rank": 4, "cve_id": "CVE-2026-101967", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.03916, "epss_percentile": 0.90163, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-78", "title": "Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101967" }, { "rank": 5, "cve_id": "CVE-2026-101978", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.03916, "epss_percentile": 0.90163, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-78", "title": "Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101978" }, { "rank": 6, "cve_id": "CVE-2026-102059", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.03894, "epss_percentile": 0.90104, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-78", "title": "Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102059" }, { "rank": 7, "cve_id": "CVE-2026-110645", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.03249, "epss_percentile": 0.88108, "kev": false, "kev_due_at": null, "vendor": "ArsalanDotMe", "product": "video-stitch", "cwe": "CWE-78", "title": "Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110645" }, { "rank": 8, "cve_id": "CVE-2020-37282", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.03037, "epss_percentile": 0.87273, "kev": false, "kev_due_at": null, "vendor": "vworld4u", "product": "office-converter", "cwe": "CWE-78", "title": "office-converter through 1.0.2 OS Command Injection via fileName in generatePdf", "url": "https://www.cve.org/CVERecord?id=CVE-2020-37282" }, { "rank": 9, "cve_id": "CVE-2026-110650", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02994, "epss_percentile": 0.87104, "kev": false, "kev_due_at": null, "vendor": "anshulkharb", "product": "thumbnail", "cwe": "CWE-78", "title": "Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110650" }, { "rank": 10, "cve_id": "CVE-2026-110536", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02934, "epss_percentile": 0.86853, "kev": false, "kev_due_at": null, "vendor": "D-Link", "product": "DIR-868L", "cwe": "CWE-77", "title": "D-Link DIR-868L HNAP CGI cgibin system os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110536" }, { "rank": 11, "cve_id": "CVE-2026-110638", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02727, "epss_percentile": 0.85811, "kev": false, "kev_due_at": null, "vendor": "zepspaiva", "product": "doc-recog", "cwe": "CWE-78", "title": "doc-recog through 1.1.6 OS Command Injection via DocData._readPDF File Path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110638" }, { "rank": 12, "cve_id": "CVE-2026-110639", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02727, "epss_percentile": 0.85811, "kev": false, "kev_due_at": null, "vendor": "mborne", "product": "@mborne/extract", "cwe": "CWE-78", "title": "@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110639" }, { "rank": 13, "cve_id": "CVE-2026-110640", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02727, "epss_percentile": 0.85812, "kev": false, "kev_due_at": null, "vendor": "ariym", "product": "whisper-node", "cwe": "CWE-78", "title": "Whisper-node through 1.1.1 OS Command Injection via filePath and language", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110640" }, { "rank": 14, "cve_id": "CVE-2026-110644", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02727, "epss_percentile": 0.85811, "kev": false, "kev_due_at": null, "vendor": "ChetanXpro", "product": "nodejs-whisper", "cwe": "CWE-78", "title": "nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110644" }, { "rank": 15, "cve_id": "CVE-2026-110643", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02639, "epss_percentile": 0.85297, "kev": false, "kev_due_at": null, "vendor": "kky-ykk", "product": "transcribe2texts", "cwe": "CWE-78", "title": "transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110643" }, { "rank": 16, "cve_id": "CVE-2026-110635", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02521, "epss_percentile": 0.84568, "kev": false, "kev_due_at": null, "vendor": "scionoftech", "product": "webp-converter", "cwe": "CWE-78", "title": "webp-converter before 3.0.0 OS Command Injection via File Names and Options", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110635" }, { "rank": 17, "cve_id": "CVE-2026-110649", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02521, "epss_percentile": 0.84568, "kev": false, "kev_due_at": null, "vendor": "shahkashani", "product": "stills", "cwe": "CWE-78", "title": "Stills before 25.24.2 OS Command Injection via Media File Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110649" }, { "rank": 18, "cve_id": "CVE-2026-110641", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.02515, "epss_percentile": 0.84521, "kev": false, "kev_due_at": null, "vendor": "runnerty", "product": "@runnerty/executor-decompress", "cwe": "CWE-78", "title": "@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110641" }, { "rank": 19, "cve_id": "CVE-2026-110634", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02348, "epss_percentile": 0.83364, "kev": false, "kev_due_at": null, "vendor": "danday74", "product": "git-diff", "cwe": "CWE-78", "title": "git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110634" }, { "rank": 20, "cve_id": "CVE-2026-110636", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02348, "epss_percentile": 0.83365, "kev": false, "kev_due_at": null, "vendor": "revolunet", "product": "pypdftk", "cwe": "CWE-78", "title": "pypdftk through 0.5 OS Command Injection via PDF and Output Paths", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110636" }, { "rank": 21, "cve_id": "CVE-2026-110646", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.02119, "epss_percentile": 0.81509, "kev": false, "kev_due_at": null, "vendor": "beganovich", "product": "snappdf", "cwe": "CWE-78", "title": "Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110646" }, { "rank": 22, "cve_id": "CVE-2026-102031", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.02098, "epss_percentile": 0.81337, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-78", "title": "Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102031" }, { "rank": 23, "cve_id": "CVE-2026-16741", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01699, "epss_percentile": 0.76775, "kev": false, "kev_due_at": null, "vendor": "TR7 Cyber ​​Defense Inc.", "product": "TR7 ASP", "cwe": "CWE-78", "title": "OS Command in TR7 Cyber ​​Defense's TR7 ASP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16741" }, { "rank": 24, "cve_id": "CVE-2026-16740", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01677, "epss_percentile": 0.76463, "kev": false, "kev_due_at": null, "vendor": "TR7 Cyber ​​Defense Inc.", "product": "TR7 ASP", "cwe": "CWE-306", "title": "Missing Authentication for Critical Function in TR7 Cyber ​​Defense's TR7 ASP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16740" }, { "rank": 25, "cve_id": "CVE-2026-46449", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": 0.01675, "epss_percentile": 0.76443, "kev": false, "kev_due_at": null, "vendor": "Akamai", "product": "Guardicore Platform Agent", "cwe": "CWE-78", "title": "The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command injection. An unprivileged local user with permissions to modify network interface names can exploit this by renaming a network interface to include a malicious shell payload via System Settings. When the \"Log out from your IdP\" action is subsequently triggered, the wapptunneld service processes the poisoned interface name, leading to the execution of arbitrary commands with root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46449" }, { "rank": 26, "cve_id": "CVE-2026-105106", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.01613, "epss_percentile": 0.75523, "kev": false, "kev_due_at": null, "vendor": "Koha Community", "product": "Koha", "cwe": "CWE-78", "title": "Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105106" }, { "rank": 27, "cve_id": "CVE-2026-110392", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01243, "epss_percentile": 0.68683, "kev": false, "kev_due_at": null, "vendor": "Samsung Open Source", "product": "QA-Board", "cwe": "CWE-78", "title": "Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110392" }, { "rank": 28, "cve_id": "CVE-2026-110447", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.01225, "epss_percentile": 0.68286, "kev": false, "kev_due_at": null, "vendor": "Collabora", "product": "Collabora Online - Built-in CODE Server", "cwe": "CWE-78", "title": "Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110447" }, { "rank": 29, "cve_id": "CVE-2026-110455", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.01205, "epss_percentile": 0.6773, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-20", "title": "A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110455" }, { "rank": 30, "cve_id": "CVE-2026-110637", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.01146, "epss_percentile": 0.66159, "kev": false, "kev_due_at": null, "vendor": "wastemobile", "product": "buildebooks", "cwe": "CWE-78", "title": "buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110637" }, { "rank": 31, "cve_id": "CVE-2026-110642", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.01146, "epss_percentile": 0.66159, "kev": false, "kev_due_at": null, "vendor": "xhtml2pdf", "product": "xhtml2pdf", "cwe": "CWE-78", "title": "xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110642" }, { "rank": 32, "cve_id": "CVE-2026-110648", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.01146, "epss_percentile": 0.66159, "kev": false, "kev_due_at": null, "vendor": "adamarcanov", "product": "compress-fonts", "cwe": "CWE-78", "title": "@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110648" }, { "rank": 33, "cve_id": "CVE-2026-101215", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": 0.01082, "epss_percentile": 0.64547, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Unisphere for PowerMax vApp", "cwe": "CWE-78", "title": "Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101215" }, { "rank": 34, "cve_id": "CVE-2026-101216", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": 0.01082, "epss_percentile": 0.64547, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Unisphere for PowerMax vApp", "cwe": "CWE-77", "title": "Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101216" }, { "rank": 35, "cve_id": "CVE-2026-110385", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.01042, "epss_percentile": 0.63404, "kev": false, "kev_due_at": null, "vendor": "ONLYOFFICE", "product": "Document Server", "cwe": "CWE-73", "title": "A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied through the optional third argument of builder.SaveFile(). By injecting a duplicate m_sFileTo element, an attacker can override the server-generated output path and write arbitrary content outside the designated job directory. This allows the attacker to overwrite the runtime.json configuration file, modify the Document Builder executable path and arguments, and execute arbitrary commands when a subsequent Document Builder job is processed.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110385" }, { "rank": 36, "cve_id": "CVE-2026-110647", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.01037, "epss_percentile": 0.63237, "kev": false, "kev_due_at": null, "vendor": "jinghaihan", "product": "turnpress", "cwe": "CWE-78", "title": "Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110647" }, { "rank": 37, "cve_id": "CVE-2026-104800", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01031, "epss_percentile": 0.63037, "kev": false, "kev_due_at": null, "vendor": "streetforce1", "product": "AGE-GATE", "cwe": "CWE-434", "title": "AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104800" }, { "rank": 38, "cve_id": "CVE-2026-103367", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.01007, "epss_percentile": 0.62318, "kev": false, "kev_due_at": null, "vendor": "wpdesk", "product": "ShopMagic – email automation for WordPress", "cwe": "CWE-98", "title": "ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103367" }, { "rank": 39, "cve_id": "CVE-2026-104909", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.01007, "epss_percentile": 0.62318, "kev": false, "kev_due_at": null, "vendor": "kitae-park", "product": "Mang Board", "cwe": "CWE-98", "title": "Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '_type' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104909" }, { "rank": 40, "cve_id": "CVE-2026-110612", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00995, "epss_percentile": 0.61957, "kev": false, "kev_due_at": null, "vendor": "wwwlike", "product": "vlife", "cwe": "CWE-321", "title": "vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110612" }, { "rank": 41, "cve_id": "CVE-2026-110002", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00976, "epss_percentile": 0.61402, "kev": false, "kev_due_at": null, "vendor": "snazzyplugins", "product": "Snazzy Social Media Feed", "cwe": "CWE-434", "title": "Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110002" }, { "rank": 42, "cve_id": "CVE-2026-82026", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00924, "epss_percentile": 0.59652, "kev": false, "kev_due_at": null, "vendor": "skyhook-io", "product": "radar", "cwe": "CWE-862", "title": "Radar < 1.12.2 Missing Authorization via /api/local-terminal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82026" }, { "rank": 43, "cve_id": "CVE-2026-110690", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00897, "epss_percentile": 0.5879, "kev": false, "kev_due_at": null, "vendor": "coderaiser", "product": "cloudcmd", "cwe": "CWE-23", "title": "Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110690" }, { "rank": 44, "cve_id": "CVE-2020-37281", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00881, "epss_percentile": 0.58336, "kev": false, "kev_due_at": null, "vendor": "Gravitee", "product": "Gravitee API Management", "cwe": "CWE-1394", "title": "Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2020-37281" }, { "rank": 45, "cve_id": "CVE-2026-93388", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00854, "epss_percentile": 0.57476, "kev": false, "kev_due_at": null, "vendor": "printcart", "product": "Printcart Store – Web to Print Product Designer for WooCommerce", "cwe": "CWE-434", "title": "Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93388" }, { "rank": 46, "cve_id": "CVE-2026-104995", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00853, "epss_percentile": 0.57436, "kev": false, "kev_due_at": null, "vendor": "dontdream", "product": "BP Profile Search", "cwe": "CWE-98", "title": "BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104995" }, { "rank": 47, "cve_id": "CVE-2026-100169", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00851, "epss_percentile": 0.57382, "kev": false, "kev_due_at": null, "vendor": "Prowler", "product": "Prowler", "cwe": "CWE-287", "title": "Account pre-hijacking in the Prowler API through email based social account linking without verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100169" }, { "rank": 48, "cve_id": "CVE-2026-0320", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00842, "epss_percentile": 0.57076, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-78", "title": "PAN-OS: Authenticated Admin Command Injection Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0320" }, { "rank": 49, "cve_id": "CVE-2026-0313", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00833, "epss_percentile": 0.5679, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cortex XSOAR OS Query", "cwe": "CWE-78", "title": "Cortex XSOAR: OS Command Injection Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0313" }, { "rank": 50, "cve_id": "CVE-2026-110616", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00807, "epss_percentile": 0.55973, "kev": false, "kev_due_at": null, "vendor": "nullclaw", "product": "NullHub", "cwe": "CWE-306", "title": "NullHub through 2026.5.29 Missing Authentication for /api Management API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110616" }, { "rank": 51, "cve_id": "CVE-2026-87855", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0079, "epss_percentile": 0.55339, "kev": false, "kev_due_at": null, "vendor": "ntbyk", "product": "JTL-Connector for WooCommerce", "cwe": "CWE-434", "title": "JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87855" }, { "rank": 52, "cve_id": "CVE-2026-110619", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00781, "epss_percentile": 0.5503, "kev": false, "kev_due_at": null, "vendor": "fatedier", "product": "frp", "cwe": "CWE-306", "title": "frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110619" }, { "rank": 53, "cve_id": "CVE-2026-108065", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00765, "epss_percentile": 0.54514, "kev": false, "kev_due_at": null, "vendor": "Channel Software", "product": "WebAlliance eCommerce", "cwe": "CWE-89", "title": "Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108065" }, { "rank": 54, "cve_id": "CVE-2026-101956", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00749, "epss_percentile": 0.53951, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-287", "title": "Junos OS: Unauthorized root command execution when J-Web is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101956" }, { "rank": 55, "cve_id": "CVE-2026-92158", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00747, "epss_percentile": 0.53905, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-190", "title": "F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92158" }, { "rank": 56, "cve_id": "CVE-2026-88164", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00741, "epss_percentile": 0.53688, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-862", "title": "Microsoft Office SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88164" }, { "rank": 57, "cve_id": "CVE-2026-86461", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0074, "epss_percentile": 0.53636, "kev": false, "kev_due_at": null, "vendor": "foliovision", "product": "FV Flowplayer Video Player", "cwe": "CWE-434", "title": "FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86461" }, { "rank": 58, "cve_id": "CVE-2026-102068", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00739, "epss_percentile": 0.53608, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-121", "title": "Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102068" }, { "rank": 59, "cve_id": "CVE-2026-102175", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00733, "epss_percentile": 0.53413, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-122", "title": "Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102175" }, { "rank": 60, "cve_id": "CVE-2026-110631", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00716, "epss_percentile": 0.5277, "kev": false, "kev_due_at": null, "vendor": "moghtech", "product": "komodo", "cwe": "CWE-1188", "title": "Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110631" }, { "rank": 61, "cve_id": "CVE-2026-101895", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00716, "epss_percentile": 0.52761, "kev": false, "kev_due_at": null, "vendor": "angular", "product": "angular", "cwe": "CWE-400", "title": "Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101895" }, { "rank": 62, "cve_id": "CVE-2026-109527", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.007, "epss_percentile": 0.52167, "kev": false, "kev_due_at": null, "vendor": "modelcontextprotocol", "product": "python-sdk", "cwe": "CWE-770", "title": "Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109527" }, { "rank": 63, "cve_id": "CVE-2026-110284", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00691, "epss_percentile": 0.51803, "kev": false, "kev_due_at": null, "vendor": "lifterlms", "product": "LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes", "cwe": "CWE-98", "title": "LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110284" }, { "rank": 64, "cve_id": "CVE-2026-33789", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00687, "epss_percentile": 0.51657, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33789" }, { "rank": 65, "cve_id": "CVE-2026-101896", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00686, "epss_percentile": 0.51629, "kev": false, "kev_due_at": null, "vendor": "angular", "product": "angular", "cwe": "CWE-400", "title": "Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101896" }, { "rank": 66, "cve_id": "CVE-2026-42093", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00684, "epss_percentile": 0.51559, "kev": false, "kev_due_at": null, "vendor": "getredash", "product": "redash", "cwe": "CWE-89", "title": "Redash: SQL Injection via Query Results parameterized query substitution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42093" }, { "rank": 67, "cve_id": "CVE-2026-108390", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00675, "epss_percentile": 0.5118, "kev": false, "kev_due_at": null, "vendor": "hestiacp", "product": "hestiacp", "cwe": "CWE-88", "title": "HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108390" }, { "rank": 68, "cve_id": "CVE-2026-110658", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00673, "epss_percentile": 0.51079, "kev": false, "kev_due_at": null, "vendor": "freeswitch", "product": "sofia-sip", "cwe": "CWE-125", "title": "Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110658" }, { "rank": 69, "cve_id": "CVE-2026-92152", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0067, "epss_percentile": 0.50934, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-129", "title": "F´: Unvalidated Port Index in GenericHub", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92152" }, { "rank": 70, "cve_id": "CVE-2026-106931", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00662, "epss_percentile": 0.50577, "kev": false, "kev_due_at": null, "vendor": "EG Secure Solutions Inc.", "product": "SiteGuard Server Edition for Apache httpd", "cwe": "CWE-78", "title": "SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106931" }, { "rank": 71, "cve_id": "CVE-2026-102079", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00659, "epss_percentile": 0.50446, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-78", "title": "Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102079" }, { "rank": 72, "cve_id": "CVE-2026-110632", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00649, "epss_percentile": 0.50001, "kev": false, "kev_due_at": null, "vendor": "Report One", "product": "MyReport Updater", "cwe": "CWE-306", "title": "Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110632" }, { "rank": 73, "cve_id": "CVE-2026-103975", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00648, "epss_percentile": 0.49959, "kev": false, "kev_due_at": null, "vendor": "appium", "product": "appium", "cwe": "CWE-59", "title": "Appium: Symlink based Zip Slip in @appium/support ZIP extraction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103975" }, { "rank": 74, "cve_id": "CVE-2026-104748", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00646, "epss_percentile": 0.4986, "kev": false, "kev_due_at": null, "vendor": "wpazleen", "product": "SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications", "cwe": "CWE-269", "title": "SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104748" }, { "rank": 75, "cve_id": "CVE-2026-104764", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00644, "epss_percentile": 0.49764, "kev": false, "kev_due_at": null, "vendor": "wpazleen", "product": "Post Export Import with Media", "cwe": "CWE-502", "title": "Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104764" }, { "rank": 76, "cve_id": "CVE-2026-110617", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00644, "epss_percentile": 0.49777, "kev": false, "kev_due_at": null, "vendor": "rachelos", "product": "we-mp-rss", "cwe": "CWE-862", "title": "we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110617" }, { "rank": 77, "cve_id": "CVE-2026-110630", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00637, "epss_percentile": 0.49423, "kev": false, "kev_due_at": null, "vendor": "venturedrake", "product": "laravel-crm", "cwe": "CWE-863", "title": "VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110630" }, { "rank": 78, "cve_id": "CVE-2026-77524", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00635, "epss_percentile": 0.49318, "kev": false, "kev_due_at": null, "vendor": "kedacore", "product": "keda", "cwe": "CWE-269", "title": "KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77524" }, { "rank": 79, "cve_id": "CVE-2026-85714", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00629, "epss_percentile": 0.49025, "kev": false, "kev_due_at": null, "vendor": "Stirling-Tools", "product": "Stirling-PDF", "cwe": "CWE-94", "title": "Stirling-PDF: Remote Code Execution via H2", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85714" }, { "rank": 80, "cve_id": "CVE-2026-110594", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00623, "epss_percentile": 0.48737, "kev": false, "kev_due_at": null, "vendor": "MicroPyramid", "product": "BottleCRM", "cwe": "CWE-1333", "title": "BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110594" }, { "rank": 81, "cve_id": "CVE-2026-109439", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00618, "epss_percentile": 0.48481, "kev": false, "kev_due_at": null, "vendor": "LANTRONIX", "product": "XPress-DR", "cwe": "CWE-306", "title": "Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109439" }, { "rank": 82, "cve_id": "CVE-2026-33792", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0061, "epss_percentile": 0.48065, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33792" }, { "rank": 83, "cve_id": "CVE-2026-108395", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00608, "epss_percentile": 0.47905, "kev": false, "kev_due_at": null, "vendor": "modelcontextprotocol", "product": "io.modelcontextprotocol.sdk:mcp", "cwe": "CWE-770", "title": "Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108395" }, { "rank": 84, "cve_id": "CVE-2026-101965", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00601, "epss_percentile": 0.4758, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-134", "title": "Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101965" }, { "rank": 85, "cve_id": "CVE-2026-55573", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00595, "epss_percentile": 0.47248, "kev": false, "kev_due_at": null, "vendor": "e107inc", "product": "e107", "cwe": "CWE-502", "title": "e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55573" }, { "rank": 86, "cve_id": "CVE-2026-110669", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00594, "epss_percentile": 0.47213, "kev": false, "kev_due_at": null, "vendor": "cemtan", "product": "sar2html", "cwe": "CWE-287", "title": "cemtan sar2html sar2html.py deleteAll missing authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110669" }, { "rank": 87, "cve_id": "CVE-2026-102174", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0059, "epss_percentile": 0.47, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102174" }, { "rank": 88, "cve_id": "CVE-2026-105429", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": 0.00584, "epss_percentile": 0.46722, "kev": false, "kev_due_at": null, "vendor": "NetBird", "product": "NetBird", "cwe": "CWE-78", "title": "NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105429" }, { "rank": 89, "cve_id": "CVE-2026-110444", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00584, "epss_percentile": 0.46698, "kev": false, "kev_due_at": null, "vendor": "TEAMPLUS TECHNOLOGY", "product": "TeamPlus Messenger", "cwe": "CWE-94", "title": "TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110444" }, { "rank": 90, "cve_id": "CVE-2026-110445", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00584, "epss_percentile": 0.46697, "kev": false, "kev_due_at": null, "vendor": "TEAMPLUS TECHNOLOGY", "product": "TeamPlus Messenger", "cwe": "CWE-94", "title": "TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110445" }, { "rank": 91, "cve_id": "CVE-2026-101217", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00579, "epss_percentile": 0.46401, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Unisphere for PowerMax vApp", "cwe": "CWE-22", "title": "Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101217" }, { "rank": 92, "cve_id": "CVE-2026-101986", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00578, "epss_percentile": 0.46342, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-287", "title": "Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101986" }, { "rank": 93, "cve_id": "CVE-2026-110629", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00574, "epss_percentile": 0.4615, "kev": false, "kev_due_at": null, "vendor": "venturedrake", "product": "laravel-crm", "cwe": "CWE-862", "title": "VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110629" }, { "rank": 94, "cve_id": "CVE-2026-102012", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00573, "epss_percentile": 0.46124, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-617", "title": "Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102012" }, { "rank": 95, "cve_id": "CVE-2026-76655", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00573, "epss_percentile": 0.46098, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SNMP Trap Multiplexer", "cwe": "CWE-121", "title": "HPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76655" }, { "rank": 96, "cve_id": "CVE-2025-71433", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00572, "epss_percentile": 0.46066, "kev": false, "kev_due_at": null, "vendor": "usekaneo", "product": "kaneo", "cwe": "CWE-862", "title": "Kaneo before 2.1.6 Missing Authorization Allows Cross-Workspace Data Access", "url": "https://www.cve.org/CVERecord?id=CVE-2025-71433" }, { "rank": 97, "cve_id": "CVE-2026-110761", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0057, "epss_percentile": 0.45971, "kev": false, "kev_due_at": null, "vendor": "ILIAS-eLearning e.V.", "product": "ILIAS", "cwe": "CWE-502", "title": "ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110761" }, { "rank": 98, "cve_id": "CVE-2026-101982", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00568, "epss_percentile": 0.45813, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101982" }, { "rank": 99, "cve_id": "CVE-2026-101990", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00568, "epss_percentile": 0.45813, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101990" }, { "rank": 100, "cve_id": "CVE-2026-101955", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00566, "epss_percentile": 0.45758, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101955" }, { "rank": 101, "cve_id": "CVE-2026-86002", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00563, "epss_percentile": 0.45552, "kev": false, "kev_due_at": null, "vendor": "dokku", "product": "dokku", "cwe": "CWE-95", "title": "Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86002" }, { "rank": 102, "cve_id": "CVE-2026-92154", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0056, "epss_percentile": 0.45346, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-190", "title": "F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92154" }, { "rank": 103, "cve_id": "CVE-2026-33796", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00558, "epss_percentile": 0.45222, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33796" }, { "rank": 104, "cve_id": "CVE-2026-110620", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00558, "epss_percentile": 0.45237, "kev": false, "kev_due_at": null, "vendor": "formbricks", "product": "formbricks", "cwe": "CWE-639", "title": "Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110620" }, { "rank": 105, "cve_id": "CVE-2026-89067", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00556, "epss_percentile": 0.45108, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-288", "title": "MOVEit Transfer Secure Messaging Authentication Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89067" }, { "rank": 106, "cve_id": "CVE-2026-93479", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00554, "epss_percentile": 0.44997, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-122", "title": "NGINX map directive and regex matching vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93479" }, { "rank": 107, "cve_id": "CVE-2026-101945", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00549, "epss_percentile": 0.4467, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-190", "title": "Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101945" }, { "rank": 108, "cve_id": "CVE-2026-101957", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00549, "epss_percentile": 0.4467, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-665", "title": "Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101957" }, { "rank": 109, "cve_id": "CVE-2026-102028", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00549, "epss_percentile": 0.44673, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102028" }, { "rank": 110, "cve_id": "CVE-2026-60018", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00548, "epss_percentile": 0.44643, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-400", "title": "Gitea OneDev migration denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60018" }, { "rank": 111, "cve_id": "CVE-2026-62925", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00548, "epss_percentile": 0.44642, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-400", "title": "Gitea Alpine package parsing memory exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62925" }, { "rank": 112, "cve_id": "CVE-2026-63021", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00548, "epss_percentile": 0.44641, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-400", "title": "Gitea Swift package manifest memory exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63021" }, { "rank": 113, "cve_id": "CVE-2026-110714", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00545, "epss_percentile": 0.44458, "kev": false, "kev_due_at": null, "vendor": "sahlberg", "product": "libsmb2", "cwe": "CWE-191", "title": "libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110714" }, { "rank": 114, "cve_id": "CVE-2026-67414", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00543, "epss_percentile": 0.44323, "kev": false, "kev_due_at": null, "vendor": "rabbitmq", "product": "rabbitmq-server", "cwe": "CWE-400", "title": "RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67414" }, { "rank": 115, "cve_id": "CVE-2026-67416", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.44209, "kev": false, "kev_due_at": null, "vendor": "rabbitmq", "product": "rabbitmq-server", "cwe": "CWE-20", "title": "RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67416" }, { "rank": 116, "cve_id": "CVE-2026-101983", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0054, "epss_percentile": 0.44139, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101983" }, { "rank": 117, "cve_id": "CVE-2026-104749", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0054, "epss_percentile": 0.44173, "kev": false, "kev_due_at": null, "vendor": "bitpressadmin", "product": "Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation", "cwe": "CWE-269", "title": "Bit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104749" }, { "rank": 118, "cve_id": "CVE-2026-92156", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0054, "epss_percentile": 0.44129, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-131", "title": "F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92156" }, { "rank": 119, "cve_id": "CVE-2026-17092", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00539, "epss_percentile": 0.44102, "kev": false, "kev_due_at": null, "vendor": "wpwax", "product": "Directorist: AI-Powered Business Directory, Listings & Classified Ads", "cwe": "CWE-862", "title": "Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17092" }, { "rank": 120, "cve_id": "CVE-2026-100232", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00537, "epss_percentile": 0.43952, "kev": false, "kev_due_at": null, "vendor": "SonicWall", "product": "Network Security Manager (NSM)", "cwe": "CWE-78", "title": "Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute arbitrary OS commands, resulting in remote code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100232" }, { "rank": 121, "cve_id": "CVE-2026-103905", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00531, "epss_percentile": 0.43563, "kev": false, "kev_due_at": null, "vendor": "JTL-Software GmbH", "product": "JTL-Shop", "cwe": "CWE-306", "title": "Unauthenticated Plugin Safe Mode Toggle Vulnerability in JTL-Shop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103905" }, { "rank": 122, "cve_id": "CVE-2026-110248", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00531, "epss_percentile": 0.43575, "kev": false, "kev_due_at": null, "vendor": "AWS", "product": "SageMaker Python SDK", "cwe": "CWE-532", "title": "Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110248" }, { "rank": 123, "cve_id": "CVE-2026-103423", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0053, "epss_percentile": 0.43519, "kev": false, "kev_due_at": null, "vendor": "masaakitanaka", "product": "Booking Package", "cwe": "CWE-862", "title": "Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103423" }, { "rank": 124, "cve_id": "CVE-2026-105659", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00528, "epss_percentile": 0.43409, "kev": false, "kev_due_at": null, "vendor": "mtrudel", "product": "bandit", "cwe": "CWE-400", "title": "HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105659" }, { "rank": 125, "cve_id": "CVE-2026-77371", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00525, "epss_percentile": 0.43178, "kev": false, "kev_due_at": null, "vendor": "getredash", "product": "redash", "cwe": "CWE-284", "title": "Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77371" }, { "rank": 126, "cve_id": "CVE-2026-92097", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00525, "epss_percentile": 0.43187, "kev": false, "kev_due_at": null, "vendor": "holithemes", "product": "Click to Chat – HoliThemes", "cwe": "CWE-94", "title": "Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92097" }, { "rank": 127, "cve_id": "CVE-2026-110621", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00523, "epss_percentile": 0.43052, "kev": false, "kev_due_at": null, "vendor": "Swetrix", "product": "swetrix", "cwe": "CWE-862", "title": "Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110621" }, { "rank": 128, "cve_id": "CVE-2026-15176", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00516, "epss_percentile": 0.42584, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-122", "title": "NGINX ngx_http_core_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15176" }, { "rank": 129, "cve_id": "CVE-2016-15060", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00516, "epss_percentile": 0.4255, "kev": false, "kev_due_at": null, "vendor": "PCMan", "product": "FTP Server", "cwe": "CWE-119", "title": "PCMan FTP Server PORT buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2016-15060" }, { "rank": 130, "cve_id": "CVE-2026-55572", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00515, "epss_percentile": 0.42519, "kev": false, "kev_due_at": null, "vendor": "e107inc", "product": "e107", "cwe": "CWE-89", "title": "e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55572" }, { "rank": 131, "cve_id": "CVE-2026-110846", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00511, "epss_percentile": 0.4219, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-180", "title": "n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110846" }, { "rank": 132, "cve_id": "CVE-2026-102084", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00509, "epss_percentile": 0.42075, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1286", "title": "Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102084" }, { "rank": 133, "cve_id": "CVE-2026-54554", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00508, "epss_percentile": 0.42039, "kev": false, "kev_due_at": null, "vendor": "FOGProject", "product": "fogproject", "cwe": "CWE-200", "title": "FOG adInfo endpoint is reported to disclose the Active Directory join password", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54554" }, { "rank": 134, "cve_id": "CVE-2026-110310", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00508, "epss_percentile": 0.42034, "kev": false, "kev_due_at": null, "vendor": "Amazon", "product": "Amazon.Extensions.S3.Encryption", "cwe": "CWE-204", "title": "RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110310" }, { "rank": 135, "cve_id": "CVE-2026-107508", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00503, "epss_percentile": 0.41608, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Ultimate Multisite", "cwe": "CWE-22", "title": "Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107508" }, { "rank": 136, "cve_id": "CVE-2026-110666", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.005, "epss_percentile": 0.4142, "kev": false, "kev_due_at": null, "vendor": "cemtan", "product": "sar2html", "cwe": "CWE-22", "title": "cemtan sar2html File Upload sar2html.py updateDb path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110666" }, { "rank": 137, "cve_id": "CVE-2026-110622", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00499, "epss_percentile": 0.41332, "kev": false, "kev_due_at": null, "vendor": "papermerge", "product": "papermerge-core", "cwe": "CWE-862", "title": "Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110622" }, { "rank": 138, "cve_id": "CVE-2026-110623", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00499, "epss_percentile": 0.41333, "kev": false, "kev_due_at": null, "vendor": "papermerge", "product": "papermerge-core", "cwe": "CWE-862", "title": "Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110623" }, { "rank": 139, "cve_id": "CVE-2026-57489", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00497, "epss_percentile": 0.41193, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-290", "title": "FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57489" }, { "rank": 140, "cve_id": "CVE-2026-110770", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00495, "epss_percentile": 0.4106, "kev": false, "kev_due_at": null, "vendor": "databasus", "product": "databasus", "cwe": "CWE-307", "title": "Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110770" }, { "rank": 141, "cve_id": "CVE-2026-92151", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00494, "epss_percentile": 0.4101, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-617", "title": "F´: SpacePacketDeframer Small Packet Assertion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92151" }, { "rank": 142, "cve_id": "CVE-2026-55680", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00492, "epss_percentile": 0.40872, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-89", "title": "WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via \"codigo\" parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55680" }, { "rank": 143, "cve_id": "CVE-2026-101954", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00492, "epss_percentile": 0.40801, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-287", "title": "Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101954" }, { "rank": 144, "cve_id": "CVE-2026-104103", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00492, "epss_percentile": 0.40869, "kev": false, "kev_due_at": null, "vendor": "ludwig-ai", "product": "ludwig", "cwe": "CWE-22", "title": "Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104103" }, { "rank": 145, "cve_id": "CVE-2026-71184", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0049, "epss_percentile": 0.40717, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-863", "title": "Gitea fork workflow approval bypass through review events", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71184" }, { "rank": 146, "cve_id": "CVE-2026-102748", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00486, "epss_percentile": 0.40379, "kev": false, "kev_due_at": null, "vendor": "dgraph-io", "product": "dgraph", "cwe": "CWE-306", "title": "Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102748" }, { "rank": 147, "cve_id": "CVE-2026-89076", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00486, "epss_percentile": 0.40374, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-89", "title": "MOVEit Transfer SQL injection in custom reporting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89076" }, { "rank": 148, "cve_id": "CVE-2026-102037", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00482, "epss_percentile": 0.40077, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-91", "title": "Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102037" }, { "rank": 149, "cve_id": "CVE-2026-91184", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00482, "epss_percentile": 0.4006, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Gateway Fabric", "cwe": "CWE-76", "title": "NGINX Gateway Fabric vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91184" }, { "rank": 150, "cve_id": "CVE-2026-91156", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00482, "epss_percentile": 0.40066, "kev": false, "kev_due_at": null, "vendor": "discourse", "product": "discourse", "cwe": "CWE-862", "title": "Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91156" }, { "rank": 151, "cve_id": "CVE-2026-91157", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00482, "epss_percentile": 0.40065, "kev": false, "kev_due_at": null, "vendor": "discourse", "product": "discourse", "cwe": "CWE-200", "title": "Discourse: Media uploads remain publicly accessible after category permissions are restricted", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91157" }, { "rank": 152, "cve_id": "CVE-2026-102046", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00479, "epss_percentile": 0.39902, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-835", "title": "Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102046" }, { "rank": 153, "cve_id": "CVE-2026-103366", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00475, "epss_percentile": 0.39586, "kev": false, "kev_due_at": null, "vendor": "latepoint", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "cwe": "CWE-639", "title": "Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103366" }, { "rank": 154, "cve_id": "CVE-2026-55683", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00474, "epss_percentile": 0.39475, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-89", "title": "WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55683" }, { "rank": 155, "cve_id": "CVE-2026-55684", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00474, "epss_percentile": 0.39475, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-89", "title": "WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55684" }, { "rank": 156, "cve_id": "CVE-2026-60010", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00472, "epss_percentile": 0.39339, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-266", "title": "Gitea organization team policy bypass through repository API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60010" }, { "rank": 157, "cve_id": "CVE-2026-101980", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0047, "epss_percentile": 0.39194, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-191", "title": "Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101980" }, { "rank": 158, "cve_id": "CVE-2026-108071", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00469, "epss_percentile": 0.391, "kev": false, "kev_due_at": null, "vendor": "TSplus", "product": "TSplus Remote Access", "cwe": "CWE-304", "title": "Improper Multi-Factor Authentication Validation Allows Authentication Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108071" }, { "rank": 159, "cve_id": "CVE-2026-101950", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00468, "epss_percentile": 0.39006, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-122", "title": "Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101950" }, { "rank": 160, "cve_id": "CVE-2026-94200", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00468, "epss_percentile": 0.39047, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-1288", "title": "TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94200" }, { "rank": 161, "cve_id": "CVE-2026-62858", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00468, "epss_percentile": 0.39005, "kev": false, "kev_due_at": null, "vendor": "YOURLS", "product": "YOURLS", "cwe": "CWE-98", "title": "YOURLS: Unauthenticated File Inclusion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62858" }, { "rank": 162, "cve_id": "CVE-2026-89310", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00467, "epss_percentile": 0.38955, "kev": false, "kev_due_at": null, "vendor": "JTL SW GmbH", "product": "JTL-WMS", "cwe": "CWE-89", "title": "SQL Command Injection Vulnerability in JTL-WMS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89310" }, { "rank": 163, "cve_id": "CVE-2026-110713", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38965, "kev": false, "kev_due_at": null, "vendor": "sahlberg", "product": "libsmb2", "cwe": "CWE-125", "title": "libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110713" }, { "rank": 164, "cve_id": "CVE-2026-92150", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38838, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-617", "title": "F´: GenericHub Malformed Buffer Assertion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92150" }, { "rank": 165, "cve_id": "CVE-2026-110609", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38858, "kev": false, "kev_due_at": null, "vendor": "dromara", "product": "skyeye", "cwe": "CWE-89", "title": "Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110609" }, { "rank": 166, "cve_id": "CVE-2026-110614", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38858, "kev": false, "kev_due_at": null, "vendor": "Yiuman", "product": "citrus", "cwe": "CWE-89", "title": "Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110614" }, { "rank": 167, "cve_id": "CVE-2026-110595", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00466, "epss_percentile": 0.38836, "kev": false, "kev_due_at": null, "vendor": "MicroPyramid", "product": "BottleCRM", "cwe": "CWE-770", "title": "BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110595" }, { "rank": 168, "cve_id": "CVE-2026-110858", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00464, "epss_percentile": 0.38723, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-88", "title": "GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110858" }, { "rank": 169, "cve_id": "CVE-2026-110717", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00463, "epss_percentile": 0.38655, "kev": false, "kev_due_at": null, "vendor": "meetecho", "product": "janus-gateway", "cwe": "CWE-22", "title": "Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110717" }, { "rank": 170, "cve_id": "CVE-2026-107126", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00462, "epss_percentile": 0.38599, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Booking System", "cwe": "CWE-79", "title": "WP Booking System < 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107126" }, { "rank": 171, "cve_id": "CVE-2026-107594", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.0046, "epss_percentile": 0.38412, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "File Upload to Order", "cwe": "CWE-73", "title": "File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107594" }, { "rank": 172, "cve_id": "CVE-2026-102070", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.0046, "epss_percentile": 0.38376, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102070" }, { "rank": 173, "cve_id": "CVE-2026-101939", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38389, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101939" }, { "rank": 174, "cve_id": "CVE-2026-101940", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38394, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101940" }, { "rank": 175, "cve_id": "CVE-2026-101941", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38385, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101941" }, { "rank": 176, "cve_id": "CVE-2026-101942", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38385, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-130", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101942" }, { "rank": 177, "cve_id": "CVE-2026-101943", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38391, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-20", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101943" }, { "rank": 178, "cve_id": "CVE-2026-101944", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38391, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-190", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101944" }, { "rank": 179, "cve_id": "CVE-2026-101948", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.3839, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101948" }, { "rank": 180, "cve_id": "CVE-2026-101951", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.3839, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1288", "title": "Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101951" }, { "rank": 181, "cve_id": "CVE-2026-101976", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.3838, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101976" }, { "rank": 182, "cve_id": "CVE-2026-101977", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38383, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101977" }, { "rank": 183, "cve_id": "CVE-2026-102016", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38374, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102016" }, { "rank": 184, "cve_id": "CVE-2026-102020", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38382, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102020" }, { "rank": 185, "cve_id": "CVE-2026-102022", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38373, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102022" }, { "rank": 186, "cve_id": "CVE-2026-102023", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38373, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-617", "title": "Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102023" }, { "rank": 187, "cve_id": "CVE-2026-102024", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38374, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-190", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102024" }, { "rank": 188, "cve_id": "CVE-2026-102025", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38374, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-762", "title": "Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102025" }, { "rank": 189, "cve_id": "CVE-2026-102026", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38374, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-664", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102026" }, { "rank": 190, "cve_id": "CVE-2026-102027", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38382, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-131", "title": "Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102027" }, { "rank": 191, "cve_id": "CVE-2026-102029", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38375, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102029" }, { "rank": 192, "cve_id": "CVE-2026-102030", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38375, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-459", "title": "Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102030" }, { "rank": 193, "cve_id": "CVE-2026-102036", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38372, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-190", "title": "Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102036" }, { "rank": 194, "cve_id": "CVE-2026-102044", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38375, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102044" }, { "rank": 195, "cve_id": "CVE-2026-102065", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38375, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102065" }, { "rank": 196, "cve_id": "CVE-2026-102183", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38376, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102183" }, { "rank": 197, "cve_id": "CVE-2026-102184", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0046, "epss_percentile": 0.38368, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102184" }, { "rank": 198, "cve_id": "CVE-2026-59951", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00458, "epss_percentile": 0.38172, "kev": false, "kev_due_at": null, "vendor": "modelcontextprotocol", "product": "python-sdk", "cwe": "CWE-400", "title": "MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59951" }, { "rank": 199, "cve_id": "CVE-2026-108291", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00457, "epss_percentile": 0.38153, "kev": false, "kev_due_at": null, "vendor": "itthinx", "product": "Affiliates", "cwe": "CWE-502", "title": "WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108291" }, { "rank": 200, "cve_id": "CVE-2026-89068", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00456, "epss_percentile": 0.38035, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-304", "title": "MOVEit Transfer Authentication bypass in LDAP sign-on", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89068" }, { "rank": 201, "cve_id": "CVE-2026-102178", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00454, "epss_percentile": 0.37931, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102178" }, { "rank": 202, "cve_id": "CVE-2026-96661", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00454, "epss_percentile": 0.37873, "kev": false, "kev_due_at": null, "vendor": "pasyuk", "product": "Gmedia Photo Gallery", "cwe": "CWE-89", "title": "Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96661" }, { "rank": 203, "cve_id": "CVE-2026-55385", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00454, "epss_percentile": 0.37876, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-918", "title": "InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55385" }, { "rank": 204, "cve_id": "CVE-2026-108070", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00449, "epss_percentile": 0.37508, "kev": false, "kev_due_at": null, "vendor": "TSplus", "product": "TSplus Remote Access", "cwe": "CWE-552", "title": "Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108070" }, { "rank": 205, "cve_id": "CVE-2026-103977", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00449, "epss_percentile": 0.37489, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-307", "title": "FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103977" }, { "rank": 206, "cve_id": "CVE-2026-55681", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00448, "epss_percentile": 0.37432, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-89", "title": "WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55681" }, { "rank": 207, "cve_id": "CVE-2026-110712", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00448, "epss_percentile": 0.37397, "kev": false, "kev_due_at": null, "vendor": "sahlberg", "product": "libsmb2", "cwe": "CWE-125", "title": "libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110712" }, { "rank": 208, "cve_id": "CVE-2026-101979", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00447, "epss_percentile": 0.3737, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101979" }, { "rank": 209, "cve_id": "CVE-2026-97668", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00445, "epss_percentile": 0.37137, "kev": false, "kev_due_at": null, "vendor": "Tyche Softwares", "product": "Abandoned Cart Pro for WooCommerce", "cwe": "CWE-89", "title": "Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97668" }, { "rank": 210, "cve_id": "CVE-2026-101949", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00445, "epss_percentile": 0.37186, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101949" }, { "rank": 211, "cve_id": "CVE-2026-101963", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00445, "epss_percentile": 0.37186, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-682", "title": "Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101963" }, { "rank": 212, "cve_id": "CVE-2026-89069", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00444, "epss_percentile": 0.37097, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-79", "title": "MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89069" }, { "rank": 213, "cve_id": "CVE-2026-100163", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00444, "epss_percentile": 0.37058, "kev": false, "kev_due_at": null, "vendor": "latepoint", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "cwe": "CWE-287", "title": "Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallback", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100163" }, { "rank": 214, "cve_id": "CVE-2026-110718", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00442, "epss_percentile": 0.36921, "kev": false, "kev_due_at": null, "vendor": "TurboDocx", "product": "html-to-docx", "cwe": "CWE-918", "title": "TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110718" }, { "rank": 215, "cve_id": "CVE-2026-97205", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00441, "epss_percentile": 0.36825, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-416", "title": "NGINX ngx_http_core_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97205" }, { "rank": 216, "cve_id": "CVE-2026-102298", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00437, "epss_percentile": 0.36465, "kev": false, "kev_due_at": null, "vendor": "TP-Link System Inc.", "product": "Omada Software Controller (Windows)", "cwe": "CWE-639", "title": "Insufficient Authorization and User Boundary Validation in Omada Controller MSP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102298" }, { "rank": 217, "cve_id": "CVE-2026-97278", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00437, "epss_percentile": 0.36503, "kev": false, "kev_due_at": null, "vendor": "WP SYNTEX", "product": "Polylang", "cwe": "CWE-502", "title": "WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97278" }, { "rank": 218, "cve_id": "CVE-2026-92153", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00437, "epss_percentile": 0.36442, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-22", "title": "F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92153" }, { "rank": 219, "cve_id": "CVE-2026-110615", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00436, "epss_percentile": 0.36387, "kev": false, "kev_due_at": null, "vendor": "jishenghua", "product": "jshERP", "cwe": "CWE-862", "title": "jshERP through 3.6 Missing Authorization via /user/batchSetStatus", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110615" }, { "rank": 220, "cve_id": "CVE-2026-91159", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00435, "epss_percentile": 0.36305, "kev": false, "kev_due_at": null, "vendor": "discourse", "product": "discourse", "cwe": "CWE-79", "title": "Discourse: Stored oEmbed HTML injection via allowed iframe", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91159" }, { "rank": 221, "cve_id": "CVE-2026-63792", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00435, "epss_percentile": 0.36285, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-280", "title": "Gitea private reusable workflow disclosure to fork runs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63792" }, { "rank": 222, "cve_id": "CVE-2026-95808", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00434, "epss_percentile": 0.36159, "kev": false, "kev_due_at": null, "vendor": "10web", "product": "Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder", "cwe": "CWE-89", "title": "Form Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95808" }, { "rank": 223, "cve_id": "CVE-2026-54525", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35585, "kev": false, "kev_due_at": null, "vendor": "shd101wyy", "product": "vscode-markdown-preview-enhanced", "cwe": "CWE-78", "title": "Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54525" }, { "rank": 224, "cve_id": "CVE-2026-103994", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.35561, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-122", "title": "Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103994" }, { "rank": 225, "cve_id": "CVE-2026-55679", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00428, "epss_percentile": 0.3557, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-78", "title": "WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55679" }, { "rank": 226, "cve_id": "CVE-2026-101966", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00426, "epss_percentile": 0.35386, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-134", "title": "Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101966" }, { "rank": 227, "cve_id": "CVE-2026-66877", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00426, "epss_percentile": 0.35377, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea fork workflow approval bypass through concurrency cancellation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66877" }, { "rank": 228, "cve_id": "CVE-2026-110628", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00425, "epss_percentile": 0.35255, "kev": false, "kev_due_at": null, "vendor": "kanbn", "product": "kan", "cwe": "CWE-918", "title": "Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110628" }, { "rank": 229, "cve_id": "CVE-2026-91882", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00424, "epss_percentile": 0.35157, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Terraform Provider for OME", "cwe": "CWE-209", "title": "Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91882" }, { "rank": 230, "cve_id": "CVE-2026-102986", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00424, "epss_percentile": 0.35201, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-639", "title": "Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102986" }, { "rank": 231, "cve_id": "CVE-2026-78193", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00424, "epss_percentile": 0.35167, "kev": false, "kev_due_at": null, "vendor": "ntbyk", "product": "JTL-Connector for WooCommerce", "cwe": "CWE-89", "title": "JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78193" }, { "rank": 232, "cve_id": "CVE-2026-55383", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00423, "epss_percentile": 0.35078, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-285", "title": "InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55383" }, { "rank": 233, "cve_id": "CVE-2026-100413", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00423, "epss_percentile": 0.351, "kev": false, "kev_due_at": null, "vendor": "seaweedfs", "product": "seaweedfs", "cwe": "CWE-321", "title": "SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100413" }, { "rank": 234, "cve_id": "CVE-2026-100394", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00423, "epss_percentile": 0.35114, "kev": false, "kev_due_at": null, "vendor": "nezhahq", "product": "nezha", "cwe": "CWE-362", "title": "Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100394" }, { "rank": 235, "cve_id": "CVE-2026-110593", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00423, "epss_percentile": 0.35063, "kev": false, "kev_due_at": null, "vendor": "MicroPyramid", "product": "BottleCRM", "cwe": "CWE-1336", "title": "BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110593" }, { "rank": 236, "cve_id": "CVE-2026-107349", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00422, "epss_percentile": 0.3495, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "PgBouncer", "cwe": "CWE-400", "title": "Infinite loop on empty option name in startup options parameter in PgBouncer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107349" }, { "rank": 237, "cve_id": "CVE-2026-106599", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0042, "epss_percentile": 0.3475, "kev": false, "kev_due_at": null, "vendor": "Brainstorm Force", "product": "SureCart", "cwe": "CWE-502", "title": "WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106599" }, { "rank": 238, "cve_id": "CVE-2026-92157", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0042, "epss_percentile": 0.34804, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-190", "title": "F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92157" }, { "rank": 239, "cve_id": "CVE-2026-107381", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0042, "epss_percentile": 0.34745, "kev": false, "kev_due_at": null, "vendor": "darylldoyle", "product": "svg-sanitizer", "cwe": "CWE-178", "title": "svg-sanitizer: Mixed-case xlink:HrEf skips the `` nesting-DoS check in Resolver::processReferences", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107381" }, { "rank": 240, "cve_id": "CVE-2026-104110", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00418, "epss_percentile": 0.34554, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-200", "title": "FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104110" }, { "rank": 241, "cve_id": "CVE-2026-110857", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00416, "epss_percentile": 0.344, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-1287", "title": "GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110857" }, { "rank": 242, "cve_id": "CVE-2026-89071", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00415, "epss_percentile": 0.34253, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-90", "title": "MOVEit Transfer LDAP injection in certificate-based authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89071" }, { "rank": 243, "cve_id": "CVE-2026-110613", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00415, "epss_percentile": 0.34258, "kev": false, "kev_due_at": null, "vendor": "youlaitech", "product": "youlai-mall", "cwe": "CWE-639", "title": "youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110613" }, { "rank": 244, "cve_id": "CVE-2026-100404", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00415, "epss_percentile": 0.34264, "kev": false, "kev_due_at": null, "vendor": "zulip", "product": "zulip", "cwe": "CWE-862", "title": "Zulip: Guests can read new messages in non-subscribed public channels", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100404" }, { "rank": 245, "cve_id": "CVE-2026-110696", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00414, "epss_percentile": 0.34137, "kev": false, "kev_due_at": null, "vendor": "itsmeravitejak", "product": "Online-Examination-System", "cwe": "CWE-200", "title": "itsmeravitejak Online-Examination-System dbtables.sql information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110696" }, { "rank": 246, "cve_id": "CVE-2026-76083", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00414, "epss_percentile": 0.34089, "kev": false, "kev_due_at": null, "vendor": "getredash", "product": "redash", "cwe": "CWE-918", "title": "Redash: JSON data source query URL can bypass base URL restriction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76083" }, { "rank": 247, "cve_id": "CVE-2026-57490", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00413, "epss_percentile": 0.33981, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-308", "title": "FileRise: WebDAV authentication bypasses TOTP/MFA entirely", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57490" }, { "rank": 248, "cve_id": "CVE-2026-102182", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00411, "epss_percentile": 0.33781, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102182" }, { "rank": 249, "cve_id": "CVE-2026-102072", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00411, "epss_percentile": 0.33771, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-409", "title": "Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102072" }, { "rank": 250, "cve_id": "CVE-2026-84471", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00408, "epss_percentile": 0.33469, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "OpenVPN", "cwe": "CWE-416", "title": "The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84471" }, { "rank": 251, "cve_id": "CVE-2026-86787", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00408, "epss_percentile": 0.33483, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "affiliate-toolkit", "cwe": "CWE-94", "title": "Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86787" }, { "rank": 252, "cve_id": "CVE-2026-25946", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00408, "epss_percentile": 0.33513, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-918", "title": "Gitea OpenID discovery server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-25946" }, { "rank": 253, "cve_id": "CVE-2026-102062", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00407, "epss_percentile": 0.33397, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-134", "title": "Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102062" }, { "rank": 254, "cve_id": "CVE-2026-110767", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00407, "epss_percentile": 0.33353, "kev": false, "kev_due_at": null, "vendor": "coderamp-labs", "product": "gitingest", "cwe": "CWE-59", "title": "Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110767" }, { "rank": 255, "cve_id": "CVE-2026-89070", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00405, "epss_percentile": 0.33133, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-294", "title": "MOVEit Transfer OIDC Authentication Replay Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89070" }, { "rank": 256, "cve_id": "CVE-2026-103904", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00404, "epss_percentile": 0.33014, "kev": false, "kev_due_at": null, "vendor": "JTL-Software GmbH", "product": "JTL-Shop", "cwe": "CWE-79", "title": "Stored XSS Vulnerability in JTL-Shop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103904" }, { "rank": 257, "cve_id": "CVE-2026-68957", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.32905, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea restricted-user issue search disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68957" }, { "rank": 258, "cve_id": "CVE-2026-68964", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.32905, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea restricted-user SSH and GPG key metadata disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-68964" }, { "rank": 259, "cve_id": "CVE-2026-67418", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.004, "epss_percentile": 0.32585, "kev": false, "kev_due_at": null, "vendor": "rabbitmq", "product": "rabbitmq-server", "cwe": "CWE-248", "title": "RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67418" }, { "rank": 260, "cve_id": "CVE-2026-110608", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.004, "epss_percentile": 0.32611, "kev": false, "kev_due_at": null, "vendor": "BizSpring", "product": "BizSpring Shop", "cwe": "CWE-639", "title": "BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110608" }, { "rank": 261, "cve_id": "CVE-2026-89074", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00398, "epss_percentile": 0.32391, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-176", "title": "MOVEit Transfer Email MFA Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89074" }, { "rank": 262, "cve_id": "CVE-2026-110652", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00398, "epss_percentile": 0.32374, "kev": false, "kev_due_at": null, "vendor": "ONLYOFFICE", "product": "DocumentServer", "cwe": "CWE-918", "title": "ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110652" }, { "rank": 263, "cve_id": "CVE-2026-107178", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00395, "epss_percentile": 0.32043, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Image Photo Gallery Final Tiles Grid", "cwe": "CWE-79", "title": "Image Photo Gallery Final Tiles Grid < 3.6.16 - Contributor+ Stored XSS via 'lightboxOptions' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107178" }, { "rank": 264, "cve_id": "CVE-2026-89077", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00394, "epss_percentile": 0.31938, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-303", "title": "MOVEit Transfer Identity validation flaw in SFTP authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89077" }, { "rank": 265, "cve_id": "CVE-2026-110777", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": 0.00394, "epss_percentile": 0.32007, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-200", "title": "Evolution-data-server: local file disclosure via attach file:// uris", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110777" }, { "rank": 266, "cve_id": "CVE-2026-94197", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00393, "epss_percentile": 0.31838, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Ingress Controller", "cwe": "CWE-290", "title": "NGINX Ingress Controller vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94197" }, { "rank": 267, "cve_id": "CVE-2026-35161", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00393, "epss_percentile": 0.31877, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "PowerScale InsightIQ", "cwe": "CWE-645", "title": "Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-35161" }, { "rank": 268, "cve_id": "CVE-2026-110625", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00393, "epss_percentile": 0.31807, "kev": false, "kev_due_at": null, "vendor": "MacWarrior", "product": "clipbucket-v5", "cwe": "CWE-79", "title": "ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110625" }, { "rank": 269, "cve_id": "CVE-2026-101997", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00392, "epss_percentile": 0.31645, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-89", "title": "Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101997" }, { "rank": 270, "cve_id": "CVE-2026-93885", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00392, "epss_percentile": 0.31638, "kev": false, "kev_due_at": null, "vendor": "blackworks1", "product": "Cryptocurrency Donation Box – Bitcoin & Crypto Donations", "cwe": "CWE-79", "title": "Cryptocurrency Donation Box <= 2.2.13 - Unauthenticated Stored Cross-Site Scripting via data_object Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93885" }, { "rank": 271, "cve_id": "CVE-2026-94377", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00392, "epss_percentile": 0.31638, "kev": false, "kev_due_at": null, "vendor": "avisverifies", "product": "Verified Reviews (Avis Vérifiés)", "cwe": "CWE-79", "title": "Verified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting via 'moderation' Parameter (discussion.commentaire)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94377" }, { "rank": 272, "cve_id": "CVE-2026-107348", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00392, "epss_percentile": 0.31617, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "PgBouncer", "cwe": "CWE-190", "title": "Integer overflow causes an infinite loop in message buffer growth in PgBouncer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107348" }, { "rank": 273, "cve_id": "CVE-2026-107424", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00391, "epss_percentile": 0.31611, "kev": false, "kev_due_at": null, "vendor": "M A Vinoth Kumar", "product": "Frontend Dashboard", "cwe": "CWE-266", "title": "WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107424" }, { "rank": 274, "cve_id": "CVE-2026-102893", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.0039, "epss_percentile": 0.31415, "kev": false, "kev_due_at": null, "vendor": "zulip", "product": "zulip", "cwe": "CWE-287", "title": "Zulip: OpenID Connect authentication ignores the email_verified claim", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102893" }, { "rank": 275, "cve_id": "CVE-2026-73273", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00389, "epss_percentile": 0.31381, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-770", "title": "Gitea Maven checksum upload quota bypass and memory exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73273" }, { "rank": 276, "cve_id": "CVE-2026-110618", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00387, "epss_percentile": 0.31088, "kev": false, "kev_due_at": null, "vendor": "pppscn", "product": "SmsForwarder", "cwe": "CWE-306", "title": "SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110618" }, { "rank": 277, "cve_id": "CVE-2026-14765", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00387, "epss_percentile": 0.31103, "kev": false, "kev_due_at": null, "vendor": "Epic Games", "product": "Unreal Engine", "cwe": "CWE-1188", "title": "Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14765" }, { "rank": 278, "cve_id": "CVE-2026-55382", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00382, "epss_percentile": 0.3053, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-639", "title": "InvoiceShelf: Cross-company read/modify/delete of notes via missing company scope in NotePolicy (BOLA/IDOR)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55382" }, { "rank": 279, "cve_id": "CVE-2026-101962", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00381, "epss_percentile": 0.30439, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-130", "title": "Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101962" }, { "rank": 280, "cve_id": "CVE-2026-70400", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.0038, "epss_percentile": 0.30343, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-863", "title": "Gitea private migration creation with public-only tokens", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70400" }, { "rank": 281, "cve_id": "CVE-2026-102251", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00379, "epss_percentile": 0.30209, "kev": false, "kev_due_at": null, "vendor": "Tyche Softwares", "product": "Abandoned Cart Pro for WooCommerce", "cwe": "CWE-89", "title": "Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102251" }, { "rank": 282, "cve_id": "CVE-2026-103946", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00378, "epss_percentile": 0.30121, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Nessus", "cwe": "CWE-89", "title": "SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103946" }, { "rank": 283, "cve_id": "CVE-2026-97657", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00376, "epss_percentile": 0.29907, "kev": false, "kev_due_at": null, "vendor": "Tyche Softwares", "product": "Abandoned Cart Pro for WooCommerce", "cwe": "CWE-639", "title": "Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97657" }, { "rank": 284, "cve_id": "CVE-2026-73252", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00376, "epss_percentile": 0.29966, "kev": false, "kev_due_at": null, "vendor": "cesanta", "product": "mongoose", "cwe": "CWE-125", "title": "Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73252" }, { "rank": 285, "cve_id": "CVE-2026-86799", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00375, "epss_percentile": 0.29843, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Forms", "cwe": "CWE-79", "title": "Forms < 3.0.2 - Unauthenticated Stored XSS via Form Submission", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86799" }, { "rank": 286, "cve_id": "CVE-2026-102081", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00374, "epss_percentile": 0.29694, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-401", "title": "Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102081" }, { "rank": 287, "cve_id": "CVE-2026-101897", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00374, "epss_percentile": 0.29711, "kev": false, "kev_due_at": null, "vendor": "angular", "product": "angular", "cwe": "CWE-346", "title": "Angular DevTools (Local DoS)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101897" }, { "rank": 288, "cve_id": "CVE-2026-33795", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.2964, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-197", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33795" }, { "rank": 289, "cve_id": "CVE-2026-101952", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.29641, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": null, "title": "Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101952" }, { "rank": 290, "cve_id": "CVE-2026-101961", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.2964, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101961" }, { "rank": 291, "cve_id": "CVE-2026-102064", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.29641, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102064" }, { "rank": 292, "cve_id": "CVE-2026-102179", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.2964, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102179" }, { "rank": 293, "cve_id": "CVE-2026-102185", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00373, "epss_percentile": 0.29641, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-835", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102185" }, { "rank": 294, "cve_id": "CVE-2026-102057", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29445, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: An attacker causes DHCP service disruption during DHCP client operation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102057" }, { "rank": 295, "cve_id": "CVE-2026-102180", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29445, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102180" }, { "rank": 296, "cve_id": "CVE-2026-66849", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0037, "epss_percentile": 0.29343, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea restricted-user package visibility bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66849" }, { "rank": 297, "cve_id": "CVE-2026-66853", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0037, "epss_percentile": 0.29342, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-200", "title": "Gitea restricted-user organization metadata disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66853" }, { "rank": 298, "cve_id": "CVE-2026-67577", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0037, "epss_percentile": 0.29342, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea restricted-user activity and heatmap disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67577" }, { "rank": 299, "cve_id": "CVE-2026-60008", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.0037, "epss_percentile": 0.29356, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-79", "title": "Gitea Jupyter notebook UI redress through CSS class injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60008" }, { "rank": 300, "cve_id": "CVE-2026-69193", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00369, "epss_percentile": 0.29124, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-307", "title": "FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69193" }, { "rank": 301, "cve_id": "CVE-2026-102086", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00367, "epss_percentile": 0.28958, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102086" }, { "rank": 302, "cve_id": "CVE-2026-110847", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00367, "epss_percentile": 0.28911, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-79", "title": "n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110847" }, { "rank": 303, "cve_id": "CVE-2026-92155", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00366, "epss_percentile": 0.28848, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-617", "title": "F´: FileUplink Unknown Packet Type Assertion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92155" }, { "rank": 304, "cve_id": "CVE-2026-73130", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00366, "epss_percentile": 0.28845, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-400", "title": "Gitea repository initialization resource exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73130" }, { "rank": 305, "cve_id": "CVE-2026-103930", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00366, "epss_percentile": 0.28808, "kev": false, "kev_due_at": null, "vendor": "yhirose", "product": "cpp-httplib", "cwe": "CWE-113", "title": "cpp-httplib open_stream serializes CRLF in request target into HTTP request line", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103930" }, { "rank": 306, "cve_id": "CVE-2026-95816", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00365, "epss_percentile": 0.28726, "kev": false, "kev_due_at": null, "vendor": "edgarrojas", "product": "Smart Forms – when you need more than just a contact form", "cwe": "CWE-79", "title": "Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95816" }, { "rank": 307, "cve_id": "CVE-2026-102899", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00364, "epss_percentile": 0.28613, "kev": false, "kev_due_at": null, "vendor": "getsentry", "product": "sentry", "cwe": "CWE-287", "title": "Sentry: Improper authentication on SAML SSO process allows user identity linking", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102899" }, { "rank": 308, "cve_id": "CVE-2026-110719", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.28672, "kev": false, "kev_due_at": null, "vendor": "Portkey-AI", "product": "gateway", "cwe": "CWE-918", "title": "Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110719" }, { "rank": 309, "cve_id": "CVE-2026-100229", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.28674, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-787", "title": "Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100229" }, { "rank": 310, "cve_id": "CVE-2026-55386", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00363, "epss_percentile": 0.28476, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-89", "title": "InvoiceShelf ORDER BY SQL injection through orderByField", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55386" }, { "rank": 311, "cve_id": "CVE-2026-105236", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00363, "epss_percentile": 0.28532, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-295", "title": "TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105236" }, { "rank": 312, "cve_id": "CVE-2026-110695", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00362, "epss_percentile": 0.28447, "kev": false, "kev_due_at": null, "vendor": "turboderp", "product": "ExLlamaV2", "cwe": "CWE-119", "title": "turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110695" }, { "rank": 313, "cve_id": "CVE-2026-107350", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00361, "epss_percentile": 0.28269, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "PgBouncer", "cwe": "CWE-287", "title": "Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107350" }, { "rank": 314, "cve_id": "CVE-2026-85298", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00361, "epss_percentile": 0.28294, "kev": false, "kev_due_at": null, "vendor": "Google Cloud", "product": "Application Integration", "cwe": "CWE-863", "title": "Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85298" }, { "rank": 315, "cve_id": "CVE-2026-73135", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00361, "epss_percentile": 0.28232, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-200", "title": "Gitea hidden-owner repository listing disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73135" }, { "rank": 316, "cve_id": "CVE-2026-104939", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28007, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Ingress Controller", "cwe": "CWE-303", "title": "NGINX Ingress Controller vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104939" }, { "rank": 317, "cve_id": "CVE-2026-109438", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00358, "epss_percentile": 0.27947, "kev": false, "kev_due_at": null, "vendor": "3proxy", "product": "3proxy", "cwe": "CWE-908", "title": "3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109438" }, { "rank": 318, "cve_id": "CVE-2026-73793", "cvss_base": 7.9, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.27864, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Middleware", "cwe": "CWE-502", "title": "HPE NonStop Middleware - Secret key handling vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73793" }, { "rank": 319, "cve_id": "CVE-2026-102944", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.27772, "kev": false, "kev_due_at": null, "vendor": "yhirose", "product": "cpp-httplib", "cwe": "CWE-522", "title": "cpp-httplib: Cookie header leaked on cross-origin redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102944" }, { "rank": 320, "cve_id": "CVE-2026-110627", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00357, "epss_percentile": 0.27823, "kev": false, "kev_due_at": null, "vendor": "MacWarrior", "product": "clipbucket-v5", "cwe": "CWE-79", "title": "ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110627" }, { "rank": 321, "cve_id": "CVE-2026-101973", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00356, "epss_percentile": 0.27702, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101973" }, { "rank": 322, "cve_id": "CVE-2026-110852", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00355, "epss_percentile": 0.27635, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-288", "title": "n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110852" }, { "rank": 323, "cve_id": "CVE-2026-110626", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00354, "epss_percentile": 0.27526, "kev": false, "kev_due_at": null, "vendor": "MacWarrior", "product": "clipbucket-v5", "cwe": "CWE-79", "title": "ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110626" }, { "rank": 324, "cve_id": "CVE-2026-33798", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00351, "epss_percentile": 0.27141, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33798" }, { "rank": 325, "cve_id": "CVE-2026-102755", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00351, "epss_percentile": 0.27105, "kev": false, "kev_due_at": null, "vendor": "dataease", "product": "dataease", "cwe": "CWE-79", "title": "DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102755" }, { "rank": 326, "cve_id": "CVE-2026-110592", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.0035, "epss_percentile": 0.26997, "kev": false, "kev_due_at": null, "vendor": "MicroPyramid", "product": "BottleCRM", "cwe": "CWE-116", "title": "BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110592" }, { "rank": 327, "cve_id": "CVE-2026-102014", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.26916, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102014" }, { "rank": 328, "cve_id": "CVE-2026-102015", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.26916, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-122", "title": "Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102015" }, { "rank": 329, "cve_id": "CVE-2026-102069", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.26916, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102069" }, { "rank": 330, "cve_id": "CVE-2026-100406", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.26895, "kev": false, "kev_due_at": null, "vendor": "dbt-labs", "product": "dbt-core", "cwe": "CWE-22", "title": "dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100406" }, { "rank": 331, "cve_id": "CVE-2026-73261", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.26933, "kev": false, "kev_due_at": null, "vendor": "cesanta", "product": "mongoose", "cwe": "CWE-20", "title": "Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73261" }, { "rank": 332, "cve_id": "CVE-2026-109506", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00346, "epss_percentile": 0.26487, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "RE190 v5", "cwe": "CWE-287", "title": "Improper Authentication in Multiple TP-Link WiFi Repeaters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109506" }, { "rank": 333, "cve_id": "CVE-2026-103307", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00345, "epss_percentile": 0.26399, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Walletdoc Payment Gateway for WooCommerce", "cwe": "CWE-89", "title": "Walletdoc Payment Gateway for WooCommerce < 1.8.5 - Unauthenticated SQLi and Order Payment Forgery via Webhook", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103307" }, { "rank": 334, "cve_id": "CVE-2026-104767", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00345, "epss_percentile": 0.2644, "kev": false, "kev_due_at": null, "vendor": "davefx", "product": "Membership & User Roles for WooCommerce (Automatic Role Changer)", "cwe": "CWE-269", "title": "Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104767" }, { "rank": 335, "cve_id": "CVE-2026-55682", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00343, "epss_percentile": 0.26143, "kev": false, "kev_due_at": null, "vendor": "LabRedesCefetRJ", "product": "WeGIA", "cwe": "CWE-200", "title": "WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55682" }, { "rank": 336, "cve_id": "CVE-2026-110668", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00343, "epss_percentile": 0.26189, "kev": false, "kev_due_at": null, "vendor": "cemtan", "product": "sar2html", "cwe": "CWE-74", "title": "cemtan sar2html sar2html.py index sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110668" }, { "rank": 337, "cve_id": "CVE-2026-102082", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00342, "epss_percentile": 0.26024, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-166", "title": "Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102082" }, { "rank": 338, "cve_id": "CVE-2026-55387", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00341, "epss_percentile": 0.25921, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-284", "title": "InvoiceShelf bulk deletion lacks company scoping", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55387" }, { "rank": 339, "cve_id": "CVE-2026-70406", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00341, "epss_percentile": 0.26019, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-863", "title": "Gitea private comparison disclosure with public-only tokens", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70406" }, { "rank": 340, "cve_id": "CVE-2026-102049", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0034, "epss_percentile": 0.25799, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102049" }, { "rank": 341, "cve_id": "CVE-2026-102052", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0034, "epss_percentile": 0.258, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102052" }, { "rank": 342, "cve_id": "CVE-2026-102061", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0034, "epss_percentile": 0.258, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102061" }, { "rank": 343, "cve_id": "CVE-2026-53999", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.0034, "epss_percentile": 0.25901, "kev": false, "kev_due_at": null, "vendor": "radius-project", "product": "radius", "cwe": "CWE-20", "title": "Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53999" }, { "rank": 344, "cve_id": "CVE-2026-102077", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00339, "epss_percentile": 0.2568, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-754", "title": "Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102077" }, { "rank": 345, "cve_id": "CVE-2026-19673", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00339, "epss_percentile": 0.25694, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-125", "title": "Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19673" }, { "rank": 346, "cve_id": "CVE-2026-92160", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00339, "epss_percentile": 0.25693, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-190", "title": "F´: SendPartial Integer Overflow Leading to Assertion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92160" }, { "rank": 347, "cve_id": "CVE-2026-110611", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00339, "epss_percentile": 0.25683, "kev": false, "kev_due_at": null, "vendor": "getrebuild", "product": "rebuild", "cwe": "CWE-639", "title": "REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110611" }, { "rank": 348, "cve_id": "CVE-2026-82402", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00338, "epss_percentile": 0.25551, "kev": false, "kev_due_at": null, "vendor": "gogs", "product": "gogs", "cwe": "CWE-601", "title": "Gogs: Open Redirect in /redirect endpoint via backslash bypass in `IsSameSite`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82402" }, { "rank": 349, "cve_id": "CVE-2026-110845", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00336, "epss_percentile": 0.25356, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-15", "title": "n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110845" }, { "rank": 350, "cve_id": "CVE-2026-101341", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00335, "epss_percentile": 0.25251, "kev": false, "kev_due_at": null, "vendor": "NLnet Labs", "product": "NSD", "cwe": "CWE-121", "title": "Stack overwrite from specially formatted TXT-DATA RDATA field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101341" }, { "rank": 351, "cve_id": "CVE-2026-14851", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00332, "epss_percentile": 0.24817, "kev": false, "kev_due_at": null, "vendor": "Copart", "product": "Copart’s online billing service", "cwe": "CWE-200", "title": "Unauthorised disclosure of information on Copart’s online billing service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14851" }, { "rank": 352, "cve_id": "CVE-2026-94370", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00332, "epss_percentile": 0.24817, "kev": false, "kev_due_at": null, "vendor": "qt", "product": "Qt_for_MCUs", "cwe": "CWE-415", "title": "Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94370" }, { "rank": 353, "cve_id": "CVE-2026-107431", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0033, "epss_percentile": 0.24543, "kev": false, "kev_due_at": null, "vendor": "Crocoblock", "product": "JetFormBuilder", "cwe": "CWE-862", "title": "WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107431" }, { "rank": 354, "cve_id": "CVE-2026-107320", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.0033, "epss_percentile": 0.24495, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "GamiPress", "cwe": "CWE-200", "title": "GamiPress 7.9.5 - 8.0.5 - Unauthenticated Private Activity Log Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107320" }, { "rank": 355, "cve_id": "CVE-2026-110807", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.0033, "epss_percentile": 0.2453, "kev": false, "kev_due_at": null, "vendor": "sgl-project", "product": "SGLang", "cwe": "CWE-404", "title": "sgl-project SGLang generate Endpoint io_struct.py denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110807" }, { "rank": 356, "cve_id": "CVE-2026-50218", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00328, "epss_percentile": 0.24304, "kev": false, "kev_due_at": null, "vendor": "Akamai", "product": "Guardicore Platform Agent", "cwe": "CWE-99", "title": "Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50218" }, { "rank": 357, "cve_id": "CVE-2026-102078", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00328, "epss_percentile": 0.24327, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-416", "title": "Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102078" }, { "rank": 358, "cve_id": "CVE-2026-110698", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00328, "epss_percentile": 0.24276, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "Praat", "cwe": "CWE-119", "title": "Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110698" }, { "rank": 359, "cve_id": "CVE-2026-100236", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00326, "epss_percentile": 0.24077, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-787", "title": "Dpdk: dpdk: heap out-of-bounds read/write in gso header copy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100236" }, { "rank": 360, "cve_id": "CVE-2026-102053", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00326, "epss_percentile": 0.2408, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-401", "title": "Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102053" }, { "rank": 361, "cve_id": "CVE-2026-0321", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": 0.00326, "epss_percentile": 0.24049, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-754", "title": "PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0321" }, { "rank": 362, "cve_id": "CVE-2026-110624", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00326, "epss_percentile": 0.24081, "kev": false, "kev_due_at": null, "vendor": "papermerge", "product": "papermerge-core", "cwe": "CWE-862", "title": "Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110624" }, { "rank": 363, "cve_id": "CVE-2026-102055", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00325, "epss_percentile": 0.23988, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102055" }, { "rank": 364, "cve_id": "CVE-2026-73798", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00325, "epss_percentile": 0.23973, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop DNS 9.2.3 Non Secure Version", "cwe": "CWE-115", "title": "HPE NonStop DNS 9.2.3 Non Secure Version", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73798" }, { "rank": 365, "cve_id": "CVE-2026-50216", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00325, "epss_percentile": 0.23893, "kev": false, "kev_due_at": null, "vendor": "Akamai", "product": "Guardicore Platform Agent", "cwe": "CWE-191", "title": "An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50216" }, { "rank": 366, "cve_id": "CVE-2026-110809", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00324, "epss_percentile": 0.23786, "kev": false, "kev_due_at": null, "vendor": "sgl-project", "product": "SGLang", "cwe": "CWE-404", "title": "sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110809" }, { "rank": 367, "cve_id": "CVE-2026-103358", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00322, "epss_percentile": 0.23625, "kev": false, "kev_due_at": null, "vendor": "VillaTheme", "product": "Email Template Customizer for WooCommerce", "cwe": "CWE-94", "title": "WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103358" }, { "rank": 368, "cve_id": "CVE-2026-107751", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00322, "epss_percentile": 0.23641, "kev": false, "kev_due_at": null, "vendor": "kitae-park", "product": "Mang Board", "cwe": "CWE-79", "title": "Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107751" }, { "rank": 369, "cve_id": "CVE-2026-102471", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00322, "epss_percentile": 0.23656, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-93", "title": "CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102471" }, { "rank": 370, "cve_id": "CVE-2026-104109", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00322, "epss_percentile": 0.2362, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-59", "title": "FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104109" }, { "rank": 371, "cve_id": "CVE-2026-87974", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00322, "epss_percentile": 0.23581, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Asaas Gateway for WooCommerce", "cwe": "CWE-287", "title": "Asaas Gateway for WooCommerce < 2.7.8 - Unauthenticated Order Payment Bypass via Webhook", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87974" }, { "rank": 372, "cve_id": "CVE-2026-110862", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00321, "epss_percentile": 0.23506, "kev": false, "kev_due_at": null, "vendor": "better-auth", "product": "better-auth", "cwe": "CWE-287", "title": "Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110862" }, { "rank": 373, "cve_id": "CVE-2026-101337", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00321, "epss_percentile": 0.23444, "kev": false, "kev_due_at": null, "vendor": "NLnet Labs", "product": "NSD", "cwe": "CWE-121", "title": "Stack overwrite from specially formatted base64 RDATA field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101337" }, { "rank": 374, "cve_id": "CVE-2026-101338", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00321, "epss_percentile": 0.23444, "kev": false, "kev_due_at": null, "vendor": "NLnet Labs", "product": "NSD", "cwe": "CWE-121", "title": "Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101338" }, { "rank": 375, "cve_id": "CVE-2026-101339", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00321, "epss_percentile": 0.23444, "kev": false, "kev_due_at": null, "vendor": "NLnet Labs", "product": "NSD", "cwe": "CWE-121", "title": "Stack overwrite from a specially crafted and formatted HIP RR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101339" }, { "rank": 376, "cve_id": "CVE-2026-106465", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0032, "epss_percentile": 0.2343, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "NetX Duo", "cwe": "CWE-290", "title": "The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from the cookie's length alone. A peer that puts any single cookie byte in its first ClientHello skips the verification exchange entirely, so the server has no return-routability check and completes handshakes for forged source addresses.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106465" }, { "rank": 377, "cve_id": "CVE-2026-86797", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.0032, "epss_percentile": 0.23401, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Pricing Table", "cwe": "CWE-79", "title": "Pricing Table Block 1.0.7 - 2.1.4 - Contributor+ Stored XSS via Pricing Link", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86797" }, { "rank": 378, "cve_id": "CVE-2026-104644", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.0032, "epss_percentile": 0.23401, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Image Photo Gallery Final Tiles Grid", "cwe": "CWE-79", "title": "Image Photo Gallery Final Tiles Grid < 3.6.15 - Contributor+ Stored XSS via Gallery Configuration Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104644" }, { "rank": 379, "cve_id": "CVE-2026-105261", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.0032, "epss_percentile": 0.23401, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories", "cwe": "CWE-79", "title": "PublishPress Future 4.10.1 - 4.10.5 - Contributor+ Stored XSS via 'wrapper' and 'dateformat' Shortcode Attributes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105261" }, { "rank": 380, "cve_id": "CVE-2026-101926", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0032, "epss_percentile": 0.23368, "kev": false, "kev_due_at": null, "vendor": "hyyan", "product": "Hyyan WooCommerce Polylang Integration", "cwe": "CWE-89", "title": "Hyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101926" }, { "rank": 381, "cve_id": "CVE-2026-110466", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00318, "epss_percentile": 0.23188, "kev": false, "kev_due_at": null, "vendor": "WisdomGarden", "product": "Tronclass", "cwe": "CWE-497", "title": "WisdomGarden｜Tronclass - Sensitive Data Exposure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110466" }, { "rank": 382, "cve_id": "CVE-2026-88829", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00317, "epss_percentile": 0.22993, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-444", "title": "Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88829" }, { "rank": 383, "cve_id": "CVE-2026-0318", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00317, "epss_percentile": 0.22983, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-754", "title": "PAN-OS: Denial of Service (DoS) on Panorama", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0318" }, { "rank": 384, "cve_id": "CVE-2026-102460", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00316, "epss_percentile": 0.22947, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": null, "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when used with scope-requiring authentication handlers such as JWTAuthHandler or OAuth2AuthHandler. When a user is already authenticated on the routing context by a preceding handler in the request pipeline, ChainAuthHandler skips all scope validation configured via withScope() or withScopes(). This affects both any() and all() chain modes. The root cause is that postAuthentication() relies on internal state that is only set during the authenticate() phase, which is skipped entirely for pre-authenticated users. In any() mode, the absence of this state causes the method to fall through without delegating scope checks to any handler. In all() mode, scope checks are unconditionally skipped. This allows a user with a valid token but insufficient scopes to access resources protected by scope requirements, provided they were authenticated by an earlier handler in the pipeline. The most common trigger is overlapping authentication handlers on nested routes, where a parent route authenticates broadly and a child route uses a chain to enforce specific scopes. The impacted component Maven coordinate is io.vertx:vertx-web", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102460" }, { "rank": 385, "cve_id": "CVE-2026-103081", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00316, "epss_percentile": 0.2288, "kev": false, "kev_due_at": null, "vendor": "VillaTheme", "product": "Salevo", "cwe": "CWE-94", "title": "WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103081" }, { "rank": 386, "cve_id": "CVE-2026-101025", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00316, "epss_percentile": 0.22881, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX JavaScript", "cwe": "CWE-401", "title": "NGINX ngx_http_js_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101025" }, { "rank": 387, "cve_id": "CVE-2026-70407", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00316, "epss_percentile": 0.22887, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-285", "title": "Gitea organization listing token scope bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70407" }, { "rank": 388, "cve_id": "CVE-2026-107631", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00315, "epss_percentile": 0.22789, "kev": false, "kev_due_at": null, "vendor": "davidevalerio", "product": "Record of Consent Extension for Complianz", "cwe": "CWE-79", "title": "Record of Consent Extension for Complianz <= 2.5 - Unauthenticated Stored Cross-Site Scripting via 'uid' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107631" }, { "rank": 389, "cve_id": "CVE-2026-107756", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00315, "epss_percentile": 0.22798, "kev": false, "kev_due_at": null, "vendor": "tigroumeow", "product": "Meow Lightbox", "cwe": "CWE-79", "title": "Meow Lightbox <= 5.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Output Buffering parser noise substitution via comment body + display_name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107756" }, { "rank": 390, "cve_id": "CVE-2026-102083", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00313, "epss_percentile": 0.22566, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-413", "title": "Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102083" }, { "rank": 391, "cve_id": "CVE-2026-73790", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00312, "epss_percentile": 0.22411, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop iTP WebServer", "cwe": "CWE-20", "title": "HPE NonStop iTP WebServer - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73790" }, { "rank": 392, "cve_id": "CVE-2026-110842", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00312, "epss_percentile": 0.22506, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-1321", "title": "n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110842" }, { "rank": 393, "cve_id": "CVE-2026-89073", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00312, "epss_percentile": 0.22525, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-613", "title": "MOVEit Transfer Access restriction bypass in OAuth authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89073" }, { "rank": 394, "cve_id": "CVE-2026-110848", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00312, "epss_percentile": 0.22506, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-1321", "title": "n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110848" }, { "rank": 395, "cve_id": "CVE-2026-73792", "cvss_base": 3.8, "cvss_severity": "LOW", "epss_score": 0.00312, "epss_percentile": 0.22427, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Java JToolkit", "cwe": "CWE-78", "title": "HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73792" }, { "rank": 396, "cve_id": "CVE-2026-101936", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00311, "epss_percentile": 0.22306, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101936" }, { "rank": 397, "cve_id": "CVE-2026-103907", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00311, "epss_percentile": 0.22408, "kev": false, "kev_due_at": null, "vendor": "jegtheme", "product": "Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress", "cwe": "CWE-862", "title": "Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103907" }, { "rank": 398, "cve_id": "CVE-2026-110859", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0031, "epss_percentile": 0.22231, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-88", "title": "GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110859" }, { "rank": 399, "cve_id": "CVE-2026-92159", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0031, "epss_percentile": 0.2224, "kev": false, "kev_due_at": null, "vendor": "nasa", "product": "fprime", "cwe": "CWE-130", "title": "F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92159" }, { "rank": 400, "cve_id": "CVE-2026-103380", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0031, "epss_percentile": 0.22282, "kev": false, "kev_due_at": null, "vendor": "latepoint", "product": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress", "cwe": "CWE-200", "title": "Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103380" }, { "rank": 401, "cve_id": "CVE-2026-77114", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.2211, "kev": false, "kev_due_at": null, "vendor": "danrossiter", "product": "Document Gallery", "cwe": "CWE-79", "title": "Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77114" }, { "rank": 402, "cve_id": "CVE-2026-83592", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.22111, "kev": false, "kev_due_at": null, "vendor": "doctorwp", "product": "Contact Form DB for Enfold", "cwe": "CWE-79", "title": "Contact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Values", "url": "https://www.cve.org/CVERecord?id=CVE-2026-83592" }, { "rank": 403, "cve_id": "CVE-2026-97398", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.2211, "kev": false, "kev_due_at": null, "vendor": "foliovision", "product": "FV Flowplayer Video Player", "cwe": "CWE-79", "title": "FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97398" }, { "rank": 404, "cve_id": "CVE-2026-100153", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.2211, "kev": false, "kev_due_at": null, "vendor": "ice00", "product": "NewStatPress", "cwe": "CWE-79", "title": "NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100153" }, { "rank": 405, "cve_id": "CVE-2026-101924", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.22111, "kev": false, "kev_due_at": null, "vendor": "ice00", "product": "NewStatPress", "cwe": "CWE-79", "title": "NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101924" }, { "rank": 406, "cve_id": "CVE-2026-103422", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00309, "epss_percentile": 0.22111, "kev": false, "kev_due_at": null, "vendor": "ateshabaev", "product": "AnyComment", "cwe": "CWE-79", "title": "AnyComment <= 0.3.6 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103422" }, { "rank": 407, "cve_id": "CVE-2026-104107", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00309, "epss_percentile": 0.22146, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-22", "title": "FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104107" }, { "rank": 408, "cve_id": "CVE-2026-61843", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00307, "epss_percentile": 0.21891, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-862", "title": "FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61843" }, { "rank": 409, "cve_id": "CVE-2026-102032", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00307, "epss_percentile": 0.21965, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-401", "title": "Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102032" }, { "rank": 410, "cve_id": "CVE-2026-110832", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00307, "epss_percentile": 0.2189, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-400", "title": "FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110832" }, { "rank": 411, "cve_id": "CVE-2026-110667", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00307, "epss_percentile": 0.21948, "kev": false, "kev_due_at": null, "vendor": "cemtan", "product": "sar2html", "cwe": "CWE-259", "title": "cemtan sar2html sar2html.py hard-coded credentials", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110667" }, { "rank": 412, "cve_id": "CVE-2026-110679", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00307, "epss_percentile": 0.21921, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "OpenSIPS", "cwe": "CWE-119", "title": "OpenSIPS rtpproxy rtpproxy_answer out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110679" }, { "rank": 413, "cve_id": "CVE-2026-104761", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00307, "epss_percentile": 0.219, "kev": false, "kev_due_at": null, "vendor": "kitae-park", "product": "Mang Board", "cwe": "CWE-79", "title": "Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104761" }, { "rank": 414, "cve_id": "CVE-2026-107652", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00307, "epss_percentile": 0.21901, "kev": false, "kev_due_at": null, "vendor": "arshidkv12", "product": "Database Addon for Contact Form 7 – CFDB7", "cwe": "CWE-639", "title": "Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107652" }, { "rank": 415, "cve_id": "CVE-2026-102695", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00306, "epss_percentile": 0.21786, "kev": false, "kev_due_at": null, "vendor": "omnifaces", "product": "omnifaces", "cwe": "CWE-345", "title": "OmniFaces: Forged combined-resource IDs and related output/push boundaries", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102695" }, { "rank": 416, "cve_id": "CVE-2026-94260", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00306, "epss_percentile": 0.21766, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Sifalo Pay", "cwe": "CWE-862", "title": "Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Order Payment Metadata Modification and Forced Order Failure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94260" }, { "rank": 417, "cve_id": "CVE-2026-110869", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00305, "epss_percentile": 0.21657, "kev": false, "kev_due_at": null, "vendor": "nodemailer", "product": "nodemailer", "cwe": "CWE-1333", "title": "Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110869" }, { "rank": 418, "cve_id": "CVE-2026-110607", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00305, "epss_percentile": 0.21672, "kev": false, "kev_due_at": null, "vendor": "BizSpring", "product": "BizSpring Shop", "cwe": "CWE-345", "title": "BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110607" }, { "rank": 419, "cve_id": "CVE-2026-102980", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00304, "epss_percentile": 0.21623, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-639", "title": "Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scope", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102980" }, { "rank": 420, "cve_id": "CVE-2026-110816", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00304, "epss_percentile": 0.21635, "kev": false, "kev_due_at": null, "vendor": "ljharb", "product": "qs", "cwe": "CWE-248", "title": "qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110816" }, { "rank": 421, "cve_id": "CVE-2026-110610", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00304, "epss_percentile": 0.21612, "kev": false, "kev_due_at": null, "vendor": "YunaiV", "product": "ruoyi-vue-pro", "cwe": "CWE-918", "title": "ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110610" }, { "rank": 422, "cve_id": "CVE-2026-102050", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00298, "epss_percentile": 0.20929, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102050" }, { "rank": 423, "cve_id": "CVE-2026-102176", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00298, "epss_percentile": 0.20929, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-120", "title": "Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102176" }, { "rank": 424, "cve_id": "CVE-2026-0317", "cvss_base": 1.2, "cvss_severity": "LOW", "epss_score": 0.00298, "epss_percentile": 0.21021, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-754", "title": "PAN-OS: Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0317" }, { "rank": 425, "cve_id": "CVE-2026-54566", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00296, "epss_percentile": 0.20775, "kev": false, "kev_due_at": null, "vendor": "shd101wyy", "product": "vscode-markdown-preview-enhanced", "cwe": "CWE-94", "title": "Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in `.crossnote/config.js` and `.crossnote/parser.js`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54566" }, { "rank": 426, "cve_id": "CVE-2026-55381", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00294, "epss_percentile": 0.20533, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-639", "title": "InvoiceShelf: IDOR in InvoiceShelf estimate-to-invoice conversion allows any company user to read and tamper with other companies' estimates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55381" }, { "rank": 427, "cve_id": "CVE-2026-96904", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.2057, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "AWP Classifieds", "cwe": "CWE-200", "title": "AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96904" }, { "rank": 428, "cve_id": "CVE-2026-71301", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.20586, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea private pull request title disclosure through markup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71301" }, { "rank": 429, "cve_id": "CVE-2026-73126", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.20586, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-863", "title": "Gitea private workflow badge token scope bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73126" }, { "rank": 430, "cve_id": "CVE-2026-93637", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00294, "epss_percentile": 0.20583, "kev": false, "kev_due_at": null, "vendor": "Zimbra", "product": "Zimbra Collaboration Suite", "cwe": "CWE-307", "title": "Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93637" }, { "rank": 431, "cve_id": "CVE-2026-60021", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00294, "epss_percentile": 0.20497, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-400", "title": "Gitea GitLab migration denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60021" }, { "rank": 432, "cve_id": "CVE-2026-110837", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00293, "epss_percentile": 0.20375, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-122", "title": "FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110837" }, { "rank": 433, "cve_id": "CVE-2026-110769", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00292, "epss_percentile": 0.20357, "kev": false, "kev_due_at": null, "vendor": "holaboss-ai", "product": "holaOS", "cwe": "CWE-1188", "title": "holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110769" }, { "rank": 434, "cve_id": "CVE-2026-110840", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00292, "epss_percentile": 0.20296, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-89", "title": "n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110840" }, { "rank": 435, "cve_id": "CVE-2026-70396", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00292, "epss_percentile": 0.20354, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-863", "title": "Gitea organization repository creation token scope bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70396" }, { "rank": 436, "cve_id": "CVE-2026-110843", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00291, "epss_percentile": 0.20241, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-770", "title": "n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110843" }, { "rank": 437, "cve_id": "CVE-2026-110872", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00291, "epss_percentile": 0.20239, "kev": false, "kev_due_at": null, "vendor": "nodemailer", "product": "nodemailer", "cwe": "CWE-400", "title": "Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110872" }, { "rank": 438, "cve_id": "CVE-2026-78433", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00291, "epss_percentile": 0.20247, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea private attachment disclosure through repository mismatch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78433" }, { "rank": 439, "cve_id": "CVE-2026-110655", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.0029, "epss_percentile": 0.20137, "kev": false, "kev_due_at": null, "vendor": "miniupnp project", "product": "miniupnpc", "cwe": "CWE-125", "title": "miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110655" }, { "rank": 440, "cve_id": "CVE-2026-110656", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.0029, "epss_percentile": 0.20137, "kev": false, "kev_due_at": null, "vendor": "miniupnp project", "product": "miniupnpc", "cwe": "CWE-125", "title": "miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseelt", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110656" }, { "rank": 441, "cve_id": "CVE-2026-110864", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00288, "epss_percentile": 0.19855, "kev": false, "kev_due_at": null, "vendor": "better-auth", "product": "better-auth", "cwe": "CWE-287", "title": "Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110864" }, { "rank": 442, "cve_id": "CVE-2026-102063", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00288, "epss_percentile": 0.19963, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102063" }, { "rank": 443, "cve_id": "CVE-2026-102085", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00287, "epss_percentile": 0.19786, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-923", "title": "Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102085" }, { "rank": 444, "cve_id": "CVE-2026-57491", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00287, "epss_percentile": 0.19847, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-434", "title": "FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57491" }, { "rank": 445, "cve_id": "CVE-2026-104142", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00286, "epss_percentile": 0.19658, "kev": false, "kev_due_at": null, "vendor": "dataease", "product": "dataease", "cwe": "CWE-89", "title": "DataEase: Stored SQL Injection in group-field binning bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104142" }, { "rank": 446, "cve_id": "CVE-2026-75084", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00286, "epss_percentile": 0.19683, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-787", "title": "Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet length", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75084" }, { "rank": 447, "cve_id": "CVE-2026-62664", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00286, "epss_percentile": 0.19655, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-22", "title": "FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62664" }, { "rank": 448, "cve_id": "CVE-2026-110766", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00286, "epss_percentile": 0.19686, "kev": false, "kev_due_at": null, "vendor": "colanode", "product": "colanode", "cwe": "CWE-22", "title": "Colanode Server through 0.4.7 Path Traversal via Avatar Download Route", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110766" }, { "rank": 449, "cve_id": "CVE-2026-103415", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00284, "epss_percentile": 0.1951, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "NetX Duo", "cwe": "CWE-787", "title": "When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103415" }, { "rank": 450, "cve_id": "CVE-2026-91881", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00283, "epss_percentile": 0.19455, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Terraform Provider for Redfish", "cwe": "CWE-295", "title": "Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. This is a Critical severity vulnerability as it allows an unauthenticated attacker to intercept all Redfish BMC traffic including credentials by performing a man-in-the-middle attack, since TLS certificate verification is unconditionally disabled in the base HTTP transport. Dell recommends customers to upgrade at the earliest opportunity.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91881" }, { "rank": 451, "cve_id": "CVE-2026-108337", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00282, "epss_percentile": 0.19362, "kev": false, "kev_due_at": null, "vendor": "Hitachi Vantara", "product": "Remot Ops Agent", "cwe": "CWE-640", "title": "Password Reset Code Accessible in User Listing API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108337" }, { "rank": 452, "cve_id": "CVE-2026-110844", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00282, "epss_percentile": 0.19265, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-863", "title": "n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110844" }, { "rank": 453, "cve_id": "CVE-2026-110841", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00282, "epss_percentile": 0.19265, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-639", "title": "n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110841" }, { "rank": 454, "cve_id": "CVE-2026-97471", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00282, "epss_percentile": 0.19286, "kev": false, "kev_due_at": null, "vendor": "themefusion", "product": "Avada (Fusion) Builder", "cwe": "CWE-200", "title": "Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter via {user_meta} Dynamic Data Token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97471" }, { "rank": 455, "cve_id": "CVE-2026-107158", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00282, "epss_percentile": 0.19329, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "LTL Freight Quotes", "cwe": "CWE-862", "title": "LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated FreightDesk Integration Option Update via REST Route", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107158" }, { "rank": 456, "cve_id": "CVE-2026-104141", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00281, "epss_percentile": 0.19198, "kev": false, "kev_due_at": null, "vendor": "dataease", "product": "dataease", "cwe": "CWE-89", "title": "DataEase: SQL Injection in datasource metadata identifiers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104141" }, { "rank": 457, "cve_id": "CVE-2026-101938", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00281, "epss_percentile": 0.19165, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-191", "title": "Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101938" }, { "rank": 458, "cve_id": "CVE-2026-102000", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00281, "epss_percentile": 0.19165, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102000" }, { "rank": 459, "cve_id": "CVE-2026-102017", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00281, "epss_percentile": 0.19166, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102017" }, { "rank": 460, "cve_id": "CVE-2026-102040", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00281, "epss_percentile": 0.19165, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102040" }, { "rank": 461, "cve_id": "CVE-2026-102756", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00281, "epss_percentile": 0.19197, "kev": false, "kev_due_at": null, "vendor": "dataease", "product": "dataease", "cwe": "CWE-79", "title": "DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102756" }, { "rank": 462, "cve_id": "CVE-2026-59766", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00281, "epss_percentile": 0.19216, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea private repository metadata disclosure after access revocation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59766" }, { "rank": 463, "cve_id": "CVE-2026-105107", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00279, "epss_percentile": 0.18971, "kev": false, "kev_due_at": null, "vendor": "Koha Community", "product": "Koha", "cwe": "CWE-89", "title": "Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105107" }, { "rank": 464, "cve_id": "CVE-2026-55384", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00279, "epss_percentile": 0.19022, "kev": false, "kev_due_at": null, "vendor": "InvoiceShelf", "product": "InvoiceShelf", "cwe": "CWE-284", "title": "InvoiceShelf trusts client-supplied document totals", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55384" }, { "rank": 465, "cve_id": "CVE-2026-0319", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00279, "epss_percentile": 0.18936, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-754", "title": "PAN-OS: Improper Input Handling Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0319" }, { "rank": 466, "cve_id": "CVE-2026-110856", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18925, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-1333", "title": "GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110856" }, { "rank": 467, "cve_id": "CVE-2026-105067", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18833, "kev": false, "kev_due_at": null, "vendor": "Webnus", "product": "Modern Events Calendar Lite", "cwe": "CWE-89", "title": "WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105067" }, { "rank": 468, "cve_id": "CVE-2026-109901", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18833, "kev": false, "kev_due_at": null, "vendor": "Codepeople", "product": "CP Multi View Event Calendar", "cwe": "CWE-89", "title": "WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109901" }, { "rank": 469, "cve_id": "CVE-2026-101994", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18855, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-130", "title": "Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101994" }, { "rank": 470, "cve_id": "CVE-2026-55498", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00278, "epss_percentile": 0.18916, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-59", "title": "FileRise Shared Folder Symlink Escape", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55498" }, { "rank": 471, "cve_id": "CVE-2026-102985", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00277, "epss_percentile": 0.18793, "kev": false, "kev_due_at": null, "vendor": "makeplane", "product": "plane", "cwe": "CWE-862", "title": "Plane: Any project member can modify (deactivate) other members' records", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102985" }, { "rank": 472, "cve_id": "CVE-2026-108473", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00275, "epss_percentile": 0.18517, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "HS103 v5", "cwe": "CWE-306", "title": "Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108473" }, { "rank": 473, "cve_id": "CVE-2026-110670", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.18542, "kev": false, "kev_due_at": null, "vendor": "cemtan", "product": "sar2html", "cwe": "CWE-74", "title": "cemtan sar2html Archive Processing sar2html.py updateDb sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110670" }, { "rank": 474, "cve_id": "CVE-2026-102479", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00274, "epss_percentile": 0.1848, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": null, "title": "In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as Content-Length. This can be exploited for request smuggling purpose. The impacted component is io.vertx:vertx-core.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102479" }, { "rank": 475, "cve_id": "CVE-2026-57492", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00274, "epss_percentile": 0.18505, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-306", "title": "FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57492" }, { "rank": 476, "cve_id": "CVE-2026-77427", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00274, "epss_percentile": 0.18505, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-798", "title": "FileRise: Insecure default cryptographic key fallback in manual installs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77427" }, { "rank": 477, "cve_id": "CVE-2026-102066", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00273, "epss_percentile": 0.18311, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": null, "title": "Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102066" }, { "rank": 478, "cve_id": "CVE-2026-105969", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18036, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "CodeAtoZ B2B Suite for WooCommerce", "cwe": "CWE-200", "title": "CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105969" }, { "rank": 479, "cve_id": "CVE-2026-106099", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18036, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Data Access", "cwe": "CWE-200", "title": "WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106099" }, { "rank": 480, "cve_id": "CVE-2026-102177", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.0027, "epss_percentile": 0.1795, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102177" }, { "rank": 481, "cve_id": "CVE-2026-110863", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17743, "kev": false, "kev_due_at": null, "vendor": "better-auth", "product": "sso", "cwe": "CWE-287", "title": "Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110863" }, { "rank": 482, "cve_id": "CVE-2026-101937", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17723, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-195", "title": "Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101937" }, { "rank": 483, "cve_id": "CVE-2026-101960", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17721, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-787", "title": "Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101960" }, { "rank": 484, "cve_id": "CVE-2026-101969", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17723, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-20", "title": "Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101969" }, { "rank": 485, "cve_id": "CVE-2026-101970", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17723, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-416", "title": "Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101970" }, { "rank": 486, "cve_id": "CVE-2026-101971", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17723, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-770", "title": "Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101971" }, { "rank": 487, "cve_id": "CVE-2026-101972", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17721, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-190", "title": "Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101972" }, { "rank": 488, "cve_id": "CVE-2026-101984", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17722, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101984" }, { "rank": 489, "cve_id": "CVE-2026-101985", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17721, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-1284", "title": "Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101985" }, { "rank": 490, "cve_id": "CVE-2026-101987", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17721, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": null, "title": "Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101987" }, { "rank": 491, "cve_id": "CVE-2026-101988", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17722, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101988" }, { "rank": 492, "cve_id": "CVE-2026-101989", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17722, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101989" }, { "rank": 493, "cve_id": "CVE-2026-101992", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17724, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-20", "title": "Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101992" }, { "rank": 494, "cve_id": "CVE-2026-101993", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17726, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101993" }, { "rank": 495, "cve_id": "CVE-2026-101996", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17726, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101996" }, { "rank": 496, "cve_id": "CVE-2026-101999", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17725, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101999" }, { "rank": 497, "cve_id": "CVE-2026-102011", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17725, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102011" }, { "rank": 498, "cve_id": "CVE-2026-102018", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17728, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102018" }, { "rank": 499, "cve_id": "CVE-2026-102019", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17725, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102019" }, { "rank": 500, "cve_id": "CVE-2026-102021", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17724, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102021" }, { "rank": 501, "cve_id": "CVE-2026-102033", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17727, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102033" }, { "rank": 502, "cve_id": "CVE-2026-102034", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17727, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102034" }, { "rank": 503, "cve_id": "CVE-2026-102035", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17727, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102035" }, { "rank": 504, "cve_id": "CVE-2026-102039", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17728, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102039" }, { "rank": 505, "cve_id": "CVE-2026-102041", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17726, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102041" }, { "rank": 506, "cve_id": "CVE-2026-102042", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17725, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102042" }, { "rank": 507, "cve_id": "CVE-2026-102043", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17724, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-197", "title": "Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102043" }, { "rank": 508, "cve_id": "CVE-2026-102045", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17724, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS Evolved", "cwe": "CWE-787", "title": "Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102045" }, { "rank": 509, "cve_id": "CVE-2026-102047", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17726, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1288", "title": "Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102047" }, { "rank": 510, "cve_id": "CVE-2026-102071", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.17729, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102071" }, { "rank": 511, "cve_id": "CVE-2026-107425", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.17808, "kev": false, "kev_due_at": null, "vendor": "Magepeople inc.", "product": "Bus Ticket Booking with Seat Reservation", "cwe": "CWE-862", "title": "WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107425" }, { "rank": 512, "cve_id": "CVE-2026-107433", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.17808, "kev": false, "kev_due_at": null, "vendor": "miniOrange", "product": "WP OAuth Server", "cwe": "CWE-862", "title": "WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107433" }, { "rank": 513, "cve_id": "CVE-2026-107754", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.1773, "kev": false, "kev_due_at": null, "vendor": "paoltaia", "product": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory", "cwe": "CWE-79", "title": "GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image Title", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107754" }, { "rank": 514, "cve_id": "CVE-2026-110467", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.17758, "kev": false, "kev_due_at": null, "vendor": "WisdomGarden", "product": "Tronclass", "cwe": "CWE-639", "title": "WisdomGarden｜Tronclass - Insecure Direct Object Reference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110467" }, { "rank": 515, "cve_id": "CVE-2026-91883", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00269, "epss_percentile": 0.17746, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Terraform Provider for OME", "cwe": "CWE-532", "title": "Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91883" }, { "rank": 516, "cve_id": "CVE-2026-102048", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00268, "epss_percentile": 0.17608, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-770", "title": "Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102048" }, { "rank": 517, "cve_id": "CVE-2026-102051", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00268, "epss_percentile": 0.17608, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-401", "title": "Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102051" }, { "rank": 518, "cve_id": "CVE-2026-110457", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00267, "epss_percentile": 0.17561, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-22", "title": "A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110457" }, { "rank": 519, "cve_id": "CVE-2026-79957", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00266, "epss_percentile": 0.17236, "kev": false, "kev_due_at": null, "vendor": "ServiceNext", "product": "SerTec", "cwe": "CWE-639", "title": "ServiceNext Insecure Direct Object Reference via GetUsarios", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79957" }, { "rank": 520, "cve_id": "CVE-2026-110772", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00266, "epss_percentile": 0.1725, "kev": false, "kev_due_at": null, "vendor": "we-promise", "product": "sure", "cwe": "CWE-862", "title": "Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110772" }, { "rank": 521, "cve_id": "CVE-2026-107426", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00265, "epss_percentile": 0.17184, "kev": false, "kev_due_at": null, "vendor": "VideoWhisper.com", "product": "Paid Videochat Turnkey Site", "cwe": "CWE-862", "title": "WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107426" }, { "rank": 522, "cve_id": "CVE-2026-102056", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00265, "epss_percentile": 0.17142, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-125", "title": "Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102056" }, { "rank": 523, "cve_id": "CVE-2026-0316", "cvss_base": 1.1, "cvss_severity": "LOW", "epss_score": 0.00265, "epss_percentile": 0.17169, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "cwe": "CWE-79", "title": "PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0316" }, { "rank": 524, "cve_id": "CVE-2026-104143", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00264, "epss_percentile": 0.17038, "kev": false, "kev_due_at": null, "vendor": "dataease", "product": "dataease", "cwe": "CWE-289", "title": "DataEase: Stored SQL Injection via dateFormat field templates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104143" }, { "rank": 525, "cve_id": "CVE-2026-110838", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.16875, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-306", "title": "FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110838" }, { "rank": 526, "cve_id": "CVE-2026-110854", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.16832, "kev": false, "kev_due_at": null, "vendor": "parse-community", "product": "parse-server", "cwe": "CWE-248", "title": "Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110854" }, { "rank": 527, "cve_id": "CVE-2026-97020", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.16826, "kev": false, "kev_due_at": null, "vendor": "dougwollison", "product": "PO/MO Editor", "cwe": "CWE-79", "title": "PO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97020" }, { "rank": 528, "cve_id": "CVE-2026-103425", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.16826, "kev": false, "kev_due_at": null, "vendor": "masaakitanaka", "product": "Booking Package", "cwe": "CWE-79", "title": "Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103425" }, { "rank": 529, "cve_id": "CVE-2026-107650", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.16826, "kev": false, "kev_due_at": null, "vendor": "paoltaia", "product": "GeoDirectory – WP Business Directory Plugin and Classified Listings Directory", "cwe": "CWE-79", "title": "GeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing Title", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107650" }, { "rank": 530, "cve_id": "CVE-2026-66874", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00262, "epss_percentile": 0.16751, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-284", "title": "Gitea required Actions check bypass through skipped workflows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66874" }, { "rank": 531, "cve_id": "CVE-2026-110456", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00262, "epss_percentile": 0.16791, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-284", "title": "A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110456" }, { "rank": 532, "cve_id": "CVE-2026-110459", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00261, "epss_percentile": 0.16624, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-284", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110459" }, { "rank": 533, "cve_id": "CVE-2026-110458", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00261, "epss_percentile": 0.16643, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-22", "title": "A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110458" }, { "rank": 534, "cve_id": "CVE-2026-104106", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0026, "epss_percentile": 0.1655, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-306", "title": "FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104106" }, { "rank": 535, "cve_id": "CVE-2026-107319", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00259, "epss_percentile": 0.16354, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "GamiPress", "cwe": "CWE-639", "title": "GamiPress < 8.0.6 - Subscriber+ Activity Log Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107319" }, { "rank": 536, "cve_id": "CVE-2026-73539", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00259, "epss_percentile": 0.16332, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-88", "title": "Gitea external renderer argument injection and code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73539" }, { "rank": 537, "cve_id": "CVE-2026-101301", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00257, "epss_percentile": 0.16165, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WPCode", "cwe": "CWE-284", "title": "WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101301" }, { "rank": 538, "cve_id": "CVE-2026-55786", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00256, "epss_percentile": 0.16027, "kev": false, "kev_due_at": null, "vendor": "flytohub", "product": "flyto-core", "cwe": "CWE-78", "title": "Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55786" }, { "rank": 539, "cve_id": "CVE-2026-102058", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00256, "epss_percentile": 0.16084, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102058" }, { "rank": 540, "cve_id": "CVE-2026-108480", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00255, "epss_percentile": 0.15921, "kev": false, "kev_due_at": null, "vendor": "Skydropx", "product": "Skydropx", "cwe": "CWE-862", "title": "WordPress Skydropx plugin <= 2.1.4 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108480" }, { "rank": 541, "cve_id": "CVE-2026-96615", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00255, "epss_percentile": 0.1595, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Gateway Fabric", "cwe": "CWE-290", "title": "NGINX Gateway Fabric vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96615" }, { "rank": 542, "cve_id": "CVE-2026-102067", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00254, "epss_percentile": 0.15756, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102067" }, { "rank": 543, "cve_id": "CVE-2026-110829", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00254, "epss_percentile": 0.15767, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110829" }, { "rank": 544, "cve_id": "CVE-2026-110834", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00254, "epss_percentile": 0.15767, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-476", "title": "FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110834" }, { "rank": 545, "cve_id": "CVE-2026-110836", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00254, "epss_percentile": 0.15767, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-835", "title": "FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110836" }, { "rank": 546, "cve_id": "CVE-2026-110871", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00254, "epss_percentile": 0.15815, "kev": false, "kev_due_at": null, "vendor": "nodemailer", "product": "nodemailer", "cwe": "CWE-400", "title": "Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110871" }, { "rank": 547, "cve_id": "CVE-2026-110694", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00254, "epss_percentile": 0.15851, "kev": false, "kev_due_at": null, "vendor": "OAID", "product": "Tengine", "cwe": "CWE-119", "title": "OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110694" }, { "rank": 548, "cve_id": "CVE-2026-110465", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00253, "epss_percentile": 0.15659, "kev": false, "kev_due_at": null, "vendor": "WisdomGarden", "product": "Tronclass", "cwe": "CWE-639", "title": "WisdomGarden｜Tronclass - Insecure Direct Object Reference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110465" }, { "rank": 549, "cve_id": "CVE-2026-61844", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00252, "epss_percentile": 0.15572, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-706", "title": "FileRise: Folder Metadata Filename Collisions Bypass \"read_own\" Isolation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61844" }, { "rank": 550, "cve_id": "CVE-2026-110597", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00252, "epss_percentile": 0.15525, "kev": false, "kev_due_at": null, "vendor": "syoyo", "product": "tinyexr", "cwe": "CWE-125", "title": "Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110597" }, { "rank": 551, "cve_id": "CVE-2025-9373", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00252, "epss_percentile": 0.15573, "kev": false, "kev_due_at": null, "vendor": "peprodev", "product": "PeproDev Branches Map (Mapify)", "cwe": "CWE-79", "title": "PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2025-9373" }, { "rank": 552, "cve_id": "CVE-2026-95807", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00252, "epss_percentile": 0.15573, "kev": false, "kev_due_at": null, "vendor": "foliovision", "product": "FV Player 8", "cwe": "CWE-79", "title": "FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95807" }, { "rank": 553, "cve_id": "CVE-2026-100185", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00252, "epss_percentile": 0.15574, "kev": false, "kev_due_at": null, "vendor": "wpwax", "product": "Directorist: AI-Powered Business Directory, Listings & Classified Ads", "cwe": "CWE-79", "title": "Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100185" }, { "rank": 554, "cve_id": "CVE-2026-103369", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00252, "epss_percentile": 0.15573, "kev": false, "kev_due_at": null, "vendor": "joaoromao", "product": "Social Share Buttons & Analytics Plugin – GetSocial.io", "cwe": "CWE-79", "title": "Social Share Buttons & Analytics Plugin <= 4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'response' Parameter via gs_update_with_values AJAX", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103369" }, { "rank": 555, "cve_id": "CVE-2026-102087", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.15258, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-184", "title": "Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102087" }, { "rank": 556, "cve_id": "CVE-2026-105066", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.15377, "kev": false, "kev_due_at": null, "vendor": "SimplyRETS", "product": "SimplyRETS Real Estate IDX", "cwe": "CWE-79", "title": "WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105066" }, { "rank": 557, "cve_id": "CVE-2026-107870", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.15395, "kev": false, "kev_due_at": null, "vendor": "Crocoblock", "product": "JetEngine", "cwe": "CWE-79", "title": "WordPress JetEngine plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107870" }, { "rank": 558, "cve_id": "CVE-2026-106646", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00251, "epss_percentile": 0.15442, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Classified Listing", "cwe": "CWE-862", "title": "Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106646" }, { "rank": 559, "cve_id": "CVE-2026-108151", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00251, "epss_percentile": 0.15293, "kev": false, "kev_due_at": null, "vendor": "PluginUs.Net", "product": "MDTF", "cwe": "CWE-94", "title": "WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108151" }, { "rank": 560, "cve_id": "CVE-2026-110454", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00251, "epss_percentile": 0.15315, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect AI Key", "cwe": "CWE-284", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110454" }, { "rank": 561, "cve_id": "CVE-2026-110830", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.15161, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-400", "title": "FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110830" }, { "rank": 562, "cve_id": "CVE-2026-110833", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.15162, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-400", "title": "FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110833" }, { "rank": 563, "cve_id": "CVE-2026-101959", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.1521, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-688", "title": "Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101959" }, { "rank": 564, "cve_id": "CVE-2026-101964", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.1521, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101964" }, { "rank": 565, "cve_id": "CVE-2026-101974", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.1521, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": null, "title": "Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101974" }, { "rank": 566, "cve_id": "CVE-2026-102060", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0025, "epss_percentile": 0.1521, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102060" }, { "rank": 567, "cve_id": "CVE-2026-110449", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00249, "epss_percentile": 0.15051, "kev": false, "kev_due_at": null, "vendor": "NixOS", "product": "Nix", "cwe": "CWE-190", "title": "Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110449" }, { "rank": 568, "cve_id": "CVE-2026-110775", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00249, "epss_percentile": 0.15058, "kev": false, "kev_due_at": null, "vendor": "ModelEngine-Group", "product": "nexent", "cwe": "CWE-639", "title": "Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110775" }, { "rank": 569, "cve_id": "CVE-2026-95101", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00247, "epss_percentile": 0.14849, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-172", "title": "NGINX ngx_http_v3_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95101" }, { "rank": 570, "cve_id": "CVE-2026-110227", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00246, "epss_percentile": 0.14731, "kev": false, "kev_due_at": null, "vendor": "10up", "product": "Restricted Site Access", "cwe": "CWE-862", "title": "WordPress Restricted Site Access plugin <= 7.6.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110227" }, { "rank": 571, "cve_id": "CVE-2026-101981", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00245, "epss_percentile": 0.14653, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-121", "title": "Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101981" }, { "rank": 572, "cve_id": "CVE-2026-71854", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00245, "epss_percentile": 0.14649, "kev": false, "kev_due_at": null, "vendor": "OpenAEV-Platform", "product": "openaev", "cwe": "CWE-306", "title": "OpenAEV has unauthenticated access and missing object-level authorization on player lessons API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71854" }, { "rank": 573, "cve_id": "CVE-2026-101968", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00245, "epss_percentile": 0.14631, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-191", "title": "Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101968" }, { "rank": 574, "cve_id": "CVE-2026-107421", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00244, "epss_percentile": 0.14502, "kev": false, "kev_due_at": null, "vendor": "VideoWhisper.com", "product": "Broadcast Live Video", "cwe": "CWE-384", "title": "WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107421" }, { "rank": 575, "cve_id": "CVE-2026-110657", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00244, "epss_percentile": 0.14562, "kev": false, "kev_due_at": null, "vendor": "Khronos Group", "product": "nnef", "cwe": "CWE-22", "title": "Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 Path Traversal via Variable Label", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110657" }, { "rank": 576, "cve_id": "CVE-2026-110849", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00243, "epss_percentile": 0.14417, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-79", "title": "n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110849" }, { "rank": 577, "cve_id": "CVE-2026-103993", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00243, "epss_percentile": 0.14356, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103993" }, { "rank": 578, "cve_id": "CVE-2026-110599", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00243, "epss_percentile": 0.14436, "kev": false, "kev_due_at": null, "vendor": "l-smash", "product": "l-smash", "cwe": "CWE-415", "title": "L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110599" }, { "rank": 579, "cve_id": "CVE-2026-100193", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00243, "epss_percentile": 0.14369, "kev": false, "kev_due_at": null, "vendor": "themeum", "product": "Tutor LMS – eLearning and online course solution", "cwe": "CWE-79", "title": "Tutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100193" }, { "rank": 580, "cve_id": "CVE-2026-101946", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00241, "epss_percentile": 0.14187, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-125", "title": "Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101946" }, { "rank": 581, "cve_id": "CVE-2026-102476", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00239, "epss_percentile": 0.13872, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": null, "title": "In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context and obtain an SSL context with weaker properties, for instance a context with hostname validation and obtain a context ignoring hostname validation. The impacted component is io.vertx:vertx-core.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102476" }, { "rank": 582, "cve_id": "CVE-2026-108335", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00239, "epss_percentile": 0.13962, "kev": false, "kev_due_at": null, "vendor": "Hitachi Vantara", "product": "Remote Ops Agent", "cwe": "CWE-640", "title": "Password Reset Functionality Missing Brute-Force Protection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108335" }, { "rank": 583, "cve_id": "CVE-2026-63626", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00239, "epss_percentile": 0.13868, "kev": false, "kev_due_at": null, "vendor": "cesanta", "product": "mongoose", "cwe": "CWE-122", "title": "Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63626" }, { "rank": 584, "cve_id": "CVE-2026-85000", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13885, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "EmbedPress", "cwe": "CWE-284", "title": "EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85000" }, { "rank": 585, "cve_id": "CVE-2026-87968", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13884, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant", "cwe": "CWE-284", "title": "Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87968" }, { "rank": 586, "cve_id": "CVE-2026-94261", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Sifalo Pay", "cwe": "CWE-639", "title": "Sifalo Pay 2.0 - 2.5.2 - Unauthenticated Payment Confirmation Forgery via an Unbound Transaction Id", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94261" }, { "rank": 587, "cve_id": "CVE-2026-94360", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Paymentfor Gateway for WooCommerce", "cwe": "CWE-862", "title": "Paymentfor Gateway for WooCommerce < 1.0.6 - Unauthenticated Order Payment Forgery via Unverified Card Callbacks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94360" }, { "rank": 588, "cve_id": "CVE-2026-96900", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Cart Abandonment Recovery for WooCommerce", "cwe": "CWE-639", "title": "Cart Abandonment Recovery for WooCommerce < 2.1.4 - Unauthenticated Abandoned Cart Record Deletion and Modification via IDOR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96900" }, { "rank": 589, "cve_id": "CVE-2026-104751", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13885, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Rank Math SEO", "cwe": "CWE-862", "title": "Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104751" }, { "rank": 590, "cve_id": "CVE-2026-105975", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13885, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "CamPay Shortcode Payment Gateway", "cwe": "CWE-862", "title": "CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105975" }, { "rank": 591, "cve_id": "CVE-2026-106098", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00239, "epss_percentile": 0.13886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Data Access", "cwe": "CWE-863", "title": "WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106098" }, { "rank": 592, "cve_id": "CVE-2026-73804", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00239, "epss_percentile": 0.13892, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-266", "title": "Gitea API token scope escalation through HTTP signatures", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73804" }, { "rank": 593, "cve_id": "CVE-2016-20099", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.13674, "kev": false, "kev_due_at": null, "vendor": "l-smash", "product": "l-smash", "cwe": "CWE-835", "title": "L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe", "url": "https://www.cve.org/CVERecord?id=CVE-2016-20099" }, { "rank": 594, "cve_id": "CVE-2026-110600", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.13674, "kev": false, "kev_due_at": null, "vendor": "brechtsanders", "product": "xlsxio", "cwe": "CWE-476", "title": "xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110600" }, { "rank": 595, "cve_id": "CVE-2026-110764", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.13722, "kev": false, "kev_due_at": null, "vendor": "iflytek", "product": "astron-rpa", "cwe": "CWE-639", "title": "AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110764" }, { "rank": 596, "cve_id": "CVE-2026-110774", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.13722, "kev": false, "kev_due_at": null, "vendor": "blinkospace", "product": "blinko", "cwe": "CWE-639", "title": "Blinko through 1.8.8 Private Attachment Read via /api/file Route", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110774" }, { "rank": 597, "cve_id": "CVE-2026-98420", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00237, "epss_percentile": 0.13698, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ksmbd: follow SMB2 session expiration semantics", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98420" }, { "rank": 598, "cve_id": "CVE-2026-110867", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00236, "epss_percentile": 0.13588, "kev": false, "kev_due_at": null, "vendor": "renovatebot", "product": "renovate", "cwe": "CWE-863", "title": "Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110867" }, { "rank": 599, "cve_id": "CVE-2026-55787", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00236, "epss_percentile": 0.13486, "kev": false, "kev_due_at": null, "vendor": "flytohub", "product": "flyto-core", "cwe": "CWE-918", "title": "Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55787" }, { "rank": 600, "cve_id": "CVE-2026-57493", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00236, "epss_percentile": 0.13602, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-613", "title": "FileRise: Remember-me auto-login uses stale admin role from token instead of current role", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57493" }, { "rank": 601, "cve_id": "CVE-2026-110602", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.13467, "kev": false, "kev_due_at": null, "vendor": "kyz", "product": "libmspack", "cwe": "CWE-824", "title": "libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110602" }, { "rank": 602, "cve_id": "CVE-2026-107757", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.13409, "kev": false, "kev_due_at": null, "vendor": "tigroumeow", "product": "Gallery Custom Links", "cwe": "CWE-79", "title": "Gallery Custom Links <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Author Display Name + Comment HTML Comment Body", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107757" }, { "rank": 603, "cve_id": "CVE-2026-85345", "cvss_base": 4.1, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.1345, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "FV Flowplayer Video Player", "cwe": "CWE-918", "title": "FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85345" }, { "rank": 604, "cve_id": "CVE-2026-102682", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": 0.00234, "epss_percentile": 0.13238, "kev": false, "kev_due_at": null, "vendor": "pipecat-ai", "product": "pipecat", "cwe": "CWE-345", "title": "Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102682" }, { "rank": 605, "cve_id": "CVE-2026-110831", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00234, "epss_percentile": 0.13301, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-775", "title": "FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110831" }, { "rank": 606, "cve_id": "CVE-2026-106166", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00232, "epss_percentile": 0.13038, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "NEX-Forms", "cwe": "CWE-639", "title": "NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106166" }, { "rank": 607, "cve_id": "CVE-2026-86607", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00232, "epss_percentile": 0.13028, "kev": false, "kev_due_at": null, "vendor": "Hitachi", "product": "Hitachi Ops Center Administrator", "cwe": "CWE-209", "title": "Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86607" }, { "rank": 608, "cve_id": "CVE-2026-73260", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0023, "epss_percentile": 0.12822, "kev": false, "kev_due_at": null, "vendor": "cesanta", "product": "mongoose", "cwe": "CWE-125", "title": "Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73260" }, { "rank": 609, "cve_id": "CVE-2026-110762", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.0023, "epss_percentile": 0.1288, "kev": false, "kev_due_at": null, "vendor": "bbPress", "product": "bbPress", "cwe": "CWE-863", "title": "bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110762" }, { "rank": 610, "cve_id": "CVE-2026-64856", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.0023, "epss_percentile": 0.12774, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-200", "title": "FileRise: Missing Authentication Guard on File Snippet Preview Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64856" }, { "rank": 611, "cve_id": "CVE-2026-110855", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00229, "epss_percentile": 0.12724, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-200", "title": "GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110855" }, { "rank": 612, "cve_id": "CVE-2026-75083", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00229, "epss_percentile": 0.12746, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-191", "title": "Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75083" }, { "rank": 613, "cve_id": "CVE-2026-110853", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00228, "epss_percentile": 0.12644, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-639", "title": "n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110853" }, { "rank": 614, "cve_id": "CVE-2026-110851", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00228, "epss_percentile": 0.12644, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-639", "title": "n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110851" }, { "rank": 615, "cve_id": "CVE-2026-107795", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00227, "epss_percentile": 0.12454, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "Omada Software Controller", "cwe": "CWE-284", "title": "Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107795" }, { "rank": 616, "cve_id": "CVE-2026-110868", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00226, "epss_percentile": 0.1238, "kev": false, "kev_due_at": null, "vendor": "renovatebot", "product": "renovate", "cwe": "CWE-918", "title": "Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110868" }, { "rank": 617, "cve_id": "CVE-2026-92392", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00226, "epss_percentile": 0.12407, "kev": false, "kev_due_at": null, "vendor": "curl", "product": "curl", "cwe": "CWE-416", "title": "HTTP/2 upload Use-After-Free", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92392" }, { "rank": 618, "cve_id": "CVE-2026-97315", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00226, "epss_percentile": 0.12392, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Responsive Blocks", "cwe": "CWE-74", "title": "Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97315" }, { "rank": 619, "cve_id": "CVE-2026-110765", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.12273, "kev": false, "kev_due_at": null, "vendor": "flexprice", "product": "flexprice", "cwe": "CWE-347", "title": "FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110765" }, { "rank": 620, "cve_id": "CVE-2026-103671", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12054, "kev": false, "kev_due_at": null, "vendor": "EC-CUBE CO.,LTD.", "product": "AmazonPay V2 Plugin (4.0/4.1 series)", "cwe": "CWE-472", "title": "External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) \"AmazonPay Plugin\". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103671" }, { "rank": 621, "cve_id": "CVE-2026-108336", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00223, "epss_percentile": 0.11974, "kev": false, "kev_due_at": null, "vendor": "Hitachi Vantara", "product": "Remot Ops Agent", "cwe": "CWE-321", "title": "Token Signing Key Allows Unauthenticated Administrative Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108336" }, { "rank": 622, "cve_id": "CVE-2026-101995", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00223, "epss_percentile": 0.12021, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-1284", "title": "Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101995" }, { "rank": 623, "cve_id": "CVE-2026-110771", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00223, "epss_percentile": 0.11942, "kev": false, "kev_due_at": null, "vendor": "Shopizer", "product": "Shopizer", "cwe": "CWE-639", "title": "Shopizer through 3.2.5 Authorization Bypass via Product Review customerId", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110771" }, { "rank": 624, "cve_id": "CVE-2026-73800", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00223, "epss_percentile": 0.11986, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-94", "title": "Gitea reusable workflow secret exposure in pull_request_target", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73800" }, { "rank": 625, "cve_id": "CVE-2026-102054", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00222, "epss_percentile": 0.11894, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-130", "title": "Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102054" }, { "rank": 626, "cve_id": "CVE-2026-110839", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00221, "epss_percentile": 0.11786, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-787", "title": "FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110839" }, { "rank": 627, "cve_id": "CVE-2026-110870", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.0022, "epss_percentile": 0.11678, "kev": false, "kev_due_at": null, "vendor": "nodemailer", "product": "nodemailer", "cwe": "CWE-20", "title": "Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110870" }, { "rank": 628, "cve_id": "CVE-2026-110768", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.0022, "epss_percentile": 0.11633, "kev": false, "kev_due_at": null, "vendor": "holaboss-ai", "product": "holaOS", "cwe": "CWE-290", "title": "holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110768" }, { "rank": 629, "cve_id": "CVE-2026-108066", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.0022, "epss_percentile": 0.11695, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP 2FA", "cwe": "CWE-639", "title": "WP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108066" }, { "rank": 630, "cve_id": "CVE-2026-110604", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.0022, "epss_percentile": 0.11657, "kev": false, "kev_due_at": null, "vendor": "Michael R Sweet", "product": "Mini-XML", "cwe": "CWE-193", "title": "Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110604" }, { "rank": 631, "cve_id": "CVE-2026-98388", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11626, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "exec: do_close_on_exec() before taking exec_update_lock", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98388" }, { "rank": 632, "cve_id": "CVE-2026-98404", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11625, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98404" }, { "rank": 633, "cve_id": "CVE-2026-98406", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11625, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98406" }, { "rank": 634, "cve_id": "CVE-2026-98407", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11569, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: rsi: fix heap OOB write on key removal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98407" }, { "rank": 635, "cve_id": "CVE-2026-98413", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11626, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "selinux: always fill AVC decision in avc_has_perm_noaudit()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98413" }, { "rank": 636, "cve_id": "CVE-2026-98416", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11624, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98416" }, { "rank": 637, "cve_id": "CVE-2026-98417", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11627, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: xfrm: reject unrepresentable espintcp transport headers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98417" }, { "rank": 638, "cve_id": "CVE-2026-98419", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11625, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "drop_monitor: fix out-of-bounds write in reset_per_cpu_data()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98419" }, { "rank": 639, "cve_id": "CVE-2026-98422", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11623, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98422" }, { "rank": 640, "cve_id": "CVE-2026-98426", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0022, "epss_percentile": 0.11623, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98426" }, { "rank": 641, "cve_id": "CVE-2026-107417", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00219, "epss_percentile": 0.11477, "kev": false, "kev_due_at": null, "vendor": "Muralidharan Ramasamy", "product": "Push Notification for Post and BuddyPress", "cwe": "CWE-862", "title": "WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107417" }, { "rank": 642, "cve_id": "CVE-2026-69191", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00219, "epss_percentile": 0.11469, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-287", "title": "FileRise: Login Method Restriction Bypass via Direct API Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69191" }, { "rank": 643, "cve_id": "CVE-2026-93635", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00219, "epss_percentile": 0.11481, "kev": false, "kev_due_at": null, "vendor": "Zimbra", "product": "Zimbra Collaboration Suite", "cwe": "CWE-90", "title": "Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93635" }, { "rank": 644, "cve_id": "CVE-2026-110835", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00218, "epss_percentile": 0.1136, "kev": false, "kev_due_at": null, "vendor": "FreeRDP", "product": "FreeRDP", "cwe": "CWE-93", "title": "FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110835" }, { "rank": 645, "cve_id": "CVE-2026-110861", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00217, "epss_percentile": 0.11336, "kev": false, "kev_due_at": null, "vendor": "better-auth", "product": "drizzle-adapter", "cwe": "CWE-307", "title": "Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110861" }, { "rank": 646, "cve_id": "CVE-2026-54702", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00216, "epss_percentile": 0.11171, "kev": false, "kev_due_at": null, "vendor": "shd101wyy", "product": "vscode-markdown-preview-enhanced", "cwe": "CWE-749", "title": "Markdown Preview Enhanced: Blind Command Dispatch via Unvalidated Webview Message Handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54702" }, { "rank": 647, "cve_id": "CVE-2026-87843", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00216, "epss_percentile": 0.11217, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Trust Payments Gateway for WooCommerce", "cwe": "CWE-284", "title": "Trust Payments Gateway for WooCommerce < 3.1.0 - Unauthenticated Order Payment Completion via Payment Return Page", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87843" }, { "rank": 648, "cve_id": "CVE-2026-54703", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00216, "epss_percentile": 0.1117, "kev": false, "kev_due_at": null, "vendor": "shd101wyy", "product": "vscode-markdown-preview-enhanced", "cwe": "CWE-73", "title": "Markdown Preview Enhanced: Arbitrary File Write via updateMarkdown Command Without Path Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54703" }, { "rank": 649, "cve_id": "CVE-2026-98418", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00216, "epss_percentile": 0.11213, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "sched/core: Avoid false migration warning for proxy donors", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98418" }, { "rank": 650, "cve_id": "CVE-2026-89288", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00215, "epss_percentile": 0.11124, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Fast Courier", "cwe": "CWE-89", "title": "Fast Courier 5.0.0 - 5.2.3 - Unauthenticated SQLi via 'wp_order_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89288" }, { "rank": 651, "cve_id": "CVE-2026-110850", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00215, "epss_percentile": 0.11102, "kev": false, "kev_due_at": null, "vendor": "n8n-io", "product": "n8n", "cwe": "CWE-863", "title": "n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110850" }, { "rank": 652, "cve_id": "CVE-2026-98398", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11071, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "locking/lockdep: Invalidate stale class_cache entries for zapped classes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98398" }, { "rank": 653, "cve_id": "CVE-2026-98402", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11072, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: icmp: avoid invalid transport header access in icmp_send tracepoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98402" }, { "rank": 654, "cve_id": "CVE-2026-98410", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11073, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98410" }, { "rank": 655, "cve_id": "CVE-2026-98421", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11072, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mac80211: require a peer station for TDLS setup confirm", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98421" }, { "rank": 656, "cve_id": "CVE-2026-98423", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11073, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98423" }, { "rank": 657, "cve_id": "CVE-2026-98428", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11073, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ALSA: usb: 6fire: Avoid embedded URBs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98428" }, { "rank": 658, "cve_id": "CVE-2026-98429", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11072, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "RDMA/efa: Keep EQ resources alive while IRQ is registered", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98429" }, { "rank": 659, "cve_id": "CVE-2026-98430", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00215, "epss_percentile": 0.11072, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "RDMA/efa: Keep admin queues alive while IRQ is registered", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98430" }, { "rank": 660, "cve_id": "CVE-2026-103974", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00214, "epss_percentile": 0.10995, "kev": false, "kev_due_at": null, "vendor": "lichess-org", "product": "lila", "cwe": "CWE-79", "title": "lichess.org: Stored HTML Injection via PGN Annotator Tag in Studies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103974" }, { "rank": 661, "cve_id": "CVE-2026-110873", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00213, "epss_percentile": 0.10785, "kev": false, "kev_due_at": null, "vendor": "heymrun", "product": "heym", "cwe": "CWE-863", "title": "Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110873" }, { "rank": 662, "cve_id": "CVE-2026-89072", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00212, "epss_percentile": 0.10715, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-863", "title": "MOVEit Transfer Authorization Flaw in Certificate Management", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89072" }, { "rank": 663, "cve_id": "CVE-2026-108064", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0021, "epss_percentile": 0.10459, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WP Encryption", "cwe": "CWE-862", "title": "WP Encryption < 7.8.8.2 - Unauthenticated Certificate Private Key and ACME Order Replacement via wple_auto_handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108064" }, { "rank": 664, "cve_id": "CVE-2026-86476", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00209, "epss_percentile": 0.10414, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-787", "title": "Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86476" }, { "rank": 665, "cve_id": "CVE-2026-104105", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00209, "epss_percentile": 0.10383, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-287", "title": "FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104105" }, { "rank": 666, "cve_id": "CVE-2026-110866", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00209, "epss_percentile": 0.1038, "kev": false, "kev_due_at": null, "vendor": "renovatebot", "product": "renovate", "cwe": "CWE-693", "title": "Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110866" }, { "rank": 667, "cve_id": "CVE-2026-98386", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10342, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98386" }, { "rank": 668, "cve_id": "CVE-2026-98387", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10342, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "s390/crypto: Fix skcipher_walk return code handling in aes_s390", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98387" }, { "rank": 669, "cve_id": "CVE-2026-98392", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.103, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98392" }, { "rank": 670, "cve_id": "CVE-2026-98394", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10339, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98394" }, { "rank": 671, "cve_id": "CVE-2026-98399", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.1034, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98399" }, { "rank": 672, "cve_id": "CVE-2026-98400", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.1034, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "s390/ipl: Fix NULL deref in kdump without re-IPL parm block", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98400" }, { "rank": 673, "cve_id": "CVE-2026-98401", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10339, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: iptunnel: fix stale transport header during tunnel decapsulation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98401" }, { "rank": 674, "cve_id": "CVE-2026-98403", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10339, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "s390/boot: Avoid IPL parameter append past command line", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98403" }, { "rank": 675, "cve_id": "CVE-2026-98405", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10309, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "smb: client: fix missing iov bounds check in parse_posix_sids()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98405" }, { "rank": 676, "cve_id": "CVE-2026-98409", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10341, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "watchdog: rtd119x: Avoid division by zero", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98409" }, { "rank": 677, "cve_id": "CVE-2026-98411", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.1034, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98411" }, { "rank": 678, "cve_id": "CVE-2026-98412", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10341, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98412" }, { "rank": 679, "cve_id": "CVE-2026-98425", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00209, "epss_percentile": 0.10341, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: mac80211: don't warn when an IBSS has no channel to scan", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98425" }, { "rank": 680, "cve_id": "CVE-2026-110763", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00208, "epss_percentile": 0.10225, "kev": false, "kev_due_at": null, "vendor": "zuihou", "product": "lamp-boot", "cwe": "CWE-639", "title": "lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110763" }, { "rank": 681, "cve_id": "CVE-2026-110773", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00208, "epss_percentile": 0.10225, "kev": false, "kev_due_at": null, "vendor": "growchief", "product": "growchief", "cwe": "CWE-862", "title": "GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110773" }, { "rank": 682, "cve_id": "CVE-2026-98389", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00207, "epss_percentile": 0.10041, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "drm/amdgpu: skip gfx switch_power_profile during GPU reset", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98389" }, { "rank": 683, "cve_id": "CVE-2026-98393", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00207, "epss_percentile": 0.10042, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: ipv4: Fix UDP length overflow with PMTU discover and big MTU", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98393" }, { "rank": 684, "cve_id": "CVE-2026-98408", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00207, "epss_percentile": 0.10042, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "watchdog: rzv2h: Avoid division by zero", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98408" }, { "rank": 685, "cve_id": "CVE-2026-98424", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00207, "epss_percentile": 0.10042, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "wifi: cfg80211: undo netns switch if renaming the wiphy fails", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98424" }, { "rank": 686, "cve_id": "CVE-2026-54701", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00206, "epss_percentile": 0.10028, "kev": false, "kev_due_at": null, "vendor": "shd101wyy", "product": "vscode-markdown-preview-enhanced", "cwe": "CWE-79", "title": "Markdown Preview Enhanced: Stored XSS via Unsanitized `.crossnote/head.html` Injection in Webview", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54701" }, { "rank": 687, "cve_id": "CVE-2026-55167", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00206, "epss_percentile": 0.09954, "kev": false, "kev_due_at": null, "vendor": "LDAPAccountManager", "product": "lam", "cwe": "CWE-294", "title": "LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55167" }, { "rank": 688, "cve_id": "CVE-2026-98390", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00206, "epss_percentile": 0.09979, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "x86/amd_node: Avoid divide by zero on virtualized systems", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98390" }, { "rank": 689, "cve_id": "CVE-2026-98414", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00206, "epss_percentile": 0.09969, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "memcg: avoid charging the root memcg from obj_cgroup_charge_pages()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98414" }, { "rank": 690, "cve_id": "CVE-2026-98415", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00206, "epss_percentile": 0.0998, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98415" }, { "rank": 691, "cve_id": "CVE-2026-16495", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.09813, "kev": false, "kev_due_at": null, "vendor": "wpdevart", "product": "Countdown Timer – Widget Countdown", "cwe": "CWE-79", "title": "Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16495" }, { "rank": 692, "cve_id": "CVE-2026-75085", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.09848, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-125", "title": "Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driver", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75085" }, { "rank": 693, "cve_id": "CVE-2026-105874", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00204, "epss_percentile": 0.09678, "kev": false, "kev_due_at": null, "vendor": "Brainstorm Force", "product": "SureCart", "cwe": "CWE-79", "title": "WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105874" }, { "rank": 694, "cve_id": "CVE-2026-107867", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00204, "epss_percentile": 0.09677, "kev": false, "kev_due_at": null, "vendor": "Crocoblock", "product": "JetProductTables", "cwe": "CWE-79", "title": "WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107867" }, { "rank": 695, "cve_id": "CVE-2026-96540", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00204, "epss_percentile": 0.09671, "kev": false, "kev_due_at": null, "vendor": "SonicWall", "product": "Network Security Manager (NSM)", "cwe": "CWE-863", "title": "An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to intercept communications of other users of the NSM instance.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96540" }, { "rank": 696, "cve_id": "CVE-2017-20286", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00202, "epss_percentile": 0.09376, "kev": false, "kev_due_at": null, "vendor": "DentonW", "product": "DevIL", "cwe": "CWE-787", "title": "DevIL through 1.8.0 Heap Buffer Overflow via GIF iGetPalette", "url": "https://www.cve.org/CVERecord?id=CVE-2017-20286" }, { "rank": 697, "cve_id": "CVE-2026-110605", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00201, "epss_percentile": 0.09283, "kev": false, "kev_due_at": null, "vendor": "tomolt", "product": "libschrift", "cwe": "CWE-369", "title": "libschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_line", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110605" }, { "rank": 698, "cve_id": "CVE-2026-73802", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00201, "epss_percentile": 0.09336, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea Runner", "cwe": "CWE-269", "title": "Gitea Runner host isolation bypass through container options", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73802" }, { "rank": 699, "cve_id": "CVE-2026-101019", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.002, "epss_percentile": 0.09137, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX JavaScript", "cwe": "CWE-436", "title": "NGINX ngx_http_js_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101019" }, { "rank": 700, "cve_id": "CVE-2026-102354", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.002, "epss_percentile": 0.09183, "kev": false, "kev_due_at": null, "vendor": "alam00000", "product": "bentopdf", "cwe": "CWE-367", "title": "BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102354" }, { "rank": 701, "cve_id": "CVE-2026-88927", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.002, "epss_percentile": 0.09187, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "rtMedia for WordPress, BuddyPress and bbPress", "cwe": "CWE-639", "title": "rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88927" }, { "rank": 702, "cve_id": "CVE-2026-73535", "cvss_base": null, "cvss_severity": null, "epss_score": 0.002, "epss_percentile": 0.0925, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-304", "title": "Gitea second-factor bypass through OpenID identity linking", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73535" }, { "rank": 703, "cve_id": "CVE-2026-98391", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08882, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "drm/xe: Guard page-fault worker with runtime PM check", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98391" }, { "rank": 704, "cve_id": "CVE-2026-98395", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08881, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98395" }, { "rank": 705, "cve_id": "CVE-2026-98396", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08881, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98396" }, { "rank": 706, "cve_id": "CVE-2026-98397", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08881, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98397" }, { "rank": 707, "cve_id": "CVE-2026-98427", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08944, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net/sched: codel: bound the dropping loop per dequeue call", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98427" }, { "rank": 708, "cve_id": "CVE-2026-98431", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00198, "epss_percentile": 0.08943, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98431" }, { "rank": 709, "cve_id": "CVE-2026-90954", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00197, "epss_percentile": 0.08791, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-59", "title": "Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90954" }, { "rank": 710, "cve_id": "CVE-2026-107153", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00196, "epss_percentile": 0.08629, "kev": false, "kev_due_at": null, "vendor": "Rakuten Mobile, Inc.", "product": "Rakuten Mini", "cwe": "CWE-1391", "title": "Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107153" }, { "rank": 711, "cve_id": "CVE-2026-103929", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00195, "epss_percentile": 0.08576, "kev": false, "kev_due_at": null, "vendor": "jdx", "product": "mise", "cwe": "CWE-78", "title": "mise permits untrusted local configuration to override default shell arguments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103929" }, { "rank": 712, "cve_id": "CVE-2026-106469", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.08342, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Gutenverse Form", "cwe": "CWE-79", "title": "Gutenverse Form < 3.0.11 - Contributor+ Stored XSS via SVG Icon", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106469" }, { "rank": 713, "cve_id": "CVE-2026-73814", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00193, "epss_percentile": 0.08416, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-266", "title": "Gitea repository ownership escalation by administrators", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73814" }, { "rank": 714, "cve_id": "CVE-2026-107428", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00192, "epss_percentile": 0.08256, "kev": false, "kev_due_at": null, "vendor": "VideoWhisper.com", "product": "Paid Videochat Turnkey Site", "cwe": "CWE-79", "title": "WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107428" }, { "rank": 715, "cve_id": "CVE-2026-108483", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00191, "epss_percentile": 0.0819, "kev": false, "kev_due_at": null, "vendor": "hippooo", "product": "Hippoo Mobile App for WooCommerce", "cwe": "CWE-79", "title": "WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108483" }, { "rank": 716, "cve_id": "CVE-2026-108484", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00191, "epss_percentile": 0.0819, "kev": false, "kev_due_at": null, "vendor": "WPManageNinja", "product": "Best Payments Plugin for WP", "cwe": "CWE-79", "title": "WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108484" }, { "rank": 717, "cve_id": "CVE-2026-70402", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00189, "epss_percentile": 0.08024, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-732", "title": "Gitea local code execution through writable Git hooks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-70402" }, { "rank": 718, "cve_id": "CVE-2026-101991", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00189, "epss_percentile": 0.07988, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-130", "title": "Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101991" }, { "rank": 719, "cve_id": "CVE-2026-104086", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00188, "epss_percentile": 0.0779, "kev": false, "kev_due_at": null, "vendor": "7-Zip", "product": "7-Zip", "cwe": "CWE-908", "title": "7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104086" }, { "rank": 720, "cve_id": "CVE-2026-69194", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00188, "epss_percentile": 0.07868, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-79", "title": "FileRise: Unsanitized footerHtml in Public Site Config", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69194" }, { "rank": 721, "cve_id": "CVE-2026-73791", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00187, "epss_percentile": 0.0771, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Hpjmeter", "cwe": "CWE-122", "title": "HPE NonStop Hpjmeter - Buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73791" }, { "rank": 722, "cve_id": "CVE-2026-103988", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00186, "epss_percentile": 0.077, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-284", "title": "FileRise renameFolder omits destination-parent authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103988" }, { "rank": 723, "cve_id": "CVE-2026-101975", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00185, "epss_percentile": 0.07527, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-617", "title": "Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101975" }, { "rank": 724, "cve_id": "CVE-2026-110865", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00185, "epss_percentile": 0.07538, "kev": false, "kev_due_at": null, "vendor": "renovatebot", "product": "renovate", "cwe": "CWE-424", "title": "Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110865" }, { "rank": 725, "cve_id": "CVE-2026-92409", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00185, "epss_percentile": 0.07593, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Donation Thermometer", "cwe": "CWE-79", "title": "Donation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92409" }, { "rank": 726, "cve_id": "CVE-2026-102080", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.07337, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-413", "title": "Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102080" }, { "rank": 727, "cve_id": "CVE-2026-96596", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.07363, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-835", "title": "erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96596" }, { "rank": 728, "cve_id": "CVE-2026-107422", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00182, "epss_percentile": 0.07257, "kev": false, "kev_due_at": null, "vendor": "axew3.com", "product": "WP w3all phpBB", "cwe": "CWE-79", "title": "WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107422" }, { "rank": 729, "cve_id": "CVE-2026-106464", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.07144, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "NetX Duo", "cwe": "CWE-125", "title": "`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length of `0xFFFFFFFF` and a signature pointer one byte past the end of the buffer. Certificates are parsed from the peer during the TLS handshake, so the input is remote and unauthenticated.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106464" }, { "rank": 730, "cve_id": "CVE-2026-73794", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00179, "epss_percentile": 0.06978, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop MODULAR NSJ", "cwe": "CWE-337", "title": "HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73794" }, { "rank": 731, "cve_id": "CVE-2026-53615", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00178, "epss_percentile": 0.06823, "kev": false, "kev_due_at": null, "vendor": "util-linux", "product": "util-linux", "cwe": "CWE-190", "title": "util-linux libblkid DOS extended-partition overflow produces invalid partition metadata", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53615" }, { "rank": 732, "cve_id": "CVE-2026-104108", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00176, "epss_percentile": 0.06675, "kev": false, "kev_due_at": null, "vendor": "error311", "product": "FileRise", "cwe": "CWE-287", "title": "FileRise OIDC login can bind an attacker identity to an existing local account", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104108" }, { "rank": 733, "cve_id": "CVE-2026-97629", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00175, "epss_percentile": 0.06498, "kev": false, "kev_due_at": null, "vendor": "F5", "product": "NGINX Plus", "cwe": "CWE-908", "title": "NGINX ngx_http_ssl_module vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97629" }, { "rank": 734, "cve_id": "CVE-2026-110601", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00173, "epss_percentile": 0.06322, "kev": false, "kev_due_at": null, "vendor": "saitoha", "product": "libsixel", "cwe": "CWE-787", "title": "libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap Out-of-Bounds Write via GIF", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110601" }, { "rank": 735, "cve_id": "CVE-2026-110603", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00173, "epss_percentile": 0.06323, "kev": false, "kev_due_at": null, "vendor": "rapidlasso", "product": "LASzip", "cwe": "CWE-824", "title": "LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110603" }, { "rank": 736, "cve_id": "CVE-2026-110654", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06137, "kev": false, "kev_due_at": null, "vendor": "zapping-vbi", "product": "libzvbi", "cwe": "CWE-787", "title": "libzvbi through 0.2.45 Out-of-Bounds Write via Teletext DRCS convert_drcs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110654" }, { "rank": 737, "cve_id": "CVE-2026-110715", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.0614, "kev": false, "kev_due_at": null, "vendor": "Artifex Software", "product": "MuJS", "cwe": "CWE-787", "title": "MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110715" }, { "rank": 738, "cve_id": "CVE-2026-110257", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06139, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-789", "title": "OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110257" }, { "rank": 739, "cve_id": "CVE-2026-110258", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06136, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-789", "title": "OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110258" }, { "rank": 740, "cve_id": "CVE-2026-110259", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06138, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-674", "title": "OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110259" }, { "rank": 741, "cve_id": "CVE-2026-110260", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06136, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-407", "title": "OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110260" }, { "rank": 742, "cve_id": "CVE-2026-110261", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06138, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-407", "title": "OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110261" }, { "rank": 743, "cve_id": "CVE-2026-110263", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06139, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-674", "title": "OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110263" }, { "rank": 744, "cve_id": "CVE-2026-110270", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06138, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-407", "title": "OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110270" }, { "rank": 745, "cve_id": "CVE-2026-110591", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06138, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-770", "title": "OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110591" }, { "rank": 746, "cve_id": "CVE-2026-110596", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06137, "kev": false, "kev_due_at": null, "vendor": "dlbeer", "product": "quirc", "cwe": "CWE-834", "title": "quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110596" }, { "rank": 747, "cve_id": "CVE-2026-110659", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.0614, "kev": false, "kev_due_at": null, "vendor": "serge1", "product": "ELFIO", "cwe": "CWE-476", "title": "ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110659" }, { "rank": 748, "cve_id": "CVE-2026-110716", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00172, "epss_percentile": 0.06136, "kev": false, "kev_due_at": null, "vendor": "twogood", "product": "unshield", "cwe": "CWE-125", "title": "unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110716" }, { "rank": 749, "cve_id": "CVE-2026-110598", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00171, "epss_percentile": 0.06, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libpff", "cwe": "CWE-125", "title": "Libyal libpff through 20260926 heap out-of-bounds read via libpff_record_entry_get_multi_value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110598" }, { "rank": 750, "cve_id": "CVE-2026-90989", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0017, "epss_percentile": 0.05882, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Tainacan", "cwe": "CWE-200", "title": "Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-90989" }, { "rank": 751, "cve_id": "CVE-2026-89075", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00168, "epss_percentile": 0.05689, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-922", "title": "MOVEit Transfer Local Disclosure of Session Information Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89075" }, { "rank": 752, "cve_id": "CVE-2026-94348", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05681, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "PowerScale InsightIQ", "cwe": "CWE-89", "title": "Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94348" }, { "rank": 753, "cve_id": "CVE-2024-58392", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05612, "kev": false, "kev_due_at": null, "vendor": "icculus", "product": "PhysicsFS", "cwe": "CWE-125", "title": "PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint", "url": "https://www.cve.org/CVERecord?id=CVE-2024-58392" }, { "rank": 754, "cve_id": "CVE-2026-110262", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05614, "kev": false, "kev_due_at": null, "vendor": "OW2", "product": "ASM", "cwe": "CWE-770", "title": "OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110262" }, { "rank": 755, "cve_id": "CVE-2026-110606", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05613, "kev": false, "kev_due_at": null, "vendor": "LibreCAD", "product": "libdxfrw", "cwe": "CWE-125", "title": "LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeader", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110606" }, { "rank": 756, "cve_id": "CVE-2026-110660", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05613, "kev": false, "kev_due_at": null, "vendor": "vgmstream", "product": "vgmstream", "cwe": "CWE-125", "title": "vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110660" }, { "rank": 757, "cve_id": "CVE-2026-110661", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.05613, "kev": false, "kev_due_at": null, "vendor": "CGNS", "product": "CGNS", "cwe": "CWE-125", "title": "CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110661" }, { "rank": 758, "cve_id": "CVE-2026-78231", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00168, "epss_percentile": 0.05679, "kev": false, "kev_due_at": null, "vendor": "Gitea", "product": "Gitea", "cwe": "CWE-918", "title": "Gitea blind SSRF through OpenID assertion verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78231" }, { "rank": 759, "cve_id": "CVE-2026-86565", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00167, "epss_percentile": 0.05589, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-787", "title": "Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86565" }, { "rank": 760, "cve_id": "CVE-2026-91076", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00166, "epss_percentile": 0.05451, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Robokassa payment gateway for Woocommerce", "cwe": "CWE-862", "title": "Robokassa payment for WooCommerce < 1.9.0 - Unauthenticated Arbitrary Order Status Change to Failed", "url": "https://www.cve.org/CVERecord?id=CVE-2026-91076" }, { "rank": 761, "cve_id": "CVE-2026-94254", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00166, "epss_percentile": 0.0545, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "SellKit", "cwe": "CWE-862", "title": "SellKit 2.3.5 - 2.7.0 - Unauthenticated Arbitrary Price Manipulation via 'sellkit_product_prices' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94254" }, { "rank": 762, "cve_id": "CVE-2026-104795", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00165, "epss_percentile": 0.0529, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "cwe": "CWE-250", "title": "Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795" }, { "rank": 763, "cve_id": "CVE-2026-76113", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00163, "epss_percentile": 0.05158, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Terraform Provider for Redfish", "cwe": "CWE-532", "title": "Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76113" }, { "rank": 764, "cve_id": "CVE-2026-86563", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00161, "epss_percentile": 0.04859, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-131", "title": "Dpdk: dpdk: double offset bug in vhost log mapping calculation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86563" }, { "rank": 765, "cve_id": "CVE-2026-92426", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00161, "epss_percentile": 0.04832, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "YITH WooCommerce Popup", "cwe": "CWE-863", "title": "YITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92426" }, { "rank": 766, "cve_id": "CVE-2026-103414", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.0016, "epss_percentile": 0.04678, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "GUIX", "cwe": "CWE-787", "title": "The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph data a page actually contains, the two passes can read different page headers for the same font page, derive different glyph counts, and reserve less than the load pass writes. The excess is written past the end of the arena, with content taken verbatim from the file. The overflowed buffer is allocated by GUIX itself, through `_gx_system_memory_allocator`, rather than supplied by the caller. The public API `gx_binres_theme_load()` takes no size parameter, so no amount of caller diligence prevents this. Reproduces in the shipped default configuration; `GX_BINARY_RESOURCE_SUPPORT` is enabled by default.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103414" }, { "rank": 767, "cve_id": "CVE-2026-86561", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00158, "epss_percentile": 0.04507, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-770", "title": "Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86561" }, { "rank": 768, "cve_id": "CVE-2026-86846", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00158, "epss_percentile": 0.04507, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-787", "title": "Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86846" }, { "rank": 769, "cve_id": "CVE-2026-86847", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00158, "epss_percentile": 0.04507, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-824", "title": "Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86847" }, { "rank": 770, "cve_id": "CVE-2026-101934", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": 0.00157, "epss_percentile": 0.04427, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-787", "title": "Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101934" }, { "rank": 771, "cve_id": "CVE-2026-49206", "cvss_base": 2.9, "cvss_severity": "LOW", "epss_score": 0.00157, "epss_percentile": 0.04348, "kev": false, "kev_due_at": null, "vendor": "d99kris", "product": "rapidcsv", "cwe": "CWE-190", "title": "rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49206" }, { "rank": 772, "cve_id": "CVE-2026-107160", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00156, "epss_percentile": 0.04261, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "LTL Freight Quotes", "cwe": "CWE-345", "title": "LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored HTML Injection via Checkout Error Message", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107160" }, { "rank": 773, "cve_id": "CVE-2026-108069", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00156, "epss_percentile": 0.04261, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Sunshine Photo Cart", "cwe": "CWE-345", "title": "Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108069" }, { "rank": 774, "cve_id": "CVE-2026-101927", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00155, "epss_percentile": 0.04148, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-122", "title": "Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101927" }, { "rank": 775, "cve_id": "CVE-2026-102013", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": 0.00155, "epss_percentile": 0.04173, "kev": false, "kev_due_at": null, "vendor": "Juniper Networks", "product": "Junos OS", "cwe": "CWE-476", "title": "Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102013" }, { "rank": 776, "cve_id": "CVE-2026-100231", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00151, "epss_percentile": 0.03809, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-787", "title": "Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100231" }, { "rank": 777, "cve_id": "CVE-2026-88842", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00151, "epss_percentile": 0.03861, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-125", "title": "Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88842" }, { "rank": 778, "cve_id": "CVE-2026-110450", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.0015, "epss_percentile": 0.03788, "kev": false, "kev_due_at": null, "vendor": "NixOS", "product": "Nix", "cwe": "CWE-696", "title": "Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110450" }, { "rank": 779, "cve_id": "CVE-2026-88998", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00149, "epss_percentile": 0.0365, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Tickera", "cwe": "CWE-345", "title": "Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88998" }, { "rank": 780, "cve_id": "CVE-2026-86562", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00146, "epss_percentile": 0.03418, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-362", "title": "Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86562" }, { "rank": 781, "cve_id": "CVE-2026-87093", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00144, "epss_percentile": 0.03318, "kev": false, "kev_due_at": null, "vendor": "Progress", "product": "MOVEit Transfer", "cwe": "CWE-732", "title": "MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87093" }, { "rank": 782, "cve_id": "CVE-2026-82844", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00144, "epss_percentile": 0.03277, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WPForms Lite", "cwe": "CWE-345", "title": "WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82844" }, { "rank": 783, "cve_id": "CVE-2026-86567", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03101, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-416", "title": "Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86567" }, { "rank": 784, "cve_id": "CVE-2026-0312", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00141, "epss_percentile": 0.03068, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "cwe": "CWE-22", "title": "Checkov by Prisma Cloud: Path Traversal Vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0312" }, { "rank": 785, "cve_id": "CVE-2026-53614", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00139, "epss_percentile": 0.02903, "kev": false, "kev_due_at": null, "vendor": "util-linux", "product": "util-linux", "cwe": "CWE-269", "title": "util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53614" }, { "rank": 786, "cve_id": "CVE-2026-103308", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00139, "epss_percentile": 0.02886, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Visma Pay for WooCommerce", "cwe": "CWE-345", "title": "Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103308" }, { "rank": 787, "cve_id": "CVE-2026-110633", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00137, "epss_percentile": 0.02746, "kev": false, "kev_due_at": null, "vendor": "Report One", "product": "MyReport Updater", "cwe": "CWE-269", "title": "MyReport Updater through 2.1.1 Local Privilege Escalation via Updater Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110633" }, { "rank": 788, "cve_id": "CVE-2026-50215", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00136, "epss_percentile": 0.02674, "kev": false, "kev_due_at": null, "vendor": "Akamai", "product": "Guardicore Platform Agent", "cwe": "CWE-416", "title": "A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to trigger this at DISPATCH_LEVEL, resulting in an immediate system crash.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50215" }, { "rank": 789, "cve_id": "CVE-2026-86573", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00134, "epss_percentile": 0.02588, "kev": false, "kev_due_at": null, "vendor": "Hitachi", "product": "Hitachi Disk Array Driver for AIX", "cwe": "CWE-787", "title": "Out-of-bounds Write Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86573" }, { "rank": 790, "cve_id": "CVE-2026-73796", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00134, "epss_percentile": 0.02598, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TSQLEXE", "cwe": "CWE-564", "title": "HPE NonStop TSQLEXE - Memory Corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73796" }, { "rank": 791, "cve_id": "CVE-2026-109970", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00132, "epss_percentile": 0.0246, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-538", "title": "Clevis: clevis: pkcs#11 token pin written to world-readable file", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109970" }, { "rank": 792, "cve_id": "CVE-2026-77564", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00132, "epss_percentile": 0.02453, "kev": false, "kev_due_at": null, "vendor": "siderolabs", "product": "talos", "cwe": "CWE-312", "title": "Talos Linux: Support bundle does not redact registry credentials", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77564" }, { "rank": 793, "cve_id": "CVE-2026-110451", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00131, "epss_percentile": 0.02405, "kev": false, "kev_due_at": null, "vendor": "NixOS", "product": "Nix", "cwe": "CWE-863", "title": "Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110451" }, { "rank": 794, "cve_id": "CVE-2026-110453", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00131, "epss_percentile": 0.02405, "kev": false, "kev_due_at": null, "vendor": "NixOS", "product": "Nix", "cwe": "CWE-863", "title": "Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110453" }, { "rank": 795, "cve_id": "CVE-2026-110452", "cvss_base": 4, "cvss_severity": "MEDIUM", "epss_score": 0.00131, "epss_percentile": 0.02405, "kev": false, "kev_due_at": null, "vendor": "NixOS", "product": "Nix", "cwe": "CWE-708", "title": "The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110452" }, { "rank": 796, "cve_id": "CVE-2026-86566", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02328, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-191", "title": "Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86566" }, { "rank": 797, "cve_id": "CVE-2026-86845", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02328, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-825", "title": "Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86845" }, { "rank": 798, "cve_id": "CVE-2026-86849", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02301, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-787", "title": "Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86849" }, { "rank": 799, "cve_id": "CVE-2026-86856", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0013, "epss_percentile": 0.02329, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-787", "title": "Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86856" }, { "rank": 800, "cve_id": "CVE-2026-110860", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00129, "epss_percentile": 0.02285, "kev": false, "kev_due_at": null, "vendor": "gitpython-developers", "product": "GitPython", "cwe": "CWE-59", "title": "GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110860" }, { "rank": 801, "cve_id": "CVE-2026-53613", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00128, "epss_percentile": 0.02166, "kev": false, "kev_due_at": null, "vendor": "util-linux", "product": "util-linux", "cwe": "CWE-367", "title": "util-linux mount target TOCTOU allows local privilege escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53613" }, { "rank": 802, "cve_id": "CVE-2026-108072", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00128, "epss_percentile": 0.02193, "kev": false, "kev_due_at": null, "vendor": "TSplus", "product": "TSplus Remote Access", "cwe": "CWE-276", "title": "Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108072" }, { "rank": 803, "cve_id": "CVE-2026-109971", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00126, "epss_percentile": 0.02073, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-214", "title": "Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109971" }, { "rank": 804, "cve_id": "CVE-2026-110689", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00126, "epss_percentile": 0.02071, "kev": false, "kev_due_at": null, "vendor": "OpenClaw", "product": "ClawScan", "cwe": "CWE-693", "title": "OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110689" }, { "rank": 805, "cve_id": "CVE-2026-82715", "cvss_base": 7.9, "cvss_severity": "HIGH", "epss_score": 0.00124, "epss_percentile": 0.01949, "kev": false, "kev_due_at": null, "vendor": "Hitachi", "product": "Hitachi Disk Array Driver for AIX", "cwe": "CWE-377", "title": "Insecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82715" }, { "rank": 806, "cve_id": "CVE-2026-107171", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00122, "epss_percentile": 0.01811, "kev": false, "kev_due_at": null, "vendor": "Trellix", "product": "Trellix Agent", "cwe": "CWE-321", "title": "An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107171" }, { "rank": 807, "cve_id": "CVE-2026-110359", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00119, "epss_percentile": 0.01644, "kev": false, "kev_due_at": null, "vendor": "Hyland", "product": "Desktop Host", "cwe": "CWE-276", "title": "Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110359" }, { "rank": 808, "cve_id": "CVE-2026-109969", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00116, "epss_percentile": 0.01499, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-306", "title": "Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109969" }, { "rank": 809, "cve_id": "CVE-2026-53612", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00115, "epss_percentile": 0.0146, "kev": false, "kev_due_at": null, "vendor": "util-linux", "product": "util-linux", "cwe": "CWE-367", "title": "util-linux mount hook_owner TOCTOU allows local privilege escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53612" }, { "rank": 810, "cve_id": "CVE-2026-82153", "cvss_base": 2.2, "cvss_severity": "LOW", "epss_score": 0.00115, "epss_percentile": 0.01433, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "OS Recovery Tool", "cwe": "CWE-922", "title": "Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82153" }, { "rank": 811, "cve_id": "CVE-2026-86848", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0011, "epss_percentile": 0.01183, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-367", "title": "Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86848" }, { "rank": 812, "cve_id": "CVE-2026-73797", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00109, "epss_percentile": 0.01162, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TSQLFIL", "cwe": "CWE-475", "title": "HPE NonStop TSQLFIL - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73797" }, { "rank": 813, "cve_id": "CVE-2026-50217", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00108, "epss_percentile": 0.01116, "kev": false, "kev_due_at": null, "vendor": "Akamai", "product": "Guardicore Platform Agent", "cwe": "CWE-416", "title": "A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system crash / BSOD) via an outbound ICMPv6 packet containing an IPv6 Hop-by-Hop extension header. When the IPv6 ICMP redirect policy is active, the packet is copied into a buffer that is freed but subsequently passed to a downstream filter. The size of the freed allocation is attacker-controlled (via packet length), enabling kernel pool grooming. Exploitation requires that the non-default IPv6 ICMP capture/redirect policy is enabled for the endpoint.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50217" }, { "rank": 814, "cve_id": "CVE-2026-0311", "cvss_base": 1.1, "cvss_severity": "LOW", "epss_score": 0.00107, "epss_percentile": 0.01097, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "cwe": "CWE-918", "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0311" }, { "rank": 815, "cve_id": "CVE-2026-73795", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00105, "epss_percentile": 0.01024, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TMF Auditread2", "cwe": "CWE-121", "title": "HPE NonStop TMF Auditread2 - Denial of Service vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73795" }, { "rank": 816, "cve_id": "CVE-2026-0315", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00105, "epss_percentile": 0.00994, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "GlobalProtect App", "cwe": "CWE-426", "title": "GlobalProtect App: Local Privilege Escalation Vulnerability on macOS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0315" }, { "rank": 817, "cve_id": "CVE-2026-93683", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00101, "epss_percentile": 0.00838, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Fast Datapath for RHEL 10", "cwe": "CWE-367", "title": "Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93683" }, { "rank": 818, "cve_id": "CVE-2026-0314", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00099, "epss_percentile": 0.0077, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "GlobalProtect App", "cwe": "CWE-843", "title": "GlobalProtect App: Local Denial of Service (DoS) on Windows", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0314" }, { "rank": 819, "cve_id": "CVE-2026-77572", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00096, "epss_percentile": 0.00672, "kev": false, "kev_due_at": null, "vendor": "veracrypt", "product": "VeraCrypt", "cwe": "CWE-200", "title": "VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\\\.\\VeraCrypt", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77572" }, { "rank": 820, "cve_id": "CVE-2026-15102", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00094, "epss_percentile": 0.00558, "kev": false, "kev_due_at": null, "vendor": "Autodesk", "product": "ADP Desktop SDK", "cwe": "CWE-319", "title": "Cleartext Transmission of Sensitive Information in ADP Desktop SDK", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15102" }, { "rank": 821, "cve_id": "CVE-2026-109968", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00092, "epss_percentile": 0.0047, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-532", "title": "Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109968" } ], "transactions": [ { "type": "KEV_ADDED", "cve_id": "CVE-2026-0322", "detail": "ADDED TO KEV — CVE-2026-0322 (Palo Alto Networks Cloud NGFW). Remediation due October 17, 2026." }, { "type": "KEV_ADDED", "cve_id": "CVE-2026-105133", "detail": "ADDED TO KEV — CVE-2026-105133 (AhsayCBS). Remediation due October 17, 2026." }, { "type": "KEV_ADDED", "cve_id": "CVE-2026-105134", "detail": "ADDED TO KEV — CVE-2026-105134 (AhsayCBS). Remediation due October 17, 2026." }, { "type": "KEV_ADDED", "cve_id": "CVE-2026-76519", "detail": "ADDED TO KEV — CVE-2026-76519 (Cisco Secure Email). Remediation due October 17, 2026." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2013-0340", "detail": "EXPLOIT PUBLISHED — CVE-2013-0340 (libexpat). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2014-9323", "detail": "EXPLOIT PUBLISHED — CVE-2014-9323. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2015-1197", "detail": "EXPLOIT PUBLISHED — CVE-2015-1197. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2015-20107", "detail": "EXPLOIT PUBLISHED — CVE-2015-20107. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2015-2468", "detail": "EXPLOIT PUBLISHED — CVE-2015-2468. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2015-2469", "detail": "EXPLOIT PUBLISHED — CVE-2015-2469. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2015-2470", "detail": "EXPLOIT PUBLISHED — CVE-2015-2470. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2016-15060", "detail": "EXPLOIT PUBLISHED — CVE-2016-15060 (PCMan FTP Server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2016-20099", "detail": "EXPLOIT PUBLISHED — CVE-2016-20099 (l-smash). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2016-3709", "detail": "EXPLOIT PUBLISHED — CVE-2016-3709 (libxml2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2016-9318", "detail": "EXPLOIT PUBLISHED — CVE-2016-9318. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-17512", "detail": "EXPLOIT PUBLISHED — CVE-2017-17512. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-9047", "detail": "EXPLOIT PUBLISHED — CVE-2017-9047. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-9048", "detail": "EXPLOIT PUBLISHED — CVE-2017-9048. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-9049", "detail": "EXPLOIT PUBLISHED — CVE-2017-9049. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-9050", "detail": "EXPLOIT PUBLISHED — CVE-2017-9050. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-0495", "detail": "EXPLOIT PUBLISHED — CVE-2018-0495 (Libgcrypt before 1.7.10 and 1.8.x before 1.8.3). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-12886", "detail": "EXPLOIT PUBLISHED — CVE-2018-12886. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19591", "detail": "EXPLOIT PUBLISHED — CVE-2018-19591. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-20482", "detail": "EXPLOIT PUBLISHED — CVE-2018-20482. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-20843", "detail": "EXPLOIT PUBLISHED — CVE-2018-20843. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-25032", "detail": "EXPLOIT PUBLISHED — CVE-2018-25032. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-1010022", "detail": "EXPLOIT PUBLISHED — CVE-2019-1010022 (GNU C Library glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-1010023", "detail": "EXPLOIT PUBLISHED — CVE-2019-1010023 (GNU Libc glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-1010024", "detail": "EXPLOIT PUBLISHED — CVE-2019-1010024 (GNU Libc glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-1010025", "detail": "EXPLOIT PUBLISHED — CVE-2019-1010025 (GNU Libc glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-1010180", "detail": "EXPLOIT PUBLISHED — CVE-2019-1010180 (GNU gdb). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-11360", "detail": "EXPLOIT PUBLISHED — CVE-2019-11360. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-15903", "detail": "EXPLOIT PUBLISHED — CVE-2019-15903. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-16905", "detail": "EXPLOIT PUBLISHED — CVE-2019-16905. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-17498", "detail": "EXPLOIT PUBLISHED — CVE-2019-17498. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-17594", "detail": "EXPLOIT PUBLISHED — CVE-2019-17594. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-17595", "detail": "EXPLOIT PUBLISHED — CVE-2019-17595. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-18224", "detail": "EXPLOIT PUBLISHED — CVE-2019-18224. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-18276", "detail": "EXPLOIT PUBLISHED — CVE-2019-18276. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-19906", "detail": "EXPLOIT PUBLISHED — CVE-2019-19906. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-20367", "detail": "EXPLOIT PUBLISHED — CVE-2019-20367. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-5018", "detail": "EXPLOIT PUBLISHED — CVE-2019-5018 (Sqlite3). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-5094", "detail": "EXPLOIT PUBLISHED — CVE-2019-5094 (E2fsprogs). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-5188", "detail": "EXPLOIT PUBLISHED — CVE-2019-5188 (E2fsprogs). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-5435", "detail": "EXPLOIT PUBLISHED — CVE-2019-5435 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-5436", "detail": "EXPLOIT PUBLISHED — CVE-2019-5436 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-7309", "detail": "EXPLOIT PUBLISHED — CVE-2019-7309. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-9169", "detail": "EXPLOIT PUBLISHED — CVE-2019-9169. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-9740", "detail": "EXPLOIT PUBLISHED — CVE-2019-9740. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-9947", "detail": "EXPLOIT PUBLISHED — CVE-2019-9947. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-9948", "detail": "EXPLOIT PUBLISHED — CVE-2019-9948. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-10029", "detail": "EXPLOIT PUBLISHED — CVE-2020-10029. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-11655", "detail": "EXPLOIT PUBLISHED — CVE-2020-11655. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-12243", "detail": "EXPLOIT PUBLISHED — CVE-2020-12243. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-12762", "detail": "EXPLOIT PUBLISHED — CVE-2020-12762. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-13434", "detail": "EXPLOIT PUBLISHED — CVE-2020-13434. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-13435", "detail": "EXPLOIT PUBLISHED — CVE-2020-13435. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-13529", "detail": "EXPLOIT PUBLISHED — CVE-2020-13529 (Systemd). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-13871", "detail": "EXPLOIT PUBLISHED — CVE-2020-13871. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-15358", "detail": "EXPLOIT PUBLISHED — CVE-2020-15358. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-15778", "detail": "EXPLOIT PUBLISHED — CVE-2020-15778. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19185", "detail": "EXPLOIT PUBLISHED — CVE-2020-19185. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19186", "detail": "EXPLOIT PUBLISHED — CVE-2020-19186. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19187", "detail": "EXPLOIT PUBLISHED — CVE-2020-19187. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19188", "detail": "EXPLOIT PUBLISHED — CVE-2020-19188. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19189", "detail": "EXPLOIT PUBLISHED — CVE-2020-19189. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-19190", "detail": "EXPLOIT PUBLISHED — CVE-2020-19190. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-21913", "detail": "EXPLOIT PUBLISHED — CVE-2020-21913. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-24659", "detail": "EXPLOIT PUBLISHED — CVE-2020-24659. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-24977", "detail": "EXPLOIT PUBLISHED — CVE-2020-24977. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-26116", "detail": "EXPLOIT PUBLISHED — CVE-2020-26116. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-27618", "detail": "EXPLOIT PUBLISHED — CVE-2020-27618. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-29562", "detail": "EXPLOIT PUBLISHED — CVE-2020-29562. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8169", "detail": "EXPLOIT PUBLISHED — CVE-2020-8169 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8177", "detail": "EXPLOIT PUBLISHED — CVE-2020-8177 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8231", "detail": "EXPLOIT PUBLISHED — CVE-2020-8231 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8285", "detail": "EXPLOIT PUBLISHED — CVE-2020-8285 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8286", "detail": "EXPLOIT PUBLISHED — CVE-2020-8286 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2020-8492", "detail": "EXPLOIT PUBLISHED — CVE-2020-8492. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-20231", "detail": "EXPLOIT PUBLISHED — CVE-2021-20231 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22876", "detail": "EXPLOIT PUBLISHED — CVE-2021-22876 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22890", "detail": "EXPLOIT PUBLISHED — CVE-2021-22890 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22897", "detail": "EXPLOIT PUBLISHED — CVE-2021-22897 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22898", "detail": "EXPLOIT PUBLISHED — CVE-2021-22898 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22901", "detail": "EXPLOIT PUBLISHED — CVE-2021-22901 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22922", "detail": "EXPLOIT PUBLISHED — CVE-2021-22922 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22923", "detail": "EXPLOIT PUBLISHED — CVE-2021-22923 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22924", "detail": "EXPLOIT PUBLISHED — CVE-2021-22924 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22925", "detail": "EXPLOIT PUBLISHED — CVE-2021-22925 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22926", "detail": "EXPLOIT PUBLISHED — CVE-2021-22926 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22945", "detail": "EXPLOIT PUBLISHED — CVE-2021-22945 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22946", "detail": "EXPLOIT PUBLISHED — CVE-2021-22946 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-22947", "detail": "EXPLOIT PUBLISHED — CVE-2021-22947 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-23336", "detail": "EXPLOIT PUBLISHED — CVE-2021-23336 (python/cpython). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-27212", "detail": "EXPLOIT PUBLISHED — CVE-2021-27212. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-27219", "detail": "EXPLOIT PUBLISHED — CVE-2021-27219. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-28153", "detail": "EXPLOIT PUBLISHED — CVE-2021-28153. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-31239", "detail": "EXPLOIT PUBLISHED — CVE-2021-31239. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3177", "detail": "EXPLOIT PUBLISHED — CVE-2021-3177. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-32292", "detail": "EXPLOIT PUBLISHED — CVE-2021-32292. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-33294", "detail": "EXPLOIT PUBLISHED — CVE-2021-33294. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-33574", "detail": "EXPLOIT PUBLISHED — CVE-2021-33574. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-33910", "detail": "EXPLOIT PUBLISHED — CVE-2021-33910. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3516", "detail": "EXPLOIT PUBLISHED — CVE-2021-3516 (libxml2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-36084", "detail": "EXPLOIT PUBLISHED — CVE-2021-36084. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-36085", "detail": "EXPLOIT PUBLISHED — CVE-2021-36085. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-36086", "detail": "EXPLOIT PUBLISHED — CVE-2021-36086. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-36087", "detail": "EXPLOIT PUBLISHED — CVE-2021-36087. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-36690", "detail": "EXPLOIT PUBLISHED — CVE-2021-36690. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3733", "detail": "EXPLOIT PUBLISHED — CVE-2021-3733 (python). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3737", "detail": "EXPLOIT PUBLISHED — CVE-2021-3737 (python). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-37600", "detail": "EXPLOIT PUBLISHED — CVE-2021-37600. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-38604", "detail": "EXPLOIT PUBLISHED — CVE-2021-38604. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3997", "detail": "EXPLOIT PUBLISHED — CVE-2021-3997 (systemd). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-3999", "detail": "EXPLOIT PUBLISHED — CVE-2021-3999 (glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-43396", "detail": "EXPLOIT PUBLISHED — CVE-2021-43396. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-43618", "detail": "EXPLOIT PUBLISHED — CVE-2021-43618. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-44879", "detail": "EXPLOIT PUBLISHED — CVE-2021-44879. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-45960", "detail": "EXPLOIT PUBLISHED — CVE-2021-45960. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-46143", "detail": "EXPLOIT PUBLISHED — CVE-2021-46143. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-46195", "detail": "EXPLOIT PUBLISHED — CVE-2021-46195. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-46848", "detail": "EXPLOIT PUBLISHED — CVE-2021-46848. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-47107", "detail": "EXPLOIT PUBLISHED — CVE-2021-47107 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-0391", "detail": "EXPLOIT PUBLISHED — CVE-2022-0391 (python). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-1015", "detail": "EXPLOIT PUBLISHED — CVE-2022-1015 (kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-1462", "detail": "EXPLOIT PUBLISHED — CVE-2022-1462 (kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2153", "detail": "EXPLOIT PUBLISHED — CVE-2022-2153 (kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-22576", "detail": "EXPLOIT PUBLISHED — CVE-2022-22576 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2274", "detail": "EXPLOIT PUBLISHED — CVE-2022-2274 (OpenSSL). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-23218", "detail": "EXPLOIT PUBLISHED — CVE-2022-23218. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-23219", "detail": "EXPLOIT PUBLISHED — CVE-2022-23219. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2503", "detail": "EXPLOIT PUBLISHED — CVE-2022-2503 (Linux Kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-25315", "detail": "EXPLOIT PUBLISHED — CVE-2022-25315. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2586", "detail": "EXPLOIT PUBLISHED — CVE-2022-2586 (The Linux Kernel Organization linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2588", "detail": "EXPLOIT PUBLISHED — CVE-2022-2588 (The Linux Kernel Organization linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2663", "detail": "EXPLOIT PUBLISHED — CVE-2022-2663 (Linux kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27774", "detail": "EXPLOIT PUBLISHED — CVE-2022-27774 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27775", "detail": "EXPLOIT PUBLISHED — CVE-2022-27775 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27776", "detail": "EXPLOIT PUBLISHED — CVE-2022-27776 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27778", "detail": "EXPLOIT PUBLISHED — CVE-2022-27778 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27779", "detail": "EXPLOIT PUBLISHED — CVE-2022-27779 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27780", "detail": "EXPLOIT PUBLISHED — CVE-2022-27780 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27781", "detail": "EXPLOIT PUBLISHED — CVE-2022-27781 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27782", "detail": "EXPLOIT PUBLISHED — CVE-2022-27782 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-27943", "detail": "EXPLOIT PUBLISHED — CVE-2022-27943. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-2905", "detail": "EXPLOIT PUBLISHED — CVE-2022-2905 (kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-29155", "detail": "EXPLOIT PUBLISHED — CVE-2022-29155. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-29824", "detail": "EXPLOIT PUBLISHED — CVE-2022-29824. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-30115", "detail": "EXPLOIT PUBLISHED — CVE-2022-30115 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32205", "detail": "EXPLOIT PUBLISHED — CVE-2022-32205 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32206", "detail": "EXPLOIT PUBLISHED — CVE-2022-32206 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32207", "detail": "EXPLOIT PUBLISHED — CVE-2022-32207 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32208", "detail": "EXPLOIT PUBLISHED — CVE-2022-32208 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32221", "detail": "EXPLOIT PUBLISHED — CVE-2022-32221 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-32250", "detail": "EXPLOIT PUBLISHED — CVE-2022-32250. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-3303", "detail": "EXPLOIT PUBLISHED — CVE-2022-3303 (Linux kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-34918", "detail": "EXPLOIT PUBLISHED — CVE-2022-34918. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-35252", "detail": "EXPLOIT PUBLISHED — CVE-2022-35252 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-35260", "detail": "EXPLOIT PUBLISHED — CVE-2022-35260 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-35737", "detail": "EXPLOIT PUBLISHED — CVE-2022-35737. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-36123", "detail": "EXPLOIT PUBLISHED — CVE-2022-36123. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-3628", "detail": "EXPLOIT PUBLISHED — CVE-2022-3628 (Kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-3635", "detail": "EXPLOIT PUBLISHED — CVE-2022-3635 (Linux Kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-3715", "detail": "EXPLOIT PUBLISHED — CVE-2022-3715 (bash). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-37434", "detail": "EXPLOIT PUBLISHED — CVE-2022-37434. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-37454", "detail": "EXPLOIT PUBLISHED — CVE-2022-37454. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-3821", "detail": "EXPLOIT PUBLISHED — CVE-2022-3821 (systemd). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-41218", "detail": "EXPLOIT PUBLISHED — CVE-2022-41218. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-41222", "detail": "EXPLOIT PUBLISHED — CVE-2022-41222. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-41674", "detail": "EXPLOIT PUBLISHED — CVE-2022-41674. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42703", "detail": "EXPLOIT PUBLISHED — CVE-2022-42703. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42719", "detail": "EXPLOIT PUBLISHED — CVE-2022-42719. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42720", "detail": "EXPLOIT PUBLISHED — CVE-2022-42720. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42721", "detail": "EXPLOIT PUBLISHED — CVE-2022-42721. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42722", "detail": "EXPLOIT PUBLISHED — CVE-2022-42722. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-42898", "detail": "EXPLOIT PUBLISHED — CVE-2022-42898. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-43551", "detail": "EXPLOIT PUBLISHED — CVE-2022-43551 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-43552", "detail": "EXPLOIT PUBLISHED — CVE-2022-43552 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-43680", "detail": "EXPLOIT PUBLISHED — CVE-2022-43680. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-45061", "detail": "EXPLOIT PUBLISHED — CVE-2022-45061. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-46908", "detail": "EXPLOIT PUBLISHED — CVE-2022-46908. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-47929", "detail": "EXPLOIT PUBLISHED — CVE-2022-47929. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-47946", "detail": "EXPLOIT PUBLISHED — CVE-2022-47946. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-48303", "detail": "EXPLOIT PUBLISHED — CVE-2022-48303. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-48522", "detail": "EXPLOIT PUBLISHED — CVE-2022-48522. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2022-48560", "detail": "EXPLOIT PUBLISHED — CVE-2022-48560. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-0361", "detail": "EXPLOIT PUBLISHED — CVE-2023-0361 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-23914", "detail": "EXPLOIT PUBLISHED — CVE-2023-23914 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-23916", "detail": "EXPLOIT PUBLISHED — CVE-2023-23916 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-24329", "detail": "EXPLOIT PUBLISHED — CVE-2023-24329. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-25136", "detail": "EXPLOIT PUBLISHED — CVE-2023-25136. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-25139", "detail": "EXPLOIT PUBLISHED — CVE-2023-25139. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-26604", "detail": "EXPLOIT PUBLISHED — CVE-2023-26604. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-26607", "detail": "EXPLOIT PUBLISHED — CVE-2023-26607. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27371", "detail": "EXPLOIT PUBLISHED — CVE-2023-27371. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27533", "detail": "EXPLOIT PUBLISHED — CVE-2023-27533 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27534", "detail": "EXPLOIT PUBLISHED — CVE-2023-27534 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27535", "detail": "EXPLOIT PUBLISHED — CVE-2023-27535 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27536", "detail": "EXPLOIT PUBLISHED — CVE-2023-27536 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27537", "detail": "EXPLOIT PUBLISHED — CVE-2023-27537 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-27538", "detail": "EXPLOIT PUBLISHED — CVE-2023-27538 (https://github.com/curl/curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-28484", "detail": "EXPLOIT PUBLISHED — CVE-2023-28484. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-29383", "detail": "EXPLOIT PUBLISHED — CVE-2023-29383. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-29491", "detail": "EXPLOIT PUBLISHED — CVE-2023-29491. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-3338", "detail": "EXPLOIT PUBLISHED — CVE-2023-3338 (kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-4039", "detail": "EXPLOIT PUBLISHED — CVE-2023-4039 (Arm Ltd Arm GNU Toolchain). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-4273", "detail": "EXPLOIT PUBLISHED — CVE-2023-4273 (Red Hat Enterprise Linux 9). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-4911", "detail": "EXPLOIT PUBLISHED — CVE-2023-4911 (glibc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-4921", "detail": "EXPLOIT PUBLISHED — CVE-2023-4921 (Linux Kernel). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-6606", "detail": "EXPLOIT PUBLISHED — CVE-2023-6606 (Red Hat Enterprise Linux 8). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-7104", "detail": "EXPLOIT PUBLISHED — CVE-2023-7104 (SQLite3). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-23368", "detail": "EXPLOIT PUBLISHED — CVE-2025-23368 (wildfly-core). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-61984", "detail": "EXPLOIT PUBLISHED — CVE-2025-61984 (OpenBSD OpenSSH). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-69263", "detail": "EXPLOIT PUBLISHED — CVE-2025-69263 (pnpm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-69264", "detail": "EXPLOIT PUBLISHED — CVE-2025-69264 (pnpm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-71316", "detail": "EXPLOIT PUBLISHED — CVE-2025-71316 (SQLite sqldiff). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-8110", "detail": "EXPLOIT PUBLISHED — CVE-2025-8110 (Gogs). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-101301", "detail": "EXPLOIT PUBLISHED — CVE-2026-101301 (Unknown WPCode). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-103307", "detail": "EXPLOIT PUBLISHED — CVE-2026-103307 (Unknown Walletdoc Payment Gateway for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-103308", "detail": "EXPLOIT PUBLISHED — CVE-2026-103308 (Unknown Visma Pay for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104079", "detail": "EXPLOIT PUBLISHED — CVE-2026-104079 (Syed Balkhi Envira Gallery). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104082", "detail": "EXPLOIT PUBLISHED — CVE-2026-104082 (Smartertools Smartermail). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104644", "detail": "EXPLOIT PUBLISHED — CVE-2026-104644 (Unknown Image Photo Gallery Final Tiles Grid). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-104751", "detail": "EXPLOIT PUBLISHED — CVE-2026-104751 (Unknown Rank Math SEO). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-105261", "detail": "EXPLOIT PUBLISHED — CVE-2026-105261 (Unknown Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-105969", "detail": "EXPLOIT PUBLISHED — CVE-2026-105969 (Unknown CodeAtoZ B2B Suite for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-105975", "detail": "EXPLOIT PUBLISHED — CVE-2026-105975 (Unknown CamPay Shortcode Payment Gateway). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106098", "detail": "EXPLOIT PUBLISHED — CVE-2026-106098 (Unknown WP Data Access). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106099", "detail": "EXPLOIT PUBLISHED — CVE-2026-106099 (Unknown WP Data Access). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106166", "detail": "EXPLOIT PUBLISHED — CVE-2026-106166 (Unknown NEX-Forms). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106341", "detail": "EXPLOIT PUBLISHED — CVE-2026-106341 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106342", "detail": "EXPLOIT PUBLISHED — CVE-2026-106342 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106345", "detail": "EXPLOIT PUBLISHED — CVE-2026-106345 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106354", "detail": "EXPLOIT PUBLISHED — CVE-2026-106354 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106360", "detail": "EXPLOIT PUBLISHED — CVE-2026-106360 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106361", "detail": "EXPLOIT PUBLISHED — CVE-2026-106361 (Google Chrome). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106469", "detail": "EXPLOIT PUBLISHED — CVE-2026-106469 (Unknown Gutenverse Form). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106646", "detail": "EXPLOIT PUBLISHED — CVE-2026-106646 (Unknown Classified Listing). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107126", "detail": "EXPLOIT PUBLISHED — CVE-2026-107126 (Unknown WP Booking System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107158", "detail": "EXPLOIT PUBLISHED — CVE-2026-107158 (Unknown LTL Freight Quotes). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107160", "detail": "EXPLOIT PUBLISHED — CVE-2026-107160 (Unknown LTL Freight Quotes). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107178", "detail": "EXPLOIT PUBLISHED — CVE-2026-107178 (Unknown Image Photo Gallery Final Tiles Grid). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107319", "detail": "EXPLOIT PUBLISHED — CVE-2026-107319 (Unknown GamiPress). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107320", "detail": "EXPLOIT PUBLISHED — CVE-2026-107320 (Unknown GamiPress). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107335", "detail": "EXPLOIT PUBLISHED — CVE-2026-107335 (CISA Malcolm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107388", "detail": "EXPLOIT PUBLISHED — CVE-2026-107388 (Borewit music-metadata). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107390", "detail": "EXPLOIT PUBLISHED — CVE-2026-107390 (Borewit music-metadata). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107508", "detail": "EXPLOIT PUBLISHED — CVE-2026-107508 (Unknown Ultimate Multisite). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107594", "detail": "EXPLOIT PUBLISHED — CVE-2026-107594 (Unknown File Upload to Order). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-107696", "detail": "EXPLOIT PUBLISHED — CVE-2026-107696 (FFmpeg). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108064", "detail": "EXPLOIT PUBLISHED — CVE-2026-108064 (Unknown WP Encryption). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108066", "detail": "EXPLOIT PUBLISHED — CVE-2026-108066 (Unknown WP 2FA). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108069", "detail": "EXPLOIT PUBLISHED — CVE-2026-108069 (Unknown Sunshine Photo Cart). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108110", "detail": "EXPLOIT PUBLISHED — CVE-2026-108110 (himovo MOVO). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108112", "detail": "EXPLOIT PUBLISHED — CVE-2026-108112 (ageerle ruoyi-ai). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108114", "detail": "EXPLOIT PUBLISHED — CVE-2026-108114 (strapi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108158", "detail": "EXPLOIT PUBLISHED — CVE-2026-108158 (mynaparrot plugNmeet-server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108522", "detail": "EXPLOIT PUBLISHED — CVE-2026-108522 (Studio-Saelix Sencho). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108540", "detail": "EXPLOIT PUBLISHED — CVE-2026-108540 (OpenSpug Spug). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108545", "detail": "EXPLOIT PUBLISHED — CVE-2026-108545 (SillyTavern). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108605", "detail": "EXPLOIT PUBLISHED — CVE-2026-108605 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108608", "detail": "EXPLOIT PUBLISHED — CVE-2026-108608 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108610", "detail": "EXPLOIT PUBLISHED — CVE-2026-108610 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108613", "detail": "EXPLOIT PUBLISHED — CVE-2026-108613 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108615", "detail": "EXPLOIT PUBLISHED — CVE-2026-108615 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108618", "detail": "EXPLOIT PUBLISHED — CVE-2026-108618 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108620", "detail": "EXPLOIT PUBLISHED — CVE-2026-108620 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108623", "detail": "EXPLOIT PUBLISHED — CVE-2026-108623 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108625", "detail": "EXPLOIT PUBLISHED — CVE-2026-108625 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108628", "detail": "EXPLOIT PUBLISHED — CVE-2026-108628 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108630", "detail": "EXPLOIT PUBLISHED — CVE-2026-108630 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108633", "detail": "EXPLOIT PUBLISHED — CVE-2026-108633 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108635", "detail": "EXPLOIT PUBLISHED — CVE-2026-108635 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108638", "detail": "EXPLOIT PUBLISHED — CVE-2026-108638 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108640", "detail": "EXPLOIT PUBLISHED — CVE-2026-108640 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108643", "detail": "EXPLOIT PUBLISHED — CVE-2026-108643 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108645", "detail": "EXPLOIT PUBLISHED — CVE-2026-108645 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108648", "detail": "EXPLOIT PUBLISHED — CVE-2026-108648 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108650", "detail": "EXPLOIT PUBLISHED — CVE-2026-108650 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108653", "detail": "EXPLOIT PUBLISHED — CVE-2026-108653 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108655", "detail": "EXPLOIT PUBLISHED — CVE-2026-108655 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108658", "detail": "EXPLOIT PUBLISHED — CVE-2026-108658 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108660", "detail": "EXPLOIT PUBLISHED — CVE-2026-108660 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108663", "detail": "EXPLOIT PUBLISHED — CVE-2026-108663 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108665", "detail": "EXPLOIT PUBLISHED — CVE-2026-108665 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108668", "detail": "EXPLOIT PUBLISHED — CVE-2026-108668 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108670", "detail": "EXPLOIT PUBLISHED — CVE-2026-108670 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108673", "detail": "EXPLOIT PUBLISHED — CVE-2026-108673 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108675", "detail": "EXPLOIT PUBLISHED — CVE-2026-108675 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108678", "detail": "EXPLOIT PUBLISHED — CVE-2026-108678 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108680", "detail": "EXPLOIT PUBLISHED — CVE-2026-108680 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108682", "detail": "EXPLOIT PUBLISHED — CVE-2026-108682 (zhayujie CowAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108690", "detail": "EXPLOIT PUBLISHED — CVE-2026-108690 (gz-yami mall4j). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108692", "detail": "EXPLOIT PUBLISHED — CVE-2026-108692 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108700", "detail": "EXPLOIT PUBLISHED — CVE-2026-108700 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108703", "detail": "EXPLOIT PUBLISHED — CVE-2026-108703 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108705", "detail": "EXPLOIT PUBLISHED — CVE-2026-108705 (1Panel-dev CordysCRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108708", "detail": "EXPLOIT PUBLISHED — CVE-2026-108708 (WuKongOpenSource Wukong_HRM). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108769", "detail": "EXPLOIT PUBLISHED — CVE-2026-108769 (zhayujie CowAgent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108784", "detail": "EXPLOIT PUBLISHED — CVE-2026-108784 (macrozheng mall). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108788", "detail": "EXPLOIT PUBLISHED — CVE-2026-108788 (deepseek-ai deepseek-harness). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108802", "detail": "EXPLOIT PUBLISHED — CVE-2026-108802 (y_project RuoYi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108806", "detail": "EXPLOIT PUBLISHED — CVE-2026-108806 (krupalshah EmployeeRecruitmentSystem). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108810", "detail": "EXPLOIT PUBLISHED — CVE-2026-108810 (tsi-coop tsi-dpdp-cms). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108814", "detail": "EXPLOIT PUBLISHED — CVE-2026-108814 (SEMCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108818", "detail": "EXPLOIT PUBLISHED — CVE-2026-108818 (agno-agi agno). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108827", "detail": "EXPLOIT PUBLISHED — CVE-2026-108827 (Zen Cart). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108870", "detail": "EXPLOIT PUBLISHED — CVE-2026-108870 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108875", "detail": "EXPLOIT PUBLISHED — CVE-2026-108875 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108880", "detail": "EXPLOIT PUBLISHED — CVE-2026-108880 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108885", "detail": "EXPLOIT PUBLISHED — CVE-2026-108885 (JeecgBoot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108894", "detail": "EXPLOIT PUBLISHED — CVE-2026-108894 (Linksys E1700). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108906", "detail": "EXPLOIT PUBLISHED — CVE-2026-108906 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108914", "detail": "EXPLOIT PUBLISHED — CVE-2026-108914 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108918", "detail": "EXPLOIT PUBLISHED — CVE-2026-108918 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108922", "detail": "EXPLOIT PUBLISHED — CVE-2026-108922 (KusalkaSilva Learning-Management-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108927", "detail": "EXPLOIT PUBLISHED — CVE-2026-108927 (itsourcecode Baptism Information Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108931", "detail": "EXPLOIT PUBLISHED — CVE-2026-108931 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108932", "detail": "EXPLOIT PUBLISHED — CVE-2026-108932 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108936", "detail": "EXPLOIT PUBLISHED — CVE-2026-108936 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108937", "detail": "EXPLOIT PUBLISHED — CVE-2026-108937 (code-projects Online Ticket Reservation System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108938", "detail": "EXPLOIT PUBLISHED — CVE-2026-108938 (code-projects Matrimonial System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108954", "detail": "EXPLOIT PUBLISHED — CVE-2026-108954 (k2-fsa sherpa-onnx). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108958", "detail": "EXPLOIT PUBLISHED — CVE-2026-108958 (TensorLayer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108967", "detail": "EXPLOIT PUBLISHED — CVE-2026-108967 (SourceCodester Performance Indicator System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108971", "detail": "EXPLOIT PUBLISHED — CVE-2026-108971 (D-Link DCS-930L). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108975", "detail": "EXPLOIT PUBLISHED — CVE-2026-108975 (SourceCodester Library Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109109", "detail": "EXPLOIT PUBLISHED — CVE-2026-109109 (Wavlink WL-WN530BE1-A). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109116", "detail": "EXPLOIT PUBLISHED — CVE-2026-109116 (AdithyaYelloju Restaurant-Management-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109157", "detail": "EXPLOIT PUBLISHED — CVE-2026-109157 (TRENDnet TEW-432BRP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109165", "detail": "EXPLOIT PUBLISHED — CVE-2026-109165 (TDuckCloud tduck-survey-form). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109167", "detail": "EXPLOIT PUBLISHED — CVE-2026-109167 (TDuckCloud tduck-survey-form). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109172", "detail": "EXPLOIT PUBLISHED — CVE-2026-109172 (guchengwuyue yshop-crm). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109177", "detail": "EXPLOIT PUBLISHED — CVE-2026-109177 (moxi624 MoguBlog). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109182", "detail": "EXPLOIT PUBLISHED — CVE-2026-109182 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109187", "detail": "EXPLOIT PUBLISHED — CVE-2026-109187 (jishenghua jshERP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109425", "detail": "EXPLOIT PUBLISHED — CVE-2026-109425 (tink-crypto tink-go). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109519", "detail": "EXPLOIT PUBLISHED — CVE-2026-109519 (YouTransfer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109523", "detail": "EXPLOIT PUBLISHED — CVE-2026-109523 (girishsaraf Online-Appointment-Booking-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109605", "detail": "EXPLOIT PUBLISHED — CVE-2026-109605 (SourceCodester Simple Cafe Billing System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109620", "detail": "EXPLOIT PUBLISHED — CVE-2026-109620 (SourceCodester Online Reviewer System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110097", "detail": "EXPLOIT PUBLISHED — CVE-2026-110097 (ikaros-dev ikaros). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110107", "detail": "EXPLOIT PUBLISHED — CVE-2026-110107 (dromara RuoYi-Cloud-Plus). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110119", "detail": "EXPLOIT PUBLISHED — CVE-2026-110119 (guchengwuyue yshopmall). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110536", "detail": "EXPLOIT PUBLISHED — CVE-2026-110536 (D-Link DIR-868L). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110599", "detail": "EXPLOIT PUBLISHED — CVE-2026-110599 (l-smash). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110604", "detail": "EXPLOIT PUBLISHED — CVE-2026-110604 (Michael R Sweet Mini-XML). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110632", "detail": "EXPLOIT PUBLISHED — CVE-2026-110632 (Report One MyReport Updater). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110633", "detail": "EXPLOIT PUBLISHED — CVE-2026-110633 (Report One MyReport Updater). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110654", "detail": "EXPLOIT PUBLISHED — CVE-2026-110654 (zapping-vbi libzvbi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110655", "detail": "EXPLOIT PUBLISHED — CVE-2026-110655 (miniupnp project miniupnpc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110656", "detail": "EXPLOIT PUBLISHED — CVE-2026-110656 (miniupnp project miniupnpc). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110657", "detail": "EXPLOIT PUBLISHED — CVE-2026-110657 (Khronos Group nnef). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110658", "detail": "EXPLOIT PUBLISHED — CVE-2026-110658 (freeswitch sofia-sip). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110659", "detail": "EXPLOIT PUBLISHED — CVE-2026-110659 (serge1 ELFIO). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110660", "detail": "EXPLOIT PUBLISHED — CVE-2026-110660 (vgmstream). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110661", "detail": "EXPLOIT PUBLISHED — CVE-2026-110661 (CGNS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110668", "detail": "EXPLOIT PUBLISHED — CVE-2026-110668 (cemtan sar2html). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110669", "detail": "EXPLOIT PUBLISHED — CVE-2026-110669 (cemtan sar2html). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110689", "detail": "EXPLOIT PUBLISHED — CVE-2026-110689 (OpenClaw ClawScan). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110694", "detail": "EXPLOIT PUBLISHED — CVE-2026-110694 (OAID Tengine). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110695", "detail": "EXPLOIT PUBLISHED — CVE-2026-110695 (turboderp ExLlamaV2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110696", "detail": "EXPLOIT PUBLISHED — CVE-2026-110696 (itsmeravitejak Online-Examination-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110698", "detail": "EXPLOIT PUBLISHED — CVE-2026-110698 (Praat). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110712", "detail": "EXPLOIT PUBLISHED — CVE-2026-110712 (sahlberg libsmb2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110713", "detail": "EXPLOIT PUBLISHED — CVE-2026-110713 (sahlberg libsmb2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110714", "detail": "EXPLOIT PUBLISHED — CVE-2026-110714 (sahlberg libsmb2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110715", "detail": "EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110716", "detail": "EXPLOIT PUBLISHED — CVE-2026-110716 (twogood unshield). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110717", "detail": "EXPLOIT PUBLISHED — CVE-2026-110717 (meetecho janus-gateway). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110718", "detail": "EXPLOIT PUBLISHED — CVE-2026-110718 (TurboDocx html-to-docx). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110719", "detail": "EXPLOIT PUBLISHED — CVE-2026-110719 (Portkey-AI gateway). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110763", "detail": "EXPLOIT PUBLISHED — CVE-2026-110763 (zuihou lamp-boot). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110764", "detail": "EXPLOIT PUBLISHED — CVE-2026-110764 (iflytek astron-rpa). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110765", "detail": "EXPLOIT PUBLISHED — CVE-2026-110765 (flexprice). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110766", "detail": "EXPLOIT PUBLISHED — CVE-2026-110766 (colanode). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110767", "detail": "EXPLOIT PUBLISHED — CVE-2026-110767 (coderamp-labs gitingest). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110768", "detail": "EXPLOIT PUBLISHED — CVE-2026-110768 (holaboss-ai holaOS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110769", "detail": "EXPLOIT PUBLISHED — CVE-2026-110769 (holaboss-ai holaOS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110770", "detail": "EXPLOIT PUBLISHED — CVE-2026-110770 (databasus). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110771", "detail": "EXPLOIT PUBLISHED — CVE-2026-110771 (Shopizer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110772", "detail": "EXPLOIT PUBLISHED — CVE-2026-110772 (we-promise sure). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110773", "detail": "EXPLOIT PUBLISHED — CVE-2026-110773 (growchief). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110774", "detail": "EXPLOIT PUBLISHED — CVE-2026-110774 (blinkospace blinko). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110775", "detail": "EXPLOIT PUBLISHED — CVE-2026-110775 (ModelEngine-Group nexent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110807", "detail": "EXPLOIT PUBLISHED — CVE-2026-110807 (sgl-project SGLang). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110867", "detail": "EXPLOIT PUBLISHED — CVE-2026-110867 (renovatebot renovate). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-14210", "detail": "EXPLOIT PUBLISHED — CVE-2026-14210 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-14552", "detail": "EXPLOIT PUBLISHED — CVE-2026-14552 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-14814", "detail": "EXPLOIT PUBLISHED — CVE-2026-14814 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-16275", "detail": "EXPLOIT PUBLISHED — CVE-2026-16275 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-16301", "detail": "EXPLOIT PUBLISHED — CVE-2026-16301 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-21589", "detail": "EXPLOIT PUBLISHED — CVE-2026-21589 (Atlassian Bamboo Data Center). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-33829", "detail": "EXPLOIT PUBLISHED — CVE-2026-33829 (Microsoft Windows 10 Version 1607). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-35001", "detail": "EXPLOIT PUBLISHED — CVE-2026-35001 (OpenS100 Project OpenS100). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-3832", "detail": "EXPLOIT PUBLISHED — CVE-2026-3832 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-3833", "detail": "EXPLOIT PUBLISHED — CVE-2026-3833 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-43502", "detail": "EXPLOIT PUBLISHED — CVE-2026-43502 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47727", "detail": "EXPLOIT PUBLISHED — CVE-2026-47727 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-4878", "detail": "EXPLOIT PUBLISHED — CVE-2026-4878 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-48864", "detail": "EXPLOIT PUBLISHED — CVE-2026-48864 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-48996", "detail": "EXPLOIT PUBLISHED — CVE-2026-48996 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-53264", "detail": "EXPLOIT PUBLISHED — CVE-2026-53264 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-53578", "detail": "EXPLOIT PUBLISHED — CVE-2026-53578 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-53579", "detail": "EXPLOIT PUBLISHED — CVE-2026-53579 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-53580", "detail": "EXPLOIT PUBLISHED — CVE-2026-53580 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-55653", "detail": "EXPLOIT PUBLISHED — CVE-2026-55653 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58010", "detail": "EXPLOIT PUBLISHED — CVE-2026-58010 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58012", "detail": "EXPLOIT PUBLISHED — CVE-2026-58012 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58013", "detail": "EXPLOIT PUBLISHED — CVE-2026-58013 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58014", "detail": "EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58015", "detail": "EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58016", "detail": "EXPLOIT PUBLISHED — CVE-2026-58016 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61511", "detail": "EXPLOIT PUBLISHED — CVE-2026-61511 (vBulletin). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-62388", "detail": "EXPLOIT PUBLISHED — CVE-2026-62388 (nltk). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-77438", "detail": "EXPLOIT PUBLISHED — CVE-2026-77438 (TriliumNext Trilium). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-7767", "detail": "EXPLOIT PUBLISHED — CVE-2026-7767 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-81839", "detail": "EXPLOIT PUBLISHED — CVE-2026-81839 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-82844", "detail": "EXPLOIT PUBLISHED — CVE-2026-82844 (Unknown WPForms Lite). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-84284", "detail": "EXPLOIT PUBLISHED — CVE-2026-84284 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85000", "detail": "EXPLOIT PUBLISHED — CVE-2026-85000 (Unknown EmbedPress). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85345", "detail": "EXPLOIT PUBLISHED — CVE-2026-85345 (Unknown FV Flowplayer Video Player). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85429", "detail": "EXPLOIT PUBLISHED — CVE-2026-85429 (moos-ivp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85431", "detail": "EXPLOIT PUBLISHED — CVE-2026-85431 (themoos essential-moos). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85433", "detail": "EXPLOIT PUBLISHED — CVE-2026-85433 (themoos essential-moos). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-85529", "detail": "EXPLOIT PUBLISHED — CVE-2026-85529 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86787", "detail": "EXPLOIT PUBLISHED — CVE-2026-86787 (Unknown affiliate-toolkit). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86797", "detail": "EXPLOIT PUBLISHED — CVE-2026-86797 (Unknown Pricing Table). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-86799", "detail": "EXPLOIT PUBLISHED — CVE-2026-86799 (Unknown Forms). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87843", "detail": "EXPLOIT PUBLISHED — CVE-2026-87843 (Unknown Trust Payments Gateway for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87968", "detail": "EXPLOIT PUBLISHED — CVE-2026-87968 (Unknown Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-87974", "detail": "EXPLOIT PUBLISHED — CVE-2026-87974 (Unknown Asaas Gateway for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-88927", "detail": "EXPLOIT PUBLISHED — CVE-2026-88927 (Unknown rtMedia for WordPress, BuddyPress and bbPress). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-88998", "detail": "EXPLOIT PUBLISHED — CVE-2026-88998 (Unknown Tickera). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-89288", "detail": "EXPLOIT PUBLISHED — CVE-2026-89288 (Unknown Fast Courier). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90989", "detail": "EXPLOIT PUBLISHED — CVE-2026-90989 (Unknown Tainacan). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90995", "detail": "EXPLOIT PUBLISHED — CVE-2026-90995 (Red Hat Enterprise Linux 10). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-91076", "detail": "EXPLOIT PUBLISHED — CVE-2026-91076 (Unknown Robokassa payment gateway for Woocommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-92409", "detail": "EXPLOIT PUBLISHED — CVE-2026-92409 (Unknown Donation Thermometer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-92426", "detail": "EXPLOIT PUBLISHED — CVE-2026-92426 (Unknown YITH WooCommerce Popup). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9268", "detail": "EXPLOIT PUBLISHED — CVE-2026-9268 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-92883", "detail": "EXPLOIT PUBLISHED — CVE-2026-92883 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94214", "detail": "EXPLOIT PUBLISHED — CVE-2026-94214 (ST Engineering iDirect iDX). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94216", "detail": "EXPLOIT PUBLISHED — CVE-2026-94216 (ST Engineering iDirect iDX). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94254", "detail": "EXPLOIT PUBLISHED — CVE-2026-94254 (Unknown SellKit). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94260", "detail": "EXPLOIT PUBLISHED — CVE-2026-94260 (Unknown Sifalo Pay). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94261", "detail": "EXPLOIT PUBLISHED — CVE-2026-94261 (Unknown Sifalo Pay). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94360", "detail": "EXPLOIT PUBLISHED — CVE-2026-94360 (Unknown Paymentfor Gateway for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-96423", "detail": "EXPLOIT PUBLISHED — CVE-2026-96423 (Wireshark Foundation Wireshark). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-96900", "detail": "EXPLOIT PUBLISHED — CVE-2026-96900 (Unknown Cart Abandonment Recovery for WooCommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-96904", "detail": "EXPLOIT PUBLISHED — CVE-2026-96904 (Unknown AWP Classifieds). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-97147", "detail": "EXPLOIT PUBLISHED — CVE-2026-97147 (OpenStack Mistral). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-97229", "detail": "EXPLOIT PUBLISHED — CVE-2026-97229 (GitLab). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-97315", "detail": "EXPLOIT PUBLISHED — CVE-2026-97315 (Unknown Responsive Blocks). Public exploit reference added." }, { "type": "DUE_DATE_PASSED", "cve_id": "CVE-2026-86950", "detail": "DUE DATE PASSED — CVE-2026-86950 (Apple iOS and iPadOS). CISA remediation deadline was October 13, 2026; still in catalog." }, { "type": "RESCORED", "cve_id": "CVE-2019-15903", "detail": "RESCORED — CVE-2019-15903. CVSS 6.5 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3855", "detail": "RESCORED — CVE-2019-3855 (The libssh2 Project libssh2). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3856", "detail": "RESCORED — CVE-2019-3856 (The libssh2 Project libssh2). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3857", "detail": "RESCORED — CVE-2019-3857 (The libssh2 Project libssh2). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3858", "detail": "RESCORED — CVE-2019-3858 (The libssh2 Project libssh2). CVSS 5 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3859", "detail": "RESCORED — CVE-2019-3859 (The libssh2 Project libssh2). CVSS 5 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3860", "detail": "RESCORED — CVE-2019-3860 (The libssh2 Project libssh2). CVSS 5 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3861", "detail": "RESCORED — CVE-2019-3861 (The libssh2 Project libssh2). CVSS 5 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3862", "detail": "RESCORED — CVE-2019-3862 (The libssh2 Project libssh2). CVSS 7.3 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-3863", "detail": "RESCORED — CVE-2019-3863 (The libssh2 Project libssh2). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2019-5188", "detail": "RESCORED — CVE-2019-5188 (E2fsprogs). CVSS 7.5 → 6.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2020-15778", "detail": "RESCORED — CVE-2020-15778. CVSS 7.8 → 7.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2020-1751", "detail": "RESCORED — CVE-2020-1751 (Red Hat glibc). CVSS 5.1 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-22890", "detail": "RESCORED — CVE-2021-22890 (https://github.com/curl/curl). CVSS 4.3 → 3.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-28861", "detail": "RESCORED — CVE-2021-28861. CVSS 6.5 → 7.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-46143", "detail": "RESCORED — CVE-2021-46143. CVSS 8.1 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-1292", "detail": "RESCORED — CVE-2022-1292 (OpenSSL). CVSS 9.8 → 7.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-2068", "detail": "RESCORED — CVE-2022-2068 (OpenSSL). CVSS 9.8 → 7.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-2327", "detail": "RESCORED — CVE-2022-2327 (Linux Kernel). CVSS 7.5 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-2503", "detail": "RESCORED — CVE-2022-2503 (Linux Kernel). CVSS 6.9 → 6.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-2588", "detail": "RESCORED — CVE-2022-2588 (The Linux Kernel Organization linux). CVSS 5.3 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-2602", "detail": "RESCORED — CVE-2022-2602 (The Linux Kernel Organization linux). CVSS 5.3 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-27780", "detail": "RESCORED — CVE-2022-27780 (https://github.com/curl/curl). CVSS 5.3 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3521", "detail": "RESCORED — CVE-2022-3521 (Linux Kernel). CVSS 2.6 → 2.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3524", "detail": "RESCORED — CVE-2022-3524 (Linux Kernel). CVSS 4.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3545", "detail": "RESCORED — CVE-2022-3545 (Linux Kernel). CVSS 5.5 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3564", "detail": "RESCORED — CVE-2022-3564 (Linux Kernel). CVSS 5.5 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3565", "detail": "RESCORED — CVE-2022-3565 (Linux Kernel). CVSS 4.6 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3606", "detail": "RESCORED — CVE-2022-3606 (Linux Kernel). CVSS 3.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3621", "detail": "RESCORED — CVE-2022-3621 (Linux Kernel). CVSS 4.3 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3625", "detail": "RESCORED — CVE-2022-3625 (Linux Kernel). CVSS 4.6 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-36280", "detail": "RESCORED — CVE-2022-36280 (Linux kernel). CVSS 6.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3629", "detail": "RESCORED — CVE-2022-3629 (Linux Kernel). CVSS 2.6 → 3.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3633", "detail": "RESCORED — CVE-2022-3633 (Linux Kernel). CVSS 3.5 → 3.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3635", "detail": "RESCORED — CVE-2022-3635 (Linux Kernel). CVSS 5.5 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3646", "detail": "RESCORED — CVE-2022-3646 (Linux Kernel). CVSS 3.1 → 4.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-3649", "detail": "RESCORED — CVE-2022-3649 (Linux Kernel). CVSS 3.1 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-38096", "detail": "RESCORED — CVE-2022-38096 (Linux kernel). CVSS 6.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-42328", "detail": "RESCORED — CVE-2022-42328 (Linux). CVSS 6.2 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-42432", "detail": "RESCORED — CVE-2022-42432 (Linux Kernel). CVSS 5.1 → 4.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-42895", "detail": "RESCORED — CVE-2022-42895 (Linux Kernel). CVSS 5.1 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2022-42896", "detail": "RESCORED — CVE-2022-42896 (Linux Kernel). CVSS 8 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-0687", "detail": "RESCORED — CVE-2023-0687 (GNU C Library). CVSS 4.6 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-27533", "detail": "RESCORED — CVE-2023-27533 (https://github.com/curl/curl). CVSS 9.8 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-27538", "detail": "RESCORED — CVE-2023-27538 (https://github.com/curl/curl). CVSS 7.7 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-29499", "detail": "RESCORED — CVE-2023-29499 (glib2). CVSS 5.5 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-3772", "detail": "RESCORED — CVE-2023-3772 (Red Hat Enterprise Linux 8). CVSS 5.5 → 4.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-3773", "detail": "RESCORED — CVE-2023-3773 (Red Hat Enterprise Linux 9). CVSS 5.5 → 4.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-4016", "detail": "RESCORED — CVE-2023-4016 (Linux Kernal). CVSS 2.5 → 3.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-4273", "detail": "RESCORED — CVE-2023-4273 (Red Hat Enterprise Linux 9). CVSS 6 → 6.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-5197", "detail": "RESCORED — CVE-2023-5197 (Linux Kernel). CVSS 7.8 → 6.6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-6932", "detail": "RESCORED — CVE-2023-6932 (Linux Kernel). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-7104", "detail": "RESCORED — CVE-2023-7104 (SQLite3). CVSS 5.5 → 7.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-69263", "detail": "RESCORED — CVE-2025-69263 (pnpm). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-69264", "detail": "RESCORED — CVE-2025-69264 (pnpm). CVSS 8.8 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-107388", "detail": "RESCORED — CVE-2026-107388 (Borewit music-metadata). CVSS 6.2 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-107390", "detail": "RESCORED — CVE-2026-107390 (Borewit music-metadata). CVSS 6.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-14508", "detail": "RESCORED — CVE-2026-14508 (IBM DataPower Gateway 10.6CD). CVSS 6.5 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-14888", "detail": "RESCORED — CVE-2026-14888 (IBM DataPower Gateway 10.6CD). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-14988", "detail": "RESCORED — CVE-2026-14988 (IBM DataPower Gateway 10.6CD). CVSS 6.5 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-14999", "detail": "RESCORED — CVE-2026-14999 (IBM DataPower Gateway 10.6CD). CVSS 7.4 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-17484", "detail": "RESCORED — CVE-2026-17484 (IBM i). CVSS 5.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-21806", "detail": "RESCORED — CVE-2026-21806 (HCL Software HCL BigFix Service Management). CVSS 3.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-26167", "detail": "RESCORED — CVE-2026-26167 (Microsoft Windows 10 Version 1607). CVSS 8.8 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-27918", "detail": "RESCORED — CVE-2026-27918 (Microsoft Windows 10 Version 1809). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-27927", "detail": "RESCORED — CVE-2026-27927 (Microsoft Windows 10 Version 1809). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-32088", "detail": "RESCORED — CVE-2026-32088 (Microsoft Windows 10 Version 1809). CVSS 6.1 → 5.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-32090", "detail": "RESCORED — CVE-2026-32090 (Microsoft Windows 10 Version 1607). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-32091", "detail": "RESCORED — CVE-2026-32091 (Microsoft Windows 10 Version 1607). CVSS 8.4 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-32176", "detail": "RESCORED — CVE-2026-32176 (Microsoft SQL Server 2016 Service Pack 3 (GDR)). CVSS 6.7 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-35001", "detail": "RESCORED — CVE-2026-35001 (OpenS100 Project OpenS100). CVSS 8.4 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-45494", "detail": "RESCORED — CVE-2026-45494 (Microsoft Edge (Chromium-based)). CVSS 5.4 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-45495", "detail": "RESCORED — CVE-2026-45495 (Microsoft Edge (Chromium-based)). CVSS 8.8 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-52296", "detail": "RESCORED — CVE-2026-52296 (FFmpeg). CVSS 2.9 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-52297", "detail": "RESCORED — CVE-2026-52297 (FFmpeg). CVSS 2.9 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-56590", "detail": "RESCORED — CVE-2026-56590 (HCL Software HCL BigFix Service Management). CVSS 6.4 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-56592", "detail": "RESCORED — CVE-2026-56592 (HCL Software HCL BigFix Service Management). CVSS 6.5 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-56595", "detail": "RESCORED — CVE-2026-56595 (HCL Software HCL BigFix Service Management). CVSS 3.1 → 4.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-56597", "detail": "RESCORED — CVE-2026-56597 (HCL Software HCL BigFix Service Management). CVSS 3.1 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-77532", "detail": "RESCORED — CVE-2026-77532 (Ubiquiti Inc EdgeMAX EdgeSwitch). CVSS 9.6 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78016", "detail": "RESCORED — CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.1 → 4.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78020", "detail": "RESCORED — CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78021", "detail": "RESCORED — CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.7 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78023", "detail": "RESCORED — CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 7.1 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78026", "detail": "RESCORED — CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 4.3 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-78341", "detail": "RESCORED — CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.5 → 7.2 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-81858", "detail": "RESCORED — CVE-2026-81858 (IBM i). CVSS 5.4 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-81932", "detail": "RESCORED — CVE-2026-81932 (IBM Guardium Data Protection). CVSS 8.6 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-82103", "detail": "RESCORED — CVE-2026-82103 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-82110", "detail": "RESCORED — CVE-2026-82110 (IBM DataStage on Cloud Pak for Data). CVSS 9.6 → 9.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-82895", "detail": "RESCORED — CVE-2026-82895 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-82900", "detail": "RESCORED — CVE-2026-82900 (IBM Guardium Data Protection). CVSS 8.1 → 9.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84032", "detail": "RESCORED — CVE-2026-84032 (IBM Guardium Data Protection). CVSS 5.6 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84035", "detail": "RESCORED — CVE-2026-84035 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84057", "detail": "RESCORED — CVE-2026-84057 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84058", "detail": "RESCORED — CVE-2026-84058 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84246", "detail": "RESCORED — CVE-2026-84246 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84247", "detail": "RESCORED — CVE-2026-84247 (IBM Guardium Data Protection). CVSS 8.1 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-9268", "detail": "RESCORED — CVE-2026-9268 (GitLab). CVSS 2.7 → 4.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-93886", "detail": "RESCORED — CVE-2026-93886 (IBM i). CVSS 8.3 → 5.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-97783", "detail": "RESCORED — CVE-2026-97783 (Microsoft SharePoint Server 2019). CVSS 8.1 → 6.1 (NVD)." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2025-13465", "detail": "PATCH SHIPPED — CVE-2025-13465 (lodash). Fixed in lodash 4.17.23." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-101258", "detail": "PATCH SHIPPED — CVE-2026-101258 (Red Hat Enterprise Linux 8). Fixed in Red Hat Enterprise Linux 8 0:9.27-19.el8_10." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102556", "detail": "PATCH SHIPPED — CVE-2026-102556 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:2.72.0-16.el9_8.8." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102557", "detail": "PATCH SHIPPED — CVE-2026-102557 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:2.72.0-16.el9_8.8." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102558", "detail": "PATCH SHIPPED — CVE-2026-102558 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:2.72.0-16.el9_8.8." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102559", "detail": "PATCH SHIPPED — CVE-2026-102559 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:2.72.0-16.el9_8.8." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102560", "detail": "PATCH SHIPPED — CVE-2026-102560 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:2.72.0-16.el9_8.8." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-28167", "detail": "PATCH SHIPPED — CVE-2026-28167 (Super Forms). Fixed in Super Forms 6.3.317." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-62040", "detail": "PATCH SHIPPED — CVE-2026-62040 (DEV Institute Restrict User Access – Membership Plugin with Force). Fixed in Restrict User Access – Membership Plugin with Force 2.8.2." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-94640", "detail": "PATCH SHIPPED — CVE-2026-94640 (Red Hat Enterprise Linux 9). Fixed in Red Hat Enterprise Linux 9 0:1.2.6-7.el9_8.1." }, { "type": "ENRICHED", "cve_id": "CVE-2013-4235", "detail": "ENRICHED — CVE-2013-4235 (shadow). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0075", "detail": "ENRICHED — CVE-2014-0075. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0096", "detail": "ENRICHED — CVE-2014-0096. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0099", "detail": "ENRICHED — CVE-2014-0099. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0114", "detail": "ENRICHED — CVE-2014-0114. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0119", "detail": "ENRICHED — CVE-2014-0119. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0227", "detail": "ENRICHED — CVE-2014-0227. Received CVSS 6.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0230", "detail": "ENRICHED — CVE-2014-0230. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-0459", "detail": "ENRICHED — CVE-2014-0459. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-7209", "detail": "ENRICHED — CVE-2014-7209. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-7810", "detail": "ENRICHED — CVE-2014-7810. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2014-9323", "detail": "ENRICHED — CVE-2014-9323. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-0085", "detail": "ENRICHED — CVE-2015-0085. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-0204", "detail": "ENRICHED — CVE-2015-0204. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-0254", "detail": "ENRICHED — CVE-2015-0254. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-0469", "detail": "ENRICHED — CVE-2015-0469. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-1197", "detail": "ENRICHED — CVE-2015-1197. Received CVSS 1.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-1683", "detail": "ENRICHED — CVE-2015-1683. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2423", "detail": "ENRICHED — CVE-2015-2423. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2468", "detail": "ENRICHED — CVE-2015-2468. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2469", "detail": "ENRICHED — CVE-2015-2469. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2470", "detail": "ENRICHED — CVE-2015-2470. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2477", "detail": "ENRICHED — CVE-2015-2477. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2601", "detail": "ENRICHED — CVE-2015-2601. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2621", "detail": "ENRICHED — CVE-2015-2621. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2625", "detail": "ENRICHED — CVE-2015-2625. Received CVSS 2.6 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2627", "detail": "ENRICHED — CVE-2015-2627. Received CVSS 2.6 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2628", "detail": "ENRICHED — CVE-2015-2628. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2637", "detail": "ENRICHED — CVE-2015-2637. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2638", "detail": "ENRICHED — CVE-2015-2638. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-2664", "detail": "ENRICHED — CVE-2015-2664. Received CVSS 6.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4731", "detail": "ENRICHED — CVE-2015-4731. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4732", "detail": "ENRICHED — CVE-2015-4732. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4734", "detail": "ENRICHED — CVE-2015-4734. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4748", "detail": "ENRICHED — CVE-2015-4748. Received CVSS 7.6 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4760", "detail": "ENRICHED — CVE-2015-4760. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4803", "detail": "ENRICHED — CVE-2015-4803. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4805", "detail": "ENRICHED — CVE-2015-4805. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4806", "detail": "ENRICHED — CVE-2015-4806. Received CVSS 6.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4835", "detail": "ENRICHED — CVE-2015-4835. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4840", "detail": "ENRICHED — CVE-2015-4840. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4842", "detail": "ENRICHED — CVE-2015-4842. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4843", "detail": "ENRICHED — CVE-2015-4843. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4844", "detail": "ENRICHED — CVE-2015-4844. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4860", "detail": "ENRICHED — CVE-2015-4860. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4872", "detail": "ENRICHED — CVE-2015-4872. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4881", "detail": "ENRICHED — CVE-2015-4881. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4882", "detail": "ENRICHED — CVE-2015-4882. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4883", "detail": "ENRICHED — CVE-2015-4883. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4893", "detail": "ENRICHED — CVE-2015-4893. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4903", "detail": "ENRICHED — CVE-2015-4903. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-4911", "detail": "ENRICHED — CVE-2015-4911. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-5174", "detail": "ENRICHED — CVE-2015-5174. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-5346", "detail": "ENRICHED — CVE-2015-5346. Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-5351", "detail": "ENRICHED — CVE-2015-5351. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-6093", "detail": "ENRICHED — CVE-2015-6093. Received CVSS 9.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-6117", "detail": "ENRICHED — CVE-2015-6117. Received CVSS 6.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-7575", "detail": "ENRICHED — CVE-2015-7575. Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2015-8126", "detail": "ENRICHED — CVE-2015-8126. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-10228", "detail": "ENRICHED — CVE-2016-10228. Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-10739", "detail": "ENRICHED — CVE-2016-10739. Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-3709", "detail": "ENRICHED — CVE-2016-3709 (libxml2). Received CVSS 6.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-4658", "detail": "ENRICHED — CVE-2016-4658. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-0663", "detail": "ENRICHED — CVE-2017-0663 (Google Inc. Android). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-15422", "detail": "ENRICHED — CVE-2017-15422 (Google Chrome prior to 63.0.3239.84 unknown). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-16931", "detail": "ENRICHED — CVE-2017-16931. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-17512", "detail": "ENRICHED — CVE-2017-17512. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-18258", "detail": "ENRICHED — CVE-2017-18258. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-7376", "detail": "ENRICHED — CVE-2017-7376. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-9047", "detail": "ENRICHED — CVE-2017-9047. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-0495", "detail": "ENRICHED — CVE-2018-0495 (Libgcrypt before 1.7.10 and 1.8.x before 1.8.3). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12886", "detail": "ENRICHED — CVE-2018-12886. Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-14567", "detail": "ENRICHED — CVE-2018-14567. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-18928", "detail": "ENRICHED — CVE-2018-18928. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-20482", "detail": "ENRICHED — CVE-2018-20482. Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-1010022", "detail": "ENRICHED — CVE-2019-1010022 (GNU C Library glibc). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-1010024", "detail": "ENRICHED — CVE-2019-1010024 (GNU Libc glibc). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-1010025", "detail": "ENRICHED — CVE-2019-1010025 (GNU Libc glibc). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-1010180", "detail": "ENRICHED — CVE-2019-1010180 (GNU gdb). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-11360", "detail": "ENRICHED — CVE-2019-11360. Received CVSS 4.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-12290", "detail": "ENRICHED — CVE-2019-12290. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-12904", "detail": "ENRICHED — CVE-2019-12904. Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-13057", "detail": "ENRICHED — CVE-2019-13057. Received CVSS 4.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-13565", "detail": "ENRICHED — CVE-2019-13565. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-13627", "detail": "ENRICHED — CVE-2019-13627. Received CVSS 6.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-15847", "detail": "ENRICHED — CVE-2019-15847. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-16905", "detail": "ENRICHED — CVE-2019-16905. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-17498", "detail": "ENRICHED — CVE-2019-17498. Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-17594", "detail": "ENRICHED — CVE-2019-17594. Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-17595", "detail": "ENRICHED — CVE-2019-17595. Received CVSS 5.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-18224", "detail": "ENRICHED — CVE-2019-18224. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19126", "detail": "ENRICHED — CVE-2019-19126. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19242", "detail": "ENRICHED — CVE-2019-19242. Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19317", "detail": "ENRICHED — CVE-2019-19317. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19603", "detail": "ENRICHED — CVE-2019-19603. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19645", "detail": "ENRICHED — CVE-2019-19645. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19646", "detail": "ENRICHED — CVE-2019-19646. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19880", "detail": "ENRICHED — CVE-2019-19880. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19906", "detail": "ENRICHED — CVE-2019-19906. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19923", "detail": "ENRICHED — CVE-2019-19923. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19924", "detail": "ENRICHED — CVE-2019-19924. Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19925", "detail": "ENRICHED — CVE-2019-19925. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19926", "detail": "ENRICHED — CVE-2019-19926. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-19959", "detail": "ENRICHED — CVE-2019-19959. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-20218", "detail": "ENRICHED — CVE-2019-20218. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-20367", "detail": "ENRICHED — CVE-2019-20367. Received CVSS 9.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-20795", "detail": "ENRICHED — CVE-2019-20795. Received CVSS 4.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-5435", "detail": "ENRICHED — CVE-2019-5435 (curl). Received CVSS 3.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-5443", "detail": "ENRICHED — CVE-2019-5443 (curl). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-6488", "detail": "ENRICHED — CVE-2019-6488. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-7309", "detail": "ENRICHED — CVE-2019-7309. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-8457", "detail": "ENRICHED — CVE-2019-8457 (SQLite). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-9169", "detail": "ENRICHED — CVE-2019-9169. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-9936", "detail": "ENRICHED — CVE-2019-9936. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2019-9937", "detail": "ENRICHED — CVE-2019-9937. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-10029", "detail": "ENRICHED — CVE-2020-10029. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-10531", "detail": "ENRICHED — CVE-2020-10531. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-10543", "detail": "ENRICHED — CVE-2020-10543. Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-10878", "detail": "ENRICHED — CVE-2020-10878. Received CVSS 8.6 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-11501", "detail": "ENRICHED — CVE-2020-11501. Received CVSS 7.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-11655", "detail": "ENRICHED — CVE-2020-11655. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-11656", "detail": "ENRICHED — CVE-2020-11656. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-12062", "detail": "ENRICHED — CVE-2020-12062. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-12243", "detail": "ENRICHED — CVE-2020-12243. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-12723", "detail": "ENRICHED — CVE-2020-12723. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13434", "detail": "ENRICHED — CVE-2020-13434. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13435", "detail": "ENRICHED — CVE-2020-13435. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13630", "detail": "ENRICHED — CVE-2020-13630. Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13631", "detail": "ENRICHED — CVE-2020-13631. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13632", "detail": "ENRICHED — CVE-2020-13632. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13777", "detail": "ENRICHED — CVE-2020-13777. Received CVSS 7.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-13871", "detail": "ENRICHED — CVE-2020-13871. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-15358", "detail": "ENRICHED — CVE-2020-15358. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-15801", "detail": "ENRICHED — CVE-2020-15801. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-19185", "detail": "ENRICHED — CVE-2020-19185. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-19186", "detail": "ENRICHED — CVE-2020-19186. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-19187", "detail": "ENRICHED — CVE-2020-19187. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-19189", "detail": "ENRICHED — CVE-2020-19189. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-19190", "detail": "ENRICHED — CVE-2020-19190. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-21047", "detail": "ENRICHED — CVE-2020-21047. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-21913", "detail": "ENRICHED — CVE-2020-21913. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-22218", "detail": "ENRICHED — CVE-2020-22218. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-24659", "detail": "ENRICHED — CVE-2020-24659. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-24977", "detail": "ENRICHED — CVE-2020-24977. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-25692", "detail": "ENRICHED — CVE-2020-25692 (openldap). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-25709", "detail": "ENRICHED — CVE-2020-25709 (OpenLDAP). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-25710", "detail": "ENRICHED — CVE-2020-25710 (openldap). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-29361", "detail": "ENRICHED — CVE-2020-29361. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-29362", "detail": "ENRICHED — CVE-2020-29362. Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-29363", "detail": "ENRICHED — CVE-2020-29363. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-29573", "detail": "ENRICHED — CVE-2020-29573. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-35525", "detail": "ENRICHED — CVE-2020-35525 (sqlite). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-35527", "detail": "ENRICHED — CVE-2020-35527 (sqlite). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36221", "detail": "ENRICHED — CVE-2020-36221. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36222", "detail": "ENRICHED — CVE-2020-36222. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36223", "detail": "ENRICHED — CVE-2020-36223. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36224", "detail": "ENRICHED — CVE-2020-36224. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36225", "detail": "ENRICHED — CVE-2020-36225. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36226", "detail": "ENRICHED — CVE-2020-36226. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36227", "detail": "ENRICHED — CVE-2020-36227. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36228", "detail": "ENRICHED — CVE-2020-36228. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36229", "detail": "ENRICHED — CVE-2020-36229. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-36230", "detail": "ENRICHED — CVE-2020-36230. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-8169", "detail": "ENRICHED — CVE-2020-8169 (https://github.com/curl/curl). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-8231", "detail": "ENRICHED — CVE-2020-8231 (https://github.com/curl/curl). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-8286", "detail": "ENRICHED — CVE-2020-8286 (https://github.com/curl/curl). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-8315", "detail": "ENRICHED — CVE-2020-8315. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2020-9327", "detail": "ENRICHED — CVE-2020-9327. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-20227", "detail": "ENRICHED — CVE-2021-20227 (sqlite). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-20231", "detail": "ENRICHED — CVE-2021-20231 (gnutls). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-20305", "detail": "ENRICHED — CVE-2021-20305 (nettle). Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-22923", "detail": "ENRICHED — CVE-2021-22923 (https://github.com/curl/curl). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-27212", "detail": "ENRICHED — CVE-2021-27212. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-27218", "detail": "ENRICHED — CVE-2021-27218. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-27219", "detail": "ENRICHED — CVE-2021-27219. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-28041", "detail": "ENRICHED — CVE-2021-28041. Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-28153", "detail": "ENRICHED — CVE-2021-28153. Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-28363", "detail": "ENRICHED — CVE-2021-28363. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-32292", "detail": "ENRICHED — CVE-2021-32292. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-33294", "detail": "ENRICHED — CVE-2021-33294. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-33574", "detail": "ENRICHED — CVE-2021-33574. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-33655", "detail": "ENRICHED — CVE-2021-33655 (kernel). Received CVSS 6.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3516", "detail": "ENRICHED — CVE-2021-3516 (libxml2). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3518", "detail": "ENRICHED — CVE-2021-3518 (libxml2). Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3537", "detail": "ENRICHED — CVE-2021-3537 (libxml2). Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3541", "detail": "ENRICHED — CVE-2021-3541 (libxml2). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3580", "detail": "ENRICHED — CVE-2021-3580 (nettle). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36084", "detail": "ENRICHED — CVE-2021-36084. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36085", "detail": "ENRICHED — CVE-2021-36085. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36086", "detail": "ENRICHED — CVE-2021-36086. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36087", "detail": "ENRICHED — CVE-2021-36087. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36222", "detail": "ENRICHED — CVE-2021-36222. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-36690", "detail": "ENRICHED — CVE-2021-36690. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3759", "detail": "ENRICHED — CVE-2021-3759 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-37600", "detail": "ENRICHED — CVE-2021-37600. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-37750", "detail": "ENRICHED — CVE-2021-37750. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-38202", "detail": "ENRICHED — CVE-2021-38202. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3826", "detail": "ENRICHED — CVE-2021-3826 (gcc). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-3997", "detail": "ENRICHED — CVE-2021-3997 (systemd). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-4122", "detail": "ENRICHED — CVE-2021-4122 (cryptsetup). Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-4209", "detail": "ENRICHED — CVE-2021-4209 (GnuTLS). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-43396", "detail": "ENRICHED — CVE-2021-43396. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-43618", "detail": "ENRICHED — CVE-2021-43618. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-44879", "detail": "ENRICHED — CVE-2021-44879. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2021-47002", "detail": "ENRICHED — CVE-2021-47002 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-0171", "detail": "ENRICHED — CVE-2022-0171 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1012", "detail": "ENRICHED — CVE-2022-1012 (Kernel). Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1015", "detail": "ENRICHED — CVE-2022-1015 (kernel). Received CVSS 6.6 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1184", "detail": "ENRICHED — CVE-2022-1184 (Kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1434", "detail": "ENRICHED — CVE-2022-1434 (OpenSSL). Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1462", "detail": "ENRICHED — CVE-2022-1462 (kernel). Received CVSS 6.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1679", "detail": "ENRICHED — CVE-2022-1679 (Kernel). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1852", "detail": "ENRICHED — CVE-2022-1852 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-1882", "detail": "ENRICHED — CVE-2022-1882 (kernel). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-20421", "detail": "ENRICHED — CVE-2022-20421 (Android). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-20422", "detail": "ENRICHED — CVE-2022-20422 (Android). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2078", "detail": "ENRICHED — CVE-2022-2078 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2097", "detail": "ENRICHED — CVE-2022-2097 (OpenSSL). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2153", "detail": "ENRICHED — CVE-2022-2153 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2274", "detail": "ENRICHED — CVE-2022-2274 (OpenSSL). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-24407", "detail": "ENRICHED — CVE-2022-24407. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2663", "detail": "ENRICHED — CVE-2022-2663 (Linux kernel). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-27776", "detail": "ENRICHED — CVE-2022-27776 (https://github.com/curl/curl). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-27779", "detail": "ENRICHED — CVE-2022-27779 (https://github.com/curl/curl). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2905", "detail": "ENRICHED — CVE-2022-2905 (kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-29155", "detail": "ENRICHED — CVE-2022-29155. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2959", "detail": "ENRICHED — CVE-2022-2959 (kernel). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-2978", "detail": "ENRICHED — CVE-2022-2978 (Kernel). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-29824", "detail": "ENRICHED — CVE-2022-29824. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-3028", "detail": "ENRICHED — CVE-2022-3028 (Linux kernel). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-3169", "detail": "ENRICHED — CVE-2022-3169 (Kernel). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-32250", "detail": "ENRICHED — CVE-2022-32250. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-32296", "detail": "ENRICHED — CVE-2022-32296. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-34918", "detail": "ENRICHED — CVE-2022-34918. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-35260", "detail": "ENRICHED — CVE-2022-35260 (https://github.com/curl/curl). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-36123", "detail": "ENRICHED — CVE-2022-36123. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-39188", "detail": "ENRICHED — CVE-2022-39188. Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-39190", "detail": "ENRICHED — CVE-2022-39190. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-40307", "detail": "ENRICHED — CVE-2022-40307. Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-40768", "detail": "ENRICHED — CVE-2022-40768. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-41849", "detail": "ENRICHED — CVE-2022-41849. Received CVSS 4.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-42703", "detail": "ENRICHED — CVE-2022-42703. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-42722", "detail": "ENRICHED — CVE-2022-42722. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-48522", "detail": "ENRICHED — CVE-2022-48522. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2022-48560", "detail": "ENRICHED — CVE-2022-48560. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-0590", "detail": "ENRICHED — CVE-2023-0590 (Kernel). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-1077", "detail": "ENRICHED — CVE-2023-1077 (Linux kernel). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-1206", "detail": "ENRICHED — CVE-2023-1206 (Kernel). Received CVSS 5.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-25136", "detail": "ENRICHED — CVE-2023-25136. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-27537", "detail": "ENRICHED — CVE-2023-27537 (https://github.com/curl/curl). Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-28531", "detail": "ENRICHED — CVE-2023-28531. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-2898", "detail": "ENRICHED — CVE-2023-2898 (Kernel). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-29383", "detail": "ENRICHED — CVE-2023-29383. Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-29491", "detail": "ENRICHED — CVE-2023-29491. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-31085", "detail": "ENRICHED — CVE-2023-31085. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-3212", "detail": "ENRICHED — CVE-2023-3212 (Linux kernel (gfs2 file system)). Received CVSS 4.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-98159", "detail": "ENRICHED — CVE-2026-98159 (Linux). Received CVSS 5.5 and CPE data from NVD." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }