{ "day": "2026-10-15", "boundary": "UTC calendar day", "published_count": 557, "by_severity": { "CRITICAL": 43, "HIGH": 225, "MEDIUM": 252, "LOW": 18 }, "kev_count": 0, "exploit_reference_count": 0, "awaiting_enrichment_count": 19, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-110908", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.06084, "epss_percentile": 0.93315, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense-pkg-frr", "cwe": "CWE-78", "title": "Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to execute as root. There are updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110908" }, { "rank": 2, "cve_id": "CVE-2026-34007", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.01642, "epss_percentile": 0.75975, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Notes Station 3", "cwe": "CWE-78", "title": "**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34007" }, { "rank": 3, "cve_id": "CVE-2026-47786", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.01413, "epss_percentile": 0.72214, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "HybridDesk Station", "cwe": "CWE-78", "title": "Pre-Authentication Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47786" }, { "rank": 4, "cve_id": "CVE-2026-77931", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.01004, "epss_percentile": 0.62253, "kev": false, "kev_due_at": null, "vendor": "jxxghp", "product": "MoviePilot", "cwe": "CWE-1427", "title": "MoviePilot 3.1.5 Command Injection via ExecuteCommandTool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77931" }, { "rank": 5, "cve_id": "CVE-2026-108587", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00916, "epss_percentile": 0.59405, "kev": false, "kev_due_at": null, "vendor": "10web", "product": "10Web Booster – Website speed optimization, Cache & Page Speed optimizer", "cwe": "CWE-434", "title": "10Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108587" }, { "rank": 6, "cve_id": "CVE-2026-50619", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00614, "epss_percentile": 0.48287, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsirch", "cwe": "CWE-22", "title": "Unauthenticated remote code execution vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50619" }, { "rank": 7, "cve_id": "CVE-2026-41545", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.44263, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuMagie", "cwe": "CWE-23", "title": "WebSocket timelapse path traversal and command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41545" }, { "rank": 8, "cve_id": "CVE-2026-26243", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00541, "epss_percentile": 0.44226, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-22", "title": "Arbitrary Folder Deletion in Qsync Central 5.0.0.5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-26243" }, { "rank": 9, "cve_id": "CVE-2026-41541", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.44226, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-61", "title": "Symlink creation in qsyncsrv.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41541" }, { "rank": 10, "cve_id": "CVE-2026-19863", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0054, "epss_percentile": 0.44178, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty:jetty-ethereum", "cwe": "CWE-288", "title": "An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within a protected request path, the request may be treated as the login page and its authentication or role requirement replaced with ALLOWED. Exploitation requires the protected resource path to contain the configured login path as a later segment. Explicitly FORBIDDEN routes are not affected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19863" }, { "rank": 11, "cve_id": "CVE-2026-34006", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00534, "epss_percentile": 0.43786, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "sMedio DTCP MOVE", "cwe": "CWE-306", "title": "Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34006" }, { "rank": 12, "cve_id": "CVE-2026-50612", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00488, "epss_percentile": 0.40518, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuMagie", "cwe": "CWE-61", "title": "Import Symlink Following Remote Code Execution Vulnerability in QuMagie", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50612" }, { "rank": 13, "cve_id": "CVE-2026-34015", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.40518, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-22", "title": "Remote Code Execution in upload.php of Video Station", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34015" }, { "rank": 14, "cve_id": "CVE-2026-79824", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00483, "epss_percentile": 0.40181, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Python 3.x", "cwe": "CWE-30", "title": "HPE NonStop Python 3.x - Directory traversal vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79824" }, { "rank": 15, "cve_id": "CVE-2026-47790", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00475, "epss_percentile": 0.3955, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuFTP Service", "cwe": "CWE-79", "title": "Privilege Escalation via QuFTP Log-based XSS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47790" }, { "rank": 16, "cve_id": "CVE-2026-39991", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00475, "epss_percentile": 0.39549, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Notes Station 3", "cwe": "CWE-79", "title": "Stored Cross-Site Scripting (XSS) in Note Station file upload functionality", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39991" }, { "rank": 17, "cve_id": "CVE-2026-81534", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00473, "epss_percentile": 0.39405, "kev": false, "kev_due_at": null, "vendor": "ThemeHigh", "product": "Email Customizer for WooCommerce (Pro)", "cwe": "CWE-74", "title": "Email Customizer for WooCommerce (Pro) <= 3.9.5 - Authenticated (Subscriber+) Remote Code Execution via 'template' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81534" }, { "rank": 18, "cve_id": "CVE-2026-53882", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38947, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Virtualization Station", "cwe": "CWE-59", "title": "Path Traversal in Virtualization Station VM Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53882" }, { "rank": 19, "cve_id": "CVE-2026-101290", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00453, "epss_percentile": 0.3784, "kev": false, "kev_due_at": null, "vendor": "SICK AG", "product": "Sick_Safetyscanners_Base CPP Driver", "cwe": "CWE-125", "title": "CVE-2026-101290", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101290" }, { "rank": 20, "cve_id": "CVE-2024-22031", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00435, "epss_percentile": 0.36231, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "rancher", "cwe": "CWE-863", "title": "Rancher users who can create Projects can gain access to arbitrary projects", "url": "https://www.cve.org/CVERecord?id=CVE-2024-22031" }, { "rank": 21, "cve_id": "CVE-2026-18659", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00428, "epss_percentile": 0.35559, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty.ee11:jetty-ee11-servlet", "cwe": "CWE-863", "title": "Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18659" }, { "rank": 22, "cve_id": "CVE-2026-39989", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00427, "epss_percentile": 0.3543, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Download Station", "cwe": "CWE-918", "title": "SSRF in QNAP Download Station", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39989" }, { "rank": 23, "cve_id": "CVE-2026-44084", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00425, "epss_percentile": 0.35258, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-639", "title": "Access Code Forgery in Video Station leading to unauthorized media access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44084" }, { "rank": 24, "cve_id": "CVE-2026-18660", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00421, "epss_percentile": 0.34936, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty:jetty-server", "cwe": "CWE-178", "title": "Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18660" }, { "rank": 25, "cve_id": "CVE-2026-26244", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00419, "epss_percentile": 0.34717, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-89", "title": "SQLi#1 SQL Injection in class_videos.php _getFilters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-26244" }, { "rank": 26, "cve_id": "CVE-2026-26245", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00419, "epss_percentile": 0.34717, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-89", "title": "SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset", "url": "https://www.cve.org/CVERecord?id=CVE-2026-26245" }, { "rank": 27, "cve_id": "CVE-2026-102469", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00413, "epss_percentile": 0.34029, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-502", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx:vertx-db2-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102469" }, { "rank": 28, "cve_id": "CVE-2026-18662", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.32988, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty.ee11:jetty-ee11-servlet", "cwe": "CWE-863", "title": "In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Resulting in later http-method-omission sets overriding previous constraints with the same http-method-omission set.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18662" }, { "rank": 29, "cve_id": "CVE-2026-79829", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32748, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop HTTP WEBSERVER", "cwe": "CWE-20", "title": "HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79829" }, { "rank": 30, "cve_id": "CVE-2026-102461", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.004, "epss_percentile": 0.32619, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": null, "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes disproportionate CPU time, leading to denial of service. The impacted component is io.vertx:vertx-json-schema. The following Vert.x modules depend on vertx-json-schema and are also affected: io.vertx:vertx-web-openapi-router io.vertx:vertx-web-validation io.vertx:vertx-openapi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102461" }, { "rank": 31, "cve_id": "CVE-2026-101287", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00398, "epss_percentile": 0.32347, "kev": false, "kev_due_at": null, "vendor": "Diaple", "product": "Stela", "cwe": "CWE-565", "title": "Authentication bypass in Stela by Diaple Networking", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101287" }, { "rank": 32, "cve_id": "CVE-2026-0993", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00391, "epss_percentile": 0.31578, "kev": false, "kev_due_at": null, "vendor": "SODOLA", "product": "SL902-SWTGW124AS", "cwe": "CWE-120", "title": "SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-0993" }, { "rank": 33, "cve_id": "CVE-2026-76066", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00386, "epss_percentile": 0.31032, "kev": false, "kev_due_at": null, "vendor": "crestalnetwork", "product": "intentkit", "cwe": "CWE-862", "title": "IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76066" }, { "rank": 34, "cve_id": "CVE-2026-39997", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29388, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "HybridDesk Station", "cwe": "CWE-306", "title": "Unauthenticated Remote Input Injection in QNAP HD Station's remotepad", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39997" }, { "rank": 35, "cve_id": "CVE-2026-15090", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00364, "epss_percentile": 0.28582, "kev": false, "kev_due_at": null, "vendor": "jackdewey", "product": "Link Library", "cwe": "CWE-89", "title": "Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15090" }, { "rank": 36, "cve_id": "CVE-2026-39993", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28351, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Download Station", "cwe": "CWE-23", "title": "Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39993" }, { "rank": 37, "cve_id": "CVE-2026-41544", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28351, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QcalAgent", "cwe": "CWE-22", "title": "Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41544" }, { "rank": 38, "cve_id": "CVE-2025-66272", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28351, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-22", "title": "Arbitrary file deletion and remote code execution", "url": "https://www.cve.org/CVERecord?id=CVE-2025-66272" }, { "rank": 39, "cve_id": "CVE-2025-66275", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28351, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Video Station", "cwe": "CWE-22", "title": "Remote code execution via command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2025-66275" }, { "rank": 40, "cve_id": "CVE-2026-24718", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00362, "epss_percentile": 0.28352, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-22", "title": "Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24718" }, { "rank": 41, "cve_id": "CVE-2026-22896", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": 0.0036, "epss_percentile": 0.28218, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Network & Virtual Switch", "cwe": "CWE-79", "title": "Stored XSS via Interface Name in Network & Virtual Switch App", "url": "https://www.cve.org/CVERecord?id=CVE-2026-22896" }, { "rank": 42, "cve_id": "CVE-2026-18661", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00335, "epss_percentile": 0.25293, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty.ee11:jetty-ee11-annotations", "cwe": "CWE-863", "title": "In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern` were not being applied if the `web.xml` had more than 1 `url-pattern` for a servlet, and had a `security-constraint` applying to only some of those `url-pattern` definitions.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18661" }, { "rank": 43, "cve_id": "CVE-2023-32198", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00329, "epss_percentile": 0.24344, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "steve", "cwe": "CWE-295", "title": "Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks", "url": "https://www.cve.org/CVERecord?id=CVE-2023-32198" }, { "rank": 44, "cve_id": "CVE-2026-102477", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00324, "epss_percentile": 0.23798, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-409", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes, however the maximum size applies to the received bytes. When applied to a compressed message, this only applies to the compressed size and not the actual size of the uncompressed content. This can be used to force a gRPC endpoint to allocate more bytes than the value defined by the configuration, making the endpoint vulnerable to compression bomb attacks. The impacted component is io.vertx:vertx-gprc-server.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102477" }, { "rank": 45, "cve_id": "CVE-2026-77711", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0032, "epss_percentile": 0.23324, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Jetty", "cwe": "CWE-200", "title": "When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to the server, that now has access to the proxy credentials.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77711" }, { "rank": 46, "cve_id": "CVE-2026-102462", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00316, "epss_percentile": 0.22865, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-400", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mssql-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102462" }, { "rank": 47, "cve_id": "CVE-2026-103223", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00316, "epss_percentile": 0.22864, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-789", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAX_VALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-pg-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103223" }, { "rank": 48, "cve_id": "CVE-2026-103224", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00316, "epss_percentile": 0.22865, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": null, "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mysql-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103224" }, { "rank": 49, "cve_id": "CVE-2026-76659", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00305, "epss_percentile": 0.21731, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TCP/IP UTILITIES", "cwe": "CWE-306", "title": "HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76659" }, { "rank": 50, "cve_id": "CVE-2026-16436", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00303, "epss_percentile": 0.21505, "kev": false, "kev_due_at": null, "vendor": "Mitsubishi Electric Corporation", "product": "GENESIS", "cwe": "CWE-640", "title": "An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16436" }, { "rank": 51, "cve_id": "CVE-2026-93484", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.003, "epss_percentile": 0.2115, "kev": false, "kev_due_at": null, "vendor": "Znuny", "product": "Znuny", "cwe": "CWE-89", "title": "Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either \"AND\" or \"OR\", but its value was concatenated directly into the generated SQL query without validation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93484" }, { "rank": 52, "cve_id": "CVE-2026-17031", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.003, "epss_percentile": 0.21184, "kev": false, "kev_due_at": null, "vendor": "quadlayers", "product": "Checkout Field Manager (Checkout Manager) for WooCommerce", "cwe": "CWE-862", "title": "Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17031" }, { "rank": 53, "cve_id": "CVE-2026-110911", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00297, "epss_percentile": 0.20843, "kev": false, "kev_due_at": null, "vendor": "Wheels", "product": "Wheels", "cwe": "CWE-89", "title": "Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1: string/date bounds can alter SQL on MySQL/MariaDB with backslash escaping enabled. This is fixed in 4.1.2.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110911" }, { "rank": 54, "cve_id": "CVE-2026-63315", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00288, "epss_percentile": 0.19864, "kev": false, "kev_due_at": null, "vendor": "Slican", "product": "IPx", "cwe": "CWE-256", "title": "Plaintext storage of a password in WebCTI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63315" }, { "rank": 55, "cve_id": "CVE-2026-18548", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00287, "epss_percentile": 0.19848, "kev": false, "kev_due_at": null, "vendor": "trainingbusinesspros", "product": "Groundhogg — CRM, Newsletters, and Marketing Automation", "cwe": "CWE-79", "title": "Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18548" }, { "rank": 56, "cve_id": "CVE-2026-110923", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00285, "epss_percentile": 0.19644, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-22", "title": "Openssh: openssh: sftp can write outside the destination directory from a server-supplied path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110923" }, { "rank": 57, "cve_id": "CVE-2026-11905", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00284, "epss_percentile": 0.19534, "kev": false, "kev_due_at": null, "vendor": "elemntor", "product": "Elementor Website Builder – more than just a page builder", "cwe": "CWE-862", "title": "Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11905" }, { "rank": 58, "cve_id": "CVE-2026-102463", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00282, "epss_percentile": 0.19292, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-789", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray) allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL server, or an on-path attacker intercepting an unencrypted connection, can send a crafted DataRow message with an excessively large array dimension value, causing the client to attempt a multi-gigabyte heap allocation and crash with an OutOfMemoryError. The impacted component is io.vertx:vertx-pg-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102463" }, { "rank": 59, "cve_id": "CVE-2026-102464", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00282, "epss_percentile": 0.19292, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-770", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound QoS 2 PUBLISH message received from the broker in an internal map (qos2inbound) while awaiting the corresponding PUBREL packet to complete the QoS 2 handshake. This map has no size limit; the maxInflightQueue option is enforced only on the outbound publish path and does not constrain inbound message retention. A malicious or compromised MQTT broker can exploit this by sending QoS 2 PUBLISH messages with distinct packet identifiers and withholding the PUBREL responses. Each incomplete handshake causes the client to retain the full publish message (topic, payload, and metadata) indefinitely, leading to unbounded memory growth in the Vert.x process. This can degrade the MQTT-consuming application or cause out-of-memory termination. The impacted component is io.vertx:vertx-mqtt.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102464" }, { "rank": 60, "cve_id": "CVE-2026-76184", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18899, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Jetty", "cwe": "CWE-200", "title": "In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as the target.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76184" }, { "rank": 61, "cve_id": "CVE-2026-109855", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.18924, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-248", "title": "undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109855" }, { "rank": 62, "cve_id": "CVE-2026-24721", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.18551, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "File Station 5", "cwe": "CWE-476", "title": "Null Pointer Dereference in File Station 5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24721" }, { "rank": 63, "cve_id": "CVE-2026-24722", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.18553, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "File Station 5", "cwe": "CWE-476", "title": "Null Pointer Dereference in File Station 5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24722" }, { "rank": 64, "cve_id": "CVE-2026-24723", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.18552, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "File Station 5", "cwe": "CWE-476", "title": "NULL Pointer Dereference in utilRequest.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24723" }, { "rank": 65, "cve_id": "CVE-2025-29895", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00275, "epss_percentile": 0.18552, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-476", "title": "NULL Pointer Dereference in qsyncsrv.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2025-29895" }, { "rank": 66, "cve_id": "CVE-2025-29896", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00275, "epss_percentile": 0.18552, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-476", "title": "NULL Pointer Dereference in qsyncsrv.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2025-29896" }, { "rank": 67, "cve_id": "CVE-2025-29897", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00275, "epss_percentile": 0.18551, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Qsync Central", "cwe": "CWE-120", "title": "Stack-based Buffer Overflow in qsyncsrv.cgi", "url": "https://www.cve.org/CVERecord?id=CVE-2025-29897" }, { "rank": 68, "cve_id": "CVE-2026-76182", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00272, "epss_percentile": 0.18285, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Jetty", "cwe": "CWE-74", "title": "In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/s&a=1`.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76182" }, { "rank": 69, "cve_id": "CVE-2026-76663", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00267, "epss_percentile": 0.17523, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TELSERV", "cwe": "CWE-121", "title": "HPE NonStop TELSERV - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76663" }, { "rank": 70, "cve_id": "CVE-2026-102467", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.16833, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-770", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes allocation when decompressing frames or messages. This can be used to implement DDOS attacks with a zip bomb. The impacted component is io.vertx:vertx-core.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102467" }, { "rank": 71, "cve_id": "CVE-2026-102475", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.16833, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-770", "title": "In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to force a server to indefinitely allocate heap. This vulnerability requires to use an intercepting body transformer. The impacted component is io.vertx:vertx-http-proxy.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102475" }, { "rank": 72, "cve_id": "CVE-2026-73799", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.16844, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SNMP Trap Multiplexer", "cwe": "CWE-121", "title": "HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73799" }, { "rank": 73, "cve_id": "CVE-2026-102466", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00258, "epss_percentile": 0.16303, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-789", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx:vertx-mysql-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102466" }, { "rank": 74, "cve_id": "CVE-2026-110926", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00253, "epss_percentile": 0.15595, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-203", "title": "Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110926" }, { "rank": 75, "cve_id": "CVE-2026-108092", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00251, "epss_percentile": 0.15276, "kev": false, "kev_due_at": null, "vendor": "pr-gateway", "product": "Blog2Social: Social Media Auto Post & Scheduler", "cwe": "CWE-639", "title": "Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108092" }, { "rank": 76, "cve_id": "CVE-2026-110904", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00247, "epss_percentile": 0.14812, "kev": false, "kev_due_at": null, "vendor": "apostrophecms", "product": "ApostropheCMS", "cwe": "CWE-863", "title": "ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110904" }, { "rank": 77, "cve_id": "CVE-2026-110907", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00245, "epss_percentile": 0.14619, "kev": false, "kev_due_at": null, "vendor": "BackdropCMS", "product": "Backdrop", "cwe": "CWE-669", "title": "Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selecting tokens by type. The product doesn't sufficiently limit access to the types of tokens that are available in the token browser. The names of the individual tokens are adequately protected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110907" }, { "rank": 78, "cve_id": "CVE-2026-3712", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00243, "epss_percentile": 0.14426, "kev": false, "kev_due_at": null, "vendor": "kiboit", "product": "PhastPress", "cwe": "CWE-918", "title": "PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-3712" }, { "rank": 79, "cve_id": "CVE-2026-16438", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00238, "epss_percentile": 0.13797, "kev": false, "kev_due_at": null, "vendor": "Mitsubishi Electric Corporation", "product": "GENESIS64", "cwe": "CWE-266", "title": "An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16438" }, { "rank": 80, "cve_id": "CVE-2026-88043", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00236, "epss_percentile": 0.13575, "kev": false, "kev_due_at": null, "vendor": "kitae-park", "product": "Mang Board", "cwe": "CWE-79", "title": "Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88043" }, { "rank": 81, "cve_id": "CVE-2026-93483", "cvss_base": 9.5, "cvss_severity": "CRITICAL", "epss_score": 0.00234, "epss_percentile": 0.13259, "kev": false, "kev_due_at": null, "vendor": "Znuny", "product": "Znuny", "cwe": "CWE-348", "title": "In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel::System::Auth::HTTPBasicAuth) and customer (Kernel::System::CustomerAuth::HTTPBasicAuth) interfaces read the username to log in not only from $ENV{REMOTE_USER} (set by the web server after successful authentication), but also, as a fallback, from $ENV{HTTP_REMOTE_USER}, which is populated directly from an attacker-controllable \"Remote-User\" request header. On systems where HTTPBasicAuth was configured as the authentication backend, this allowed an attacker to log in as any existing user by sending a request with a forged Remote-User header, without providing any credentials.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93483" }, { "rank": 82, "cve_id": "CVE-2026-18586", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00231, "epss_percentile": 0.1299, "kev": false, "kev_due_at": null, "vendor": "codename065", "product": "Premium Packages – Sell Digital Products Securely", "cwe": "CWE-79", "title": "Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18586" }, { "rank": 83, "cve_id": "CVE-2026-79821", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00229, "epss_percentile": 0.12718, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SOAP 4.0", "cwe": "CWE-20", "title": "HPE NonStop SOAP 4.0 - Memory corruption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79821" }, { "rank": 84, "cve_id": "CVE-2026-76662", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00226, "epss_percentile": 0.12314, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TELSERV", "cwe": "CWE-121", "title": "HPE NonStop TELSERV - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76662" }, { "rank": 85, "cve_id": "CVE-2026-63314", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.12167, "kev": false, "kev_due_at": null, "vendor": "Slican", "product": "IPx", "cwe": "CWE-89", "title": "SQL Injection in WebCTI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63314" }, { "rank": 86, "cve_id": "CVE-2026-86803", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00225, "epss_percentile": 0.12176, "kev": false, "kev_due_at": null, "vendor": "oceanwp", "product": "Ocean Extra", "cwe": "CWE-94", "title": "Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template", "url": "https://www.cve.org/CVERecord?id=CVE-2026-86803" }, { "rank": 87, "cve_id": "CVE-2026-72528", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00213, "epss_percentile": 0.10798, "kev": false, "kev_due_at": null, "vendor": "CREEMA LTD.", "product": "\"Handmade Marketplace App - Creema\" for Android", "cwe": "CWE-601", "title": "\"Handmade Marketplace App - Creema\" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72528" }, { "rank": 88, "cve_id": "CVE-2026-102465", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00209, "epss_percentile": 0.10413, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Vert.x", "cwe": "CWE-770", "title": "In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by the server without enforcing an upper bound. A malicious or compromised Redis server, or an attacker in a man-in-the-middle position, can send a crafted RESP response declaring an extremely large array, push, or attribute length, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Vert.x event loop thread, denying service to all connections and verticles sharing that loop. The impacted component is io.vertx:vertx-mysql-client.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102465" }, { "rank": 89, "cve_id": "CVE-2026-15180", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.09773, "kev": false, "kev_due_at": null, "vendor": "data443", "product": "Tracking Code Manager", "cwe": "CWE-79", "title": "Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15180" }, { "rank": 90, "cve_id": "CVE-2026-18557", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.09773, "kev": false, "kev_due_at": null, "vendor": "10web", "product": "Photo Gallery by 10Web – Mobile-Friendly Image Gallery", "cwe": "CWE-79", "title": "Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18557" }, { "rank": 91, "cve_id": "CVE-2026-96614", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08308, "kev": false, "kev_due_at": null, "vendor": "GEO CORPORATION", "product": "\"ゲオアプリ\" for Android", "cwe": "CWE-939", "title": "\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96614" }, { "rank": 92, "cve_id": "CVE-2026-101303", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00191, "epss_percentile": 0.08204, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-941", "title": "IPv6 UDP sendto(2) bypasses jail loopback restriction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101303" }, { "rank": 93, "cve_id": "CVE-2026-101302", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0019, "epss_percentile": 0.08101, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-193", "title": "Remote DoS via receive-side kernel TLS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101302" }, { "rank": 94, "cve_id": "CVE-2026-17001", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.0019, "epss_percentile": 0.08062, "kev": false, "kev_due_at": null, "vendor": "carazo", "product": "Import and export users and customers", "cwe": "CWE-79", "title": "Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile Fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17001" }, { "rank": 95, "cve_id": "CVE-2026-78087", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.0019, "epss_percentile": 0.08062, "kev": false, "kev_due_at": null, "vendor": "vektor-inc", "product": "VK Blocks", "cwe": "CWE-79", "title": "VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' Feature", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78087" }, { "rank": 96, "cve_id": "CVE-2025-23390", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.0019, "epss_percentile": 0.08121, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "fleet", "cwe": "CWE-295", "title": "Fleet doesn’t validate a server’s certificate when connecting through SSH", "url": "https://www.cve.org/CVERecord?id=CVE-2025-23390" }, { "rank": 97, "cve_id": "CVE-2026-24715", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00189, "epss_percentile": 0.07931, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuRouter", "cwe": "CWE-208", "title": "Lack of Reproducible Vulnerability Evidence in QNAP Report", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24715" }, { "rank": 98, "cve_id": "CVE-2026-110925", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00188, "epss_percentile": 0.07856, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-78", "title": "Openssh: openssh: '$' and '\\' in a command-line username expand through %u", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110925" }, { "rank": 99, "cve_id": "CVE-2026-14572", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00187, "epss_percentile": 0.07732, "kev": false, "kev_due_at": null, "vendor": "themeum", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "cwe": "CWE-79", "title": "Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text Content", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14572" }, { "rank": 100, "cve_id": "CVE-2026-101306", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00186, "epss_percentile": 0.07632, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-273", "title": "Multiple jail filesystem root escapes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101306" }, { "rank": 101, "cve_id": "CVE-2026-58098", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00182, "epss_percentile": 0.07227, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-787", "title": "Heap out-of-bounds access in semop(2)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58098" }, { "rank": 102, "cve_id": "CVE-2026-101309", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.07121, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-362", "title": "Multiple vulnerabilities in bhyve device models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101309" }, { "rank": 103, "cve_id": "CVE-2026-101310", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.07121, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-126", "title": "Multiple vulnerabilities in bhyve device models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101310" }, { "rank": 104, "cve_id": "CVE-2026-101311", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.07121, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-362", "title": "Multiple vulnerabilities in bhyve device models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101311" }, { "rank": 105, "cve_id": "CVE-2026-101304", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0018, "epss_percentile": 0.07092, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-273", "title": "Multiple jail filesystem root escapes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101304" }, { "rank": 106, "cve_id": "CVE-2026-101305", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0018, "epss_percentile": 0.07093, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-273", "title": "Multiple jail filesystem root escapes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101305" }, { "rank": 107, "cve_id": "CVE-2026-76661", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00178, "epss_percentile": 0.06851, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop QIOMON", "cwe": "CWE-20", "title": "HPE NonStop QIOMON - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76661" }, { "rank": 108, "cve_id": "CVE-2026-101307", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00169, "epss_percentile": 0.05764, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-122", "title": "Remotely triggerable buffer overflow in tcp_rack", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101307" }, { "rank": 109, "cve_id": "CVE-2026-110912", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0016, "epss_percentile": 0.04785, "kev": false, "kev_due_at": null, "vendor": "DragonFlyBSD", "product": "DragonFlyBSD", "cwe": "CWE-130", "title": "In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP packets. in_arpreply() then uses these attacker-controlled values as memcpy lengths when copying from kernel buffers that are only 6 and 4 bytes long, resulting in an out-of-bounds read of kernel heap and stack memory that is copied into the ARP reply sent back to the requester. An unauthenticated attacker on the adjacent network can use a single crafted ARP request to disclose up to roughly 250 bytes of each type of kernel memory, including kernel pointers. This is expected to be fixed in the 6.6 stable release when that is available.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110912" }, { "rank": 110, "cve_id": "CVE-2026-76656", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00159, "epss_percentile": 0.04614, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TCP/IP UTILITIES", "cwe": "CWE-306", "title": "HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76656" }, { "rank": 111, "cve_id": "CVE-2026-74920", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00158, "epss_percentile": 0.04514, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Document Gallery", "cwe": "CWE-79", "title": "Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74920" }, { "rank": 112, "cve_id": "CVE-2026-76665", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00157, "epss_percentile": 0.04375, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop EXPAND", "cwe": "CWE-125", "title": "HPE NonStop EXPAND - Buffer Overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76665" }, { "rank": 113, "cve_id": "CVE-2026-78001", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00156, "epss_percentile": 0.04291, "kev": false, "kev_due_at": null, "vendor": "boldgrid", "product": "Post and Page Builder by BoldGrid – Visual Drag and Drop Editor", "cwe": "CWE-79", "title": "Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78001" }, { "rank": 114, "cve_id": "CVE-2026-75559", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00155, "epss_percentile": 0.04216, "kev": false, "kev_due_at": null, "vendor": "Ministry of Land, Infrastructure, Transport and Tourism", "product": "Vehicle Inspection Certificate Viewer (for Android)", "cwe": "CWE-201", "title": "The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75559" }, { "rank": 115, "cve_id": "CVE-2025-68404", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00151, "epss_percentile": 0.03808, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuRouter", "cwe": "CWE-367", "title": "vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface", "url": "https://www.cve.org/CVERecord?id=CVE-2025-68404" }, { "rank": 116, "cve_id": "CVE-2026-79826", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00151, "epss_percentile": 0.03819, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop OCAX", "cwe": "CWE-122", "title": "HPE NonStop OCAX - Heap buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79826" }, { "rank": 117, "cve_id": "CVE-2026-79827", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00151, "epss_percentile": 0.03819, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Inspect Subsystem", "cwe": "CWE-122", "title": "HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79827" }, { "rank": 118, "cve_id": "CVE-2026-79828", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00151, "epss_percentile": 0.03865, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Debug Utilities", "cwe": "CWE-122", "title": "HPE NonStop Debug Utilities - Heap buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79828" }, { "rank": 119, "cve_id": "CVE-2026-103304", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00146, "epss_percentile": 0.03456, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "eaSYNC Booking", "cwe": "CWE-862", "title": "eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103304" }, { "rank": 120, "cve_id": "CVE-2026-76664", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00145, "epss_percentile": 0.03354, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop EXPAND", "cwe": "CWE-125", "title": "HPE NonStop EXPAND - Out-of-Bounds memory read/write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76664" }, { "rank": 121, "cve_id": "CVE-2026-34009", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03082, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Notes Station 3", "cwe": "CWE-653", "title": "**Container Escape** Host user home directory mounted with write access into application container", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34009" }, { "rank": 122, "cve_id": "CVE-2026-104643", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00142, "epss_percentile": 0.03086, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Easy HTTPS Redirection (SSL)", "cwe": "CWE-862", "title": "Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104643" }, { "rank": 123, "cve_id": "CVE-2026-79825", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0014, "epss_percentile": 0.03015, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop NDSREST", "cwe": "CWE-122", "title": "HPE NonStop NDSREST - Heap buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79825" }, { "rank": 124, "cve_id": "CVE-2026-58099", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0014, "epss_percentile": 0.0301, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-362", "title": "Memory safety bugs in kqueue copy-on-fork implementation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58099" }, { "rank": 125, "cve_id": "CVE-2026-58100", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0014, "epss_percentile": 0.03009, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-125", "title": "Memory safety bugs in kqueue copy-on-fork implementation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58100" }, { "rank": 126, "cve_id": "CVE-2026-109145", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00136, "epss_percentile": 0.02706, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "User Rights Access Manager", "cwe": "CWE-269", "title": "User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109145" }, { "rank": 127, "cve_id": "CVE-2026-96537", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00136, "epss_percentile": 0.02706, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Tutor LMS", "cwe": "CWE-862", "title": "Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96537" }, { "rank": 128, "cve_id": "CVE-2026-106031", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00136, "epss_percentile": 0.02706, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Spin Wheel", "cwe": "CWE-284", "title": "Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106031" }, { "rank": 129, "cve_id": "CVE-2026-34014", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00134, "epss_percentile": 0.02583, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Download Station", "cwe": "CWE-732", "title": "ds-move-files.sh is writable and executed as root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34014" }, { "rank": 130, "cve_id": "CVE-2026-19864", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": 0.00126, "epss_percentile": 0.02068, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "org.eclipse.jetty:jetty-security", "cwe": "CWE-312", "title": "Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An attacker with sufficient privileges to read the persisted session data may obtain the plaintext passwords of authenticated users.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19864" }, { "rank": 131, "cve_id": "CVE-2026-103324", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00125, "epss_percentile": 0.01985, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Cardinity Payment Gateway for WooCommerce", "cwe": "CWE-345", "title": "Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project Secret", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103324" }, { "rank": 132, "cve_id": "CVE-2026-34008", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00121, "epss_percentile": 0.01765, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "Notes Station 3", "cwe": "CWE-732", "title": "**Privilege Escalation** World-writable crontab path monitored and executed by root-owned process", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34008" }, { "rank": 133, "cve_id": "CVE-2026-35088", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00117, "epss_percentile": 0.01573, "kev": false, "kev_due_at": null, "vendor": "Slican", "product": "IPx", "cwe": "CWE-326", "title": "Inadequate Encryption Strength in Slican telephone exchanges", "url": "https://www.cve.org/CVERecord?id=CVE-2026-35088" }, { "rank": 134, "cve_id": "CVE-2026-110810", "cvss_base": 0.9, "cvss_severity": "LOW", "epss_score": 0.00116, "epss_percentile": 0.01469, "kev": false, "kev_due_at": null, "vendor": "ggml-org", "product": "whisper.cpp", "cwe": "CWE-119", "title": "ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110810" }, { "rank": 135, "cve_id": "CVE-2026-76660", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00114, "epss_percentile": 0.01412, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop CIPSAM", "cwe": "CWE-20", "title": "HPE NonStop CIPSAM - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76660" }, { "rank": 136, "cve_id": "CVE-2026-104618", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00114, "epss_percentile": 0.01397, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "SUSE Linux Enterprise Server 16.1", "cwe": "CWE-732", "title": "sdbootutil: world-readable debug log", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104618" }, { "rank": 137, "cve_id": "CVE-2026-92428", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00114, "epss_percentile": 0.01402, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Rede Itaú for WooCommerce", "cwe": "CWE-345", "title": "Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92428" }, { "rank": 138, "cve_id": "CVE-2026-92429", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00114, "epss_percentile": 0.01402, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Rede Itaú for WooCommerce", "cwe": "CWE-345", "title": "Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92429" }, { "rank": 139, "cve_id": "CVE-2026-79822", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0011, "epss_percentile": 0.01219, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop TNS/X Native Inspect", "cwe": "CWE-122", "title": "HPE NonStop TNS/X Native Inspect - Execution flow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79822" }, { "rank": 140, "cve_id": "CVE-2026-101308", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00106, "epss_percentile": 0.01052, "kev": false, "kev_due_at": null, "vendor": "FreeBSD", "product": "FreeBSD", "cwe": "CWE-367", "title": "TOCTOU race between sound(4) buffer resizing and mmap", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101308" }, { "rank": 141, "cve_id": "CVE-2025-68403", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00106, "epss_percentile": 0.01047, "kev": false, "kev_due_at": null, "vendor": "QNAP Systems Inc.", "product": "QuRouter", "cwe": "CWE-15", "title": "Inadequate Steps to Confirm Vulnerability in QuRouter", "url": "https://www.cve.org/CVERecord?id=CVE-2025-68403" }, { "rank": 142, "cve_id": "CVE-2026-110933", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00105, "epss_percentile": 0.01002, "kev": false, "kev_due_at": null, "vendor": "Samsung Open Source", "product": "Vyond", "cwe": "CWE-248", "title": "Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110933" }, { "rank": 143, "cve_id": "CVE-2026-110934", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00105, "epss_percentile": 0.01002, "kev": false, "kev_due_at": null, "vendor": "Samsung Open Source", "product": "Vyond", "cwe": "CWE-129", "title": "Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110934" }, { "rank": 144, "cve_id": "CVE-2026-104617", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00103, "epss_percentile": 0.00917, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "SUSE Linux Enterprise Server 16.1", "cwe": "CWE-522", "title": "sdbootutil: qrencode invocation leaks PIN/recovery key in /proc//cmdline", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104617" }, { "rank": 145, "cve_id": "CVE-2026-105271", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00101, "epss_percentile": 0.00841, "kev": false, "kev_due_at": null, "vendor": "GEO CORPORATION", "product": "\"ゲオアプリ\" for Android", "cwe": "CWE-312", "title": "\"ゲオアプリ\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105271" }, { "rank": 146, "cve_id": "CVE-2026-76666", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00096, "epss_percentile": 0.00637, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop EXPAND", "cwe": "CWE-125", "title": "HPE NonStop EXPAND - Out-of-Bounds memory read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76666" }, { "rank": 147, "cve_id": "CVE-2026-79823", "cvss_base": 4, "cvss_severity": "MEDIUM", "epss_score": 0.00096, "epss_percentile": 0.00654, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop EMS Distributor", "cwe": "CWE-121", "title": "HPE NonStop EMS Distributor - Buffer Overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79823" }, { "rank": 148, "cve_id": "CVE-2026-110909", "cvss_base": 5, "cvss_severity": "MEDIUM", "epss_score": 0.00095, "epss_percentile": 0.00608, "kev": false, "kev_due_at": null, "vendor": "Wheels", "product": "Wheels CLI", "cwe": "CWE-923", "title": "Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console also probes common ports when the project server is down. Other commands can perform unintended state-changing operations against a different local application's server and database. Exploitation requires a process listening on a targeted local port and the developer running an affected command. This is fixed in 4.1.1, including changes to the CLI and application template.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110909" }, { "rank": 149, "cve_id": "CVE-2026-16437", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00093, "epss_percentile": 0.00509, "kev": false, "kev_due_at": null, "vendor": "Mitsubishi Electric Corporation", "product": "GENESIS", "cwe": "CWE-640", "title": "An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16437" }, { "rank": 150, "cve_id": "CVE-2026-76667", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": 0.00092, "epss_percentile": 0.00479, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop EXPAND", "cwe": "CWE-125", "title": "HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76667" }, { "rank": 151, "cve_id": "CVE-2026-19377", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00083, "epss_percentile": 0.00209, "kev": false, "kev_due_at": null, "vendor": "Cato Networks", "product": "Cato Client for Windows", "cwe": "CWE-295", "title": "Improper certificate validation in Cato Client tunnel handshake", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19377" }, { "rank": 152, "cve_id": "CVE-2026-76668", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00079, "epss_percentile": 0.00123, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Kernel", "cwe": "CWE-1260", "title": "HPE NonStop Kernel - Access to unmapped or privileged data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-76668" }, { "rank": 153, "cve_id": "CVE-2026-57155", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-22", "title": "OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57155" }, { "rank": 154, "cve_id": "CVE-2026-105037", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "station-middleware", "cwe": "CWE-73", "title": "EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105037" }, { "rank": 155, "cve_id": "CVE-2026-105038", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "FastAPI AI inference server", "cwe": "CWE-306", "title": "EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105038" }, { "rank": 156, "cve_id": "CVE-2026-109686", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Link Whisper INC", "product": "Link Whisper Free", "cwe": "CWE-502", "title": "WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109686" }, { "rank": 157, "cve_id": "CVE-2026-109694", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP ManageNinja LLC", "product": "Fluent CRM", "cwe": "CWE-266", "title": "WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109694" }, { "rank": 158, "cve_id": "CVE-2026-109892", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Shabti Kaplan", "product": "Frontend Admin by DynamiApps", "cwe": "CWE-266", "title": "WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109892" }, { "rank": 159, "cve_id": "CVE-2026-57496", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Labs64", "product": "NetLicensing-MCP", "cwe": "CWE-22", "title": "NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57496" }, { "rank": 160, "cve_id": "CVE-2026-105039", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "station-middleware", "cwe": "CWE-862", "title": "EnergizeLab Station Middleware Admin APIs Missing Role Checks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105039" }, { "rank": 161, "cve_id": "CVE-2026-111283", "cvss_base": 9.5, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "BMC Helix", "product": "BMC Helix Network Management", "cwe": "CWE-305", "title": "BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111283" }, { "rank": 162, "cve_id": "CVE-2026-105474", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WebPros", "product": "SolusVM 2", "cwe": "CWE-1336", "title": "A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105474" }, { "rank": 163, "cve_id": "CVE-2026-110812", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AWS", "product": "Amazon Neptune Engine", "cwe": "CWE-502", "title": "Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110812" }, { "rank": 164, "cve_id": "CVE-2026-47218", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "containerd", "product": "runwasi", "cwe": "CWE-502", "title": "runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47218" }, { "rank": 165, "cve_id": "CVE-2026-84731", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Nutanix", "product": "Acropolis Operating System (AOS)", "cwe": "CWE-290", "title": "Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84731" }, { "rank": 166, "cve_id": "CVE-2026-99999", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ipv4: validate checksum_start before completing checksum", "url": "https://www.cve.org/CVERecord?id=CVE-2026-99999" }, { "rank": 167, "cve_id": "CVE-2026-102764", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "BeyondTrust", "product": "Remote Support", "cwe": "CWE-290", "title": "Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102764" }, { "rank": 168, "cve_id": "CVE-2026-108497", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TMS", "product": "Amelia", "cwe": "CWE-89", "title": "WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108497" }, { "rank": 169, "cve_id": "CVE-2026-109688", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Link Whisper INC", "product": "Link Whisper Free", "cwe": "CWE-89", "title": "WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109688" }, { "rank": 170, "cve_id": "CVE-2026-109698", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Kitae Park", "product": "Mang Board WP", "cwe": "CWE-89", "title": "WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109698" }, { "rank": 171, "cve_id": "CVE-2026-110957", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WL-WN530BE2-A", "cwe": "CWE-77", "title": "Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110957" }, { "rank": 172, "cve_id": "CVE-2026-110958", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wavlink", "product": "WN530HG4B", "cwe": "CWE-119", "title": "Wavlink WN530HG4B api.cgi heap-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110958" }, { "rank": 173, "cve_id": "CVE-2026-111281", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Jooan", "product": "JA-A12", "cwe": "CWE-798", "title": "Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111281" }, { "rank": 174, "cve_id": "CVE-2026-111322", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "coleam00", "product": "Archon", "cwe": "CWE-306", "title": "Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111322" }, { "rank": 175, "cve_id": "CVE-2026-111329", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "juggleim", "product": "JuggleIM", "cwe": "CWE-1392", "title": "JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111329" }, { "rank": 176, "cve_id": "CVE-2026-111312", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenHealthForAll", "product": "OpenHealth", "cwe": "CWE-306", "title": "OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111312" }, { "rank": 177, "cve_id": "CVE-2026-47168", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-502", "title": "EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47168" }, { "rank": 178, "cve_id": "CVE-2026-55240", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "msgbyte", "product": "tianji", "cwe": "CWE-1336", "title": "Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55240" }, { "rank": 179, "cve_id": "CVE-2026-102946", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "authlib", "product": "joserfc", "cwe": "CWE-290", "title": "joserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102946" }, { "rank": 180, "cve_id": "CVE-2026-105032", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "FastAPI AI inference server", "cwe": "CWE-22", "title": "EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105032" }, { "rank": 181, "cve_id": "CVE-2026-111235", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The OpenNMS Group", "product": "Meridian", "cwe": "CWE-204", "title": "OpenNMS REST authorization bypass via non-canonical HTTP method", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111235" }, { "rank": 182, "cve_id": "CVE-2026-111356", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "magicblack", "product": "MacCMS", "cwe": "CWE-307", "title": "MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111356" }, { "rank": 183, "cve_id": "CVE-2026-62679", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-22", "title": "Lychee: Path traversal in `SecurePathController` allows authenticated arbitrary file read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62679" }, { "rank": 184, "cve_id": "CVE-2026-55239", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "msgbyte", "product": "tianji", "cwe": "CWE-89", "title": "Tianji: SQL Injection via unsanitized timezone parameter in analytics queries", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55239" }, { "rank": 185, "cve_id": "CVE-2026-85634", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Fuse 7", "cwe": "CWE-22", "title": "Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-85634" }, { "rank": 186, "cve_id": "CVE-2026-105033", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "AI Station firmware (RK3562)", "cwe": "CWE-798", "title": "EnergizeLab AI Station Default Root Credentials with SSH Enabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105033" }, { "rank": 187, "cve_id": "CVE-2026-105040", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "NestJS auth service", "cwe": "CWE-639", "title": "EnergizeLab Eilik User-ID Mass Assignment Account Takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105040" }, { "rank": 188, "cve_id": "CVE-2026-106700", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106700" }, { "rank": 189, "cve_id": "CVE-2026-106708", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The endpoints /user/insert, /user/update, and /user/delete lack CSRF protection and do not restrict HTTP method.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106708" }, { "rank": 190, "cve_id": "CVE-2026-108426", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108426" }, { "rank": 191, "cve_id": "CVE-2026-108427", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-20", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108427" }, { "rank": 192, "cve_id": "CVE-2026-108428", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108428" }, { "rank": 193, "cve_id": "CVE-2026-108429", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108429" }, { "rank": 194, "cve_id": "CVE-2026-108430", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108430" }, { "rank": 195, "cve_id": "CVE-2026-108431", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108431" }, { "rank": 196, "cve_id": "CVE-2026-108432", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108432" }, { "rank": 197, "cve_id": "CVE-2026-108437", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108437" }, { "rank": 198, "cve_id": "CVE-2026-108439", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108439" }, { "rank": 199, "cve_id": "CVE-2026-108440", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108440" }, { "rank": 200, "cve_id": "CVE-2026-108441", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108441" }, { "rank": 201, "cve_id": "CVE-2026-108442", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108442" }, { "rank": 202, "cve_id": "CVE-2026-108443", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-193", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108443" }, { "rank": 203, "cve_id": "CVE-2026-108444", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108444" }, { "rank": 204, "cve_id": "CVE-2026-108445", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108445" }, { "rank": 205, "cve_id": "CVE-2026-108446", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108446" }, { "rank": 206, "cve_id": "CVE-2026-108447", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108447" }, { "rank": 207, "cve_id": "CVE-2026-108449", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108449" }, { "rank": 208, "cve_id": "CVE-2026-108450", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108450" }, { "rank": 209, "cve_id": "CVE-2026-108451", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108451" }, { "rank": 210, "cve_id": "CVE-2026-108452", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "cwe": "CWE-22", "title": "Microsoft Office SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108452" }, { "rank": 211, "cve_id": "CVE-2026-109693", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP ManageNinja LLC", "product": "Fluent CRM", "cwe": "CWE-266", "title": "WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109693" }, { "rank": 212, "cve_id": "CVE-2026-110913", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-119", "title": "Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110913" }, { "rank": 213, "cve_id": "CVE-2026-110914", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-119", "title": "Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110914" }, { "rank": 214, "cve_id": "CVE-2026-110915", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110915" }, { "rank": 215, "cve_id": "CVE-2026-110919", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110919" }, { "rank": 216, "cve_id": "CVE-2026-110920", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-119", "title": "Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110920" }, { "rank": 217, "cve_id": "CVE-2026-110921", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110921" }, { "rank": 218, "cve_id": "CVE-2026-110922", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110922" }, { "rank": 219, "cve_id": "CVE-2026-111282", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "driftregion", "product": "iso14229", "cwe": "CWE-190", "title": "iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111282" }, { "rank": 220, "cve_id": "CVE-2026-55872", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mayerbalintdev", "product": "GYM-One", "cwe": "CWE-79", "title": "GYM One admin user list is vulnerable to stored cross-site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55872" }, { "rank": 221, "cve_id": "CVE-2026-97712", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-862", "title": "Nexus Repository 3 - Privilege Escalation via Role Management", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97712" }, { "rank": 222, "cve_id": "CVE-2026-104150", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "adonisjs", "product": "http-server", "cwe": "CWE-400", "title": "AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104150" }, { "rank": 223, "cve_id": "CVE-2026-108082", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sensiolabs", "product": "symfony", "cwe": "CWE-1333", "title": "Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108082" }, { "rank": 224, "cve_id": "CVE-2026-109413", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sensiolabs", "product": "symfony", "cwe": "CWE-674", "title": "Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109413" }, { "rank": 225, "cve_id": "CVE-2026-109449", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sensiolabs", "product": "symfony", "cwe": "CWE-674", "title": "Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109449" }, { "rank": 226, "cve_id": "CVE-2026-111160", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ModelTC", "product": "LightLLM", "cwe": "CWE-502", "title": "LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111160" }, { "rank": 227, "cve_id": "CVE-2026-111277", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nivocart", "product": "nivocart", "cwe": "CWE-862", "title": "NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111277" }, { "rank": 228, "cve_id": "CVE-2026-111279", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dragonflydb", "product": "dragonfly", "cwe": "CWE-789", "title": "Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111279" }, { "rank": 229, "cve_id": "CVE-2026-111352", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ThinkCMF", "product": "ThinkCMF", "cwe": "CWE-863", "title": "ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111352" }, { "rank": 230, "cve_id": "CVE-2026-45165", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Palo Alto Networks", "product": "Idira Secrets Manager (Self-Hosted)", "cwe": "CWE-863", "title": "Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45165" }, { "rank": 231, "cve_id": "CVE-2026-55103", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "discourse", "product": "discourse-activity-pub", "cwe": "CWE-345", "title": "Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55103" }, { "rank": 232, "cve_id": "CVE-2026-75941", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Legion Zone Application", "cwe": "CWE-502", "title": "A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75941" }, { "rank": 233, "cve_id": "CVE-2026-111214", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111214" }, { "rank": 234, "cve_id": "CVE-2026-111215", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111215" }, { "rank": 235, "cve_id": "CVE-2026-111216", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111216" }, { "rank": 236, "cve_id": "CVE-2026-111217", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111217" }, { "rank": 237, "cve_id": "CVE-2026-111218", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111218" }, { "rank": 238, "cve_id": "CVE-2026-111220", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111220" }, { "rank": 239, "cve_id": "CVE-2026-111223", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-74", "title": "Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111223" }, { "rank": 240, "cve_id": "CVE-2026-111226", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111226" }, { "rank": 241, "cve_id": "CVE-2026-111229", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111229" }, { "rank": 242, "cve_id": "CVE-2026-111231", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-863", "title": "Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111231" }, { "rank": 243, "cve_id": "CVE-2026-111366", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "cool-team-official", "product": "cool-admin-midway", "cwe": "CWE-639", "title": "cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111366" }, { "rank": 244, "cve_id": "CVE-2026-92982", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Migration Toolkit for Applications 8", "cwe": "CWE-1336", "title": "Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92982" }, { "rank": 245, "cve_id": "CVE-2026-103509", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Perforce", "product": "P4 (Helix core)", "cwe": "CWE-1220", "title": "Credential Disclosure in P4 Search Configuration API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103509" }, { "rank": 246, "cve_id": "CVE-2026-104025", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "PeaZip", "product": "PeaZip", "cwe": "CWE-22", "title": "Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104025" }, { "rank": 247, "cve_id": "CVE-2026-110936", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Siemens Software Center", "cwe": "CWE-427", "title": "A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110936" }, { "rank": 248, "cve_id": "CVE-2026-45449", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "cwe": "CWE-78", "title": "Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45449" }, { "rank": 249, "cve_id": "CVE-2026-45450", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "cwe": "CWE-119", "title": "Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45450" }, { "rank": 250, "cve_id": "CVE-2026-45451", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "cwe": "CWE-287", "title": "Unitronics - CWE-287: Improper Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45451" }, { "rank": 251, "cve_id": "CVE-2026-45452", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Unitronics", "product": "Unitronics UniStream Pro/UniLogic", "cwe": "CWE-134", "title": "Unitronics - CWE-134 Use of Externally-Controlled format string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45452" }, { "rank": 252, "cve_id": "CVE-2026-77466", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-20", "title": "Lychee: Webshop payment bypass via unrestricted \"Dummy\" gateway selection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77466" }, { "rank": 253, "cve_id": "CVE-2026-77470", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-20", "title": "Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77470" }, { "rank": 254, "cve_id": "CVE-2026-111280", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "davenardella", "product": "snap7", "cwe": "CWE-787", "title": "snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111280" }, { "rank": 255, "cve_id": "CVE-2026-61838", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-285", "title": "Lychee: Album password bypass in ZIP downloads", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61838" }, { "rank": 256, "cve_id": "CVE-2026-88794", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sparx Systems", "product": "Enterprise Architect", "cwe": "CWE-611", "title": "XML External Entity injection in Sparx Enterprise Architect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88794" }, { "rank": 257, "cve_id": "CVE-2026-100349", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-476", "title": "kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100349" }, { "rank": 258, "cve_id": "CVE-2026-105034", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "NestJS auth service", "cwe": "CWE-287", "title": "EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105034" }, { "rank": 259, "cve_id": "CVE-2026-111234", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SimplePie", "product": "simplepie", "cwe": "CWE-73", "title": "SimplePie through 1.9.0 Local File Read via file:// Redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111234" }, { "rank": 260, "cve_id": "CVE-2026-111330", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "juggleim", "product": "JuggleIM", "cwe": "CWE-916", "title": "JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111330" }, { "rank": 261, "cve_id": "CVE-2026-111347", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opsre", "product": "go-ldap-admin", "cwe": "CWE-321", "title": "go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111347" }, { "rank": 262, "cve_id": "CVE-2026-55587", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "aliasvault", "product": "aliasvault", "cwe": "CWE-346", "title": "AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55587" }, { "rank": 263, "cve_id": "CVE-2026-63442", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-117", "title": "OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf Table IP Blocking", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63442" }, { "rank": 264, "cve_id": "CVE-2026-111094", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "TeamCity", "cwe": "CWE-502", "title": "In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111094" }, { "rank": 265, "cve_id": "CVE-2026-58390", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-79", "title": "OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58390" }, { "rank": 266, "cve_id": "CVE-2026-111095", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "TeamCity", "cwe": "CWE-79", "title": "In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111095" }, { "rank": 267, "cve_id": "CVE-2026-55246", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Tatsh", "product": "bincookie", "cwe": "CWE-122", "title": "bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.binarycookies` file", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55246" }, { "rank": 268, "cve_id": "CVE-2026-105035", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "FirmwareUpdater", "cwe": "CWE-321", "title": "EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105035" }, { "rank": 269, "cve_id": "CVE-2026-108433", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-807", "title": "Microsoft Office Word Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108433" }, { "rank": 270, "cve_id": "CVE-2026-110746", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TotalSecurity", "product": "TotalAV", "cwe": "CWE-22", "title": "CVE-2026-110746", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110746" }, { "rank": 271, "cve_id": "CVE-2026-111091", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "Junie CLI", "cwe": "CWE-829", "title": "In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111091" }, { "rank": 272, "cve_id": "CVE-2026-111224", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111224" }, { "rank": 273, "cve_id": "CVE-2026-53574", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-89", "title": "EspoCRM: Blind SQL injection via streamAttachments where-clause complex expression", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53574" }, { "rank": 274, "cve_id": "CVE-2026-79832", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX Executor", "cwe": "CWE-121", "title": "HPE NonStop SQL/MX Executor - Buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79832" }, { "rank": 275, "cve_id": "CVE-2026-61611", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-307", "title": "Lychee: Missing rate limiting on album password unlock endpoint allows brute-force attacks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61611" }, { "rank": 276, "cve_id": "CVE-2026-79833", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop ANSI SQLUTIL", "cwe": "CWE-248", "title": "HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79833" }, { "rank": 277, "cve_id": "CVE-2026-87018", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-248", "title": "undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87018" }, { "rank": 278, "cve_id": "CVE-2026-95155", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-674", "title": "FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95155" }, { "rank": 279, "cve_id": "CVE-2026-95179", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-674", "title": "An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95179" }, { "rank": 280, "cve_id": "CVE-2026-97370", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "junrar", "product": "junrar", "cwe": "CWE-835", "title": "Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97370" }, { "rank": 281, "cve_id": "CVE-2026-97394", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-248", "title": "kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97394" }, { "rank": 282, "cve_id": "CVE-2026-100352", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-754", "title": "kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100352" }, { "rank": 283, "cve_id": "CVE-2026-100353", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-476", "title": "kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100353" }, { "rank": 284, "cve_id": "CVE-2026-100354", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-674", "title": "kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100354" }, { "rank": 285, "cve_id": "CVE-2026-100409", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opennextjs", "product": "opennextjs-cloudflare", "cwe": "CWE-177", "title": "OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100409" }, { "rank": 286, "cve_id": "CVE-2026-103936", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libp2p", "product": "js-libp2p", "cwe": "CWE-248", "title": "libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct Node.js listeners", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103936" }, { "rank": 287, "cve_id": "CVE-2026-104827", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "reactphp", "product": "http", "cwe": "CWE-770", "title": "react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104827" }, { "rank": 288, "cve_id": "CVE-2026-105036", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EnergizeLab", "product": "Robot firmware (mode 104000)", "cwe": "CWE-494", "title": "EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105036" }, { "rank": 289, "cve_id": "CVE-2026-107416", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webba Plugins", "product": "Webba Booking", "cwe": "CWE-639", "title": "WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-107416" }, { "rank": 290, "cve_id": "CVE-2026-108116", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-74", "title": "MDX and SOAP Injection in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108116" }, { "rank": 291, "cve_id": "CVE-2026-108448", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Outlook Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108448" }, { "rank": 292, "cve_id": "CVE-2026-109468", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.14", "cwe": "CWE-770", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109468" }, { "rank": 293, "cve_id": "CVE-2026-109695", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WPManageNinja", "product": "FluentCart", "cwe": "CWE-201", "title": "WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109695" }, { "rank": 294, "cve_id": "CVE-2026-109869", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-248", "title": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109869" }, { "rank": 295, "cve_id": "CVE-2026-110723", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Connected Services Platform", "cwe": "CWE-290", "title": "In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded-For` request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy list. A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110723" }, { "rank": 296, "cve_id": "CVE-2026-110874", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dolibarr", "product": "dolibarr", "cwe": "CWE-502", "title": "Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110874" }, { "rank": 297, "cve_id": "CVE-2026-111093", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "Datalore", "cwe": "CWE-23", "title": "In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111093" }, { "rank": 298, "cve_id": "CVE-2026-111219", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111219" }, { "rank": 299, "cve_id": "CVE-2026-111221", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111221" }, { "rank": 300, "cve_id": "CVE-2026-111222", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111222" }, { "rank": 301, "cve_id": "CVE-2026-79834", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX SQLCAT", "cwe": "CWE-20", "title": "HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79834" }, { "rank": 302, "cve_id": "CVE-2026-100351", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-289", "title": "kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100351" }, { "rank": 303, "cve_id": "CVE-2026-108334", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Connectivity Link 1", "cwe": "CWE-917", "title": "Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108334" }, { "rank": 304, "cve_id": "CVE-2026-109383", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-295", "title": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109383" }, { "rank": 305, "cve_id": "CVE-2026-109829", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-346", "title": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109829" }, { "rank": 306, "cve_id": "CVE-2026-79837", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX UDR SERVER", "cwe": "CWE-20", "title": "HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79837" }, { "rank": 307, "cve_id": "CVE-2026-79838", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop ODBC/MX Services", "cwe": "CWE-121", "title": "HPE NonStop ODBC/MX Services - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79838" }, { "rank": 308, "cve_id": "CVE-2026-79839", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop ODBC/MX Server", "cwe": "CWE-121", "title": "HPE NonStop ODBC/MX Server - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79839" }, { "rank": 309, "cve_id": "CVE-2026-79840", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop XABroker", "cwe": "CWE-121", "title": "HPE NonStop XABroker - Memory corruption vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79840" }, { "rank": 310, "cve_id": "CVE-2026-103508", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Perforce", "product": "P4 (Helix core)", "cwe": "CWE-23", "title": "Path traversal via logging configuration in P4Search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103508" }, { "rank": 311, "cve_id": "CVE-2026-104828", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HtmlUnit", "product": "htmlunit-neko", "cwe": "CWE-79", "title": "HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104828" }, { "rank": 312, "cve_id": "CVE-2026-9703", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Grafana", "product": "Grafana Enterprise", "cwe": "CWE-284", "title": "Viewer role can create, modify and delete Loki alerting rules", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9703" }, { "rank": 313, "cve_id": "CVE-2026-53582", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-91", "title": "OPNsense: XPATH Injection can disclose any secret in config.xml", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53582" }, { "rank": 314, "cve_id": "CVE-2026-71490", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-863", "title": "OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71490" }, { "rank": 315, "cve_id": "CVE-2026-77467", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-400", "title": "Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the real processing path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77467" }, { "rank": 316, "cve_id": "CVE-2026-84823", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "cwe": "CWE-22", "title": "Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role", "url": "https://www.cve.org/CVERecord?id=CVE-2026-84823" }, { "rank": 317, "cve_id": "CVE-2026-97665", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-862", "title": "Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97665" }, { "rank": 318, "cve_id": "CVE-2026-105065", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "8theme.com", "product": "XStore", "cwe": "CWE-79", "title": "WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105065" }, { "rank": 319, "cve_id": "CVE-2026-108491", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Everest Forms", "product": "Everest Forms", "cwe": "CWE-79", "title": "WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108491" }, { "rank": 320, "cve_id": "CVE-2026-108498", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "bannersky", "product": "BSK PDF Manager", "cwe": "CWE-79", "title": "WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108498" }, { "rank": 321, "cve_id": "CVE-2026-109685", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Link Whisper INC", "product": "Link Whisper Free", "cwe": "CWE-79", "title": "WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109685" }, { "rank": 322, "cve_id": "CVE-2026-109692", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-862", "title": "WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109692" }, { "rank": 323, "cve_id": "CVE-2026-109702", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "maxfoundry", "product": "Social Share Buttons", "cwe": "CWE-79", "title": "WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109702" }, { "rank": 324, "cve_id": "CVE-2026-111170", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "kedro-org", "product": "kedro-datasets", "cwe": "CWE-22", "title": "kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111170" }, { "rank": 325, "cve_id": "CVE-2026-111313", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "DaKheera47", "product": "JobOps", "cwe": "CWE-918", "title": "JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111313" }, { "rank": 326, "cve_id": "CVE-2026-111359", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "crmeb", "product": "CRMEB", "cwe": "CWE-639", "title": "CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111359" }, { "rank": 327, "cve_id": "CVE-2026-111363", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "dataelement", "product": "bisheng", "cwe": "CWE-639", "title": "BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111363" }, { "rank": 328, "cve_id": "CVE-2026-111364", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mindoc-org", "product": "MinDoc", "cwe": "CWE-639", "title": "MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111364" }, { "rank": 329, "cve_id": "CVE-2026-111369", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "classroomio", "product": "ClassroomIO", "cwe": "CWE-863", "title": "ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111369" }, { "rank": 330, "cve_id": "CVE-2026-89057", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Idea Tab Pro (TB373FU)", "cwe": "CWE-288", "title": "A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89057" }, { "rank": 331, "cve_id": "CVE-2026-92629", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Baiying PC Client", "cwe": "CWE-862", "title": "A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92629" }, { "rank": 332, "cve_id": "CVE-2026-111105", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Telegram", "product": "Telegram", "cwe": "CWE-197", "title": "Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111105" }, { "rank": 333, "cve_id": "CVE-2026-111357", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Ivanti", "product": "Connect Secure", "cwe": "CWE-829", "title": "Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111357" }, { "rank": 334, "cve_id": "CVE-2026-111365", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "cool-team-official", "product": "cool-admin-midway", "cwe": "CWE-639", "title": "cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111365" }, { "rank": 335, "cve_id": "CVE-2024-58397", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "enzo1982", "product": "mp4v2", "cwe": "CWE-125", "title": "MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters", "url": "https://www.cve.org/CVERecord?id=CVE-2024-58397" }, { "rank": 336, "cve_id": "CVE-2026-77468", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-770", "title": "Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77468" }, { "rank": 337, "cve_id": "CVE-2026-97666", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-470", "title": "Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97666" }, { "rank": 338, "cve_id": "CVE-2026-102527", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nuxt-modules", "product": "og-image", "cwe": "CWE-349", "title": "Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102527" }, { "rank": 339, "cve_id": "CVE-2026-105660", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mtrudel", "product": "bandit", "cwe": "CWE-1286", "title": "Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105660" }, { "rank": 340, "cve_id": "CVE-2026-110875", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "adplug", "product": "adplug", "cwe": "CWE-787", "title": "AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110875" }, { "rank": 341, "cve_id": "CVE-2026-111123", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "FluidSynth", "product": "fluidsynth", "cwe": "CWE-787", "title": "FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111123" }, { "rank": 342, "cve_id": "CVE-2026-111124", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HEASARC", "product": "cfitsio", "cwe": "CWE-125", "title": "CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111124" }, { "rank": 343, "cve_id": "CVE-2026-111125", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HEASARC", "product": "cfitsio", "cwe": "CWE-125", "title": "CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111125" }, { "rank": 344, "cve_id": "CVE-2026-111126", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "catdoc", "product": "catdoc", "cwe": "CWE-125", "title": "catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111126" }, { "rank": 345, "cve_id": "CVE-2026-111127", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "catdoc", "product": "catdoc", "cwe": "CWE-125", "title": "catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111127" }, { "rank": 346, "cve_id": "CVE-2026-111130", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenSlide", "product": "openslide", "cwe": "CWE-125", "title": "OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111130" }, { "rank": 347, "cve_id": "CVE-2026-111131", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libxmp", "product": "libxmp", "cwe": "CWE-125", "title": "libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111131" }, { "rank": 348, "cve_id": "CVE-2026-111132", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GNOME", "product": "libgxps", "cwe": "CWE-125", "title": "GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111132" }, { "rank": 349, "cve_id": "CVE-2026-111133", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libfsapfs", "cwe": "CWE-125", "title": "libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypted_key_read_data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111133" }, { "rank": 350, "cve_id": "CVE-2026-111134", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libfwsi", "cwe": "CWE-125", "title": "libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_values_read_data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111134" }, { "rank": 351, "cve_id": "CVE-2026-111135", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libfwsi", "cwe": "CWE-125", "title": "libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_values_read_data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111135" }, { "rank": 352, "cve_id": "CVE-2026-111136", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "swami", "product": "libinstpatch", "cwe": "CWE-787", "title": "libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111136" }, { "rank": 353, "cve_id": "CVE-2026-111137", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "amartin755", "product": "libsmi", "cwe": "CWE-787", "title": "libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111137" }, { "rank": 354, "cve_id": "CVE-2026-111140", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libregf", "cwe": "CWE-125", "title": "libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_value_data", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111140" }, { "rank": 355, "cve_id": "CVE-2026-111145", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Yeraze", "product": "ytnef", "cwe": "CWE-125", "title": "ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111145" }, { "rank": 356, "cve_id": "CVE-2026-111146", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Yeraze", "product": "ytnef", "cwe": "CWE-125", "title": "ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111146" }, { "rank": 357, "cve_id": "CVE-2026-111147", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libesedb", "cwe": "CWE-125", "title": "Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_get_multi_value", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111147" }, { "rank": 358, "cve_id": "CVE-2026-111149", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "danoli3", "product": "FreeImage", "cwe": "CWE-125", "title": "FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111149" }, { "rank": 359, "cve_id": "CVE-2026-111151", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "aous72", "product": "OpenJPH", "cwe": "CWE-787", "title": "OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111151" }, { "rank": 360, "cve_id": "CVE-2026-111154", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sezero", "product": "libtimidity", "cwe": "CWE-787", "title": "libTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFont Loader", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111154" }, { "rank": 361, "cve_id": "CVE-2026-111155", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sezero", "product": "libtimidity", "cwe": "CWE-125", "title": "libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111155" }, { "rank": 362, "cve_id": "CVE-2026-111156", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sezero", "product": "libtimidity", "cwe": "CWE-787", "title": "libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111156" }, { "rank": 363, "cve_id": "CVE-2026-111157", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "SoX", "product": "sox", "cwe": "CWE-787", "title": "SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111157" }, { "rank": 364, "cve_id": "CVE-2026-111159", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libyal", "product": "libewf", "cwe": "CWE-125", "title": "libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111159" }, { "rank": 365, "cve_id": "CVE-2026-111161", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Wohlstand", "product": "libADLMIDI", "cwe": "CWE-787", "title": "libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111161" }, { "rank": 366, "cve_id": "CVE-2026-111162", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mindwerks", "product": "WildMIDI", "cwe": "CWE-125", "title": "WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmp", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111162" }, { "rank": 367, "cve_id": "CVE-2026-111167", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "GNU", "product": "LibreDWG", "cwe": "CWE-125", "title": "GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111167" }, { "rank": 368, "cve_id": "CVE-2026-111230", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-73", "title": "Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111230" }, { "rank": 369, "cve_id": "CVE-2026-111269", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libical", "product": "libical", "cwe": "CWE-125", "title": "libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111269" }, { "rank": 370, "cve_id": "CVE-2026-111270", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Konstanty Bialkowski", "product": "libmodplug", "cwe": "CWE-787", "title": "libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111270" }, { "rank": 371, "cve_id": "CVE-2026-111273", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "selmf", "product": "unarr", "cwe": "CWE-193", "title": "unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111273" }, { "rank": 372, "cve_id": "CVE-2026-111275", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NIFTI-Imaging", "product": "nifti_clib", "cwe": "CWE-787", "title": "nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nifti_convert_n2hdr2nim", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111275" }, { "rank": 373, "cve_id": "CVE-2026-111278", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nivocart", "product": "nivocart", "cwe": "CWE-804", "title": "NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111278" }, { "rank": 374, "cve_id": "CVE-2026-111320", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ValueCell-ai", "product": "ValueCell", "cwe": "CWE-918", "title": "ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111320" }, { "rank": 375, "cve_id": "CVE-2026-111323", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "samugit83", "product": "RedAmon", "cwe": "CWE-918", "title": "RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111323" }, { "rank": 376, "cve_id": "CVE-2026-111324", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "lejianwen", "product": "rustdesk-api", "cwe": "CWE-639", "title": "rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111324" }, { "rank": 377, "cve_id": "CVE-2026-111349", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "puemos", "product": "Craftplan", "cwe": "CWE-862", "title": "Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and GraphQL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111349" }, { "rank": 378, "cve_id": "CVE-2026-111367", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "aaPanel", "product": "BillionMail", "cwe": "CWE-1394", "title": "BillionMail through 4.9 Forgeable JWTs via Default Signing Key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111367" }, { "rank": 379, "cve_id": "CVE-2026-89062", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Energy Management Driver", "cwe": "CWE-787", "title": "A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-89062" }, { "rank": 380, "cve_id": "CVE-2026-110876", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "adplug", "product": "adplug", "cwe": "CWE-125", "title": "AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110876" }, { "rank": 381, "cve_id": "CVE-2026-110877", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "adplug", "product": "adplug", "cwe": "CWE-125", "title": "AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110877" }, { "rank": 382, "cve_id": "CVE-2026-111128", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "assimp", "product": "assimp", "cwe": "CWE-476", "title": "Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111128" }, { "rank": 383, "cve_id": "CVE-2026-111129", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "assimp", "product": "assimp", "cwe": "CWE-476", "title": "Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111129" }, { "rank": 384, "cve_id": "CVE-2026-111138", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NetSurf", "product": "libnsbmp", "cwe": "CWE-125", "title": "NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111138" }, { "rank": 385, "cve_id": "CVE-2026-111139", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NetSurf", "product": "libnsbmp", "cwe": "CWE-125", "title": "NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111139" }, { "rank": 386, "cve_id": "CVE-2026-111142", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "gdraheim", "product": "zziplib", "cwe": "CWE-125", "title": "Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111142" }, { "rank": 387, "cve_id": "CVE-2026-111143", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ansilove", "product": "libansilove", "cwe": "CWE-125", "title": "Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE Decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111143" }, { "rank": 388, "cve_id": "CVE-2026-111144", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ansilove", "product": "libansilove", "cwe": "CWE-476", "title": "libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111144" }, { "rank": 389, "cve_id": "CVE-2026-111148", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libsidplayfp", "product": "libsidplayfp", "cwe": "CWE-125", "title": "libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSidTune", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111148" }, { "rank": 390, "cve_id": "CVE-2026-111150", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ValleyBell", "product": "libvgm", "cwe": "CWE-125", "title": "ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via DecompressDataBlk", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111150" }, { "rank": 391, "cve_id": "CVE-2026-111152", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libgme", "product": "game-music-emu", "cwe": "CWE-125", "title": "Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111152" }, { "rank": 392, "cve_id": "CVE-2026-111153", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "libgme", "product": "game-music-emu", "cwe": "CWE-125", "title": "Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111153" }, { "rank": 393, "cve_id": "CVE-2026-111158", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "EarthScope", "product": "libmseed", "cwe": "CWE-125", "title": "EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111158" }, { "rank": 394, "cve_id": "CVE-2026-111163", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Mindwerks", "product": "WildMIDI", "cwe": "CWE-125", "title": "WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111163" }, { "rank": 395, "cve_id": "CVE-2026-111164", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "UADE", "product": "uade", "cwe": "CWE-125", "title": "UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111164" }, { "rank": 396, "cve_id": "CVE-2026-111165", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sezero", "product": "libmikmod", "cwe": "CWE-125", "title": "libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111165" }, { "rank": 397, "cve_id": "CVE-2026-111166", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "sezero", "product": "libmikmod", "cwe": "CWE-125", "title": "libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111166" }, { "rank": 398, "cve_id": "CVE-2026-111271", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Konstanty Bialkowski", "product": "libmodplug", "cwe": "CWE-125", "title": "libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via CSoundFile::ReadAMS2", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111271" }, { "rank": 399, "cve_id": "CVE-2026-111272", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LibRaw", "product": "LibRaw", "cwe": "CWE-125", "title": "LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111272" }, { "rank": 400, "cve_id": "CVE-2026-111274", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "selmf", "product": "unarr", "cwe": "CWE-125", "title": "unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111274" }, { "rank": 401, "cve_id": "CVE-2026-111096", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "TeamCity", "cwe": "CWE-79", "title": "In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111096" }, { "rank": 402, "cve_id": "CVE-2026-79830", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Kernel Level Thread Model Lib", "cwe": "CWE-121", "title": "HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79830" }, { "rank": 403, "cve_id": "CVE-2026-79831", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop Posix User Threads", "cwe": "CWE-122", "title": "HPE NonStop Posix User Threads - Heap buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79831" }, { "rank": 404, "cve_id": "CVE-2026-46691", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-862", "title": "EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46691" }, { "rank": 405, "cve_id": "CVE-2026-46694", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-862", "title": "EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46694" }, { "rank": 406, "cve_id": "CVE-2026-54683", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nl-portal", "product": "nl-portal-backend-libraries", "cwe": "CWE-285", "title": "NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54683" }, { "rank": 407, "cve_id": "CVE-2026-55871", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mayerbalintdev", "product": "GYM-One", "cwe": "CWE-89", "title": "GYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55871" }, { "rank": 408, "cve_id": "CVE-2026-62322", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "python-social-auth", "product": "social-core", "cwe": "CWE-352", "title": "Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62322" }, { "rank": 409, "cve_id": "CVE-2026-77460", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-639", "title": "EspoCRM: Mass email template renderer leaks restricted record fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-77460" }, { "rank": 410, "cve_id": "CVE-2026-78851", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-22", "title": "Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78851" }, { "rank": 411, "cve_id": "CVE-2026-79843", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX EXE", "cwe": "CWE-125", "title": "HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79843" }, { "rank": 412, "cve_id": "CVE-2026-102389", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WPMU DEV", "product": "Broken Link Checker", "cwe": "CWE-94", "title": "WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102389" }, { "rank": 413, "cve_id": "CVE-2026-104266", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "tinytag", "product": "tinytag", "cwe": "CWE-835", "title": "tinytag: Infinite loop when parsing certain M4A files containing invalid atoms", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104266" }, { "rank": 414, "cve_id": "CVE-2026-105882", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ThemeGrill", "product": "User Registration", "cwe": "CWE-79", "title": "WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-105882" }, { "rank": 415, "cve_id": "CVE-2026-106163", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106163" }, { "rank": 416, "cve_id": "CVE-2026-106604", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "YITH", "product": "YITH WooCommerce Compare", "cwe": "CWE-79", "title": "WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106604" }, { "rank": 417, "cve_id": "CVE-2026-108175", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "PluginUs.Net", "product": "MDTF", "cwe": "CWE-79", "title": "WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108175" }, { "rank": 418, "cve_id": "CVE-2026-108434", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108434" }, { "rank": 419, "cve_id": "CVE-2026-108435", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108435" }, { "rank": 420, "cve_id": "CVE-2026-108436", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108436" }, { "rank": 421, "cve_id": "CVE-2026-108438", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108438" }, { "rank": 422, "cve_id": "CVE-2026-108453", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108453" }, { "rank": 423, "cve_id": "CVE-2026-108454", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-126", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108454" }, { "rank": 424, "cve_id": "CVE-2026-108455", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office PowerPoint Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108455" }, { "rank": 425, "cve_id": "CVE-2026-109893", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Brainstorm Force", "product": "Presto Player", "cwe": "CWE-79", "title": "WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109893" }, { "rank": 426, "cve_id": "CVE-2026-110361", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ClikIT", "product": "Infinite Uploads", "cwe": "CWE-201", "title": "WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110361" }, { "rank": 427, "cve_id": "CVE-2026-110375", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Download Monitor", "cwe": "CWE-79", "title": "WordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110375" }, { "rank": 428, "cve_id": "CVE-2026-110726", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Connected Services Platform", "cwe": "CWE-348", "title": "In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded-For` request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy list. A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110726" }, { "rank": 429, "cve_id": "CVE-2026-110890", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Crocoblock", "product": "JetSmartFilters", "cwe": "CWE-79", "title": "WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110890" }, { "rank": 430, "cve_id": "CVE-2026-111092", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "JetBrains", "product": "YouTrack", "cwe": "CWE-862", "title": "In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111092" }, { "rank": 431, "cve_id": "CVE-2026-111252", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "The OpenNMS Group", "product": "Meridian", "cwe": "CWE-400", "title": "OpenNMS denial of service via XML entity expansion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111252" }, { "rank": 432, "cve_id": "CVE-2026-79836", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop SQL/MX Run-Time Statistics", "cwe": "CWE-20", "title": "HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79836" }, { "rank": 433, "cve_id": "CVE-2026-63430", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "rust-ammonia", "product": "ammonia", "cwe": "CWE-79", "title": "ammonia: mXSS in ammonia via MathML `annotation-xml` encoding strip", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63430" }, { "rank": 434, "cve_id": "CVE-2026-94621", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "aliasvault", "product": "aliasvault", "cwe": "CWE-367", "title": "AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94621" }, { "rank": 435, "cve_id": "CVE-2026-110381", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "NSquared", "product": "Simply Schedule Appointments", "cwe": "CWE-639", "title": "WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110381" }, { "rank": 436, "cve_id": "CVE-2026-111171", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ethereum", "product": "web3.py", "cwe": "CWE-918", "title": "Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111171" }, { "rank": 437, "cve_id": "CVE-2026-111332", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AtalayaLabs", "product": "OxiCloud", "cwe": "CWE-863", "title": "OxiCloud 0.9.1 through 0.9.3 Incorrect Authorization via Share Ring Cookie", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111332" }, { "rank": 438, "cve_id": "CVE-2026-57183", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Erudika", "product": "scoold", "cwe": "CWE-287", "title": "Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57183" }, { "rank": 439, "cve_id": "CVE-2026-106701", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106701" }, { "rank": 440, "cve_id": "CVE-2026-111368", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "classroomio", "product": "ClassroomIO", "cwe": "CWE-639", "title": "ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111368" }, { "rank": 441, "cve_id": "CVE-2026-16755", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Smart Camera C33", "cwe": "CWE-1393", "title": "A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16755" }, { "rank": 442, "cve_id": "CVE-2026-75505", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-862", "title": "EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-75505" }, { "rank": 443, "cve_id": "CVE-2026-108126", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Temporal Technologies, Inc.", "product": "temporal-proxy", "cwe": "CWE-639", "title": "temporal-proxy payload decryption is not bound to the request namespace", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108126" }, { "rank": 444, "cve_id": "CVE-2026-111172", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "stalniy", "product": "@casl/ability", "cwe": "CWE-1321", "title": "@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111172" }, { "rank": 445, "cve_id": "CVE-2026-16754", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Smart Camera C33", "cwe": "CWE-295", "title": "A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16754" }, { "rank": 446, "cve_id": "CVE-2026-58393", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-22", "title": "OPNsense: OpenVPN Client Specific Override common_name allows path traversal in generated CSO files", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58393" }, { "rank": 447, "cve_id": "CVE-2026-87029", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-248", "title": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor", "url": "https://www.cve.org/CVERecord?id=CVE-2026-87029" }, { "rank": 448, "cve_id": "CVE-2026-102631", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Canonical", "product": "authd", "cwe": "CWE-287", "title": "authd: Account takeover via username fallback in identity matching after IdP email reassignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102631" }, { "rank": 449, "cve_id": "CVE-2026-109841", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-178", "title": "undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109841" }, { "rank": 450, "cve_id": "CVE-2026-109924", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-770", "title": "undici vulnerable to Denial of Service via unbounded memory in the EventSource parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109924" }, { "rank": 451, "cve_id": "CVE-2026-109932", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "undici", "product": "undici", "cwe": "CWE-400", "title": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109932" }, { "rank": 452, "cve_id": "CVE-2026-79841", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE NonStop RDMA SERVICES NSK", "cwe": "CWE-787", "title": "HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79841" }, { "rank": 453, "cve_id": "CVE-2026-102740", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "AsyncHttpClient", "product": "async-http-client", "cwe": "CWE-61", "title": "AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink", "url": "https://www.cve.org/CVERecord?id=CVE-2026-102740" }, { "rank": 454, "cve_id": "CVE-2026-55480", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenPrinting", "product": "cups", "cwe": "CWE-59", "title": "CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55480" }, { "rank": 455, "cve_id": "CVE-2026-57568", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-79", "title": "Lychee: Stored XSS via Markdown javascript: Links in Photo and Album Descriptions (Gallery View)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57568" }, { "rank": 456, "cve_id": "CVE-2026-111141", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "gdraheim", "product": "zziplib", "cwe": "CWE-125", "title": "zziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111141" }, { "rank": 457, "cve_id": "CVE-2026-63130", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-22", "title": "EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63130" }, { "rank": 458, "cve_id": "CVE-2026-95180", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-284", "title": "An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient", "url": "https://www.cve.org/CVERecord?id=CVE-2026-95180" }, { "rank": 459, "cve_id": "CVE-2026-8145", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "wpxpo", "product": "WholesaleX – All-in-One B2B Solution with Wholesale Pricing", "cwe": "CWE-269", "title": "WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8145" }, { "rank": 460, "cve_id": "CVE-2026-55154", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-1236", "title": "EspoCRM: CSV/Formula Injection sanitizer bypass via leading whitespace/control characters in export", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55154" }, { "rank": 461, "cve_id": "CVE-2026-55840", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Erudika", "product": "scoold", "cwe": "CWE-601", "title": "Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55840" }, { "rank": 462, "cve_id": "CVE-2026-55842", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Erudika", "product": "scoold", "cwe": "CWE-346", "title": "Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55842" }, { "rank": 463, "cve_id": "CVE-2026-58391", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-79", "title": "OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58391" }, { "rank": 464, "cve_id": "CVE-2026-58392", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-79", "title": "OPNsense: Stored XSS in Services: NTP GPS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58392" }, { "rank": 465, "cve_id": "CVE-2026-92777", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Lenovo", "product": "Idea Tab Pro (TB373FU)", "cwe": "CWE-1394", "title": "A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92777" }, { "rank": 466, "cve_id": "CVE-2026-103083", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ELEXtensions", "product": "ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes", "cwe": "CWE-639", "title": "WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103083" }, { "rank": 467, "cve_id": "CVE-2026-106147", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106147" }, { "rank": 468, "cve_id": "CVE-2026-106148", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106148" }, { "rank": 469, "cve_id": "CVE-2026-106149", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-site Scripting (XSS) in Kendo UI for jQuery Menu", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106149" }, { "rank": 470, "cve_id": "CVE-2026-106150", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-79", "title": "Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106150" }, { "rank": 471, "cve_id": "CVE-2026-106151", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106151" }, { "rank": 472, "cve_id": "CVE-2026-106153", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-79", "title": "Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106153" }, { "rank": 473, "cve_id": "CVE-2026-106160", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-1321", "title": "Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106160" }, { "rank": 474, "cve_id": "CVE-2026-106161", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106161" }, { "rank": 475, "cve_id": "CVE-2026-106706", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor. JobCodeController.save() stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106706" }, { "rank": 476, "cve_id": "CVE-2026-106707", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-79", "title": "XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog). An authenticated user who holds permission on a target executor job group can inject arbitrary JavaScript via the executorParam argument of the manual-trigger endpoint POST /jobinfo/trigger.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106707" }, { "rank": 477, "cve_id": "CVE-2026-109131", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "cwe": "CWE-79", "title": "Ansible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109131" }, { "rank": 478, "cve_id": "CVE-2026-109897", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Strong Testimonials", "cwe": "CWE-862", "title": "WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109897" }, { "rank": 479, "cve_id": "CVE-2026-110891", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WordLift Srl", "product": "WordLift", "cwe": "CWE-862", "title": "WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110891" }, { "rank": 480, "cve_id": "CVE-2026-55414", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "nl-portal", "product": "nl-portal-backend-libraries", "cwe": "CWE-862", "title": "NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55414" }, { "rank": 481, "cve_id": "CVE-2026-61702", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenPrinting", "product": "cups", "cwe": "CWE-22", "title": "OpenPrinting CUPS: root-side banner file disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61702" }, { "rank": 482, "cve_id": "CVE-2026-92707", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "MessagePack-CSharp", "product": "MessagePack-CSharp", "cwe": "CWE-1325", "title": "MessagePack: Nested arrays can blow past buffer length limits", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92707" }, { "rank": 483, "cve_id": "CVE-2026-96449", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WPExperts", "product": "WP EasyPay", "cwe": "CWE-862", "title": "WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96449" }, { "rank": 484, "cve_id": "CVE-2026-100347", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-20", "title": "kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100347" }, { "rank": 485, "cve_id": "CVE-2026-100348", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-476", "title": "kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100348" }, { "rank": 486, "cve_id": "CVE-2026-100350", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "getkin", "product": "kin-openapi", "cwe": "CWE-400", "title": "kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100350" }, { "rank": 487, "cve_id": "CVE-2026-103350", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Magepeople inc.", "product": "Booking and Rental Manager", "cwe": "CWE-1284", "title": "WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-103350" }, { "rank": 488, "cve_id": "CVE-2026-104198", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ZoneMinder", "product": "zoneminder", "cwe": "CWE-287", "title": "ZoneMinder failed token handling bypasses web authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104198" }, { "rank": 489, "cve_id": "CVE-2026-108499", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WebberZone", "product": "Knowledge Base", "cwe": "CWE-862", "title": "WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-108499" }, { "rank": 490, "cve_id": "CVE-2026-109689", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Sunshine", "product": "Sunshine Photo Cart", "cwe": "CWE-862", "title": "WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-109689" }, { "rank": 491, "cve_id": "CVE-2026-110360", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WPdreams", "product": "Ajax Search Lite", "cwe": "CWE-862", "title": "WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110360" }, { "rank": 492, "cve_id": "CVE-2026-110362", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Planet studio", "product": "PlanetStudio Payment Gateway", "cwe": "CWE-862", "title": "WordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110362" }, { "rank": 493, "cve_id": "CVE-2026-110364", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Desk", "product": "Flexible Quantity – Measurement Price Calculator for WooCommerce", "cwe": "CWE-862", "title": "WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110364" }, { "rank": 494, "cve_id": "CVE-2026-110367", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WPExperts", "product": "APIExperts Square for WooCommerce", "cwe": "CWE-862", "title": "WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110367" }, { "rank": 495, "cve_id": "CVE-2026-110378", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP E-Signature", "product": "Ninja Forms Signature Contract Add-On", "cwe": "CWE-862", "title": "WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110378" }, { "rank": 496, "cve_id": "CVE-2026-111321", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "TaskingAI", "product": "TaskingAI", "cwe": "CWE-918", "title": "TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111321" }, { "rank": 497, "cve_id": "CVE-2026-111331", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Dokploy", "product": "Dokploy", "cwe": "CWE-639", "title": "Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111331" }, { "rank": 498, "cve_id": "CVE-2026-111343", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "pig-mesh", "product": "pig", "cwe": "CWE-862", "title": "pig through 4.1.1 Missing Authorization via GET /admin/user/details/{id}", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111343" }, { "rank": 499, "cve_id": "CVE-2026-111344", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "apitable", "product": "apitable", "cwe": "CWE-639", "title": "APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111344" }, { "rank": 500, "cve_id": "CVE-2026-111345", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "polonel", "product": "trudesk", "cwe": "CWE-639", "title": "Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111345" }, { "rank": 501, "cve_id": "CVE-2026-111346", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "easysoft", "product": "zentaopms", "cwe": "CWE-639", "title": "ZenTao PMS through 22.6 Authorization Bypass via action::editComment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111346" }, { "rank": 502, "cve_id": "CVE-2026-111348", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "likeshop", "product": "likeshop", "cwe": "CWE-639", "title": "Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111348" }, { "rank": 503, "cve_id": "CVE-2026-111353", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Peppermint-Lab", "product": "peppermint", "cwe": "CWE-862", "title": "Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111353" }, { "rank": 504, "cve_id": "CVE-2026-111355", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "zhontai", "product": "Admin.Core", "cwe": "CWE-639", "title": "zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111355" }, { "rank": 505, "cve_id": "CVE-2026-111358", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "mettle", "product": "sendportal-core", "cwe": "CWE-639", "title": "SendPortal sendportal-core through 4.0.1 Cross-Workspace Tag Attachment via Subscriber Form", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111358" }, { "rank": 506, "cve_id": "CVE-2026-58394", "cvss_base": 5.2, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-79", "title": "OPNsense: Stored XSS in Administration Settings via Certificate Description", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58394" }, { "rank": 507, "cve_id": "CVE-2026-17525", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "ABB", "product": "My Control System", "cwe": "CWE-459", "title": "My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17525" }, { "rank": 508, "cve_id": "CVE-2026-97667", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-79", "title": "Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97667" }, { "rank": 509, "cve_id": "CVE-2026-110878", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "aureuserp", "product": "aureuserp", "cwe": "CWE-79", "title": "Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110878" }, { "rank": 510, "cve_id": "CVE-2026-111168", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "abhinavxd", "product": "libredesk", "cwe": "CWE-79", "title": "LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload Content-Type Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111168" }, { "rank": 511, "cve_id": "CVE-2026-111227", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111227" }, { "rank": 512, "cve_id": "CVE-2026-111228", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-93", "title": "Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111228" }, { "rank": 513, "cve_id": "CVE-2026-111284", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Aureus ERP", "cwe": "CWE-79", "title": "Aureus ERP through 1.6.0 Stored XSS via Time Off Holiday Action Modal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111284" }, { "rank": 514, "cve_id": "CVE-2026-78850", "cvss_base": 5, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-918", "title": "An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-78850" }, { "rank": 515, "cve_id": "CVE-2026-110924", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-459", "title": "Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110924" }, { "rank": 516, "cve_id": "CVE-2026-111232", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-79", "title": "Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111232" }, { "rank": 517, "cve_id": "CVE-2026-106157", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106157" }, { "rank": 518, "cve_id": "CVE-2026-106158", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106158" }, { "rank": 519, "cve_id": "CVE-2026-106159", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106159" }, { "rank": 520, "cve_id": "CVE-2026-106162", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Kendo UI for jQuery", "cwe": "CWE-80", "title": "Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-106162" }, { "rank": 521, "cve_id": "CVE-2026-104024", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "PeaZip", "product": "PeaZip", "cwe": "CWE-184", "title": "Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104024" }, { "rank": 522, "cve_id": "CVE-2026-46708", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-639", "title": "EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46708" }, { "rank": 523, "cve_id": "CVE-2026-55875", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HeliumEdu", "product": "platform", "cwe": "CWE-918", "title": "Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55875" }, { "rank": 524, "cve_id": "CVE-2026-58395", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "opnsense", "product": "core", "cwe": "CWE-643", "title": "OPNsense: XPath injection in MVC safe-delete", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58395" }, { "rank": 525, "cve_id": "CVE-2026-59994", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-79", "title": "EspoCRM: Pre-authentication stored HTML injection in stream notification emails about email received", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59994" }, { "rank": 526, "cve_id": "CVE-2026-110371", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Strong Testimonials", "cwe": "CWE-862", "title": "WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110371" }, { "rank": 527, "cve_id": "CVE-2026-110374", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hamid Alinia", "product": "Login with phone number", "cwe": "CWE-862", "title": "WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110374" }, { "rank": 528, "cve_id": "CVE-2026-110888", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Meow Apps", "product": "AI Engine", "cwe": "CWE-862", "title": "WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110888" }, { "rank": 529, "cve_id": "CVE-2026-110917", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-119", "title": "Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110917" }, { "rank": 530, "cve_id": "CVE-2026-110918", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-119", "title": "Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110918" }, { "rank": 531, "cve_id": "CVE-2026-110927", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-770", "title": "Openssh: openssh: a compressed payload can expand past the maximum packet size", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110927" }, { "rank": 532, "cve_id": "CVE-2026-55184", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-79", "title": "EspoCRM: Stored XSS in wysiwyg template fields if CSP is disabled", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55184" }, { "rank": 533, "cve_id": "CVE-2026-55876", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "HeliumEdu", "product": "platform", "cwe": "CWE-79", "title": "Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55876" }, { "rank": 534, "cve_id": "CVE-2026-55453", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenPrinting", "product": "cups", "cwe": "CWE-74", "title": "CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55453" }, { "rank": 535, "cve_id": "CVE-2026-79835", "cvss_base": 2.8, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Hewlett Packard Enterprise", "product": "HPE Nonstop KMS Server", "cwe": "CWE-20", "title": "HPE Nonstop KMS Server - Buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-79835" }, { "rank": 536, "cve_id": "CVE-2026-53575", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "espocrm", "product": "espocrm", "cwe": "CWE-79", "title": "EspoCRM: Persistent XSS via CSP nonce injection in applicationName setting by admin user", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53575" }, { "rank": 537, "cve_id": "CVE-2026-55467", "cvss_base": 2.5, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "OpenPrinting", "product": "cups", "cwe": "CWE-93", "title": "CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55467" }, { "rank": 538, "cve_id": "CVE-2026-57569", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-367", "title": "Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57569" }, { "rank": 539, "cve_id": "CVE-2026-61610", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "LycheeOrg", "product": "Lychee", "cwe": "CWE-284", "title": "Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61610" }, { "rank": 540, "cve_id": "CVE-2026-111169", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "suitenumerique", "product": "docs", "cwe": "CWE-639", "title": "La Suite Docs through 6.0.0 Authorization Bypass via Comment Thread Creation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111169" }, { "rank": 541, "cve_id": "CVE-2026-111225", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-78", "title": "Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111225" }, { "rank": 542, "cve_id": "CVE-2026-111233", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Netgate", "product": "pfSense CE", "cwe": "CWE-79", "title": "Netgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111233" }, { "rank": 543, "cve_id": "CVE-2026-111350", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "papermark", "product": "Papermark", "cwe": "CWE-862", "title": "Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111350" }, { "rank": 544, "cve_id": "CVE-2026-111351", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "metasfresh", "product": "metasfresh", "cwe": "CWE-639", "title": "metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111351" }, { "rank": 545, "cve_id": "CVE-2026-111354", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "crmeb", "product": "crmeb_java", "cwe": "CWE-639", "title": "crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111354" }, { "rank": 546, "cve_id": "CVE-2026-36436", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-36436" }, { "rank": 547, "cve_id": "CVE-2026-52167", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52167" }, { "rank": 548, "cve_id": "CVE-2026-88753", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-88753" }, { "rank": 549, "cve_id": "CVE-2026-92228", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Airflow Keycloak provider", "cwe": "CWE-732", "title": "Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-92228" }, { "rank": 550, "cve_id": "CVE-2026-93649", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Adoptium Temurin", "cwe": "CWE-494", "title": "In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page /[locale]/download takes a download URL from the \"link\" query parameter and automatically navigates to it with a meta http-equiv=\"refresh\". The URL is checked against a list of trusted prefixes using String.startsWith() on the raw string, while the browser applies RFC 3986 dot-segment normalisation before navigating, so a value such as https://github.com/adoptium/temurin/../../attacker/malware/releases/download/v1/jdk.exe passes the check but resolves to an attacker-controlled repository. A victim who follows a crafted adoptium.net link is shown the genuine \"Thank you for downloading Eclipse Temurin\" page while their browser downloads a binary of the attacker's choosing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-93649" }, { "rank": 551, "cve_id": "CVE-2026-94134", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Airflow SSH provider", "cwe": "CWE-322", "title": "Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94134" }, { "rank": 552, "cve_id": "CVE-2026-94135", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Airflow SFTP provider", "cwe": "CWE-322", "title": "Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default", "url": "https://www.cve.org/CVERecord?id=CVE-2026-94135" }, { "rank": 553, "cve_id": "CVE-2026-96806", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Airflow Keycloak provider", "cwe": "CWE-613", "title": "Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token", "url": "https://www.cve.org/CVERecord?id=CVE-2026-96806" }, { "rank": 554, "cve_id": "CVE-2026-98432", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ipv4: free inet_opt and ireq_opt after an RCU grace period", "url": "https://www.cve.org/CVERecord?id=CVE-2026-98432" }, { "rank": 555, "cve_id": "CVE-2026-104586", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": null, "title": "AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-104586" }, { "rank": 556, "cve_id": "CVE-2026-110724", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Connected Services Platform", "cwe": "CWE-269", "title": "In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded-For` request header. That element is supplied by the originating HTTP client and is not validated against any trusted-proxy list. A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110724" }, { "rank": 557, "cve_id": "CVE-2026-110916", "cvss_base": null, "cvss_severity": null, "epss_score": null, "epss_percentile": null, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-20", "title": "Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-110916" } ], "transactions": [ { "type": "KEV_ADDED", "cve_id": "CVE-2026-21589", "detail": "ADDED TO KEV — CVE-2026-21589 (Atlassian Bamboo Data Center). Remediation due October 18, 2026." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2017-5674", "detail": "EXPLOIT PUBLISHED — CVE-2017-5674. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-11212", "detail": "EXPLOIT PUBLISHED — CVE-2018-11212. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-17828", "detail": "EXPLOIT PUBLISHED — CVE-2018-17828. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-18700", "detail": "EXPLOIT PUBLISHED — CVE-2018-18700. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19139", "detail": "EXPLOIT PUBLISHED — CVE-2018-19139. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19416", "detail": "EXPLOIT PUBLISHED — CVE-2018-19416. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19517", "detail": "EXPLOIT PUBLISHED — CVE-2018-19517. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19539", "detail": "EXPLOIT PUBLISHED — CVE-2018-19539. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19540", "detail": "EXPLOIT PUBLISHED — CVE-2018-19540. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19541", "detail": "EXPLOIT PUBLISHED — CVE-2018-19541. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19542", "detail": "EXPLOIT PUBLISHED — CVE-2018-19542. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19543", "detail": "EXPLOIT PUBLISHED — CVE-2018-19543. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-19857", "detail": "EXPLOIT PUBLISHED — CVE-2018-19857. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-20406", "detail": "EXPLOIT PUBLISHED — CVE-2018-20406. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2018-20786", "detail": "EXPLOIT PUBLISHED — CVE-2018-20786. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-34969", "detail": "EXPLOIT PUBLISHED — CVE-2023-34969. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-37453", "detail": "EXPLOIT PUBLISHED — CVE-2023-37453. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-38408", "detail": "EXPLOIT PUBLISHED — CVE-2023-38408. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-39128", "detail": "EXPLOIT PUBLISHED — CVE-2023-39128. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-39615", "detail": "EXPLOIT PUBLISHED — CVE-2023-39615. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-42753", "detail": "EXPLOIT PUBLISHED — CVE-2023-42753 (Red Hat Enterprise Linux 7). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-42754", "detail": "EXPLOIT PUBLISHED — CVE-2023-42754 (Red Hat Enterprise Linux 8). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-42755", "detail": "EXPLOIT PUBLISHED — CVE-2023-42755 (Red Hat Enterprise Linux 8). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-48795", "detail": "EXPLOIT PUBLISHED — CVE-2023-48795. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-52425", "detail": "EXPLOIT PUBLISHED — CVE-2023-52425. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2023-52927", "detail": "EXPLOIT PUBLISHED — CVE-2023-52927 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-0232", "detail": "EXPLOIT PUBLISHED — CVE-2024-0232 (sqlite). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-0553", "detail": "EXPLOIT PUBLISHED — CVE-2024-0553 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-0567", "detail": "EXPLOIT PUBLISHED — CVE-2024-0567 (gnutls). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-11053", "detail": "EXPLOIT PUBLISHED — CVE-2024-11053 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-2004", "detail": "EXPLOIT PUBLISHED — CVE-2024-2004 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-22365", "detail": "EXPLOIT PUBLISHED — CVE-2024-22365. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-2379", "detail": "EXPLOIT PUBLISHED — CVE-2024-2379 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-2398", "detail": "EXPLOIT PUBLISHED — CVE-2024-2398 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-2466", "detail": "EXPLOIT PUBLISHED — CVE-2024-2466 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-25062", "detail": "EXPLOIT PUBLISHED — CVE-2024-25062. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-28757", "detail": "EXPLOIT PUBLISHED — CVE-2024-28757. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-34459", "detail": "EXPLOIT PUBLISHED — CVE-2024-34459. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-52533", "detail": "EXPLOIT PUBLISHED — CVE-2024-52533. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-6387", "detail": "EXPLOIT PUBLISHED — CVE-2024-6387 (OpenSSH). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-7264", "detail": "EXPLOIT PUBLISHED — CVE-2024-7264 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2024-8096", "detail": "EXPLOIT PUBLISHED — CVE-2024-8096 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-0167", "detail": "EXPLOIT PUBLISHED — CVE-2025-0167 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-0665", "detail": "EXPLOIT PUBLISHED — CVE-2025-0665 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-0725", "detail": "EXPLOIT PUBLISHED — CVE-2025-0725 (curl). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-21704", "detail": "EXPLOIT PUBLISHED — CVE-2025-21704 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-38089", "detail": "EXPLOIT PUBLISHED — CVE-2025-38089 (Linux). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2025-70873", "detail": "EXPLOIT PUBLISHED — CVE-2025-70873. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-0849", "detail": "EXPLOIT PUBLISHED — CVE-2026-0849 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-101029", "detail": "EXPLOIT PUBLISHED — CVE-2026-101029 (Gitea). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-101105", "detail": "EXPLOIT PUBLISHED — CVE-2026-101105 (code-projects Matrimonial System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-103226", "detail": "EXPLOIT PUBLISHED — CVE-2026-103226 (Artifex Ghostscript). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10593", "detail": "EXPLOIT PUBLISHED — CVE-2026-10593 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10634", "detail": "EXPLOIT PUBLISHED — CVE-2026-10634 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10635", "detail": "EXPLOIT PUBLISHED — CVE-2026-10635 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10636", "detail": "EXPLOIT PUBLISHED — CVE-2026-10636 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10637", "detail": "EXPLOIT PUBLISHED — CVE-2026-10637 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10639", "detail": "EXPLOIT PUBLISHED — CVE-2026-10639 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10640", "detail": "EXPLOIT PUBLISHED — CVE-2026-10640 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10641", "detail": "EXPLOIT PUBLISHED — CVE-2026-10641 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10642", "detail": "EXPLOIT PUBLISHED — CVE-2026-10642 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10644", "detail": "EXPLOIT PUBLISHED — CVE-2026-10644 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10645", "detail": "EXPLOIT PUBLISHED — CVE-2026-10645 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10646", "detail": "EXPLOIT PUBLISHED — CVE-2026-10646 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-106469", "detail": "EXPLOIT PUBLISHED — CVE-2026-106469 (Unknown Gutenverse Form). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10647", "detail": "EXPLOIT PUBLISHED — CVE-2026-10647 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10648", "detail": "EXPLOIT PUBLISHED — CVE-2026-10648 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10651", "detail": "EXPLOIT PUBLISHED — CVE-2026-10651 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10652", "detail": "EXPLOIT PUBLISHED — CVE-2026-10652 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10653", "detail": "EXPLOIT PUBLISHED — CVE-2026-10653 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10654", "detail": "EXPLOIT PUBLISHED — CVE-2026-10654 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10655", "detail": "EXPLOIT PUBLISHED — CVE-2026-10655 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10656", "detail": "EXPLOIT PUBLISHED — CVE-2026-10656 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10657", "detail": "EXPLOIT PUBLISHED — CVE-2026-10657 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10664", "detail": "EXPLOIT PUBLISHED — CVE-2026-10664 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10665", "detail": "EXPLOIT PUBLISHED — CVE-2026-10665 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10666", "detail": "EXPLOIT PUBLISHED — CVE-2026-10666 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10667", "detail": "EXPLOIT PUBLISHED — CVE-2026-10667 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10669", "detail": "EXPLOIT PUBLISHED — CVE-2026-10669 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10670", "detail": "EXPLOIT PUBLISHED — CVE-2026-10670 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10671", "detail": "EXPLOIT PUBLISHED — CVE-2026-10671 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10672", "detail": "EXPLOIT PUBLISHED — CVE-2026-10672 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10673", "detail": "EXPLOIT PUBLISHED — CVE-2026-10673 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10681", "detail": "EXPLOIT PUBLISHED — CVE-2026-10681 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10682", "detail": "EXPLOIT PUBLISHED — CVE-2026-10682 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10686", "detail": "EXPLOIT PUBLISHED — CVE-2026-10686 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108066", "detail": "EXPLOIT PUBLISHED — CVE-2026-108066 (Unknown WP 2FA). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108538", "detail": "EXPLOIT PUBLISHED — CVE-2026-108538 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108542", "detail": "EXPLOIT PUBLISHED — CVE-2026-108542 (021is elvix-sdk). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108584", "detail": "EXPLOIT PUBLISHED — CVE-2026-108584 (FunnyWolf Viper). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108772", "detail": "EXPLOIT PUBLISHED — CVE-2026-108772 (bleenco abstruse). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108786", "detail": "EXPLOIT PUBLISHED — CVE-2026-108786 (houtini-ai seo-crawler-mcp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108790", "detail": "EXPLOIT PUBLISHED — CVE-2026-108790 (westboy CicadasCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108804", "detail": "EXPLOIT PUBLISHED — CVE-2026-108804 (TRENDnet TEW-751DR). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108812", "detail": "EXPLOIT PUBLISHED — CVE-2026-108812 (SEMCMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108816", "detail": "EXPLOIT PUBLISHED — CVE-2026-108816 (agno-agi agno). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108820", "detail": "EXPLOIT PUBLISHED — CVE-2026-108820 (agno-agi agno). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108825", "detail": "EXPLOIT PUBLISHED — CVE-2026-108825 (yangzongzhuan RuoYi). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108829", "detail": "EXPLOIT PUBLISHED — CVE-2026-108829 (Zen Cart). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108892", "detail": "EXPLOIT PUBLISHED — CVE-2026-108892 (Linksys E1700). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108896", "detail": "EXPLOIT PUBLISHED — CVE-2026-108896 (Linksys E1700). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108900", "detail": "EXPLOIT PUBLISHED — CVE-2026-108900 (Exponent CMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108908", "detail": "EXPLOIT PUBLISHED — CVE-2026-108908 (Netcore NR268). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108916", "detail": "EXPLOIT PUBLISHED — CVE-2026-108916 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108935", "detail": "EXPLOIT PUBLISHED — CVE-2026-108935 (Edimax BR-6208AC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108943", "detail": "EXPLOIT PUBLISHED — CVE-2026-108943 (ModelTC LightX2V). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108948", "detail": "EXPLOIT PUBLISHED — CVE-2026-108948 (code-projects Online Reviewer System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108955", "detail": "EXPLOIT PUBLISHED — CVE-2026-108955 (Tiiny-AI PowerInfer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108957", "detail": "EXPLOIT PUBLISHED — CVE-2026-108957 (TinyLLaVA_Factory). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108959", "detail": "EXPLOIT PUBLISHED — CVE-2026-108959 (itsourcecode Online Cake Ordering System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108964", "detail": "EXPLOIT PUBLISHED — CVE-2026-108964 (SourceCodester Performance Indicator System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108968", "detail": "EXPLOIT PUBLISHED — CVE-2026-108968 (SourceCodester Performance Indicator System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-108972", "detail": "EXPLOIT PUBLISHED — CVE-2026-108972 (SourceCodester Human Resource Management System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109106", "detail": "EXPLOIT PUBLISHED — CVE-2026-109106 (Polaris Office App). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109110", "detail": "EXPLOIT PUBLISHED — CVE-2026-109110 (Wavlink WL-WN592AX6). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109524", "detail": "EXPLOIT PUBLISHED — CVE-2026-109524 (girishsaraf Online-Appointment-Booking-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-109827", "detail": "EXPLOIT PUBLISHED — CVE-2026-109827 (GPAC). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110202", "detail": "EXPLOIT PUBLISHED — CVE-2026-110202 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110203", "detail": "EXPLOIT PUBLISHED — CVE-2026-110203 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110204", "detail": "EXPLOIT PUBLISHED — CVE-2026-110204 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110205", "detail": "EXPLOIT PUBLISHED — CVE-2026-110205 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110206", "detail": "EXPLOIT PUBLISHED — CVE-2026-110206 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110536", "detail": "EXPLOIT PUBLISHED — CVE-2026-110536 (D-Link DIR-868L). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110660", "detail": "EXPLOIT PUBLISHED — CVE-2026-110660 (vgmstream). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110694", "detail": "EXPLOIT PUBLISHED — CVE-2026-110694 (OAID Tengine). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110695", "detail": "EXPLOIT PUBLISHED — CVE-2026-110695 (turboderp ExLlamaV2). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110696", "detail": "EXPLOIT PUBLISHED — CVE-2026-110696 (itsmeravitejak Online-Examination-System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110715", "detail": "EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110764", "detail": "EXPLOIT PUBLISHED — CVE-2026-110764 (iflytek astron-rpa). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110767", "detail": "EXPLOIT PUBLISHED — CVE-2026-110767 (coderamp-labs gitingest). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110769", "detail": "EXPLOIT PUBLISHED — CVE-2026-110769 (holaboss-ai holaOS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110774", "detail": "EXPLOIT PUBLISHED — CVE-2026-110774 (blinkospace blinko). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110807", "detail": "EXPLOIT PUBLISHED — CVE-2026-110807 (sgl-project SGLang). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-110867", "detail": "EXPLOIT PUBLISHED — CVE-2026-110867 (renovatebot renovate). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-13351", "detail": "EXPLOIT PUBLISHED — CVE-2026-13351 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-1677", "detail": "EXPLOIT PUBLISHED — CVE-2026-1677 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-1678", "detail": "EXPLOIT PUBLISHED — CVE-2026-1678 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-1679", "detail": "EXPLOIT PUBLISHED — CVE-2026-1679 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-1681", "detail": "EXPLOIT PUBLISHED — CVE-2026-1681 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-21589", "detail": "EXPLOIT PUBLISHED — CVE-2026-21589 (Atlassian Bamboo Data Center). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-30754", "detail": "EXPLOIT PUBLISHED — CVE-2026-30754. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-33829", "detail": "EXPLOIT PUBLISHED — CVE-2026-33829 (Microsoft Windows 10 Version 1607). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-35001", "detail": "EXPLOIT PUBLISHED — CVE-2026-35001 (OpenS100 Project OpenS100). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-40355", "detail": "EXPLOIT PUBLISHED — CVE-2026-40355 (MIT Kerberos 5). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-4179", "detail": "EXPLOIT PUBLISHED — CVE-2026-4179 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5066", "detail": "EXPLOIT PUBLISHED — CVE-2026-5066 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5067", "detail": "EXPLOIT PUBLISHED — CVE-2026-5067 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5068", "detail": "EXPLOIT PUBLISHED — CVE-2026-5068 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5071", "detail": "EXPLOIT PUBLISHED — CVE-2026-5071 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5072", "detail": "EXPLOIT PUBLISHED — CVE-2026-5072 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5589", "detail": "EXPLOIT PUBLISHED — CVE-2026-5589 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-5590", "detail": "EXPLOIT PUBLISHED — CVE-2026-5590 (zephyrproject-rtos Zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58014", "detail": "EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-58015", "detail": "EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-61837", "detail": "EXPLOIT PUBLISHED — CVE-2026-61837 (rabbitmq-server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-66071", "detail": "EXPLOIT PUBLISHED — CVE-2026-66071 (rabbitmq-server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-66078", "detail": "EXPLOIT PUBLISHED — CVE-2026-66078 (rabbitmq-server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-67236", "detail": "EXPLOIT PUBLISHED — CVE-2026-67236 (rabbitmq-server). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-7656", "detail": "EXPLOIT PUBLISHED — CVE-2026-7656 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8023", "detail": "EXPLOIT PUBLISHED — CVE-2026-8023 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-89288", "detail": "EXPLOIT PUBLISHED — CVE-2026-89288 (Unknown Fast Courier). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-90989", "detail": "EXPLOIT PUBLISHED — CVE-2026-90989 (Unknown Tainacan). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-91076", "detail": "EXPLOIT PUBLISHED — CVE-2026-91076 (Unknown Robokassa payment gateway for Woocommerce). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-92409", "detail": "EXPLOIT PUBLISHED — CVE-2026-92409 (Unknown Donation Thermometer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-92426", "detail": "EXPLOIT PUBLISHED — CVE-2026-92426 (Unknown YITH WooCommerce Popup). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-9263", "detail": "EXPLOIT PUBLISHED — CVE-2026-9263 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-94254", "detail": "EXPLOIT PUBLISHED — CVE-2026-94254 (Unknown SellKit). Public exploit reference added." }, { "type": "RESCORED", "cve_id": "CVE-2017-20162", "detail": "RESCORED — CVE-2017-20162 (vercel ms). CVSS 4.3 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2018-1061", "detail": "RESCORED — CVE-2018-1061 ([UNKNOWN] python). CVSS 6.5 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-32636", "detail": "RESCORED — CVE-2023-32636 (glib). CVSS 4.7 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-32643", "detail": "RESCORED — CVE-2023-32643 (glib). CVSS 5.3 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-39189", "detail": "RESCORED — CVE-2023-39189 (Red Hat Enterprise Linux 8). CVSS 5.1 → 6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-39192", "detail": "RESCORED — CVE-2023-39192 (Red Hat Enterprise Linux 8). CVSS 6.7 → 6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-39193", "detail": "RESCORED — CVE-2023-39193 (Red Hat Enterprise Linux 8). CVSS 6.1 → 6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-39194", "detail": "RESCORED — CVE-2023-39194 (Red Hat Enterprise Linux 8). CVSS 3.2 → 4.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-42755", "detail": "RESCORED — CVE-2023-42755 (Red Hat Enterprise Linux 8). CVSS 6.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2023-45853", "detail": "RESCORED — CVE-2023-45853. CVSS 8.8 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-0232", "detail": "RESCORED — CVE-2024-0232 (sqlite). CVSS 4.7 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-22099", "detail": "RESCORED — CVE-2024-22099 (Linux kernel). CVSS 6.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-23307", "detail": "RESCORED — CVE-2024-23307 (Linux kernel). CVSS 4.4 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-24857", "detail": "RESCORED — CVE-2024-24857 (Linux kernel). CVSS 4.6 → 6.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-24858", "detail": "RESCORED — CVE-2024-24858 (Linux kernel). CVSS 4.6 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-24859", "detail": "RESCORED — CVE-2024-24859 (Linux kernel). CVSS 4.6 → 4.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-26901", "detail": "RESCORED — CVE-2024-26901 (Linux). CVSS 5.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-27436", "detail": "RESCORED — CVE-2024-27436 (Linux). CVSS 5.3 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-35809", "detail": "RESCORED — CVE-2024-35809 (Linux). CVSS 5.5 → 4.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-35982", "detail": "RESCORED — CVE-2024-35982 (Linux). CVSS 5.1 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-36916", "detail": "RESCORED — CVE-2024-36916 (Linux). CVSS 6.5 → 7.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-38565", "detail": "RESCORED — CVE-2024-38565 (Linux). CVSS 6.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-56672", "detail": "RESCORED — CVE-2024-56672 (Linux). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2024-7264", "detail": "RESCORED — CVE-2024-7264 (curl). CVSS 6.3 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-21702", "detail": "RESCORED — CVE-2025-21702 (Linux). CVSS 7.8 → 7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-29087", "detail": "RESCORED — CVE-2025-29087 (SQLite). CVSS 3.2 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-29088", "detail": "RESCORED — CVE-2025-29088 (SQLite). CVSS 5.6 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-32728", "detail": "RESCORED — CVE-2025-32728 (OpenBSD OpenSSH). CVSS 4.3 → 3.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-37924", "detail": "RESCORED — CVE-2025-37924 (Linux). CVSS 9.8 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-7545", "detail": "RESCORED — CVE-2025-7545 (GNU Binutils). CVSS 4.8 → 1.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-7546", "detail": "RESCORED — CVE-2025-7546 (GNU Binutils). CVSS 4.8 → 1.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2025-8224", "detail": "RESCORED — CVE-2025-8224 (GNU Binutils). CVSS 4.8 → 1.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-0849", "detail": "RESCORED — CVE-2026-0849 (zephyrproject-rtos Zephyr). CVSS 3.8 → 6.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-102673", "detail": "RESCORED — CVE-2026-102673 (electron). CVSS 8.2 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-102674", "detail": "RESCORED — CVE-2026-102674 (electron). CVSS 8.2 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-102676", "detail": "RESCORED — CVE-2026-102676 (electron). CVSS 8.3 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-110144", "detail": "RESCORED — CVE-2026-110144 (Google Chrome). CVSS 9.6 → 8.6 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-110809", "detail": "RESCORED — CVE-2026-110809 (sgl-project SGLang). CVSS 5.3 → 2.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-12259", "detail": "RESCORED — CVE-2026-12259 (nltk/nltk). CVSS 5.3 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-1678", "detail": "RESCORED — CVE-2026-1678 (zephyrproject-rtos Zephyr). CVSS 9.4 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-1679", "detail": "RESCORED — CVE-2026-1679 (zephyrproject-rtos Zephyr). CVSS 7.3 → 7.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-17618", "detail": "RESCORED — CVE-2026-17618 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 7.3 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-17620", "detail": "RESCORED — CVE-2026-17620 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 5.3 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-18541", "detail": "RESCORED — CVE-2026-18541 (IBM Planning Analytics). CVSS 6.4 → 5.4 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-19622", "detail": "RESCORED — CVE-2026-19622 (IBM Planning Analytics). CVSS 8.8 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-22992", "detail": "RESCORED — CVE-2026-22992 (Linux). CVSS 7.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23003", "detail": "RESCORED — CVE-2026-23003 (Linux). CVSS 7.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23066", "detail": "RESCORED — CVE-2026-23066 (Linux). CVSS 7.8 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23095", "detail": "RESCORED — CVE-2026-23095 (Linux). CVSS 7.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23103", "detail": "RESCORED — CVE-2026-23103 (Linux). CVSS 7.8 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23414", "detail": "RESCORED — CVE-2026-23414 (Linux). CVSS 7.5 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23434", "detail": "RESCORED — CVE-2026-23434 (Linux). CVSS 7.1 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-23444", "detail": "RESCORED — CVE-2026-23444 (Linux). CVSS 7.8 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-2950", "detail": "RESCORED — CVE-2026-2950 (lodash). CVSS 6.5 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-3497", "detail": "RESCORED — CVE-2026-3497 (Ubuntu openssh). CVSS 2.7 → 6.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-40355", "detail": "RESCORED — CVE-2026-40355 (MIT Kerberos 5). CVSS 5.9 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-5590", "detail": "RESCORED — CVE-2026-5590 (zephyrproject-rtos Zephyr). CVSS 6.4 → 5.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-69435", "detail": "RESCORED — CVE-2026-69435 (Microsoft Azure SRE Agent). CVSS 9.6 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73563", "detail": "RESCORED — CVE-2026-73563 (backstage). CVSS 4.7 → 6.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73593", "detail": "RESCORED — CVE-2026-73593 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3 → 6.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73594", "detail": "RESCORED — CVE-2026-73594 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.4 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73595", "detail": "RESCORED — CVE-2026-73595 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 4.7 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73596", "detail": "RESCORED — CVE-2026-73596 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.8 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-73597", "detail": "RESCORED — CVE-2026-73597 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.5 → 8.1 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-83947", "detail": "RESCORED — CVE-2026-83947 (Microsoft Azure Event Grid System). CVSS 7.7 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84198", "detail": "RESCORED — CVE-2026-84198 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84209", "detail": "RESCORED — CVE-2026-84209 (IBM Guardium Data Protection). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84230", "detail": "RESCORED — CVE-2026-84230 (IBM Guardium Data Protection). CVSS 7.5 → 5.9 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84875", "detail": "RESCORED — CVE-2026-84875 (IBM Guardium Data Protection). CVSS 7.5 → 8.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-84891", "detail": "RESCORED — CVE-2026-84891 (IBM Guardium Data Protection). CVSS 5.9 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-87980", "detail": "RESCORED — CVE-2026-87980 (IBM Guardium Data Protection). CVSS 3.1 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-96611", "detail": "RESCORED — CVE-2026-96611 (FFmpeg). CVSS 6.9 → 7.8 (NVD)." }, { "type": "REJECTED", "cve_id": "CVE-2026-89603", "detail": "REJECTED — CVE-2026-89603 (Linux). Record withdrawn by the CNA." }, { "type": "DISPUTED", "cve_id": "CVE-2026-19745", "detail": "DISPUTED — CVE-2026-19745 (Calix GigaSpire). Record marked disputed." }, { "type": "DISPUTED", "cve_id": "CVE-2026-19746", "detail": "DISPUTED — CVE-2026-19746 (Calix GigaSpire). Record marked disputed." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-102555", "detail": "PATCH SHIPPED — CVE-2026-102555 (Red Hat Enterprise Linux 10). Fixed in Red Hat Enterprise Linux 10 0:3.6.5-3.el10_2.20." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-103226", "detail": "PATCH SHIPPED — CVE-2026-103226 (Artifex Ghostscript). Fixed in Ghostscript 10.08.0." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-110923", "detail": "PATCH SHIPPED — CVE-2026-110923 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 10.5p1-1.2.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-110925", "detail": "PATCH SHIPPED — CVE-2026-110925 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 10.5p1-1.2.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-110926", "detail": "PATCH SHIPPED — CVE-2026-110926 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 10.5p1-1.2.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-110927", "detail": "PATCH SHIPPED — CVE-2026-110927 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 10.5p1-1.2.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-75939", "detail": "PATCH SHIPPED — CVE-2026-75939 (Red Hat OpenShift Container Platform 4.18). Fixed in Red Hat OpenShift Container Platform 4.18 1790828598." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-87744", "detail": "PATCH SHIPPED — CVE-2026-87744 (Red Hat build of Quarkus 3.27.6.redhat). Fixed in Red Hat build of Quarkus 3.27.6.redhat 3.27.6.redhat-00004." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-88842", "detail": "PATCH SHIPPED — CVE-2026-88842 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 1.37.0-9.4.hum1." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-89058", "detail": "PATCH SHIPPED — CVE-2026-89058 (Red Hat RESTEasy). Fixed in Red Hat build of Quarkus 3.27.6.redhat 6.2.19.Final-redhat-00003." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-89059", "detail": "PATCH SHIPPED — CVE-2026-89059 (Red Hat RESTEasy). Fixed in Red Hat build of Quarkus 3.27.6.redhat 6.2.19.Final-redhat-00003." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-93432", "detail": "PATCH SHIPPED — CVE-2026-93432 (Red Hat build of Quarkus 3.27.6.redhat). Fixed in Red Hat build of Quarkus 3.27.6.redhat 3.27.6.redhat-00004." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-94449", "detail": "PATCH SHIPPED — CVE-2026-94449 (Red Hat build of Quarkus 3.27.6.redhat). Fixed in Red Hat build of Quarkus 3.27.6.redhat 3.27.6.redhat-00004." }, { "type": "PATCH_SHIPPED", "cve_id": "CVE-2026-94451", "detail": "PATCH SHIPPED — CVE-2026-94451 (Red Hat build of Quarkus 3.27.6.redhat). Fixed in Red Hat build of Quarkus 3.27.6.redhat 3.27.6.redhat-00004." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0010", "detail": "ENRICHED — CVE-2016-0010. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0011", "detail": "ENRICHED — CVE-2016-0011. Received CVSS 5.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0012", "detail": "ENRICHED — CVE-2016-0012. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0025", "detail": "ENRICHED — CVE-2016-0025. Received CVSS 7.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0035", "detail": "ENRICHED — CVE-2016-0035. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0055", "detail": "ENRICHED — CVE-2016-0055. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0141", "detail": "ENRICHED — CVE-2016-0141. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0402", "detail": "ENRICHED — CVE-2016-0402. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0448", "detail": "ENRICHED — CVE-2016-0448. Received CVSS 4.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0466", "detail": "ENRICHED — CVE-2016-0466. Received CVSS 5.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0475", "detail": "ENRICHED — CVE-2016-0475. Received CVSS 5.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0483", "detail": "ENRICHED — CVE-2016-0483. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0494", "detail": "ENRICHED — CVE-2016-0494. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0706", "detail": "ENRICHED — CVE-2016-0706. Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0714", "detail": "ENRICHED — CVE-2016-0714. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-0763", "detail": "ENRICHED — CVE-2016-0763. Received CVSS 6.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-10165", "detail": "ENRICHED — CVE-2016-10165. Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-1181", "detail": "ENRICHED — CVE-2016-1181. Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-1182", "detail": "ENRICHED — CVE-2016-1182. Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-3233", "detail": "ENRICHED — CVE-2016-3233. Received CVSS 7.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-3234", "detail": "ENRICHED — CVE-2016-3234. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-3313", "detail": "ENRICHED — CVE-2016-3313. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-3357", "detail": "ENRICHED — CVE-2016-3357. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-5388", "detail": "ENRICHED — CVE-2016-5388. Received CVSS 8.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-6794", "detail": "ENRICHED — CVE-2016-6794 (Apache Software Foundation Apache Tomcat). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-7244", "detail": "ENRICHED — CVE-2016-7244. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2016-7276", "detail": "ENRICHED — CVE-2016-7276. Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-0281", "detail": "ENRICHED — CVE-2017-0281 (Microsoft Corporation Microsoft Office). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-12172", "detail": "ENRICHED — CVE-2017-12172 (Red Hat, Inc. postgresql). Received CVSS 6.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-12616", "detail": "ENRICHED — CVE-2017-12616 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-16137", "detail": "ENRICHED — CVE-2017-16137 (HackerOne debug node module). Received CVSS 5.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-5648", "detail": "ENRICHED — CVE-2017-5648 (Apache Software Foundation Apache Tomcat). Received CVSS 9.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-5664", "detail": "ENRICHED — CVE-2017-5664 (Apache Software Foundation Apache Tomcat). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-5674", "detail": "ENRICHED — CVE-2017-5674. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-7674", "detail": "ENRICHED — CVE-2017-7674 (Apache Software Foundation Apache Tomcat). Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-8509", "detail": "ENRICHED — CVE-2017-8509 (Microsoft Corporation Microsoft Office). Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2017-8512", "detail": "ENRICHED — CVE-2017-8512 (Microsoft Corporation Microsoft Office). Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-0737", "detail": "ENRICHED — CVE-2018-0737 (OpenSSL). Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-0851", "detail": "ENRICHED — CVE-2018-0851 (Microsoft Corporation Microsoft Office). Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-11212", "detail": "ENRICHED — CVE-2018-11212. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-11784", "detail": "ENRICHED — CVE-2018-11784 (Apache Software Foundation Apache Tomcat). Received CVSS 4.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12023", "detail": "ENRICHED — CVE-2018-12023. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12115", "detail": "ENRICHED — CVE-2018-12115 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12210", "detail": "ENRICHED — CVE-2018-12210 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12211", "detail": "ENRICHED — CVE-2018-12211 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12212", "detail": "ENRICHED — CVE-2018-12212 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12213", "detail": "ENRICHED — CVE-2018-12213 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12214", "detail": "ENRICHED — CVE-2018-12214 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12215", "detail": "ENRICHED — CVE-2018-12215 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12216", "detail": "ENRICHED — CVE-2018-12216 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12217", "detail": "ENRICHED — CVE-2018-12217 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 2.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12218", "detail": "ENRICHED — CVE-2018-12218 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12219", "detail": "ENRICHED — CVE-2018-12219 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12220", "detail": "ENRICHED — CVE-2018-12220 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12221", "detail": "ENRICHED — CVE-2018-12221 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12222", "detail": "ENRICHED — CVE-2018-12222 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12223", "detail": "ENRICHED — CVE-2018-12223 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-12224", "detail": "ENRICHED — CVE-2018-12224 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-1304", "detail": "ENRICHED — CVE-2018-1304 (Apache Software Foundation Apache Tomcat). Received CVSS 5.9 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-1305", "detail": "ENRICHED — CVE-2018-1305 (Apache Software Foundation Apache Tomcat). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-14720", "detail": "ENRICHED — CVE-2018-14720. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-14721", "detail": "ENRICHED — CVE-2018-14721. Received CVSS 10.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-17828", "detail": "ENRICHED — CVE-2018-17828. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-18089", "detail": "ENRICHED — CVE-2018-18089 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-18090", "detail": "ENRICHED — CVE-2018-18090 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-18091", "detail": "ENRICHED — CVE-2018-18091 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-18700", "detail": "ENRICHED — CVE-2018-18700. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19139", "detail": "ENRICHED — CVE-2018-19139. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19360", "detail": "ENRICHED — CVE-2018-19360. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19361", "detail": "ENRICHED — CVE-2018-19361. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19362", "detail": "ENRICHED — CVE-2018-19362. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19416", "detail": "ENRICHED — CVE-2018-19416. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19517", "detail": "ENRICHED — CVE-2018-19517. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19539", "detail": "ENRICHED — CVE-2018-19539. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19540", "detail": "ENRICHED — CVE-2018-19540. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19541", "detail": "ENRICHED — CVE-2018-19541. Received CVSS 8.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19542", "detail": "ENRICHED — CVE-2018-19542. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19543", "detail": "ENRICHED — CVE-2018-19543. Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19857", "detail": "ENRICHED — CVE-2018-19857. Received CVSS 9.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-19876", "detail": "ENRICHED — CVE-2018-19876. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-20406", "detail": "ENRICHED — CVE-2018-20406. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-20786", "detail": "ENRICHED — CVE-2018-20786. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-2811", "detail": "ENRICHED — CVE-2018-2811 (Oracle Corporation Java). Received CVSS 7.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-7489", "detail": "ENRICHED — CVE-2018-7489. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2018-8014", "detail": "ENRICHED — CVE-2018-8014 (Apache Software Foundation Apache Tomcat). Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-35827", "detail": "ENRICHED — CVE-2023-35827. Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-36660", "detail": "ENRICHED — CVE-2023-36660. Received CVSS 9.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-39128", "detail": "ENRICHED — CVE-2023-39128. Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-39615", "detail": "ENRICHED — CVE-2023-39615. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-45322", "detail": "ENRICHED — CVE-2023-45322. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-45863", "detail": "ENRICHED — CVE-2023-45863. Received CVSS 6.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-45871", "detail": "ENRICHED — CVE-2023-45871. Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-46862", "detail": "ENRICHED — CVE-2023-46862. Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-50495", "detail": "ENRICHED — CVE-2023-50495. Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-52458", "detail": "ENRICHED — CVE-2023-52458 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-52464", "detail": "ENRICHED — CVE-2023-52464 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-52622", "detail": "ENRICHED — CVE-2023-52622 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2023-52675", "detail": "ENRICHED — CVE-2023-52675 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26629", "detail": "ENRICHED — CVE-2024-26629 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26645", "detail": "ENRICHED — CVE-2024-26645 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26651", "detail": "ENRICHED — CVE-2024-26651 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26671", "detail": "ENRICHED — CVE-2024-26671 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26679", "detail": "ENRICHED — CVE-2024-26679 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26777", "detail": "ENRICHED — CVE-2024-26777 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26783", "detail": "ENRICHED — CVE-2024-26783 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26787", "detail": "ENRICHED — CVE-2024-26787 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26805", "detail": "ENRICHED — CVE-2024-26805 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26816", "detail": "ENRICHED — CVE-2024-26816 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26820", "detail": "ENRICHED — CVE-2024-26820 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26835", "detail": "ENRICHED — CVE-2024-26835 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26855", "detail": "ENRICHED — CVE-2024-26855 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26859", "detail": "ENRICHED — CVE-2024-26859 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26861", "detail": "ENRICHED — CVE-2024-26861 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26863", "detail": "ENRICHED — CVE-2024-26863 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26878", "detail": "ENRICHED — CVE-2024-26878 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26891", "detail": "ENRICHED — CVE-2024-26891 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26897", "detail": "ENRICHED — CVE-2024-26897 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26906", "detail": "ENRICHED — CVE-2024-26906 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26920", "detail": "ENRICHED — CVE-2024-26920 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26934", "detail": "ENRICHED — CVE-2024-26934 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26935", "detail": "ENRICHED — CVE-2024-26935 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26937", "detail": "ENRICHED — CVE-2024-26937 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26973", "detail": "ENRICHED — CVE-2024-26973 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26982", "detail": "ENRICHED — CVE-2024-26982 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26988", "detail": "ENRICHED — CVE-2024-26988 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-26993", "detail": "ENRICHED — CVE-2024-26993 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27004", "detail": "ENRICHED — CVE-2024-27004 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27013", "detail": "ENRICHED — CVE-2024-27013 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27024", "detail": "ENRICHED — CVE-2024-27024 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27025", "detail": "ENRICHED — CVE-2024-27025 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27038", "detail": "ENRICHED — CVE-2024-27038 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27047", "detail": "ENRICHED — CVE-2024-27047 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27059", "detail": "ENRICHED — CVE-2024-27059 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27065", "detail": "ENRICHED — CVE-2024-27065 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27074", "detail": "ENRICHED — CVE-2024-27074 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27076", "detail": "ENRICHED — CVE-2024-27076 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27077", "detail": "ENRICHED — CVE-2024-27077 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27078", "detail": "ENRICHED — CVE-2024-27078 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27419", "detail": "ENRICHED — CVE-2024-27419 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-27437", "detail": "ENRICHED — CVE-2024-27437 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-33621", "detail": "ENRICHED — CVE-2024-33621 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35805", "detail": "ENRICHED — CVE-2024-35805 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35807", "detail": "ENRICHED — CVE-2024-35807 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35815", "detail": "ENRICHED — CVE-2024-35815 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35828", "detail": "ENRICHED — CVE-2024-35828 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35849", "detail": "ENRICHED — CVE-2024-35849 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35877", "detail": "ENRICHED — CVE-2024-35877 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35886", "detail": "ENRICHED — CVE-2024-35886 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35893", "detail": "ENRICHED — CVE-2024-35893 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35895", "detail": "ENRICHED — CVE-2024-35895 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35900", "detail": "ENRICHED — CVE-2024-35900 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35902", "detail": "ENRICHED — CVE-2024-35902 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35922", "detail": "ENRICHED — CVE-2024-35922 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35925", "detail": "ENRICHED — CVE-2024-35925 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35930", "detail": "ENRICHED — CVE-2024-35930 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35933", "detail": "ENRICHED — CVE-2024-35933 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35934", "detail": "ENRICHED — CVE-2024-35934 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35935", "detail": "ENRICHED — CVE-2024-35935 (Linux). Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35936", "detail": "ENRICHED — CVE-2024-35936 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35944", "detail": "ENRICHED — CVE-2024-35944 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35965", "detail": "ENRICHED — CVE-2024-35965 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35966", "detail": "ENRICHED — CVE-2024-35966 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35978", "detail": "ENRICHED — CVE-2024-35978 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35983", "detail": "ENRICHED — CVE-2024-35983 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35984", "detail": "ENRICHED — CVE-2024-35984 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35988", "detail": "ENRICHED — CVE-2024-35988 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35996", "detail": "ENRICHED — CVE-2024-35996 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-35997", "detail": "ENRICHED — CVE-2024-35997 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36004", "detail": "ENRICHED — CVE-2024-36004 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36005", "detail": "ENRICHED — CVE-2024-36005 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36006", "detail": "ENRICHED — CVE-2024-36006 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36008", "detail": "ENRICHED — CVE-2024-36008 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36017", "detail": "ENRICHED — CVE-2024-36017 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36270", "detail": "ENRICHED — CVE-2024-36270 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36484", "detail": "ENRICHED — CVE-2024-36484 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36489", "detail": "ENRICHED — CVE-2024-36489 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36899", "detail": "ENRICHED — CVE-2024-36899 (Linux). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36902", "detail": "ENRICHED — CVE-2024-36902 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36903", "detail": "ENRICHED — CVE-2024-36903 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36905", "detail": "ENRICHED — CVE-2024-36905 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36927", "detail": "ENRICHED — CVE-2024-36927 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36934", "detail": "ENRICHED — CVE-2024-36934 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36939", "detail": "ENRICHED — CVE-2024-36939 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-36959", "detail": "ENRICHED — CVE-2024-36959 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-37356", "detail": "ENRICHED — CVE-2024-37356 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38547", "detail": "ENRICHED — CVE-2024-38547 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38560", "detail": "ENRICHED — CVE-2024-38560 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38567", "detail": "ENRICHED — CVE-2024-38567 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38579", "detail": "ENRICHED — CVE-2024-38579 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38589", "detail": "ENRICHED — CVE-2024-38589 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38596", "detail": "ENRICHED — CVE-2024-38596 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38598", "detail": "ENRICHED — CVE-2024-38598 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38615", "detail": "ENRICHED — CVE-2024-38615 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38619", "detail": "ENRICHED — CVE-2024-38619 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38621", "detail": "ENRICHED — CVE-2024-38621 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38662", "detail": "ENRICHED — CVE-2024-38662 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-38780", "detail": "ENRICHED — CVE-2024-38780 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-39489", "detail": "ENRICHED — CVE-2024-39489 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-39493", "detail": "ENRICHED — CVE-2024-39493 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-39509", "detail": "ENRICHED — CVE-2024-39509 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40905", "detail": "ENRICHED — CVE-2024-40905 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40912", "detail": "ENRICHED — CVE-2024-40912 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40916", "detail": "ENRICHED — CVE-2024-40916 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40934", "detail": "ENRICHED — CVE-2024-40934 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40942", "detail": "ENRICHED — CVE-2024-40942 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40945", "detail": "ENRICHED — CVE-2024-40945 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40959", "detail": "ENRICHED — CVE-2024-40959 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40960", "detail": "ENRICHED — CVE-2024-40960 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40961", "detail": "ENRICHED — CVE-2024-40961 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40978", "detail": "ENRICHED — CVE-2024-40978 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40993", "detail": "ENRICHED — CVE-2024-40993 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-40995", "detail": "ENRICHED — CVE-2024-40995 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-41000", "detail": "ENRICHED — CVE-2024-41000 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-41004", "detail": "ENRICHED — CVE-2024-41004 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-41005", "detail": "ENRICHED — CVE-2024-41005 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-41006", "detail": "ENRICHED — CVE-2024-41006 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42070", "detail": "ENRICHED — CVE-2024-42070 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42079", "detail": "ENRICHED — CVE-2024-42079 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42082", "detail": "ENRICHED — CVE-2024-42082 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42090", "detail": "ENRICHED — CVE-2024-42090 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42093", "detail": "ENRICHED — CVE-2024-42093 (Linux). Received CVSS 7.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42094", "detail": "ENRICHED — CVE-2024-42094 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42096", "detail": "ENRICHED — CVE-2024-42096 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42106", "detail": "ENRICHED — CVE-2024-42106 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42114", "detail": "ENRICHED — CVE-2024-42114 (Linux). Received CVSS 4.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42131", "detail": "ENRICHED — CVE-2024-42131 (Linux). Received CVSS 4.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42154", "detail": "ENRICHED — CVE-2024-42154 (Linux). Received CVSS 4.4 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42265", "detail": "ENRICHED — CVE-2024-42265 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42281", "detail": "ENRICHED — CVE-2024-42281 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42283", "detail": "ENRICHED — CVE-2024-42283 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42292", "detail": "ENRICHED — CVE-2024-42292 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42302", "detail": "ENRICHED — CVE-2024-42302 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42305", "detail": "ENRICHED — CVE-2024-42305 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-42312", "detail": "ENRICHED — CVE-2024-42312 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43828", "detail": "ENRICHED — CVE-2024-43828 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43834", "detail": "ENRICHED — CVE-2024-43834 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43871", "detail": "ENRICHED — CVE-2024-43871 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43879", "detail": "ENRICHED — CVE-2024-43879 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43889", "detail": "ENRICHED — CVE-2024-43889 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43890", "detail": "ENRICHED — CVE-2024-43890 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-43893", "detail": "ENRICHED — CVE-2024-43893 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44935", "detail": "ENRICHED — CVE-2024-44935 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44944", "detail": "ENRICHED — CVE-2024-44944 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44948", "detail": "ENRICHED — CVE-2024-44948 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44960", "detail": "ENRICHED — CVE-2024-44960 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44965", "detail": "ENRICHED — CVE-2024-44965 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44989", "detail": "ENRICHED — CVE-2024-44989 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-44990", "detail": "ENRICHED — CVE-2024-44990 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-45018", "detail": "ENRICHED — CVE-2024-45018 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46679", "detail": "ENRICHED — CVE-2024-46679 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46744", "detail": "ENRICHED — CVE-2024-46744 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46745", "detail": "ENRICHED — CVE-2024-46745 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46759", "detail": "ENRICHED — CVE-2024-46759 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46783", "detail": "ENRICHED — CVE-2024-46783 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46786", "detail": "ENRICHED — CVE-2024-46786 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-46854", "detail": "ENRICHED — CVE-2024-46854 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47660", "detail": "ENRICHED — CVE-2024-47660 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47684", "detail": "ENRICHED — CVE-2024-47684 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47685", "detail": "ENRICHED — CVE-2024-47685 (Linux). Received CVSS 9.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47692", "detail": "ENRICHED — CVE-2024-47692 (Linux). Received CVSS 6.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47699", "detail": "ENRICHED — CVE-2024-47699 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47705", "detail": "ENRICHED — CVE-2024-47705 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47707", "detail": "ENRICHED — CVE-2024-47707 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47709", "detail": "ENRICHED — CVE-2024-47709 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47710", "detail": "ENRICHED — CVE-2024-47710 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47713", "detail": "ENRICHED — CVE-2024-47713 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47718", "detail": "ENRICHED — CVE-2024-47718 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47735", "detail": "ENRICHED — CVE-2024-47735 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47736", "detail": "ENRICHED — CVE-2024-47736 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-47737", "detail": "ENRICHED — CVE-2024-47737 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49851", "detail": "ENRICHED — CVE-2024-49851 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49881", "detail": "ENRICHED — CVE-2024-49881 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49890", "detail": "ENRICHED — CVE-2024-49890 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49892", "detail": "ENRICHED — CVE-2024-49892 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49900", "detail": "ENRICHED — CVE-2024-49900 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49903", "detail": "ENRICHED — CVE-2024-49903 (Linux). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49938", "detail": "ENRICHED — CVE-2024-49938 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49944", "detail": "ENRICHED — CVE-2024-49944 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49948", "detail": "ENRICHED — CVE-2024-49948 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49949", "detail": "ENRICHED — CVE-2024-49949 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49955", "detail": "ENRICHED — CVE-2024-49955 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49968", "detail": "ENRICHED — CVE-2024-49968 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49977", "detail": "ENRICHED — CVE-2024-49977 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49994", "detail": "ENRICHED — CVE-2024-49994 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49997", "detail": "ENRICHED — CVE-2024-49997 (Linux). Received CVSS 7.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-49998", "detail": "ENRICHED — CVE-2024-49998 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50006", "detail": "ENRICHED — CVE-2024-50006 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50008", "detail": "ENRICHED — CVE-2024-50008 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50010", "detail": "ENRICHED — CVE-2024-50010 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50014", "detail": "ENRICHED — CVE-2024-50014 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50015", "detail": "ENRICHED — CVE-2024-50015 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50035", "detail": "ENRICHED — CVE-2024-50035 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50040", "detail": "ENRICHED — CVE-2024-50040 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50044", "detail": "ENRICHED — CVE-2024-50044 (Linux). Received CVSS 3.3 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50058", "detail": "ENRICHED — CVE-2024-50058 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50134", "detail": "ENRICHED — CVE-2024-50134 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-50251", "detail": "ENRICHED — CVE-2024-50251 (Linux). Received CVSS 6.2 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-52332", "detail": "ENRICHED — CVE-2024-52332 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-56570", "detail": "ENRICHED — CVE-2024-56570 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57884", "detail": "ENRICHED — CVE-2024-57884 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57917", "detail": "ENRICHED — CVE-2024-57917 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57924", "detail": "ENRICHED — CVE-2024-57924 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57940", "detail": "ENRICHED — CVE-2024-57940 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57948", "detail": "ENRICHED — CVE-2024-57948 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57977", "detail": "ENRICHED — CVE-2024-57977 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57980", "detail": "ENRICHED — CVE-2024-57980 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57981", "detail": "ENRICHED — CVE-2024-57981 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-57993", "detail": "ENRICHED — CVE-2024-57993 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58005", "detail": "ENRICHED — CVE-2024-58005 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58009", "detail": "ENRICHED — CVE-2024-58009 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58014", "detail": "ENRICHED — CVE-2024-58014 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58016", "detail": "ENRICHED — CVE-2024-58016 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58017", "detail": "ENRICHED — CVE-2024-58017 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58020", "detail": "ENRICHED — CVE-2024-58020 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58051", "detail": "ENRICHED — CVE-2024-58051 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58056", "detail": "ENRICHED — CVE-2024-58056 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58061", "detail": "ENRICHED — CVE-2024-58061 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58072", "detail": "ENRICHED — CVE-2024-58072 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58077", "detail": "ENRICHED — CVE-2024-58077 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2024-58085", "detail": "ENRICHED — CVE-2024-58085 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21645", "detail": "ENRICHED — CVE-2025-21645 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21648", "detail": "ENRICHED — CVE-2025-21648 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21704", "detail": "ENRICHED — CVE-2025-21704 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21705", "detail": "ENRICHED — CVE-2025-21705 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21706", "detail": "ENRICHED — CVE-2025-21706 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21708", "detail": "ENRICHED — CVE-2025-21708 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21724", "detail": "ENRICHED — CVE-2025-21724 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21728", "detail": "ENRICHED — CVE-2025-21728 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21744", "detail": "ENRICHED — CVE-2025-21744 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21745", "detail": "ENRICHED — CVE-2025-21745 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21767", "detail": "ENRICHED — CVE-2025-21767 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21776", "detail": "ENRICHED — CVE-2025-21776 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21779", "detail": "ENRICHED — CVE-2025-21779 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21787", "detail": "ENRICHED — CVE-2025-21787 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21802", "detail": "ENRICHED — CVE-2025-21802 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21806", "detail": "ENRICHED — CVE-2025-21806 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21814", "detail": "ENRICHED — CVE-2025-21814 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21835", "detail": "ENRICHED — CVE-2025-21835 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21838", "detail": "ENRICHED — CVE-2025-21838 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21853", "detail": "ENRICHED — CVE-2025-21853 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21913", "detail": "ENRICHED — CVE-2025-21913 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-21925", "detail": "ENRICHED — CVE-2025-21925 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-22060", "detail": "ENRICHED — CVE-2025-22060 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-22095", "detail": "ENRICHED — CVE-2025-22095 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-22105", "detail": "ENRICHED — CVE-2025-22105 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-22107", "detail": "ENRICHED — CVE-2025-22107 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-22111", "detail": "ENRICHED — CVE-2025-22111 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-23131", "detail": "ENRICHED — CVE-2025-23131 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-23143", "detail": "ENRICHED — CVE-2025-23143 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-37909", "detail": "ENRICHED — CVE-2025-37909 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-37945", "detail": "ENRICHED — CVE-2025-37945 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-37972", "detail": "ENRICHED — CVE-2025-37972 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-37980", "detail": "ENRICHED — CVE-2025-37980 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38105", "detail": "ENRICHED — CVE-2025-38105 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38125", "detail": "ENRICHED — CVE-2025-38125 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38201", "detail": "ENRICHED — CVE-2025-38201 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38322", "detail": "ENRICHED — CVE-2025-38322 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38681", "detail": "ENRICHED — CVE-2025-38681 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38704", "detail": "ENRICHED — CVE-2025-38704 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38721", "detail": "ENRICHED — CVE-2025-38721 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38725", "detail": "ENRICHED — CVE-2025-38725 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38727", "detail": "ENRICHED — CVE-2025-38727 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38732", "detail": "ENRICHED — CVE-2025-38732 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-38736", "detail": "ENRICHED — CVE-2025-38736 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39681", "detail": "ENRICHED — CVE-2025-39681 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39721", "detail": "ENRICHED — CVE-2025-39721 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39748", "detail": "ENRICHED — CVE-2025-39748 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39756", "detail": "ENRICHED — CVE-2025-39756 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39764", "detail": "ENRICHED — CVE-2025-39764 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39773", "detail": "ENRICHED — CVE-2025-39773 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39782", "detail": "ENRICHED — CVE-2025-39782 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39795", "detail": "ENRICHED — CVE-2025-39795 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39845", "detail": "ENRICHED — CVE-2025-39845 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39871", "detail": "ENRICHED — CVE-2025-39871 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39953", "detail": "ENRICHED — CVE-2025-39953 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-39955", "detail": "ENRICHED — CVE-2025-39955 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-40300", "detail": "ENRICHED — CVE-2025-40300 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71075", "detail": "ENRICHED — CVE-2025-71075 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71079", "detail": "ENRICHED — CVE-2025-71079 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71086", "detail": "ENRICHED — CVE-2025-71086 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71088", "detail": "ENRICHED — CVE-2025-71088 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71097", "detail": "ENRICHED — CVE-2025-71097 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71098", "detail": "ENRICHED — CVE-2025-71098 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71104", "detail": "ENRICHED — CVE-2025-71104 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71113", "detail": "ENRICHED — CVE-2025-71113 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71114", "detail": "ENRICHED — CVE-2025-71114 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71123", "detail": "ENRICHED — CVE-2025-71123 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71163", "detail": "ENRICHED — CVE-2025-71163 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71185", "detail": "ENRICHED — CVE-2025-71185 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71186", "detail": "ENRICHED — CVE-2025-71186 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71189", "detail": "ENRICHED — CVE-2025-71189 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71190", "detail": "ENRICHED — CVE-2025-71190 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71191", "detail": "ENRICHED — CVE-2025-71191 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71265", "detail": "ENRICHED — CVE-2025-71265 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71266", "detail": "ENRICHED — CVE-2025-71266 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2025-71267", "detail": "ENRICHED — CVE-2025-71267 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-103500", "detail": "ENRICHED — CVE-2026-103500 (Mozilla Thunderbird). Received CVSS 6.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-22977", "detail": "ENRICHED — CVE-2026-22977 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-22979", "detail": "ENRICHED — CVE-2026-22979 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-22982", "detail": "ENRICHED — CVE-2026-22982 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-22994", "detail": "ENRICHED — CVE-2026-22994 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23005", "detail": "ENRICHED — CVE-2026-23005 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23011", "detail": "ENRICHED — CVE-2026-23011 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23019", "detail": "ENRICHED — CVE-2026-23019 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23026", "detail": "ENRICHED — CVE-2026-23026 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23060", "detail": "ENRICHED — CVE-2026-23060 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23083", "detail": "ENRICHED — CVE-2026-23083 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23084", "detail": "ENRICHED — CVE-2026-23084 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23086", "detail": "ENRICHED — CVE-2026-23086 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23087", "detail": "ENRICHED — CVE-2026-23087 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23100", "detail": "ENRICHED — CVE-2026-23100 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23110", "detail": "ENRICHED — CVE-2026-23110 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23113", "detail": "ENRICHED — CVE-2026-23113 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23141", "detail": "ENRICHED — CVE-2026-23141 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23154", "detail": "ENRICHED — CVE-2026-23154 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23157", "detail": "ENRICHED — CVE-2026-23157 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23277", "detail": "ENRICHED — CVE-2026-23277 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23279", "detail": "ENRICHED — CVE-2026-23279 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23281", "detail": "ENRICHED — CVE-2026-23281 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23284", "detail": "ENRICHED — CVE-2026-23284 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23287", "detail": "ENRICHED — CVE-2026-23287 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23290", "detail": "ENRICHED — CVE-2026-23290 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23291", "detail": "ENRICHED — CVE-2026-23291 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23292", "detail": "ENRICHED — CVE-2026-23292 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23293", "detail": "ENRICHED — CVE-2026-23293 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23295", "detail": "ENRICHED — CVE-2026-23295 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23296", "detail": "ENRICHED — CVE-2026-23296 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23300", "detail": "ENRICHED — CVE-2026-23300 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23302", "detail": "ENRICHED — CVE-2026-23302 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23303", "detail": "ENRICHED — CVE-2026-23303 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23304", "detail": "ENRICHED — CVE-2026-23304 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23310", "detail": "ENRICHED — CVE-2026-23310 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23312", "detail": "ENRICHED — CVE-2026-23312 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23315", "detail": "ENRICHED — CVE-2026-23315 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23318", "detail": "ENRICHED — CVE-2026-23318 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23319", "detail": "ENRICHED — CVE-2026-23319 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23321", "detail": "ENRICHED — CVE-2026-23321 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23328", "detail": "ENRICHED — CVE-2026-23328 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23335", "detail": "ENRICHED — CVE-2026-23335 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23339", "detail": "ENRICHED — CVE-2026-23339 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23341", "detail": "ENRICHED — CVE-2026-23341 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23343", "detail": "ENRICHED — CVE-2026-23343 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23352", "detail": "ENRICHED — CVE-2026-23352 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23356", "detail": "ENRICHED — CVE-2026-23356 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23357", "detail": "ENRICHED — CVE-2026-23357 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23359", "detail": "ENRICHED — CVE-2026-23359 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23365", "detail": "ENRICHED — CVE-2026-23365 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23367", "detail": "ENRICHED — CVE-2026-23367 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23368", "detail": "ENRICHED — CVE-2026-23368 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23370", "detail": "ENRICHED — CVE-2026-23370 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23374", "detail": "ENRICHED — CVE-2026-23374 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23379", "detail": "ENRICHED — CVE-2026-23379 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23381", "detail": "ENRICHED — CVE-2026-23381 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23382", "detail": "ENRICHED — CVE-2026-23382 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23388", "detail": "ENRICHED — CVE-2026-23388 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23389", "detail": "ENRICHED — CVE-2026-23389 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23396", "detail": "ENRICHED — CVE-2026-23396 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23397", "detail": "ENRICHED — CVE-2026-23397 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23398", "detail": "ENRICHED — CVE-2026-23398 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23422", "detail": "ENRICHED — CVE-2026-23422 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23438", "detail": "ENRICHED — CVE-2026-23438 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23439", "detail": "ENRICHED — CVE-2026-23439 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23442", "detail": "ENRICHED — CVE-2026-23442 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23446", "detail": "ENRICHED — CVE-2026-23446 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23452", "detail": "ENRICHED — CVE-2026-23452 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23454", "detail": "ENRICHED — CVE-2026-23454 (Linux). Received CVSS 7.0 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23463", "detail": "ENRICHED — CVE-2026-23463 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23474", "detail": "ENRICHED — CVE-2026-23474 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-23475", "detail": "ENRICHED — CVE-2026-23475 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31391", "detail": "ENRICHED — CVE-2026-31391 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31411", "detail": "ENRICHED — CVE-2026-31411 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31415", "detail": "ENRICHED — CVE-2026-31415 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31416", "detail": "ENRICHED — CVE-2026-31416 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31418", "detail": "ENRICHED — CVE-2026-31418 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31421", "detail": "ENRICHED — CVE-2026-31421 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31422", "detail": "ENRICHED — CVE-2026-31422 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31423", "detail": "ENRICHED — CVE-2026-31423 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31424", "detail": "ENRICHED — CVE-2026-31424 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31427", "detail": "ENRICHED — CVE-2026-31427 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31428", "detail": "ENRICHED — CVE-2026-31428 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31441", "detail": "ENRICHED — CVE-2026-31441 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31451", "detail": "ENRICHED — CVE-2026-31451 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31452", "detail": "ENRICHED — CVE-2026-31452 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31466", "detail": "ENRICHED — CVE-2026-31466 (Linux). Received CVSS 4.7 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31485", "detail": "ENRICHED — CVE-2026-31485 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31495", "detail": "ENRICHED — CVE-2026-31495 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31496", "detail": "ENRICHED — CVE-2026-31496 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31500", "detail": "ENRICHED — CVE-2026-31500 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31503", "detail": "ENRICHED — CVE-2026-31503 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31515", "detail": "ENRICHED — CVE-2026-31515 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31518", "detail": "ENRICHED — CVE-2026-31518 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31521", "detail": "ENRICHED — CVE-2026-31521 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31546", "detail": "ENRICHED — CVE-2026-31546 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31555", "detail": "ENRICHED — CVE-2026-31555 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31565", "detail": "ENRICHED — CVE-2026-31565 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31573", "detail": "ENRICHED — CVE-2026-31573 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31580", "detail": "ENRICHED — CVE-2026-31580 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31583", "detail": "ENRICHED — CVE-2026-31583 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31624", "detail": "ENRICHED — CVE-2026-31624 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31625", "detail": "ENRICHED — CVE-2026-31625 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31628", "detail": "ENRICHED — CVE-2026-31628 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31634", "detail": "ENRICHED — CVE-2026-31634 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31642", "detail": "ENRICHED — CVE-2026-31642 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31651", "detail": "ENRICHED — CVE-2026-31651 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31658", "detail": "ENRICHED — CVE-2026-31658 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31664", "detail": "ENRICHED — CVE-2026-31664 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31670", "detail": "ENRICHED — CVE-2026-31670 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31671", "detail": "ENRICHED — CVE-2026-31671 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31696", "detail": "ENRICHED — CVE-2026-31696 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31704", "detail": "ENRICHED — CVE-2026-31704 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31737", "detail": "ENRICHED — CVE-2026-31737 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31752", "detail": "ENRICHED — CVE-2026-31752 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31775", "detail": "ENRICHED — CVE-2026-31775 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-31777", "detail": "ENRICHED — CVE-2026-31777 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43022", "detail": "ENRICHED — CVE-2026-43022 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43024", "detail": "ENRICHED — CVE-2026-43024 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43026", "detail": "ENRICHED — CVE-2026-43026 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43027", "detail": "ENRICHED — CVE-2026-43027 (Linux). Received CVSS 7.8 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43035", "detail": "ENRICHED — CVE-2026-43035 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43040", "detail": "ENRICHED — CVE-2026-43040 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43045", "detail": "ENRICHED — CVE-2026-43045 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43052", "detail": "ENRICHED — CVE-2026-43052 (Linux). Received CVSS 7.1 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43080", "detail": "ENRICHED — CVE-2026-43080 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43094", "detail": "ENRICHED — CVE-2026-43094 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43115", "detail": "ENRICHED — CVE-2026-43115 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43191", "detail": "ENRICHED — CVE-2026-43191 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43204", "detail": "ENRICHED — CVE-2026-43204 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43228", "detail": "ENRICHED — CVE-2026-43228 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43299", "detail": "ENRICHED — CVE-2026-43299 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43308", "detail": "ENRICHED — CVE-2026-43308 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43310", "detail": "ENRICHED — CVE-2026-43310 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43311", "detail": "ENRICHED — CVE-2026-43311 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43421", "detail": "ENRICHED — CVE-2026-43421 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43443", "detail": "ENRICHED — CVE-2026-43443 (Linux). Received CVSS 5.5 and CPE data from NVD." }, { "type": "ENRICHED", "cve_id": "CVE-2026-43446", "detail": "ENRICHED — CVE-2026-43446 (Linux). Received CVSS 5.5 and CPE data from NVD." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }