Security Box Score — Thursday, May 28, 2026

Thursday, May 28, 2026 · all times UTC← 2026-05-27 · archive · 2026-05-29 →

542 CVEs published May 28, 2026: 56 critical, 278 high, 194 medium, 14 low; 0 in KEV; 30 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 517 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	2891	4021	1021	2563
KEV catalog size	1670

115 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	639	965	79	615	269	1	27	2	0.2	7.8	.0013	+476
microsoft	170	490	43	328	102	0	378	27	5.5	7.8	.0045	-17
google	168	174	10	120	35	6	74	4	2.3	8.3	.0023	+167
red hat	35	58	8	26	22	2	4	0	0.0	7.4	.0040	+24
apple	20	47	0	12	27	1	93	7	14.9	6.2	.0034	+20
canonical	14	14	0	4	5	5	0	0	0.0	5.5	.0009	+14
freebsd	7	7	0	5	2	0	0	0	0.0	7.8	.0020	+7
suse	2	2	0	2	0	0	0	0	0.0	8.2	.0020	+2

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	5	13	3	1	2	96	8	61.5	8.6	.1247	+2
checkpoint	6	6	0	3	3	3	0	0.0	6.5	.0338	+6
fortinet	1	6	1	3	0	28	3	50.0	7.9	.4330	-2
ivanti	2	5	0	1	0	33	4	80.0	8.8	.8056	+1
f5	2	3	2	0	0	7	1	33.3	9.2	.0996	+2
ubiquiti	2	3	1	2	0	4	0	0.0	8.8	.0068	+2
broadcom	0	2	0	0	0	4	2	100.0	—	.1990	0
palo alto networks	1	1	0	0	0	14	1	100.0	—	.3207	+1

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	21	32	4	15	12	40	1	3.1	7.4	.0064	+12
gitlab	7	9	0	1	6	4	2	22.2	4.3	.0032	+7
mozilla	6	6	3	2	1	13	0	0.0	8.8	.0042	+6
drupal	5	5	1	1	3	5	1	20.0	5.1	.0026	+5
docker	3	3	0	3	0	1	0	0.0	8.8	.0022	+3
github	2	2	1	1	0	0	0	0.0	8.1	.0347	+2
jenkins	0	0	0	0	0	6	0	—	—	—	0
joomla	0	0	0	0	0	1	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
ibm	49	49	10	24	15	7	0	0.0	7.5	.0028	+49
oracle	25	27	8	15	4	40	0	0.0	8.1	.0027	+25
progress	4	4	0	4	0	9	0	0.0	7.5	.0036	+4
adobe	1	4	0	1	0	75	3	75.0	8.6	.2776	-2
veeam	3	3	1	2	0	4	0	0.0	8.6	.0040	+3
solarwinds	0	3	1	0	0	11	3	100.0	9.8	.8362	0
zohocorp	2	2	0	1	1	0	0	0.0	7.1	.0104	+2
atlassian	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
synology	18	18	2	3	10	3	0	0	0.0	5.6	.0025	+18
d-link	2	3	0	1	1	0	26	1	33.3	7.3	.0059	+1
hitachi energy	2	2	0	0	2	0	0	0	0.0	5.7	.0014	+2
siemens	1	1	0	1	0	0	1	0	0.0	8.7	.0032	+1
hikvision	0	1	0	0	0	0	2	1	100.0	—	1.0000	0
dahua	0	0	0	0	0	0	2	0	—	—	—	0
qnap	0	0	0	0	0	0	8	0	—	—	—	0
schneider electric	0	0	0	0	0	0	1	0	—	—	—	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
concrete cms	44	44	1	9	13	21	0	5.7	.0015	+44
edimax	44	44	0	27	0	17	1	7.4	.0059	+44
helmholz	42	42	0	39	3	0	0	7.1	.0026	+42
mb connect line	42	42	0	39	3	0	0	7.1	.0026	+42
open ises	37	37	2	14	21	0	0	6.9	.0021	+37
totolink	34	34	0	25	0	9	0	8.9	.0191	+34
netatalk	33	33	1	13	9	10	0	6.4	.0030	+33
nvidia	33	33	8	18	7	0	0	7.8	.0038	+33

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-31431	.9991	100.0	7.8
CVE-2008-4250	.9875	99.9	—
CVE-2026-41940	.9793	99.9	9.3
CVE-2026-43284	.9324	99.8	8.8
CVE-2026-43500	.9285	99.8	7.8
CVE-2010-0249	.9188	99.8	—
CVE-2026-20182	.9152	99.8	—
CVE-2026-42208	.8942	99.8	—
CVE-2026-9082	.8832	99.8	9.8
CVE-2009-3459	.8658	99.7	—

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-48172	10.0	.1891	KEV
CVE-2026-8054	10.0	.0158
CVE-2026-45087	10.0	.0147
CVE-2026-43997	10.0	.0098
CVE-2026-42826	10.0	.0084
CVE-2026-20223	10.0	.0083
CVE-2026-44005	10.0	.0083
CVE-2026-44006	10.0	.0081
CVE-2026-46840	10.0	.0073
CVE-2026-46595	10.0	.0050

Most disclosures (vendor)
Vendor	CVEs
linux	641
microsoft	170
google	168
ibm	49
concrete cms	44
edimax	44
helmholz	42
mb connect line	42
red hat	38
open ises	37

Most KEV additions (YTD)
Vendor	KEV
microsoft	27
cisco	8
apple	7
google	4
ivanti	4
synacor	4
adobe	3
fortinet	3
smartertools	3
solarwinds	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	12
PyPI	2
crates.io	2
npm	2

Fastest to KEV
CVE	Vendor	Days
CVE-2008-4250	Microsoft	0
CVE-2009-1537	Microsoft	0
CVE-2009-3459	Adobe	0
CVE-2010-0249	Microsoft	0
CVE-2010-0806	Microsoft	0
CVE-2025-34291	Langflow	0
CVE-2026-0300	Palo Alto Networks	0
CVE-2026-20182	Cisco	0
CVE-2026-31431	Linux	0
CVE-2026-34926	Trend Micro, Inc.	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	Accellion	2021-11-17	1653
CVE-2021-27102	Accellion	2021-11-17	1653
CVE-2021-27101	Accellion	2021-11-17	1653
CVE-2021-27103	Accellion	2021-11-17	1653
CVE-2021-21017	Adobe	2021-11-17	1653
CVE-2021-28550	Adobe	2021-11-17	1653
CVE-2021-42013	Apache	2021-11-17	1653
CVE-2021-41773	Apache	2021-11-17	1653
CVE-2021-30858	Apple	2021-11-17	1653
CVE-2021-30860	Apple	2021-11-17	1653

Transactions

EXPLOIT PUBLISHED — CVE-2026-32847 (HKUDS DeepCode). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-42998 (OpenStack Keystone). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-42999 (OpenStack Keystone). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-43000 (OpenStack Keystone). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-43898 (nyariv SandboxJS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44394 (OpenStack Keystone). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44461 (zed-industries zed). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44462 (zed-industries zed). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44463 (zed-industries zed). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44465 (zed-industries zed). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44466 (zed-industries zed). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44848 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44849 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44850 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44881 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44882 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44883 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44884 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44885 (portainer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-45323 (jpettitt meshcore-card). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-45403 (Mintplex-Labs anything-llm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-47713 (Mintplex-Labs anything-llm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48116 (Mintplex-Labs anything-llm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48522 (jpadilla pyjwt). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48523 (jpadilla pyjwt). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48525 (jpadilla pyjwt). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48526 (jpadilla pyjwt). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-49237 (Canonical Multipass). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-49238 (Canonical Multipass). Public exploit reference added.

DUE DATE PASSED — CVE-2026-9082 (Drupal core). CISA remediation deadline was May 27, 2026; still in catalog.

Yesterday's Results

542 CVEs published. 25 box scores and 375 table rows below; the remaining 142 continue on page 2 — every CVE is listed, nothing truncated.

CVE-2026-4408CRITICAL

Red Hat Red Hat Enterprise Linux 10 — Samba: remote code execution in samr

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0250   83.4     —

AFFECTED
  Product                                                                Versions     Fixed
  Red Hat Enterprise Linux 10                                            unspecified  0:4.23.5-109.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support                  unspecified  0:4.21.3-114.el10_0.1
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:4.10.16-26.el7_9.1
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:4.10.16-26.el7_9.1
  Red Hat Enterprise Linux 8                                             unspecified  0:4.19.4-16.el8_10
  Red Hat Enterprise Linux 8                                             unspecified  0:4.19.4-16.el8_10
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  0:4.13.3-12.el8_4.1
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On  unspecified  0:4.13.3-12.el8_4.1
  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support  unspecified  0:4.15.5-16.el8_6.1
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On  unspecified  0:4.15.5-16.el8_6.1
  + 12 more

TIMELINE
  Mar 18  Reserved by CNA
  May 28  Published (CNA: redhat)

CWE-78 · CNA: redhat · 18 references · NVD status: Modified

CVE-2026-39929HIGH

Lakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    8.7   .0140   70.3     —

AFFECTED
  Product         Versions     Fixed
  SysTrack Agent  unspecified  —

TIMELINE
  Apr 7   Reserved by CNA
  May 28  Published (CNA: VulnCheck)

CWE-125, CWE-754 · CNA: VulnCheck · 5 references · NVD status: Awaiting Analysis

CVE-2026-38704CRITICAL

n/a n/a — A command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302 firmware V3.…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0127   67.3     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Apr 6   Reserved by CNA
  May 28  Published (CNA: mitre)

CWE-77 · CNA: mitre · 1 reference · NVD status: Analyzed

CVE-2026-38702CRITICAL

n/a n/a — A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0124   66.7     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Apr 6   Reserved by CNA
  May 28  Published (CNA: mitre)

CWE-77 · CNA: mitre · 1 reference · NVD status: Analyzed

CVE-2026-38703CRITICAL

n/a n/a — A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0124   66.7     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Apr 6   Reserved by CNA
  May 28  Published (CNA: mitre)

CWE-77 · CNA: mitre · 1 reference · NVD status: Analyzed

CVE-2026-38707CRITICAL

n/a n/a — A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.10…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0124   66.7     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Apr 6   Reserved by CNA
  May 28  Published (CNA: mitre)

CWE-77 · CNA: mitre · 1 reference · NVD status: Analyzed

CVE-2026-45292MEDIUM

open-telemetry opentelemetry-java — opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  L    5.3   .0110   62.8     —

AFFECTED
  Product                                    Versions    Fixed
  opentelemetry-java                         < 1.62.0 –  —
  opentelemetry-api                          1.62.0 –    —
  opentelemetry-extension-trace-propagators  1.62.0 –    —

TIMELINE
  May 11  Reserved by CNA
  May 28  Published (CNA: GitHub_M)

CWE-770 · CNA: GitHub_M · 11 references · NVD status: Awaiting Analysis

CVE-2026-45332HIGH

marcantondahmen automad — Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0107   62.1     —

AFFECTED
  Product  Versions                             Fixed
  automad  >= 2.0.0-alpha.1, < 2.0.0-beta.28 –  —

TIMELINE
  May 11  Reserved by CNA
  May 28  Published (CNA: GitHub_M)

CWE-200, CWE-306 · CNA: GitHub_M · 1 reference · NVD status: Deferred

CVE-2026-8809CRITICAL

hwk-fr Advanced Custom Fields: Extended — Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0080   53.5     —

AFFECTED
  Product                           Versions     Fixed
  Advanced Custom Fields: Extended  unspecified  —

TIMELINE
  May 18  Reserved by CNA
  May 28  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 6 references · NVD status: Deferred

CVE-2026-4944HIGH

vllm-project vllm-project/vllm — Hardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security Control

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  H    8.8   .0075   51.8     —

AFFECTED
  Product            Versions       Fixed
  vllm-project/vllm  unspecified –  —

TIMELINE
  Mar 26  Reserved by CNA
  May 28  Published (CNA: @huntr_ai)

CWE-22 · CNA: @huntr_ai · 1 reference · NVD status: Deferred

CVE-2026-6226HIGH

shabti Frontend Admin by DynamiApps — Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0074   51.6     —

AFFECTED
  Product                       Versions     Fixed
  Frontend Admin by DynamiApps  unspecified  —

TIMELINE
  Apr 13  Reserved by CNA
  May 28  Published (CNA: Wordfence)

CWE-269 · CNA: Wordfence · 10 references · NVD status: Deferred

CVE-2026-46840CRITICAL

Oracle Corporation Oracle REST Data Services — Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are a…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0073   51.1     —

AFFECTED
  Product                    Versions  Fixed
  Oracle REST Data Services  24.2.0 –  —

TIMELINE
  May 18  Reserved by CNA
  May 28  Published (CNA: oracle)

CWE-284, CWE-287, CWE-306 · CNA: oracle · 1 reference · NVD status: Analyzed

CVE-2026-9227HIGH

cssigniterteam GutenBee – Gutenberg Blocks — GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0068   49.6     —

AFFECTED
  Product                      Versions     Fixed
  GutenBee – Gutenberg Blocks  unspecified  —

TIMELINE
  May 21  Reserved by CNA
  May 28  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · 9 references · NVD status: Deferred

CVE-2026-46195CRITICAL

Linux Linux — smb: client: validate dacloffset before building DACL pointers

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0067   49.2     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 –  —
  Linux    5.12 –                                      5.15.210

TIMELINE
  May 13  Reserved by CNA
  May 28  Published (CNA: Linux)

CWE-476, CWE-787 · CNA: Linux · 13 references · NVD status: Modified

CVE-2026-8979CRITICAL

Mennekes Amtron — Authentication Bypass

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0061   46.4     —

AFFECTED
  Product  Versions     Fixed
  Amtron   unspecified  5.33.11-21500

TIMELINE
  May 19  Reserved by CNA
  May 28  Published (CNA: CyberDanube)

CWE-287 · CNA: CyberDanube · 1 reference · NVD status: Deferred

CVE-2026-44885MEDIUM

Portainer: Path traversal in backup archive extraction allows arbitrary file write

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  N  H  L    5.5   .0061   46.2     —

AFFECTED
  Product    Versions               Fixed
  portainer  >= 2.33.0, < 2.33.8 –  —

TIMELINE
  May 7   Reserved by CNA
  May 28  Public exploit reference published
  May 28  Published (CNA: GitHub_M)

CWE-22 · CNA: GitHub_M · 2 references · NVD status: Analyzed

CVE-2026-10044HIGH

Usagi-org ai-goofish-monitor — ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   N   N    8.2   .0060   45.9     —

AFFECTED
  Product             Versions     Fixed
  ai-goofish-monitor  unspecified  —

TIMELINE
  May 28  Reserved by CNA
  May 28  Published (CNA: VulnCheck)

CWE-36 · CNA: VulnCheck · 4 references · NVD status: Deferred

CVE-2026-46133HIGH

Linux Linux — RDMA/rxe: Reject unknown opcodes before ICRC processing

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0057   44.7     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    8700e3e7c4857d28ebaa824509934556da0b3e76 –  —
  Linux    4.8 –                                       5.10.258

TIMELINE
  May 13  Reserved by CNA
  May 28  Published (CNA: Linux)

CWE-125 · CNA: Linux · 8 references · NVD status: Undergoing Analysis

CVE-2026-44604HIGH

Red Hat Red Hat Hardened Images — Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   H   N   R  U  H  H  H    7.0   .0057   44.3     —

AFFECTED
  Product                                  Versions     Fixed
  Red Hat Hardened Images                  unspecified  6.0.1-6.1.hum1
  Pen Drive Powered by Red Hat Lightspeed  unspecified  —
  Red Hat build of Quarkus Native builder  unspecified  —
  Red Hat Enterprise Linux 10              unspecified  —
  Red Hat Enterprise Linux 10              unspecified  —
  Red Hat Enterprise Linux 6               unspecified  —
  Red Hat Enterprise Linux 7               unspecified  —
  Red Hat Enterprise Linux 8               unspecified  —
  Red Hat Enterprise Linux 9               unspecified  —
  Red Hat Enterprise Linux 9               unspecified  —
  + 4 more

TIMELINE
  May 7   Reserved by CNA
  May 28  Published (CNA: redhat)

CWE-78 · CNA: redhat · 3 references · NVD status: Awaiting Analysis

CVE-2026-6937MEDIUM

croixhaug Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin — Appointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  L  N    5.3   .0056   44.0     —

AFFECTED
  Product                                                                     Versions     Fixed
  Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin  unspecified  —

TIMELINE
  Apr 23  Reserved by CNA
  May 28  Published (CNA: Wordfence)

CWE-862 · CNA: Wordfence · 11 references · NVD status: Deferred

CVE-2026-7797HIGH

croixhaug Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin — Appointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0055   43.6     —

AFFECTED
  Product                                                                     Versions     Fixed
  Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin  unspecified  —

TIMELINE
  May 4   Reserved by CNA
  May 28  Published (CNA: Wordfence)

CWE-89 · CNA: Wordfence · 11 references · NVD status: Deferred

CVE-2026-24444CRITICAL

SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0053   42.7     —

AFFECTED
  Product  Versions      Fixed
  NE6037   7.1.6.0.25 –  —

TIMELINE
  Jan 22  Reserved by CNA
  May 28  Published (CNA: VulnCheck)

CWE-798 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2025-48977HIGH

Apache Ignite: REST HTTP arbitrary file read vulnerability

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   N   N    8.5   .0053   42.2     —

AFFECTED
  Product        Versions  Fixed
  Apache Ignite  2.0.0 –   —

TIMELINE
  May 29  Reserved by CNA
  May 28  Published (CNA: apache)

CWE-23 · CNA: apache · 2 references · NVD status: Analyzed

CVE-2026-46119CRITICAL

Linux Linux — libceph: Fix slab-out-of-bounds access in auth message processing

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  H    9.1   .0053   42.1     —

AFFECTED
  Product  Versions                                    Fixed
  Linux    4e7a5dcd1bbab6560fbc8ada29a840e7a20ed7bc –  —
  Linux    2.6.34 –                                    5.15.209

TIMELINE
  May 13  Reserved by CNA
  May 28  Published (CNA: Linux)

CWE-125 · CNA: Linux · 7 references · NVD status: Undergoing Analysis

CVE-2026-9804HIGH

Red Hat Red Hat Container Native Virtualization 4.17 — Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  N  N    7.7   .0052   41.6     —

AFFECTED
  Product                                       Versions     Fixed
  Red Hat Container Native Virtualization 4.17  unspecified  1781757410
  Red Hat Container Native Virtualization 4.18  unspecified  1781928221
  Red Hat Container Native Virtualization 4.19  unspecified  1781590993
  Red Hat Container Native Virtualization 4.2   unspecified  1781838712
  Red Hat Container Native Virtualization 4.21  unspecified  1782012918
  Red Hat OpenShift Virtualization 4            unspecified  —

TIMELINE
  May 28  Reserved by CNA
  May 28  Published (CNA: redhat)

CWE-59 · CNA: redhat · 8 references · NVD status: Awaiting Analysis

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-45261	9.3	41.5	gitbutlerapp	gitbutler	CWE-94	GitButler: Link injection via forge integration enables arbitrary script exec…
CVE-2026-32997	8.6	41.4	Veeam	Backup and Replication	CWE-36	A vulnerability allowing an authenticated user with the Backup Administrator …
CVE-2026-46185	9.1	41.3	Linux	Linux	CWE-125	smb/client: fix out-of-bounds read in symlink_data()
CVE-2026-49127	8.8	41.2	MusicPlayerDaemon	MPD	CWE-193	Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be
CVE-2026-8697	8.7	41.2	TP-Link Systems Inc.	Archer C64 v1.0	CWE-306	Improper Authentication Rate Limiting on TP-Link's Archer C64
CVE-2026-49238	8.4	40.9	Canonical	Multipass	CWE-22	SFTP Server VM Escape in Canonical Multipass
CVE-2026-7048	6.5	40.8	10web	Photo Gallery by 10Web – Mobile-Friendly Image Gallery	CWE-89	Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection…
CVE-2026-41184	6.0	40.8	Tigera	Calico	CWE-532	ServiceAccount token disclosure via install-cni container logs
CVE-2026-49128	8.7	40.6	MusicPlayerDaemon	MPD	CWE-22	Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling
CVE-2026-46177	7.5	40.6	Linux	Linux	—	ipmi: Add limits to event and receive message requests
CVE-2026-46110	7.5	40.6	Linux	Linux	CWE-476	net: stmmac: Prevent NULL deref when RX memory exhausted
CVE-2026-46115	9.8	40.0	Linux	Linux	—	block: add pgmap check to biovec_phys_mergeable
CVE-2026-44477	9.4	39.3	cloudnative-pg	cloudnative-pg	CWE-250	CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL sup…
CVE-2026-46155	9.1	39.2	Linux	Linux	CWE-125	smb/client: fix out-of-bounds read in smb2_compound_op()
CVE-2026-9801	4.9	39.2	Red Hat	Red Hat build of Keycloak 26.4	CWE-1284	Keycloak: keycloak: denial of service via malformed ldap password policy resp…
CVE-2026-43898	10.0	38.8	nyariv	SandboxJS	CWE-94	SandboxJS: Sandbox escape via Function.caller leakage of internal call op
CVE-2026-41565	7.5	38.6	MIK	CryptX	CWE-121	CryptX versions before 0.088_001 for Perl have a stack buffer overflow in fou…
CVE-2026-46114	7.5	38.5	Linux	Linux	CWE-476	RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
CVE-2026-34311	9.8	38.1	Oracle Corporation	Oracle Hospitality OPERA 5 Property Services	—	Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of …
CVE-2026-45344	8.1	37.8	Kovah	LinkAce	CWE-74	LinkAce: Setup database password newline injection enables pre-auth RCE on un…
CVE-2026-33590	8.5	37.5	Portainer	Portainer Community Edition	CWE-276	Insecure default permissions in Portainer CE
CVE-2026-9009	8.8	37.1	CodeRevolution	Crawlomatic Multipage Scraper Post Generator	CWE-434	Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author…
CVE-2026-44462	8.8	36.5	zed-industries	zed	CWE-184	Zed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool Perm…
CVE-2026-7634	7.2	36.3	veronalabs	SlimStat Analytics	CWE-79	SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting vi…
CVE-2026-46775	9.9	35.9	Oracle Corporation	Oracle REST Data Services	CWE-400	Vulnerability in Oracle REST Data Services (component: Core). Supported versi…
CVE-2026-46137	9.8	35.5	Linux	Linux	CWE-362	mptcp: pm: ADD_ADDR rtx: fix potential data-race
CVE-2026-46124	7.5	35.5	Linux	Linux	—	isofs: validate block number from NFS file handle in isofs_export_iget
CVE-2026-9094	9.8	35.0	Casdoor	Casdoor	—	CVE-2026-9094
CVE-2026-7802	8.8	34.8	shabti	Frontend Admin by DynamiApps	CWE-862	Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticat…
CVE-2026-9803	5.3	34.8	Red Hat	Red Hat build of Keycloak 26.4	CWE-125	Keycloak: keycloak: denial of service via malformed authorization header
CVE-2026-44881	8.5	34.7	portainer	portainer	CWE-59	Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update
CVE-2026-9939	8.8	34.3	Google	Chrome	CWE-122	Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 al…
CVE-2026-9097	9.8	33.7	Casdoor	Casdoor	—	CVE-2026-9097
CVE-2026-32998	9.4	33.5	Veeam	Service Provider Console	CWE-233	This vulnerability in Veeam Service Provider Console allows for remote code e…
CVE-2026-46135	9.8	32.9	Linux	Linux	CWE-362	nvmet-tcp: fix race between ICReq handling and queue teardown
CVE-2026-48526	7.4	32.7	jpadilla	pyjwt	CWE-287	PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens whe…
CVE-2026-35672	8.7	31.5	thorsten	phpMyFAQ	CWE-1188	phpMyFAQ - Authentication Bypass via Empty API Token
CVE-2026-9952	8.8	31.5	Google	Chrome	CWE-416	Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-32847	8.7	30.7	HKUDS	DeepCode	CWE-22	DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py
CVE-2026-7526	4.3	30.8	smub	PDF Embedder	CWE-200	PDF Embedder <= 4.9.3 - Authenticated (Contributor+) Information Exposure via…
CVE-2026-45288	9.8	30.6	JasperFx	marten	CWE-89	Marten has an SQL injection vulnerability in its full-text search regConfig p…
CVE-2026-45311	9.6	30.6	Hmbown	CodeWhale	CWE-94	CodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval
CVE-2026-9872	9.6	30.5	Google	Chrome	CWE-787	Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.21…
CVE-2026-40914	4.3	30.3	Apache Software Foundation	Apache Artemis Stomp Protocol	CWE-863	Apache Artemis Stomp Protocol, Apache ActiveMQ Artemis Stomp Protocol: Addres…
CVE-2026-48525	5.3	30.1	jpadilla	pyjwt	CWE-400	PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload…
CVE-2026-9828	2.9	30.1	QOS.CH Sarl	logback	CWE-502	Logback deserialization whitelist bypass for java.lang and java.util
CVE-2026-45076	5.1	29.9	element-hq	synapse	CWE-20	Synapse pagination denial of service
CVE-2026-9884	8.8	29.9	Google	Chrome	CWE-416	Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 all…
CVE-2026-44543	8.7	29.9	rancher	local-path-provisioner	CWE-269	Local Path Provisioner: HelperPod Template Injection
CVE-2026-48116	8.8	29.7	Mintplex-Labs	anything-llm	CWE-77	AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-fi…
CVE-2026-5737	6.5	29.7	bensibley	Independent Analytics – WordPress Analytics Plugin	CWE-918	Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery…
CVE-2026-9093	9.8	29.6	Casdoor	Casdoor	—	CVE-2026-9093
CVE-2026-44593	8.7	29.3	esm-dev	esm.sh	CWE-22	esm.sh: Legacy Route Path Traversal Can Lead to RCE
CVE-2026-30761	7.3	28.9	n/a	n/a	CWE-434	An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php co…
CVE-2026-9962	8.8	28.6	Google	Chrome	CWE-416	Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-9795	7.3	28.5	Red Hat	Red Hat build of Keycloak 26.4	CWE-266	Keycloak: keycloak: privilege escalation via improper scope mapping enforcement
CVE-2026-46839	9.9	28.3	Oracle Corporation	Oracle REST Data Services	CWE-284	Vulnerability in Oracle REST Data Services (component: Core). Supported versi…
CVE-2026-7651	5.3	28.0	wpeverest	User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder	CWE-639	User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecur…
CVE-2026-44657	7.5	28.0	mantisbt	mantisbt	CWE-79	MantisBT: Stored XSS in File Download
CVE-2026-9798	4.3	27.8	Red Hat	Red Hat build of Keycloak 26.4	CWE-305	Keycloak: keycloak: brute-force protection bypass in ciba flow
CVE-2026-44849	9.4	27.7	portainer	portainer	CWE-862	Portainer: Endpoint security bypass via Swarm service create/update
CVE-2026-2374	7.2	27.6	robertpeake	Login No Captcha reCAPTCHA	CWE-79	Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scrip…
CVE-2026-41141	6.5	27.6	espocrm	espocrm	CWE-639	EspoCRM: IDOR in EmailTemplate Prepare Endpoint Leaks Entity Data via Email A…
CVE-2026-45017	8.2	26.5	jg-rp	liquid	CWE-22	Python Liquid: Absolute paths escape filesystem loader search path
CVE-2026-48524	3.7	26.5	jpadilla	pyjwt	CWE-460	PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled k…
CVE-2026-44882	8.1	26.4	portainer	portainer	CWE-863	Portainer: Kubernetes middleware continues after token validation failure, by…
CVE-2026-37266	8.0	26.2	n/a	n/a	CWE-98	An issue in Responsive File Manager Responsive FileManager Version 9.14.0 all…
CVE-2026-7552	5.3	26.2	cyberhobo	Geo Mashup	CWE-862	Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Setti…
CVE-2026-42399	6.5	26.1	Elastic	Kibana	CWE-400	Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVE-2026-42400	6.5	26.1	Elastic	Kibana	CWE-400	Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVE-2026-8980	9.3	26.0	Mennekes	Amtron	CWE-269	Privilege Escalation
CVE-2026-9794	5.3	26.0	Red Hat	Red Hat build of Keycloak 26.4	CWE-209	Keycloak: keycloak: information disclosure via saml ecp endpoint
CVE-2026-46819	9.1	25.9	Oracle Corporation	Oracle Internet Procurement Connector	CWE-284	Vulnerability in the Oracle Internet Procurement Connector product of Oracle …
CVE-2026-9096	7.5	25.9	Casdoor	Casdoor	—	CVE-2026-9096
CVE-2026-42999	8.8	25.8	OpenStack	Keystone	CWE-863	An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBA…
CVE-2026-44848	9.4	25.7	portainer	portainer	CWE-862	Portainer: Missing authorization on Docker plugin endpoints allows host RCE
CVE-2026-46833	9.0	25.7	Oracle Corporation	Oracle Database Server	—	Vulnerability in the Net Service component of Oracle Database Server. Support…
CVE-2026-43000	8.8	25.6	OpenStack	Keystone	CWE-863	An issue was discovered in OpenStack Keystone before 29.0.2. When combined wi…
CVE-2026-44672	9.3	25.4	mapfish	mapfish-print	CWE-94	mapfish-print: Remote Code Injection (RCE) in Dynamic table
CVE-2026-9910	8.8	25.4	Google	Chrome	CWE-125	Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216…
CVE-2026-8915	8.8	25.2	Samsung Open Source	Escargot	CWE-787	Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Over…
CVE-2026-35675	8.8	25.2	thorsten	phpMyFAQ	CWE-307	phpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/use…
CVE-2026-41185	6.0	25.1	Tigera	Calico	CWE-532	ServiceAccount token disclosure via Azure IPAM CNI plugin logs
CVE-2026-9091	5.3	25.0	Casdoor	Casdoor	—	CVE-2026-9091
CVE-2026-44594	7.5	24.9	esm-dev	esm.sh	CWE-22	esm.sh: Path Traversal via package.json browser field allows reading arbitrar…
CVE-2026-6816	5.1	24.8	Drupal	TFA Basic Plugins	CWE-267	TFA Basic Plugins - Access Bypass
CVE-2026-9938	8.8	24.7	Google	Chrome	CWE-94	Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 a…
CVE-2026-10013	8.8	24.7	Google	Chrome	CWE-416	Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed …
CVE-2024-47096	5.1	24.7	Follet School Solutions	Destiny	CWE-79	Reflected Cross-Site Scripting in Follet School Solutions Destiny
CVE-2024-47097	5.1	24.7	Follet School Solutions	Destiny	CWE-79	Reflected Cross-Site Scripting in Follet School Solutions Destiny
CVE-2026-45323	9.6	24.4	jpettitt	meshcore-card	CWE-79	MeshCore Card: XSS vulnerability through meshcore node name
CVE-2026-9645	9.9	24.3	ScadaBR	ScadaBR	CWE-78	ScadaBR Authenticated Remote Code Execution
CVE-2026-9092	9.1	24.3	Casdoor	Casdoor	—	CVE-2026-9092
CVE-2026-46509	8.2	24.4	ranfdev	deepobj	CWE-1321	deepobj: Improperly Controlled Modification of Object Prototype Attributes ('…
CVE-2026-44883	7.7	24.3	portainer	portainer	CWE-598	Portainer: JWT accepted in URL query leaks tokens to logs and referers
CVE-2026-32999	9.0	24.0	WebPros	Comet Backup	CWE-94	Insufficient character filtering in backup agent signing module on Comet Back…
CVE-2026-9878	8.8	23.9	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-44796	6.5	23.9	nautobot	nautobot	CWE-400	Nautobot: Object bulk rename UI actions vulnerable to denial of service by cr…
CVE-2026-45044	8.8	23.7	rustfs	rustfs	CWE-306	RustFS: Authentication bypass in /profile/cpu and /profile/memory allows unau…
CVE-2026-44973	8.1	23.7	go-git	go-billy	CWE-22	Billy: Path traversal vulnerabilities
CVE-2026-47136	6.9	23.7	rustfs	rustfs	CWE-200	RustFS: Unauthenticated RustFS console license endpoint exposes license metadata
CVE-2026-30760	7.3	23.5	n/a	n/a	CWE-20	An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attacke…
CVE-2026-45343	8.5	23.2	Kovah	LinkAce	CWE-79	LinkAce - Stored XSS via Unsanitized SSO User's Name Rendered in Admin Audit …
CVE-2026-9927	8.8	22.9	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9928	8.8	22.9	Google	Chrome	CWE-125	Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.2…
CVE-2026-9941	8.8	22.9	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9945	8.8	22.9	Google	Chrome	CWE-416	Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 a…
CVE-2026-9947	8.8	22.9	Google	Chrome	CWE-416	Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-42998	8.8	22.9	OpenStack	Keystone	CWE-863	An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone app…
CVE-2026-35671	8.7	22.9	thorsten	phpMyFAQ	CWE-266	phpMyFAQ - Insecure Direct Object Reference in User Password API
CVE-2026-46125	8.8	22.8	Linux	Linux	CWE-416	wifi: mac80211: remove station if connection prep fails
CVE-2026-9873	8.8	22.6	Google	Chrome	CWE-416	Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-42398	7.7	22.5	Elastic	Kibana	CWE-918	Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network …
CVE-2026-9802	6.8	22.6	Red Hat	Red Hat build of Keycloak 26.4	CWE-613	Keycloak: keycloak: unauthorized account access via replayed refresh tokens a…
CVE-2026-9015	4.3	22.6	equalizedigital	Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance	CWE-862	Equalize Digital Accessibility Checker <= 1.42.0 - Missing Authorization to A…
CVE-2026-44655	8.6	22.3	mantisbt	mantisbt	CWE-79	MantisBT: Stored XSS on Move Attachments Admin Page
CVE-2026-9095	8.1	22.4	Casdoor	Casdoor	CWE-294	CVE-2026-9095
CVE-2026-44465	8.6	22.2	zed-industries	zed	CWE-78	Zed: Zed IDE Arbitrary Code Execution via untrusted repository with poisoned …
CVE-2026-9976	8.8	22.1	Google	Chrome	CWE-94	Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 …
CVE-2026-9995	8.8	22.1	Google	Chrome	CWE-416	Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-45364	7.3	22.0	better-auth	better-auth	CWE-307	Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable …
CVE-2026-49299	5.3	22.0	OpenStack	Neutron	CWE-863	In OpenStack Neutron before 28.0.1, the tagging controller enforces plural po…
CVE-2026-7052	7.2	21.8	htplugins	HT Contact Form – Drag & Drop Form Builder for WordPress	CWE-79	HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via Fi…
CVE-2026-41160	4.3	21.7	espocrm	espocrm	CWE-284	EspoCRM: Broken Access Control / IDOR in Note Pinning API allows unauthorized…
CVE-2026-9879	8.8	21.6	Google	Chrome	CWE-787	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed…
CVE-2026-9883	8.8	21.6	Google	Chrome	CWE-416	Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9896	8.8	21.6	Google	Chrome	CWE-787	Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-9897	8.8	21.6	Google	Chrome	CWE-416	Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-9969	8.8	21.6	Google	Chrome	CWE-20	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to…
CVE-2026-6427	6.4	21.6	a3rev	a3 Lazy Load	CWE-79	a3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Script…
CVE-2026-37579	7.3	21.5	n/a	n/a	CWE-502	An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute ar…
CVE-2026-46822	9.9	20.8	Oracle Corporation	Oracle iAssets	CWE-284	Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (compo…
CVE-2026-46826	8.8	20.8	Oracle Corporation	Oracle Payroll	CWE-306	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (compo…
CVE-2026-32995	7.5	20.8	Rocket.Chat	Rocket.Chat	CWE-284	The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0,…
CVE-2026-46198	8.8	20.6	Linux	Linux	CWE-190	batman-adv: fix integer overflow on buff_pos
CVE-2026-49129	6.9	20.6	MusicPlayerDaemon	MPD	CWE-918	Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin
CVE-2026-47759	5.4	20.6	tinymce	tinymce	CWE-79	TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- pref…
CVE-2026-47762	5.4	20.6	tinymce	tinymce	CWE-79	TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comm…
CVE-2026-41897	5.3	20.6	mantisbt	mantisbt	CWE-79	MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field
CVE-2026-9957	8.8	20.4	Google	Chrome	CWE-416	Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-9968	8.8	20.5	Google	Chrome	CWE-472	Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9973	8.8	20.5	Google	Chrome	CWE-787	Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-9963	7.5	20.2	Google	Chrome	CWE-457	Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allo…
CVE-2026-46138	8.1	20.1	Linux	Linux	CWE-125	Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_com…
CVE-2026-44798	7.1	20.1	nautobot	nautobot	CWE-471	Nautobot: GitRepository.current_head field should not be writable through RES…
CVE-2026-33464	6.5	19.9	Elastic	Kibana	CWE-400	Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVE-2026-46212	8.8	19.8	Linux	Linux	CWE-416	batman-adv: bla: prevent use-after-free when deleting claims
CVE-2026-46834	7.5	19.8	Oracle Corporation	Oracle Database Server	CWE-400	Vulnerability in the Net Service component of Oracle Database Server. Support…
CVE-2026-46835	7.5	19.8	Oracle Corporation	Oracle Database Server	CWE-400	Vulnerability in the Net Service component of Oracle Database Server. Support…
CVE-2026-46829	7.5	19.7	Oracle Corporation	Oracle REST Data Services	CWE-400	Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported v…
CVE-2026-9917	6.5	19.2	Google	Chrome	CWE-457	Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.21…
CVE-2026-49094	6.5	19.2	Elastic	Kibana	CWE-400	Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
CVE-2026-45039	9.8	19.0	rustfs	rustfs	CWE-798	RustFS: Internode RPC HMAC secret falls back to public default credential, en…
CVE-2026-46837	8.8	19.0	Oracle Corporation	Oracle Flow Manufacturing	CWE-269	Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business S…
CVE-2026-9792	6.5	19.0	Red Hat	Red Hat build of Keycloak 26.4	CWE-280	Keycloak: keycloak: security restriction bypass allows unauthorized ropc toke…
CVE-2026-9893	8.3	18.9	Google	Chrome	CWE-416	Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-35277	8.1	18.9	Oracle Corporation	Oracle REST Data Services	CWE-400	Vulnerability in Oracle REST Data Services (component: Core). Supported versi…
CVE-2026-46824	9.9	18.4	Oracle Corporation	Oracle Universal Work Queue	CWE-269	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business…
CVE-2026-47761	5.4	18.4	tinymce	tinymce	CWE-79	TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce…
CVE-2026-43979	5.0	18.3	LearningCircuit	local-deep-research	CWE-79	Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`…
CVE-2026-46238	8.8	18.1	Linux	Linux	—	batman-adv: stop caching unowned originator pointers in BAT IV
CVE-2026-49095	6.5	18.1	Elastic	Kibana	CWE-20	Improper Input Validation in Kibana Fleet Leading to Privilege Escalation
CVE-2026-46821	7.7	18.0	Oracle Corporation	Oracle Financials Common Modules	CWE-284	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Bus…
CVE-2026-10005	7.5	17.9	Google	Chrome	CWE-416	Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.…
CVE-2026-46818	7.4	17.9	Oracle Corporation	Oracle Payments	CWE-284	Vulnerability in the Oracle Payments product of Oracle E-Business Suite (comp…
CVE-2026-45374	9.6	17.8	Hmbown	CodeWhale	CWE-94	CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in P…
CVE-2026-42071	7.2	17.9	mantisbt	mantisbt	CWE-862	MantisBT: Private Bugnote Attachment Content Leak via REST API
CVE-2026-49130	6.9	17.8	MusicPlayerDaemon	MPD	CWE-93	Music Player Daemon < 0.24.11 CRLF Injection via XspfPlaylistPlugin.cxx
CVE-2026-47676	5.3	17.8	honojs	hono	CWE-444	Hono: app.mount() strips mount prefix using undecoded path, causing incorrect…
CVE-2026-9940	8.8	17.7	Google	Chrome	CWE-122	Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowe…
CVE-2026-46232	8.1	17.6	Linux	Linux	—	HID: playstation: Clamp num_touch_reports
CVE-2026-9806	6.3	17.6	misp	cti-transmute	CWE-79	Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Mal…
CVE-2026-42070	5.3	17.7	mantisbt	mantisbt	CWE-863	MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
CVE-2026-46843	5.3	17.6	Oracle Corporation	Oracle REST Data Services	CWE-400	Vulnerability in Oracle REST Data Services (component: Core). Supported versi…
CVE-2026-44461	8.6	17.5	zed-industries	zed	CWE-78	Zed: Remote Command Injection via Unquoted Environment Variable Keys (SSH / W…
CVE-2026-5343	7.4	17.5	Drupal	SAML SSO - Service Provider	CWE-754	SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2…
CVE-2026-44884	6.0	17.5	portainer	portainer	CWE-862	Portainer: Missing authorization on custom template file endpoint exposes tem…
CVE-2026-9983	8.8	17.2	Google	Chrome	CWE-843	Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9901	7.5	17.2	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9909	7.5	17.2	Google	Chrome	CWE-472	Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-9922	7.5	17.2	Google	Chrome	CWE-416	Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed…
CVE-2026-9934	7.5	17.2	Google	Chrome	CWE-416	Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9956	7.5	17.2	Google	Chrome	CWE-416	Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed…
CVE-2026-9923	8.8	17.0	Google	Chrome	CWE-416	Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-10007	8.8	16.9	Google	Chrome	CWE-416	Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-10015	8.8	16.9	Google	Chrome	CWE-472	Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-10016	8.8	16.9	Google	Chrome	CWE-416	Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-46827	8.8	16.6	Oracle Corporation	Oracle Payroll	CWE-269	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (compo…
CVE-2026-7621	4.3	16.6	smtp2go	SMTP2GO for WordPress – Email Made Easy	CWE-862	SMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Sub…
CVE-2026-44394	8.1	16.5	OpenStack	Keystone	CWE-863	An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone fed…
CVE-2026-6455	8.1	16.3	yudiz	WP Contact Form 7 DB Handler	CWE-352	WP Contact Form 7 DB Handler <= 3.0 - Cross-Site Request Forgery to Arbitrary…
CVE-2026-9912	6.5	16.3	Google	Chrome	CWE-200	Inappropriate implementation in GPU in Google Chrome on Android prior to 148.…
CVE-2026-9953	6.5	16.3	Google	Chrome	CWE-125	Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed …
CVE-2026-46526	5.0	16.3	LearningCircuit	local-deep-research	CWE-918	Local Deep Research: SSRF bypass in `safe_get`
CVE-2026-9037	9.3	16.1	XCharge	C6	CWE-494	Download of code without integrity check in XCharge C6
CVE-2026-9915	8.3	16.0	Google	Chrome	CWE-122	Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowe…
CVE-2026-9924	8.3	16.0	Google	Chrome	CWE-122	Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778…
CVE-2026-9926	8.3	16.0	Google	Chrome	CWE-122	Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowe…
CVE-2026-9891	9.0	16.0	Google	Chrome	CWE-416	Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed…
CVE-2026-47674	5.3	15.8	honojs	hono	CWE-185	Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
CVE-2026-9875	9.6	15.7	Google	Chrome	CWE-125	Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.2…
CVE-2026-9876	9.6	15.7	Google	Chrome	CWE-416	Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 a…
CVE-2026-9886	9.6	15.7	Google	Chrome	CWE-416	Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowe…
CVE-2026-9918	9.6	15.8	Google	Chrome	CWE-269	Inappropriate implementation in Tint in Google Chrome prior to 148.0.7778.216…
CVE-2026-9967	9.6	15.7	Google	Chrome	CWE-787	Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9961	8.8	15.7	Google	Chrome	CWE-416	Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 all…
CVE-2026-9965	8.8	15.7	Google	Chrome	CWE-787	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed…
CVE-2026-3173	6.5	15.8	mr2p	Meta Field Block – Display custom fields in the Block Editor without coding	CWE-639	Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated…
CVE-2026-8689	4.3	15.7	themeisle	Visualizer: Tables and Charts Manager for WordPress	CWE-862	Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Auth…
CVE-2026-35676	8.8	15.5	thorsten	phpMyFAQ	CWE-640	phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpoint
CVE-2026-45041	8.7	15.3	rustfs	rustfs	CWE-321	RustFS: Hard-coded RSA private key in license verifier permits arbitrary lice…
CVE-2026-45373	7.4	15.2	Hmbown	CodeWhale	CWE-918	CodeWhale: SSRF‌ IPV6 bypass
CVE-2026-9908	6.5	15.0	Google	Chrome	CWE-125	Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed …
CVE-2026-33463	5.3	15.0	Elastic	Kibana	CWE-672	Operation on a Resource after Expiration or Termination in Kibana Leading to …
CVE-2026-9921	4.3	15.0	Google	Chrome	CWE-457	Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.21…
CVE-2026-9935	4.3	15.0	Google	Chrome	CWE-457	Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9914	8.3	15.0	Google	Chrome	CWE-20	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to…
CVE-2026-33462	7.3	14.8	Elastic	Kibana	CWE-22	Path Traversal in Kibana Leading to Unauthorized Deletion of User Accounts
CVE-2026-44797	8.5	14.7	nautobot	nautobot	CWE-918	Nautobot: Webhook definitions could be used for server-side request forgery (…
CVE-2026-9960	7.5	14.7	Google	Chrome	CWE-472	Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9874	9.6	14.6	Google	Chrome	CWE-416	Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-45058	9.4	14.5	electerm	electerm	CWE-94	electerm: Import unsafe bookmark data could lead to unsafe operation when cli…
CVE-2026-9978	8.8	14.5	Google	Chrome	CWE-416	Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9984	8.8	14.5	Google	Chrome	CWE-416	Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allo…
CVE-2026-9992	8.8	14.5	Google	Chrome	CWE-416	Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-10021	8.8	14.5	Google	Chrome	CWE-20	Insufficient validation of untrusted input in USB in Google Chrome prior to 1…
CVE-2026-45306	6.5	14.6	pyload	pyload	CWE-706	pyLoad: Incomplete Fix for CVE-2026-33509 -storage_folder Bypass via Session …
CVE-2026-9913	4.3	14.6	Google	Chrome	CWE-125	Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.21…
CVE-2026-9964	8.1	14.4	Google	Chrome	CWE-416	Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 a…
CVE-2026-44466	8.6	14.2	zed-industries	zed	CWE-78	Zed: Allowlist Bypass via Bash Arithmetic Expansion in Terminal Tool Permissions
CVE-2026-44463	7.8	14.3	zed-industries	zed	CWE-78	Zed: Allowlist Bypass via Environment Variable Injection in Terminal Tool Per…
CVE-2026-9813	6.2	14.3	flowintel	flowintel	CWE-918	FlowIntel external reference URL probe allows server-side request forgery
CVE-2026-8682	4.3	14.3	hasanazizul	3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On	CWE-862	3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arb…
CVE-2026-45296	7.7	14.1	openreplay	openreplay	CWE-284	OpenReplay: Cross-tenant information disclosure in app_apikey projectKey rout…
CVE-2026-9098	9.1	14.1	Casdoor	Casdoor	—	CVE-2026-9098
CVE-2026-9038	8.6	14.1	XCharge	C6	CWE-121	Stack-based buffer overflow in XCharge C6
CVE-2026-10006	7.5	14.1	Google	Chrome	CWE-362	Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote at…
CVE-2026-9880	8.3	13.8	Google	Chrome	CWE-20	Insufficient validation of untrusted input in WebGL in Google Chrome prior to…
CVE-2026-9885	8.3	13.8	Google	Chrome	CWE-20	Insufficient validation of untrusted input in UI in Google Chrome on Mac prio…
CVE-2026-9898	8.3	13.8	Google	Chrome	CWE-20	Insufficient validation of untrusted input in GPU in Google Chrome on Android…
CVE-2026-46820	8.5	13.7	Oracle Corporation	Oracle Financials Common Modules	CWE-284	Vulnerability in the Oracle Financials Common Modules product of Oracle E-Bus…
CVE-2026-46215	7.8	13.7	Linux	Linux	CWE-416	drm: Set old handle to NULL before prime swap in change_handle
CVE-2026-47074	8.7	13.5	ex-aws	ex_aws_sns	CWE-295	ex_aws_sns SigningCertURL not validated in verify_message/1
CVE-2026-9972	8.3	13.6	Google	Chrome	CWE-457	Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 …
CVE-2026-45310	7.4	13.5	Hmbown	CodeWhale	CWE-918	CodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool
CVE-2026-9658	7.3	13.6	RRWO	Plack::Middleware::Security::Common	CWE-113	Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not b…
CVE-2026-9999	8.8	13.4	Google	Chrome	CWE-269	Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.…
CVE-2026-45342	7.1	13.4	Kovah	LinkAce	CWE-639	LinkAce: IDOR in Update Policies Allows Any Authenticated User to Overwrite O…
CVE-2026-9958	8.8	13.3	Google	Chrome	CWE-416	Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-6720	7.2	13.3	Tigera	Calico	CWE-532	Calicoctl leaks cluster credentials to stderr when verbose logging is enabled
CVE-2026-10008	6.5	13.3	Google	Chrome	CWE-457	Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 …
CVE-2026-9877	8.3	13.1	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9916	8.3	13.1	Google	Chrome	CWE-787	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed…
CVE-2026-9925	8.3	13.1	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9931	8.3	13.1	Google	Chrome	CWE-416	Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-9932	8.3	13.1	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 a…
CVE-2026-9936	8.3	13.1	Google	Chrome	CWE-416	Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed…
CVE-2026-9937	8.3	13.1	Google	Chrome	CWE-416	Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allo…
CVE-2026-9948	8.3	13.1	Google	Chrome	CWE-416	Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allow…
CVE-2026-9949	8.3	13.1	Google	Chrome	CWE-416	Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 al…
CVE-2026-9951	8.3	13.1	Google	Chrome	CWE-416	Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remot…
CVE-2026-9933	7.5	13.1	Google	Chrome	CWE-416	Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-4334	6.4	13.0	3uu	Shariff Wrapper	CWE-79	Shariff Wrapper <= 4.6.20 - Authenticated (Contributor+) Cross-Site Scripting
CVE-2026-45023	5.4	13.0	Significant-Gravitas	AutoGPT	CWE-770	AutoGPT: Credit system bypassed via direct block execution in POST /api/block…
CVE-2026-48522	4.2	13.0	jpadilla	pyjwt	CWE-441	PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file:/…
CVE-2026-10003	7.5	12.9	Google	Chrome	CWE-416	Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-10009	7.5	12.9	Google	Chrome	CWE-472	Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-9882	6.5	12.8	Google	Chrome	CWE-190	Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-47713	4.3	12.7	Mintplex-Labs	anything-llm	CWE-285	AnythingLLM: Legacy mobile device tokens bypass multi-user workspace scoping …
CVE-2026-9887	8.8	12.5	Google	Chrome	CWE-416	Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9228	4.3	12.5	jetmonsters	Timetable and Event Schedule by MotoPress	CWE-639	Timetable and Event Schedule by MotoPress <= 2.4.16 - Insecure Direct Object …
CVE-2026-9919	4.3	12.5	Google	Chrome	CWE-125	Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.2…
CVE-2026-46828	8.1	12.3	Oracle Corporation	Oracle Payroll	CWE-284	Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (compo…
CVE-2026-47675	5.3	12.3	honojs	hono	CWE-113	Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Coo…
CVE-2026-7862	8.6	12.2	Unknown	Eupago Gateway For Woocommerce	CWE-284	Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Ini…
CVE-2026-46841	5.3	12.1	Oracle Corporation	Oracle REST Data Services	CWE-200	Vulnerability in Oracle REST Data Services (component: General). Supported ve…
CVE-2026-9791	4.3	12.1	Red Hat	Red Hat build of Keycloak 26.4	CWE-863	Keycloak-rhel9: organization data leak after feature disabled in keycloak
CVE-2026-9888	8.3	11.9	Google	Chrome	CWE-416	Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216…
CVE-2026-9889	8.3	11.9	Google	Chrome	CWE-125	Out of bounds read and write in Dawn in Google Chrome on Android prior to 148…
CVE-2026-9890	8.3	11.9	Google	Chrome	CWE-416	Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allo…
CVE-2026-9894	8.3	11.9	Google	Chrome	CWE-416	Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remo…
CVE-2026-9895	8.3	11.9	Google	Chrome	CWE-125	Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-9899	8.3	11.9	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9900	8.3	11.9	Google	Chrome	CWE-787	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed…
CVE-2026-9902	8.3	11.9	Google	Chrome	CWE-416	Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allo…
CVE-2026-9904	8.3	11.9	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9905	8.3	11.9	Google	Chrome	CWE-416	Use after free in Accessibility in Google Chrome on Windows prior to 148.0.77…
CVE-2026-9906	8.3	11.9	Google	Chrome	CWE-787	Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9966	8.3	11.9	Google	Chrome	CWE-472	Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 a…
CVE-2026-9970	8.3	11.9	Google	Chrome	CWE-416	Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9975	8.3	11.9	Google	Chrome	CWE-125	Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.21…
CVE-2026-9954	7.5	11.9	Google	Chrome	CWE-416	Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9241	4.3	11.9	realmag777	FOX – Currency Switcher Professional for WooCommerce	CWE-639	FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated…
CVE-2026-46823	7.7	11.7	Oracle Corporation	Oracle Public Sector Financials (International)	CWE-863	Vulnerability in the Oracle Public Sector Financials (International) product …
CVE-2026-9920	3.1	11.7	Google	Chrome	CWE-457	Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 …
CVE-2026-9907	4.3	11.4	Google	Chrome	CWE-125	Out of bounds read in Dawn in Google Chrome on Windows prior to 148.0.7778.21…
CVE-2026-9911	4.3	11.4	Google	Chrome	CWE-472	Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-9929	4.3	11.4	Google	Chrome	CWE-200	Inappropriate implementation in WebGL in Google Chrome on Android prior to 14…
CVE-2026-9943	4.3	11.4	Google	Chrome	CWE-125	Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.2…
CVE-2026-9946	8.3	11.1	Google	Chrome	CWE-416	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-9974	8.3	11.1	Google	Chrome	CWE-787	Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-45042	7.1	11.1	rustfs	rustfs	CWE-863	RustFS: UploadPartCopy Does Not Enforce Destination Bucket Policy on Copy Source
CVE-2026-8990	5.3	11.1	View Concept	Kidsview	CWE-288	Authentication Bypass in Kidsview
CVE-2026-45297	5.3	11.1	openreplay	openreplay	CWE-285	Cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} ca…
CVE-2026-44850	8.5	10.9	portainer	portainer	CWE-863	Portainer: Bind-mount restriction bypass via HostConfig.Mounts
CVE-2026-9892	8.3	10.9	Google	Chrome	CWE-269	Inappropriate implementation in Skia in Google Chrome on Android prior to 148…
CVE-2026-7660	6.1	10.8	davidanderson	Easy Updates Manager	CWE-79	Easy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' P…
CVE-2026-45410	5.3	10.8	mauriceboe	TREK	CWE-203	Time-based user enumeration in TREK authentication endpoint
CVE-2026-46830	5.3	10.9	Oracle Corporation	Oracle REST Data Services	CWE-200	Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported v…
CVE-2026-45021	5.1	10.7	kumahq	kuma	CWE-346	Kuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + Loca…
CVE-2026-9881	9.0	10.5	Google	Chrome	CWE-416	Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 a…
CVE-2026-46166	8.8	10.5	Linux	Linux	CWE-416	wifi: mac80211: use safe list iteration in radar detect work
CVE-2026-9090	9.1	10.3	Casdoor	Casdoor	—	CVE-2026-9090
CVE-2026-45348	8.7	10.0	pyload	pyload	CWE-79	pyLoad: Stored XSS in Downloads view via unsanitized link URL in packages.js …
CVE-2026-49093	7.7	10.1	Elastic	Kibana	CWE-918	Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network …
CVE-2026-47673	6.5	10.0	honojs	hono	CWE-285	Hono: JWT middleware accepts any Authorization scheme, not only Bearer
CVE-2026-9942	5.0	10.0	Google	Chrome	CWE-457	Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9950	3.1	10.1	Google	Chrome	CWE-20	Insufficient validation of untrusted input in iOS in Google Chrome on iOS pri…
CVE-2026-10020	8.3	9.9	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Skia in Google Chrome on Androi…
CVE-2026-9944	3.1	9.8	Google	Chrome	CWE-457	Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a…
CVE-2026-9955	4.3	9.4	Google	Chrome	CWE-200	Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.77…
CVE-2026-9807	4.3	9.3	GitLab	GitLab	CWE-863	Incorrect Authorization in GitLab
CVE-2026-45403	2.5	9.3	Mintplex-Labs	anything-llm	CWE-59	AnythingLLM: filesystem-copy-file follows nested symlinks and copies files fr…
CVE-2026-9981	6.5	9.0	Google	Chrome	CWE-200	Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216…
CVE-2026-9996	6.5	9.0	Google	Chrome	CWE-125	Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 …
CVE-2026-10018	6.5	9.0	Google	Chrome	CWE-472	Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-47760	5.4	9.1	tinymce	tinymce	CWE-79	TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass th…
CVE-2026-9930	4.3	9.0	Google	Chrome	CWE-787	Out of bounds write in Dawn in Google Chrome on Mac prior to 148.0.7778.216 a…
CVE-2026-10019	8.8	8.9	Google	Chrome	CWE-472	Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a …
CVE-2026-9796	6.5	8.5	Red Hat	Red Hat build of Keycloak 26.6	CWE-367	Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (to…
CVE-2026-9039	8.6	8.4	XCharge	C6	CWE-1188	Initialization of a resource with an insecure default in XCharge C6
CVE-2026-10000	8.3	8.4	Google	Chrome	CWE-416	Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.2…
CVE-2026-10014	8.3	8.4	Google	Chrome	CWE-416	Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216…
CVE-2026-10017	8.3	8.4	Google	Chrome	CWE-125	Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allow…
CVE-2026-9977	8.3	8.3	Google	Chrome	CWE-20	Insufficient validation of untrusted input in WebShare in Google Chrome on An…
CVE-2026-9982	8.3	8.3	Google	Chrome	CWE-20	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to…
CVE-2026-46842	5.3	8.2	Oracle Corporation	Oracle REST Data Services	CWE-284	Vulnerability in Oracle REST Data Services (component: Core). Supported versi…
CVE-2026-9994	8.3	8.0	Google	Chrome	CWE-416	Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 al…
CVE-2026-9985	5.3	8.1	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Media in Google Chrome on Chrom…
CVE-2026-44358	8.2	8.0	espressif	shared-github-dangerjs	CWE-427	Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action En…
CVE-2026-10028	4.3	7.9	Red Hat	Red Hat Enterprise Linux 10	CWE-835	Glib-networking: infinite loop in glib-networking gnutls backend allows remot…
CVE-2026-10002	8.8	7.9	Google	Chrome	CWE-416	Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-9997	8.3	7.6	Google	Chrome	CWE-416	Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-44794	5.4	7.5	nautobot	nautobot	CWE-862	Nautobot: REST API permits creation of GenericForeignKey references to object…
CVE-2026-46561	5.0	7.3	pyload	pyload	CWE-918	pyLoad: SSRF via HTTP Redirect Bypass in parse_urls API
CVE-2026-9988	8.3	7.0	Google	Chrome	CWE-416	Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 al…
CVE-2026-9998	8.3	7.0	Google	Chrome	CWE-472	Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a r…
CVE-2026-10001	8.3	7.0	Google	Chrome	CWE-416	Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216…
CVE-2026-10012	8.3	7.0	Google	Chrome	CWE-416	Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a rem…
CVE-2026-9990	7.5	7.0	Google	Chrome	CWE-416	Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.…
CVE-2026-46152	8.8	6.4	Linux	Linux	CWE-1058	wifi: mac80211: drop stray 'static' from fast-RX rx_result
CVE-2026-9673	5.5	6.3	n/a	json-2-csv	CWE-1236	Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerab…
CVE-2026-9993	8.3	6.1	Google	Chrome	CWE-416	Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a re…
CVE-2026-10004	6.5	6.1	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Passwords in Google Chrome prio…
CVE-2026-10011	3.1	6.0	Google	Chrome	CWE-200	Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216…
CVE-2026-9903	5.0	5.8	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Site Isolation in Google Chrome…
CVE-2026-9971	5.4	5.6	Google	Chrome	CWE-79	Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.77…
CVE-2026-9793	7.5	5.4	Red Hat	Red Hat build of Keycloak 26.4	CWE-347	Keycloak: keycloak: security policy bypass in jwe-encrypted request object pr…
CVE-2026-9646	6.1	5.5	ScadaBR	ScadaBR	CWE-80	ScadaBR Unauthenticated Reflected Cross-Site Scripting
CVE-2026-9644	6.4	5.3	nhadjidimitrov	LiveSmart Video Chat Live Video Chat	CWE-79	LiveSmart Video Chat <= 1.2 - Authenticated (Contributor+) Stored Cross-Site …
CVE-2026-46113	8.8	5.1	Linux	Linux	CWE-416	KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
CVE-2026-32996	7.3	5.0	Veeam	Backup and Replication	CWE-532	This vulnerability in Veeam Agent for Microsoft Windows allows for Local Priv…
CVE-2026-45307	6.1	5.0	murtaza-nasir	speakr	CWE-601	Speakr: Open redirect in is_safe_url via parser mismatch on next parameter
CVE-2026-9789	8.5	4.8	Acer	NitrorSense V3	CWE-22	NitroSense V3: Security Vulnerability Information
CVE-2026-45040	5.3	4.9	rustfs	rustfs	CWE-312	RustFS: Sensitive Information Leakage (SessionToken and SecretAccessKey) in R…
CVE-2026-10022	7.5	4.8	Google	Chrome	CWE-843	Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an atta…
CVE-2026-9986	4.2	4.2	Google	Chrome	CWE-20	Insufficient validation of untrusted input in OptimizationGuide in Google Chr…
CVE-2026-46189	7.8	4.2	Linux	Linux	CWE-415	RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
CVE-2026-46145	7.8	4.0	Linux	Linux	CWE-787	RDMA/mana: Validate rx_hash_key_len
CVE-2026-46176	7.8	4.0	Linux	Linux	CWE-825	RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
CVE-2026-46123	7.7	4.0	Linux	Linux	CWE-787	Bluetooth: virtio_bt: clamp rx length before skb_put
CVE-2026-46150	7.1	4.0	Linux	Linux	—	fanotify: fix false positive on permission events
CVE-2026-46205	7.8	3.9	Linux	Linux	—	staging: media: atomisp: Disallow all private IOCTLs
CVE-2026-49237	7.8	4.0	Canonical	Multipass	CWE-276	Local Privilege Escalation in Canonical Multipass
CVE-2026-4377	6.0	3.9	D-Link Corporation	DWR-X1820	CWE-1391	Use of Weak Credentials in D-Link DWR-X1820 router

Results continue: ranks 401–542.

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-05-28 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.