Security Box Score — Sunday, June 21, 2026

73 CVEs published June 21, 2026: 3 critical, 21 high, 23 medium, 26 low; 0 in KEV; 14 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 48 in the results table.

League
	MTD	YTD	2025 same span	2025 full
CVEs published	5177	9549	1167	2563
KEV catalog size	1670

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	101	1067	84	668	312	1	27	3	0.3	7.8	.0013	-123
google	684	858	83	450	293	29	74	6	0.7	8.1	.0023	+668
microsoft	220	710	55	474	160	4	378	27	3.8	7.8	.0044	+68
red hat	75	139	8	63	62	6	4	0	0.0	7.0	.0028	+66
apple	14	61	0	16	36	2	93	7	11.5	5.7	.0023	+1
canonical	1	15	0	4	6	5	0	0	0.0	5.5	.0009	+1
freebsd	0	7	0	5	2	0	0	0	0.0	7.8	.0020	-7
suse	4	6	1	4	1	0	0	0	0.0	8.6	.0029	+2

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	9	22	4	3	8	0	96	10	45.5	6.8	.0257	+4
netgear	17	17	0	0	16	1	8	0	0.0	4.3	.0024	+17
palo alto networks	9	11	0	1	7	1	14	2	18.2	4.8	.0022	+8
f5	6	9	4	3	1	0	7	1	11.1	8.9	.0221	+5
ivanti	4	9	2	3	0	0	33	5	55.6	8.8	.5187	+3
checkpoint	3	9	1	5	3	0	3	1	11.1	7.5	.0410	+3
ubiquiti	5	8	4	4	0	0	4	0	0.0	8.9	.0052	+5
fortinet	2	8	1	3	2	0	28	3	37.5	7.3	.0066	+1

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	86	118	18	42	50	7	40	1	0.8	7.0	.0048	+80
mozilla	49	55	11	18	26	0	13	0	0.0	7.3	.0026	+44
gitlab	11	20	0	4	12	2	4	2	10.0	4.8	.0024	+11
docker	4	7	0	5	2	0	1	0	0.0	8.2	.0016	+4
drupal	0	5	1	1	3	0	5	1	20.0	5.1	.0026	-2
github	0	2	1	1	0	0	0	0	0.0	8.1	.0347	0
jenkins	0	0	0	0	0	0	6	0	—	—	—	0
joomla	0	0	0	0	0	0	1	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	243	270	131	116	18	4	40	2	0.7	8.8	.0040	+243
adobe	129	133	4	49	75	2	75	3	2.3	5.5	.0021	+128
ibm	11	60	13	29	18	0	7	0	0.0	7.5	.0028	+11
progress	5	9	1	7	1	0	9	0	0.0	7.5	.0036	+1
solarwinds	3	6	1	2	1	0	11	4	66.7	7.5	.3995	+3
veeam	1	4	2	2	0	0	4	0	0.0	9.0	.0046	+1
zohocorp	0	2	0	1	1	0	0	0	0.0	7.1	.0104	-1
atlassian	0	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
synology	5	23	2	5	13	3	0	0	0.0	5.6	.0025	+5
d-link	9	12	0	4	2	5	26	1	8.3	5.5	.0058	+9
siemens	7	8	0	4	4	0	1	0	0.0	7.5	.0020	+6
rockwell automation	7	7	1	5	1	0	0	0	0.0	8.7	.0030	+7
abb	5	5	0	4	1	0	0	0	0.0	7.2	.0018	+5
moxa	5	5	0	3	2	0	0	0	0.0	7.0	.0029	+5
dahua	3	3	0	1	1	1	2	0	0.0	6.9	.0036	+3
mitsubishi electric	3	3	0	3	0	0	0	0	0.0	8.7	.0064	+3

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
spring	71	72	2	30	39	1	0	0	0.0	6.5	.0023	+71
openclaw	61	67	0	35	22	10	0	0	0.0	7.0	.0021	+61
sourcecodester	37	59	0	0	25	34	0	0	0.0	2.1	.0026	+37
themerex	58	58	5	53	0	0	0	0	0.0	8.1	.0043	+58
edimax	5	56	0	33	0	23	1	0	0.0	7.4	.0070	+5
concrete cms	2	46	1	11	13	21	0	0	0.0	6.2	.0015	-39
dell	27	45	0	21	23	0	2	1	2.2	6.7	.0015	+25
open ises	0	44	2	21	21	0	0	0	0.0	7.1	.0021	-37

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-10520	.9990	100.0	10.0
CVE-2026-20253	.9694	99.9	9.8
CVE-2026-35273	.9547	99.9	9.8
CVE-2026-0257	.9391	99.8	—
CVE-2026-42271	.8301	99.6	—
CVE-2026-50751	.8255	99.6	9.3
CVE-2026-48907	.6883	99.3	10.0
CVE-2026-49160	.5383	98.9	7.5
CVE-2026-10523	.5187	98.9	9.8
CVE-2024-21182	.4997	98.8	—

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-10520	10.0	.9990	KEV
CVE-2026-48907	10.0	.6883	KEV
CVE-2026-48172	10.0	.1891	KEV
CVE-2026-49777	10.0	.0166
CVE-2026-8054	10.0	.0158
CVE-2026-45087	10.0	.0147
CVE-2026-49199	10.0	.0134
CVE-2026-11429	10.0	.0115
CVE-2026-49257	10.0	.0093
CVE-2026-47140	10.0	.0082

Most disclosures (vendor)
Vendor	CVEs
google	836
linux	517
oracle	268
microsoft	226
adobe	129
red hat	107
apache	98
spring	72
openclaw	67
ibm	60

Most KEV additions (YTD)
Vendor	KEV
microsoft	27
cisco	10
apple	7
google	6
ivanti	5
solarwinds	4
synacor	4
adobe	3
fortinet	3
linux	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	39
Packagist	22
PyPI	10
npm	3
crates.io	2

Fastest to KEV
CVE	Vendor	Days
CVE-2022-0492	Linux	0
CVE-2024-21182	Oracle	0
CVE-2025-48595	Google	0
CVE-2026-0257	Palo Alto Networks	0
CVE-2026-10520	ivanti	0
CVE-2026-11645	Google	0
CVE-2026-20245	Cisco	0
CVE-2026-20253	Splunk	0
CVE-2026-20262	Cisco	0
CVE-2026-28318	SolarWinds	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	Accellion	2021-11-17	1677
CVE-2021-27102	Accellion	2021-11-17	1677
CVE-2021-27101	Accellion	2021-11-17	1677
CVE-2021-27103	Accellion	2021-11-17	1677
CVE-2021-21017	Adobe	2021-11-17	1677
CVE-2021-28550	Adobe	2021-11-17	1677
CVE-2021-42013	Apache	2021-11-17	1677
CVE-2021-41773	Apache	2021-11-17	1677
CVE-2021-30858	Apple	2021-11-17	1677
CVE-2021-30860	Apple	2021-11-17	1677

Yesterday's Results

73 CVEs published. 25 box scores, 48 table rows — nothing truncated.

CVE-2026-12807LOW

Edimax BR-6478AC V2 POST Request setWAN command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product       Versions  Fixed
  BR-6478AC V2  1.23 –    —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12808LOW

Edimax BR-6478AC V2 POST Request stainfo command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product       Versions  Fixed
  BR-6478AC V2  1.23 –    —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12809LOW

Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product       Versions  Fixed
  BR-6478AC V2  1.23 –    —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12810LOW

Edimax BR-6478AC V2 POST Request mp command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product       Versions  Fixed
  BR-6478AC V2  1.23 –    —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12814LOW

Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product        Versions   Fixed
  CF-WR631AX V3  2.7.0.0 –  —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12815LOW

coollabsio coolify Image Name os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0199   78.9     —

AFFECTED
  Product  Versions  Fixed
  coolify  4.0.0 –   —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-12806HIGH

Edimax BR-6478AC V2 POST Request formWlSiteSurvey buffer overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0080   53.8     —

AFFECTED
  Product       Versions  Fixed
  BR-6478AC V2  1.23 –    —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-119, CWE-120 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-56265CRITICAL

Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0077   52.6     —

AFFECTED
  Product   Versions     Fixed
  Crawl4AI  unspecified  0.8.7

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-798 · CNA: VulnCheck · 3 references · NVD status: Analyzed

CVE-2025-71351HIGH

picklescan - Remote Code Execution via timeit.timeit() Detection Bypass

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   P   H   H   N    7.6   .0071   50.5     —

AFFECTED
  Product     Versions     Fixed
  picklescan  unspecified  0.0.25

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-184 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56395CRITICAL

SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   A   H   H   H    9.4   .0070   50.2     —

AFFECTED
  Product  Versions     Fixed
  SiYuan   unspecified  3.6.1

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-79 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56397CRITICAL

SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   A   H   H   H    9.4   .0070   50.2     —

AFFECTED
  Product  Versions     Fixed
  SiYuan   unspecified  3.6.1

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-79 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56299MEDIUM

Capgo - Denial of Service via Unauthenticated OPTIONS Request to /build/upload Endpoint

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   L    6.9   .0068   49.5     —

AFFECTED
  Product  Versions     Fixed
  Capgo    unspecified  12.128.2

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-306 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-12773MEDIUM

BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0061   46.4     —

AFFECTED
  Product  Versions  Fixed
  litellm  1.59.0 –  —

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-287, CWE-303 · CNA: VulDB · 8 references · NVD status: Modified

CVE-2026-12795MEDIUM

BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0051   41.1     —

AFFECTED
  Product  Versions  Fixed
  litellm  1.82.0 –  —

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-287, CWE-306 · CNA: VulDB · 5 references · NVD status: Analyzed

CVE-2026-12811LOW

kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   N   L   N    2.1   .0050   40.4     —

AFFECTED
  Product  Versions  Fixed
  suna     0.8.0 –   0.8.39

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-79, CWE-94 · CNA: VulDB · 8 references · NVD status: Deferred

CVE-2026-12821LOW

FlowiseAI Flowise S3 Document Loader S3.ts path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0049   40.2     —

AFFECTED
  Product  Versions  Fixed
  Flowise  3.1.0 –   —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-22 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-56382HIGH

craftcms cms — Craft CMS - Remote Code Execution via Missing Config Sanitization in FieldsController

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   H   H   H    8.6   .0049   40.1     —

AFFECTED
  Product  Versions  Fixed
  cms      5.5.0 –   5.9.14

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-94 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-12805LOW

OFFIS DCMTK ofxml.cc parseFile heap-based overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   L   L   L    2.1   .0047   38.5     —

AFFECTED
  Product  Versions  Fixed
  DCMTK    3.0 –     —

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-119, CWE-122 · CNA: VulDB · 8 references · NVD status: Deferred

CVE-2026-56251HIGH

Capgo - Privilege Escalation via Broken Row Level Security in org_users

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   N   H   H    7.0   .0044   36.9     —

AFFECTED
  Product  Versions     Fixed
  Capgo    unspecified  12.128.2

TIMELINE
  Jun 19  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-266 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56396HIGH

phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0044   36.8     —

AFFECTED
  Product   Versions     Fixed
  phpMyFAQ  unspecified  4.1.4

TIMELINE
  Jun 21  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-862 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56242HIGH

Capgo - Unauthenticated API Key Validity Oracle and User Identity Disclosure via get_identity_apikey_only RPC

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0044   36.6     —

AFFECTED
  Product  Versions     Fixed
  Capgo    unspecified  12.128.2

TIMELINE
  Jun 19  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-200 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-56253HIGH

Capgo - Unauthenticated Organization Member Email Disclosure via get_org_members RPC

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0042   35.3     —

AFFECTED
  Product  Versions     Fixed
  Capgo    unspecified  12.128.2

TIMELINE
  Jun 19  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-284 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-12775MEDIUM

Montodel House-Rental-Management login.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0041   34.2     —

AFFECTED
  Product                  Versions                                    Fixed
  House-Rental-Management  90010017b81265eb1ef3810268909f7719a33863 –  —

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · 5 references · NVD status: Deferred

CVE-2026-56316MEDIUM

Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    6.9   .0041   34.1     —

AFFECTED
  Product  Versions     Fixed
  capgo    unspecified  12.128.2

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulnCheck)

CWE-203 · CNA: VulnCheck · 2 references · NVD status: Deferred

CVE-2026-12787LOW

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection Endpoint deserialization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0041   34.1     —

AFFECTED
  Product                                     Versions  Fixed
  ADP Application Developer Platform 应用开发者平台  1.0.0 –   —

TIMELINE
  Jun 20  Reserved by CNA
  Jun 21  Published (CNA: VulDB)

CWE-20, CWE-502 · CNA: VulDB · 5 references · NVD status: Deferred

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-12788	2.1	33.2	zhilink 智互联(深圳)科技有限公司	ADP Application Developer Platform 应用开发者平台	CWE-610	zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser i…
CVE-2026-12797	2.1	33.2	BerriAI	litellm	CWE-285	BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization
CVE-2025-71348	7.6	32.9	picklescan	picklescan	CWE-502	picklescan - Arbitrary Code Execution via torch.utils._config_module.load_con…
CVE-2026-56229	7.1	30.7	Capgo	Capgo	CWE-639	Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/statu…
CVE-2026-52911	8.8	29.3	Linux	Linux	—	ksmbd: scope conn->binding slowpath to bound sessions only
CVE-2026-56385	5.3	29.0	craftcms	cms	CWE-639	Craft CMS - Authorization Bypass in assets/preview-file Endpoint
CVE-2026-12796	2.1	28.9	BerriAI	litellm	CWE-613	BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_…
CVE-2026-12813	2.1	27.8	n/a	activepieces	CWE-918	activepieces File URL file.ts handleUrlFile server-side request forgery
CVE-2026-56239	7.2	27.6	Capgo	Capgo	CWE-269	Capgo - Privilege Escalation via SECURITY DEFINER Function apply_usage_overage
CVE-2025-71378	7.6	26.7	picklescan	picklescan	CWE-502	picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle F…
CVE-2026-12770	2.1	26.6	BerriAI	litellm	CWE-266	BerriAI litellm Admin Key key_management_endpoints.py improper authorization
CVE-2026-56394	7.1	26.5	craftcms	cms	CWE-22	Craft CMS - Authenticated Path Traversal in assets/icon Extension Parameter
CVE-2026-12789	2.0	26.1	ILIAS	Learning Management System	CWE-74	ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.p…
CVE-2026-56384	5.3	26.0	craftcms	cms	CWE-862	Craft CMS - Missing Authorization in assets/preview-thumb Endpoint
CVE-2026-12812	2.0	25.9	Radware	Cyber Controller	CWE-74	Radware Cyber Controller HTML Report Generation HTML injection
CVE-2026-56393	4.6	24.7	craftcms	cms	CWE-79	Craft CMS - Multiple Stored Cross-Site Scripting in Settings Names and Field …
CVE-2026-12776	2.1	24.4	Montodel	House-Rental-Management	CWE-74	Montodel House-Rental-Management index.php houses sql injection
CVE-2026-56383	4.6	23.6	craftcms	cms	CWE-79	Craft CMS - Stored XSS in Table Field via Row Heading Column Type
CVE-2026-12799	2.1	21.3	BerriAI	litellm	CWE-266	BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_vi…
CVE-2026-12771	1.3	21.3	BerriAI	litellm	CWE-266	BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
CVE-2025-71357	7.6	20.0	picklescan	picklescan	CWE-502	picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.Modified…
CVE-2026-12772	2.1	18.1	BerriAI	litellm	CWE-613	BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authent…
CVE-2026-12774	2.1	18.1	BerriAI	litellm	CWE-918	BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with…
CVE-2026-12798	2.1	18.1	BerriAI	litellm	CWE-918	BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_open…
CVE-2026-12804	2.1	17.9	n/a	lemonldap-ng	CWE-601	lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect
CVE-2026-56381	4.6	16.8	craftcms	cms	CWE-79	Craft CMS - Stored XSS via User Group Name in User Permissions Page
CVE-2026-56367	6.3	14.8	ImageMagick	ImageMagick	CWE-125	ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding
CVE-2026-12822	1.9	14.6	langflow-ai	langflow	CWE-74	langflow-ai langflow Bundle URL Loader code injection
CVE-2026-56378	6.3	13.1	ImageMagick	ImageMagick	CWE-125	ImageMagick - Heap Out-of-Bounds Read in PCD Decoder
CVE-2026-56236	6.8	8.2	capgo	cli	CWE-59	Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credentia…
CVE-2026-12778	7.1	5.9	AOMEI	Partition Assistant	CWE-266	AOMEI Partition Assistant Kernel Driver ampa10.sys access control
CVE-2026-12779	7.1	5.9	AOMEI	Dynamic Disk Manager	CWE-266	AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control
CVE-2026-12780	7.1	5.9	AOMEI	Backupper	CWE-266	AOMEI Backupper Kernel Driver amwrtdrv.sys access control
CVE-2026-12784	7.1	5.9	IM-Magic	Partition Resizer	CWE-266	IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control
CVE-2026-12786	7.1	5.9	Ezbsystems	UltraISO Premium Edition	CWE-266	Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
CVE-2026-12781	7.1	5.7	EaseUS	Partition Master	CWE-266	EaseUS Partition Master Kernel Driver epmntdrv.sys access control
CVE-2026-12782	7.1	5.7	EaseUS	Partition Master	CWE-266	EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control
CVE-2026-12823	1.9	5.7	Browserbase	Skills	CWE-266	Browserbase Skills Autobrowse Trace Artifact default permission
CVE-2026-56410	6.9	3.8	libexpat project	libexpat	CWE-190	xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
CVE-2026-56411	6.9	3.8	libexpat project	libexpat	CWE-190	xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via …
CVE-2026-56412	5.9	3.6	libexpat project	libexpat	CWE-416	libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection …
CVE-2026-56406	6.9	3.3	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it l…
CVE-2026-56409	6.5	3.4	libexpat project	libexpat	CWE-190	xmlwf in libexpat before 2.8.2 has an integer overflow for the output filenam…
CVE-2026-56403	6.9	2.6	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in storeAtts.
CVE-2026-56404	6.9	2.6	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in addBinding.
CVE-2026-56405	6.9	2.6	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in getAttributeId.
CVE-2026-56408	6.9	2.6	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in copyString.
CVE-2026-56407	6.9	2.5	libexpat project	libexpat	CWE-190	libexpat before 2.8.2 has an integer overflow in doProlog that is related to …

Standings

Leaders (trailing 30 days unless noted)

Transactions

Yesterday's Results

Methodology