{ "day": "2026-07-02", "boundary": "UTC calendar day", "published_count": 265, "by_severity": { "CRITICAL": 32, "HIGH": 149, "MEDIUM": 78, "LOW": 6 }, "kev_count": 0, "exploit_reference_count": 4, "awaiting_enrichment_count": 0, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-58455", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.0804, "epss_percentile": 0.94335, "kev": false, "kev_due_at": null, "vendor": "Notifiarr", "product": "dockwatch", "cwe": "CWE-78", "title": "Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58455" }, { "rank": 2, "cve_id": "CVE-2026-9834", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.02651, "epss_percentile": 0.84466, "kev": false, "kev_due_at": null, "vendor": "databasebackup", "product": "WP Database Backup – Unlimited Database & Files Backup by Backup for WP", "cwe": "CWE-77", "title": "WP Database Backup <= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9834" }, { "rank": 3, "cve_id": "CVE-2026-54402", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0176, "epss_percentile": 0.76249, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "cwe": "CWE-77", "title": "A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54402" }, { "rank": 4, "cve_id": "CVE-2026-50746", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.01687, "epss_percentile": 0.7525, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Connect Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50746" }, { "rank": 5, "cve_id": "CVE-2026-50748", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.01628, "epss_percentile": 0.74328, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Access Application", "cwe": "CWE-20", "title": "A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50748" }, { "rank": 6, "cve_id": "CVE-2022-50973", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.01519, "epss_percentile": 0.72615, "kev": false, "kev_due_at": null, "vendor": "Yonyou Network Technology Co., Ltd.", "product": "KSOA", "cwe": "CWE-434", "title": "Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet", "url": "https://www.cve.org/CVERecord?id=CVE-2022-50973" }, { "rank": 7, "cve_id": "CVE-2024-14037", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.01281, "epss_percentile": 0.67815, "kev": false, "kev_due_at": null, "vendor": "Guangzhou Red Sea Cloud Computing Co., Ltd.", "product": "Red Sea Cloud eHR", "cwe": "CWE-434", "title": "Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mob", "url": "https://www.cve.org/CVERecord?id=CVE-2024-14037" }, { "rank": 8, "cve_id": "CVE-2026-7311", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.01035, "epss_percentile": 0.61246, "kev": false, "kev_due_at": null, "vendor": "tinypng", "product": "TinyPNG – JPEG, PNG & WebP image compression", "cwe": "CWE-22", "title": "TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta", "url": "https://www.cve.org/CVERecord?id=CVE-2026-7311" }, { "rank": 9, "cve_id": "CVE-2026-13368", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.01012, "epss_percentile": 0.60537, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-416", "title": "WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13368" }, { "rank": 10, "cve_id": "CVE-2026-13251", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00941, "epss_percentile": 0.5828, "kev": false, "kev_due_at": null, "vendor": "perfmatters", "product": "Perfmatters", "cwe": "CWE-22", "title": "Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13251" }, { "rank": 11, "cve_id": "CVE-2026-58465", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00923, "epss_percentile": 0.57641, "kev": false, "kev_due_at": null, "vendor": "eclipse-wakaama", "product": "wakaama", "cwe": "CWE-770", "title": "Eclipse Wakaama CoAP Block1 Handler Unbounded Memory Allocation DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58465" }, { "rank": 12, "cve_id": "CVE-2026-5524", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00922, "epss_percentile": 0.57632, "kev": false, "kev_due_at": null, "vendor": "Divi Engine", "product": "Divi Form Builder", "cwe": "CWE-434", "title": "Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5524" }, { "rank": 13, "cve_id": "CVE-2024-58352", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00896, "epss_percentile": 0.56837, "kev": false, "kev_due_at": null, "vendor": "Shenzhen Landray Software Co., Ltd.", "product": "Landry Office Automation (OA)", "cwe": "CWE-564", "title": "Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do", "url": "https://www.cve.org/CVERecord?id=CVE-2024-58352" }, { "rank": 14, "cve_id": "CVE-2026-57624", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.0086, "epss_percentile": 0.55737, "kev": false, "kev_due_at": null, "vendor": "Creative Themes", "product": "Blocksy Companion Pro", "cwe": "CWE-94", "title": "WordPress Blocksy Companion Pro plugin <= 2.1.46 - Remote Code Execution (RCE) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57624" }, { "rank": 15, "cve_id": "CVE-2026-58466", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00804, "epss_percentile": 0.53969, "kev": false, "kev_due_at": null, "vendor": "EstrellaXD", "product": "Auto_Bangumi", "cwe": "CWE-1392", "title": "AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58466" }, { "rank": 16, "cve_id": "CVE-2026-58652", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00802, "epss_percentile": 0.5389, "kev": false, "kev_due_at": null, "vendor": "openwrt", "product": "luci-app-travelmate", "cwe": "CWE-78", "title": "luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58652" }, { "rank": 17, "cve_id": "CVE-2026-59094", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00793, "epss_percentile": 0.5357, "kev": false, "kev_due_at": null, "vendor": "pathwaycom", "product": "pathway", "cwe": "CWE-407", "title": "Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59094" }, { "rank": 18, "cve_id": "CVE-2026-45499", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00778, "epss_percentile": 0.53094, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Open AI", "cwe": "CWE-918", "title": "Azure OpenAI Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45499" }, { "rank": 19, "cve_id": "CVE-2026-54998", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00778, "epss_percentile": 0.53094, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Online", "cwe": "CWE-863", "title": "Microsoft Exchange Online Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54998" }, { "rank": 20, "cve_id": "CVE-2026-57100", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00778, "epss_percentile": 0.53095, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Entra Provisioning Service", "cwe": "CWE-918", "title": "Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57100" }, { "rank": 21, "cve_id": "CVE-2026-54403", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00774, "epss_percentile": 0.52968, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "cwe": "CWE-22", "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to bypass authentication of such UniFi OS devices or instances.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54403" }, { "rank": 22, "cve_id": "CVE-2026-13383", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00724, "epss_percentile": 0.51276, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-787", "title": "WatchGuard Firebox ikestubd Out of Bounds Write Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13383" }, { "rank": 23, "cve_id": "CVE-2026-13384", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00724, "epss_percentile": 0.51276, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-787", "title": "WatchGuard Firebox wgagent Out of Bounds Write Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13384" }, { "rank": 24, "cve_id": "CVE-2026-41106", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00716, "epss_percentile": 0.50996, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Copilot", "cwe": "CWE-601", "title": "Microsoft 365 Copilot Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41106" }, { "rank": 25, "cve_id": "CVE-2026-59093", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00711, "epss_percentile": 0.50785, "kev": false, "kev_due_at": null, "vendor": "weaviate", "product": "weaviate", "cwe": "CWE-266", "title": "Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59093" }, { "rank": 26, "cve_id": "CVE-2026-26145", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00699, "epss_percentile": 0.50332, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Synapse", "cwe": "CWE-284", "title": "Microsoft Azure Synapse Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-26145" }, { "rank": 27, "cve_id": "CVE-2026-55950", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00684, "epss_percentile": 0.49787, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-367", "title": "DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55950" }, { "rank": 28, "cve_id": "CVE-2026-38971", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.0068, "epss_percentile": 0.49615, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-125", "title": "ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control().", "url": "https://www.cve.org/CVERecord?id=CVE-2026-38971" }, { "rank": 29, "cve_id": "CVE-2026-12657", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00671, "epss_percentile": 0.49246, "kev": false, "kev_due_at": null, "vendor": "latepoint", "product": "LatePoint – Calendar Booking Plugin for Appointments and Events", "cwe": "CWE-639", "title": "LatePoint <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation via 'service_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12657" }, { "rank": 30, "cve_id": "CVE-2026-27436", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00665, "epss_percentile": 0.49014, "kev": false, "kev_due_at": null, "vendor": "Rustaurius", "product": "Five Star Business Profile and Schema", "cwe": "CWE-94", "title": "WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27436" }, { "rank": 31, "cve_id": "CVE-2026-56004", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00661, "epss_percentile": 0.48855, "kev": false, "kev_due_at": null, "vendor": "openSUSE", "product": "buildservice", "cwe": "CWE-78", "title": "obs-service-tar_scm: command injection via mercurial handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56004" }, { "rank": 32, "cve_id": "CVE-2026-5821", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00661, "epss_percentile": 0.48879, "kev": false, "kev_due_at": null, "vendor": "elemntor", "product": "Image Optimizer – Optimize Images and Convert to WebP or AVIF", "cwe": "CWE-73", "title": "Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5821" }, { "rank": 33, "cve_id": "CVE-2026-13050", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00651, "epss_percentile": 0.48429, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-787", "title": "WatchGuard Firebox networkd Out of Bounds Write Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13050" }, { "rank": 34, "cve_id": "CVE-2026-13768", "cvss_base": 9.5, "cvss_severity": "CRITICAL", "epss_score": 0.0065, "epss_percentile": 0.48416, "kev": false, "kev_due_at": null, "vendor": "Gardyn", "product": "Gardyn Home Firmware", "cwe": "CWE-798", "title": "Gardyn IoT Hub Use of Hard-coded Credentials", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13768" }, { "rank": 35, "cve_id": "CVE-2026-52830", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00648, "epss_percentile": 0.48278, "kev": false, "kev_due_at": null, "vendor": "leshchenko1979", "product": "fast-mcp-telegram", "cwe": "CWE-22", "title": "fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52830" }, { "rank": 36, "cve_id": "CVE-2026-13053", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00642, "epss_percentile": 0.48012, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-787", "title": "WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command Handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13053" }, { "rank": 37, "cve_id": "CVE-2026-9563", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0063, "epss_percentile": 0.47448, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Parsson", "cwe": "CWE-400", "title": "In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document. Applications that parse attacker- controlled JSON can be forced to consume excessive CPU and memory by processing very large documents, including large arrays, objects, strings, numbers, whitespace, or nested structures, resulting in a denial of service. Eclipse Parsson 1.1.8 introduces a configurable maximum parsing limit with a default limit of 15 million parser-consumed characters.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9563" }, { "rank": 38, "cve_id": "CVE-2026-38970", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0063, "epss_percentile": 0.47444, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-674", "title": "pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext() and parseArray() without enforcing a maximum nesting depth.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-38970" }, { "rank": 39, "cve_id": "CVE-2026-52187", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00629, "epss_percentile": 0.47413, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-120", "title": "Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_483ba0 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52187" }, { "rank": 40, "cve_id": "CVE-2026-52189", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00629, "epss_percentile": 0.47412, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-120", "title": "Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_487330 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52189" }, { "rank": 41, "cve_id": "CVE-2026-52191", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00629, "epss_percentile": 0.47412, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-120", "title": "Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_444C8C component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52191" }, { "rank": 42, "cve_id": "CVE-2026-4767", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00606, "epss_percentile": 0.46305, "kev": false, "kev_due_at": null, "vendor": "TR7 Cyber ​​Defense Inc.", "product": "WAF-ASP", "cwe": "CWE-306", "title": "Improper Access Control in TR7's WAF-ASP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-4767" }, { "rank": 43, "cve_id": "CVE-2026-13054", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00605, "epss_percentile": 0.46268, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-22", "title": "WatchGuard Firebox Arbitrary File Write via Path Traversal in Management Web UI", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13054" }, { "rank": 44, "cve_id": "CVE-2026-12472", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00601, "epss_percentile": 0.46068, "kev": false, "kev_due_at": null, "vendor": "themeum", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "cwe": "CWE-862", "title": "Kirki <= 6.0.11 - Missing Authorization to Unauthenticated Arbitrary Email Content Injection (Mail Relay / Phishing) via 'emailBody' and 'emailSubject' Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12472" }, { "rank": 45, "cve_id": "CVE-2026-13369", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00599, "epss_percentile": 0.46002, "kev": false, "kev_due_at": null, "vendor": "SaturdayDrive", "product": "Ninja Forms - File Uploads", "cwe": "CWE-22", "title": "Ninja Forms - File Uploads <= 3.3.29 - Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13369" }, { "rank": 46, "cve_id": "CVE-2026-12413", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00598, "epss_percentile": 0.45952, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-193", "title": "IKEv2 Denial of Service via malformed fragmentation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12413" }, { "rank": 47, "cve_id": "CVE-2026-54406", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00587, "epss_percentile": 0.4542, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "cwe": "CWE-22", "title": "A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54406" }, { "rank": 48, "cve_id": "CVE-2026-52192", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00582, "epss_percentile": 0.45156, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-400", "title": "An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_445C5C component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52192" }, { "rank": 49, "cve_id": "CVE-2026-13459", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00579, "epss_percentile": 0.45015, "kev": false, "kev_due_at": null, "vendor": "jetmonsters", "product": "JetFormBuilder — Dynamic Blocks Form Builder", "cwe": "CWE-862", "title": "JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13459" }, { "rank": 50, "cve_id": "CVE-2026-54408", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00566, "epss_percentile": 0.44369, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54408" }, { "rank": 51, "cve_id": "CVE-2026-57621", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00564, "epss_percentile": 0.44279, "kev": false, "kev_due_at": null, "vendor": "Arraytics", "product": "Booktics", "cwe": "CWE-502", "title": "WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57621" }, { "rank": 52, "cve_id": "CVE-2026-57677", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00564, "epss_percentile": 0.44277, "kev": false, "kev_due_at": null, "vendor": "Novalnet", "product": "Novalnet Payment Gateway for WooCommerce", "cwe": "CWE-502", "title": "WordPress Novalnet Payment Gateway for WooCommerce plugin <= 12.10.3 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57677" }, { "rank": 53, "cve_id": "CVE-2026-14249", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00562, "epss_percentile": 0.44157, "kev": false, "kev_due_at": null, "vendor": "emarket-design", "product": "Request a Quote – Quote Forms for Any WordPress Site", "cwe": "CWE-74", "title": "Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14249" }, { "rank": 54, "cve_id": "CVE-2026-55117", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00561, "epss_percentile": 0.44092, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Access Application", "cwe": "CWE-22", "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55117" }, { "rank": 55, "cve_id": "CVE-2026-38968", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00553, "epss_percentile": 0.43712, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-341", "title": "ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-38968" }, { "rank": 56, "cve_id": "CVE-2026-14029", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00551, "epss_percentile": 0.43609, "kev": false, "kev_due_at": null, "vendor": "trainingbusinesspros", "product": "Groundhogg — CRM, Newsletters, and Marketing Automation", "cwe": "CWE-89", "title": "Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14029" }, { "rank": 57, "cve_id": "CVE-2026-59099", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00548, "epss_percentile": 0.43448, "kev": false, "kev_due_at": null, "vendor": "apereo", "product": "cas", "cwe": "CWE-323", "title": "Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59099" }, { "rank": 58, "cve_id": "CVE-2026-8147", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00548, "epss_percentile": 0.43404, "kev": false, "kev_due_at": null, "vendor": "mlflow", "product": "mlflow/mlflow", "cwe": "CWE-284", "title": "Authorization Bypass in mlflow/mlflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8147" }, { "rank": 59, "cve_id": "CVE-2026-58578", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00548, "epss_percentile": 0.43434, "kev": false, "kev_due_at": null, "vendor": "lobehub", "product": "lobehub", "cwe": "CWE-1333", "title": "LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58578" }, { "rank": 60, "cve_id": "CVE-2026-11896", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00544, "epss_percentile": 0.43197, "kev": false, "kev_due_at": null, "vendor": "joedolson", "product": "My Calendar – Accessible Event Manager", "cwe": "CWE-639", "title": "My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11896" }, { "rank": 61, "cve_id": "CVE-2026-59097", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00539, "epss_percentile": 0.42949, "kev": false, "kev_due_at": null, "vendor": "taiga", "product": "taiga-back", "cwe": "CWE-862", "title": "Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59097" }, { "rank": 62, "cve_id": "CVE-2026-44941", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00533, "epss_percentile": 0.42624, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "libzypp", "cwe": "CWE-23", "title": "libzypp path traversal via \"keyhint\" in repomd.xml", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44941" }, { "rank": 63, "cve_id": "CVE-2026-57623", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00525, "epss_percentile": 0.4212, "kev": false, "kev_due_at": null, "vendor": "BoldGrid", "product": "W3 Total Cache", "cwe": "CWE-1284", "title": "WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57623" }, { "rank": 64, "cve_id": "CVE-2026-54400", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00524, "epss_percentile": 0.42099, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Access Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54400" }, { "rank": 65, "cve_id": "CVE-2026-11946", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00524, "epss_percentile": 0.4206, "kev": false, "kev_due_at": null, "vendor": "open62541 project / o6 Automation GmbH", "product": "open62541", "cwe": "CWE-770", "title": "GetEndpoints Memory Exhaustion in open62541", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11946" }, { "rank": 66, "cve_id": "CVE-2026-33592", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00524, "epss_percentile": 0.4206, "kev": false, "kev_due_at": null, "vendor": "open62541 project / o6 Automation GmbH", "product": "open62541", "cwe": "CWE-770", "title": "FindServers Memory Exhaustion in open62541", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33592" }, { "rank": 67, "cve_id": "CVE-2026-58467", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00522, "epss_percentile": 0.41941, "kev": false, "kev_due_at": null, "vendor": "cockpit-hq", "product": "cockpit", "cwe": "CWE-22", "title": "Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58467" }, { "rank": 68, "cve_id": "CVE-2026-54405", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00522, "epss_percentile": 0.41953, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "cwe": "CWE-20", "title": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Denial of Service (DoS) attack on the application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54405" }, { "rank": 69, "cve_id": "CVE-2026-27060", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00518, "epss_percentile": 0.41655, "kev": false, "kev_due_at": null, "vendor": "Repute Infosystems", "product": "ARMember Premium", "cwe": "CWE-502", "title": "WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27060" }, { "rank": 70, "cve_id": "CVE-2026-27414", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00518, "epss_percentile": 0.41656, "kev": false, "kev_due_at": null, "vendor": "Fuelthemes", "product": "Werkstatt", "cwe": "CWE-502", "title": "WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27414" }, { "rank": 71, "cve_id": "CVE-2026-56037", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00518, "epss_percentile": 0.41655, "kev": false, "kev_due_at": null, "vendor": "Themify", "product": "Themify Popup", "cwe": "CWE-502", "title": "WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56037" }, { "rank": 72, "cve_id": "CVE-2026-9188", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00516, "epss_percentile": 0.41558, "kev": false, "kev_due_at": null, "vendor": "wappointment", "product": "Appointment Bookings for Zoom GoogleMeet and more – Wappointment", "cwe": "CWE-639", "title": "Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.7.6 - Unauthenticated Insecure Direct Object Reference via Predictable 'edit_key' / 'appointmentkey' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9188" }, { "rank": 73, "cve_id": "CVE-2026-59101", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00505, "epss_percentile": 0.40801, "kev": false, "kev_due_at": null, "vendor": "EstrellaXD", "product": "Auto_Bangumi", "cwe": "CWE-918", "title": "AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59101" }, { "rank": 74, "cve_id": "CVE-2026-55111", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00503, "epss_percentile": 0.40685, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Floodlight", "cwe": "CWE-22", "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55111" }, { "rank": 75, "cve_id": "CVE-2026-13084", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00499, "epss_percentile": 0.40455, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-476", "title": "Null Pointer Dereference in WatchGuard Fireware OS iked Process", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13084" }, { "rank": 76, "cve_id": "CVE-2026-12122", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00495, "epss_percentile": 0.40199, "kev": false, "kev_due_at": null, "vendor": "themeum", "product": "Kirki – Freeform Page Builder, Website Builder & Customizer", "cwe": "CWE-862", "title": "Kirki <= 6.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via kirki_post_apis_nopriv AJAX Action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12122" }, { "rank": 77, "cve_id": "CVE-2026-50747", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00493, "epss_percentile": 0.40106, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Talk Application", "cwe": "CWE-89", "title": "A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50747" }, { "rank": 78, "cve_id": "CVE-2026-54404", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00493, "epss_percentile": 0.40106, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "cwe": "CWE-89", "title": "A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54404" }, { "rank": 79, "cve_id": "CVE-2026-56841", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00493, "epss_percentile": 0.40106, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "cwe": "CWE-89", "title": "A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56841" }, { "rank": 80, "cve_id": "CVE-2026-44935", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.0049, "epss_percentile": 0.39903, "kev": false, "kev_due_at": null, "vendor": "SUSE", "product": "Rancher", "cwe": "CWE-1287", "title": "Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44935" }, { "rank": 81, "cve_id": "CVE-2026-13357", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00483, "epss_percentile": 0.39447, "kev": false, "kev_due_at": null, "vendor": "propertyhive", "product": "Houzez Property Feed", "cwe": "CWE-89", "title": "Houzez Property Feed <= 2.5.46 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13357" }, { "rank": 82, "cve_id": "CVE-2026-55952", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00481, "epss_percentile": 0.39279, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-1284", "title": "TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55952" }, { "rank": 83, "cve_id": "CVE-2026-27419", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00479, "epss_percentile": 0.39193, "kev": false, "kev_due_at": null, "vendor": "Zozothemes", "product": "Zegen", "cwe": "CWE-434", "title": "WordPress Zegen theme <= 1.1.9 - Arbitrary File Upload vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27419" }, { "rank": 84, "cve_id": "CVE-2026-11592", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00473, "epss_percentile": 0.38747, "kev": false, "kev_due_at": null, "vendor": "icegram", "product": "Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress", "cwe": "CWE-862", "title": "Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11592" }, { "rank": 85, "cve_id": "CVE-2026-55115", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00468, "epss_percentile": 0.38446, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "cwe": "CWE-918", "title": "A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55115" }, { "rank": 86, "cve_id": "CVE-2026-55114", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00468, "epss_percentile": 0.38446, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55114" }, { "rank": 87, "cve_id": "CVE-2026-55726", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00468, "epss_percentile": 0.38455, "kev": false, "kev_due_at": null, "vendor": "Gardyn", "product": "Gardyn Home Firmware", "cwe": "CWE-497", "title": "Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55726" }, { "rank": 88, "cve_id": "CVE-2025-58902", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38353, "kev": false, "kev_due_at": null, "vendor": "AncoraThemes", "product": "Lighthouse", "cwe": "CWE-98", "title": "WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-58902" }, { "rank": 89, "cve_id": "CVE-2026-27412", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38353, "kev": false, "kev_due_at": null, "vendor": "StylemixThemes", "product": "Pearl - Corporate Business", "cwe": "CWE-98", "title": "WordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27412" }, { "rank": 90, "cve_id": "CVE-2026-42382", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38354, "kev": false, "kev_due_at": null, "vendor": "Elated-Themes", "product": "Audrey", "cwe": "CWE-98", "title": "WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42382" }, { "rank": 91, "cve_id": "CVE-2026-8441", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00463, "epss_percentile": 0.38062, "kev": false, "kev_due_at": null, "vendor": "https://wpreviewslider.com/", "product": "WP Review Slider Pro", "cwe": "CWE-89", "title": "WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8441" }, { "rank": 92, "cve_id": "CVE-2026-5348", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00455, "epss_percentile": 0.3755, "kev": false, "kev_due_at": null, "vendor": "kodezen", "product": "Academy LMS – WordPress LMS Plugin for Complete eLearning Solution", "cwe": "CWE-639", "title": "Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5348" }, { "rank": 93, "cve_id": "CVE-2026-54407", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00453, "epss_percentile": 0.37418, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54407" }, { "rank": 94, "cve_id": "CVE-2026-57268", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00452, "epss_percentile": 0.37331, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57268" }, { "rank": 95, "cve_id": "CVE-2026-57625", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.0045, "epss_percentile": 0.37228, "kev": false, "kev_due_at": null, "vendor": "ASE", "product": "Admin and Site Enhancements (ASE) Pro", "cwe": "CWE-79", "title": "WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57625" }, { "rank": 96, "cve_id": "CVE-2026-49779", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00443, "epss_percentile": 0.36673, "kev": false, "kev_due_at": null, "vendor": "Addify", "product": "Tax Exempt for WooCommerce", "cwe": "CWE-35", "title": "WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49779" }, { "rank": 97, "cve_id": "CVE-2026-54409", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0044, "epss_percentile": 0.36428, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Protect Application", "cwe": "CWE-665", "title": "A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54409" }, { "rank": 98, "cve_id": "CVE-2026-14449", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00436, "epss_percentile": 0.36169, "kev": false, "kev_due_at": null, "vendor": "u5CMS", "product": "u5CMS", "cwe": "CWE-79", "title": "POST-based reflected XSS via the thanks parameter in form components", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14449" }, { "rank": 99, "cve_id": "CVE-2026-54401", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00431, "epss_percentile": 0.3563, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "cwe": "CWE-918", "title": "A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54401" }, { "rank": 100, "cve_id": "CVE-2026-10077", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00431, "epss_percentile": 0.35677, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "yootheme", "cwe": null, "title": "YOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data Attributes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10077" }, { "rank": 101, "cve_id": "CVE-2026-9272", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0043, "epss_percentile": 0.35625, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Flowmon ADS", "cwe": "CWE-89", "title": "Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9272" }, { "rank": 102, "cve_id": "CVE-2025-71385", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.0043, "epss_percentile": 0.3558, "kev": false, "kev_due_at": null, "vendor": "netdata", "product": "netdata", "cwe": "CWE-79", "title": "Netdata < 2.3.1 - Reflected Cross-Site Scripting via love Parameter in ilove.svg Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2025-71385" }, { "rank": 103, "cve_id": "CVE-2025-69133", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35483, "kev": false, "kev_due_at": null, "vendor": "GoodLayers", "product": "Tourmaster", "cwe": "CWE-98", "title": "WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69133" }, { "rank": 104, "cve_id": "CVE-2026-57748", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35484, "kev": false, "kev_due_at": null, "vendor": "Shopify Help Center", "product": "Shopify", "cwe": "CWE-98", "title": "WordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57748" }, { "rank": 105, "cve_id": "CVE-2026-57749", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35483, "kev": false, "kev_due_at": null, "vendor": "ThemeBoy", "product": "SportsPress Pro", "cwe": "CWE-98", "title": "WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57749" }, { "rank": 106, "cve_id": "CVE-2026-50281", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35508, "kev": false, "kev_due_at": null, "vendor": "craftcms", "product": "cms", "cwe": "CWE-915", "title": "Craft CMS: Mass assignment via id in newAttributes during bulk duplicate overwrites existing elements", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50281" }, { "rank": 107, "cve_id": "CVE-2026-9145", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00427, "epss_percentile": 0.35379, "kev": false, "kev_due_at": null, "vendor": "crmperks", "product": "Database for Contact Form 7, WPforms, Elementor forms", "cwe": "CWE-22", "title": "Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9145" }, { "rank": 108, "cve_id": "CVE-2025-69134", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00426, "epss_percentile": 0.35232, "kev": false, "kev_due_at": null, "vendor": "Merkulove", "product": "OpenAI Chatbot for WordPress – Helper", "cwe": "CWE-862", "title": "WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69134" }, { "rank": 109, "cve_id": "CVE-2026-59098", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00415, "epss_percentile": 0.34288, "kev": false, "kev_due_at": null, "vendor": "lobehub", "product": "lobehub", "cwe": "CWE-639", "title": "LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59098" }, { "rank": 110, "cve_id": "CVE-2026-55116", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00412, "epss_percentile": 0.34025, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "Dream Machines", "cwe": "CWE-284", "title": "A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55116" }, { "rank": 111, "cve_id": "CVE-2026-13704", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00408, "epss_percentile": 0.33607, "kev": false, "kev_due_at": null, "vendor": "stellarwp", "product": "GiveWP – Donation Plugin and Fundraising Platform", "cwe": "CWE-79", "title": "GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13704" }, { "rank": 112, "cve_id": "CVE-2026-12134", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.33202, "kev": false, "kev_due_at": null, "vendor": "beardev", "product": "JoomSport – for Sports: Team & League, Football, Hockey & more", "cwe": "CWE-862", "title": "JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12134" }, { "rank": 113, "cve_id": "CVE-2026-59095", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00402, "epss_percentile": 0.33006, "kev": false, "kev_due_at": null, "vendor": "lobehub", "product": "lobehub", "cwe": "CWE-918", "title": "LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59095" }, { "rank": 114, "cve_id": "CVE-2026-57273", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32952, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57273" }, { "rank": 115, "cve_id": "CVE-2026-57274", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32952, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57274" }, { "rank": 116, "cve_id": "CVE-2026-57275", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32953, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57275" }, { "rank": 117, "cve_id": "CVE-2026-57276", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32953, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57276" }, { "rank": 118, "cve_id": "CVE-2026-57277", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32952, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57277" }, { "rank": 119, "cve_id": "CVE-2026-57278", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00401, "epss_percentile": 0.32953, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-120", "title": "GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57278" }, { "rank": 120, "cve_id": "CVE-2026-57679", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.004, "epss_percentile": 0.32876, "kev": false, "kev_due_at": null, "vendor": "Ahmadgb", "product": "GeekyBot", "cwe": "CWE-89", "title": "WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57679" }, { "rank": 121, "cve_id": "CVE-2026-57683", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.004, "epss_percentile": 0.32878, "kev": false, "kev_due_at": null, "vendor": "Epsiloncool", "product": "WP Fast Total Search", "cwe": "CWE-89", "title": "WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57683" }, { "rank": 122, "cve_id": "CVE-2026-57272", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00394, "epss_percentile": 0.32166, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57272" }, { "rank": 123, "cve_id": "CVE-2026-57688", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00392, "epss_percentile": 0.31934, "kev": false, "kev_due_at": null, "vendor": "Gurmehub", "product": "POS Entegratör", "cwe": "CWE-862", "title": "WordPress POS Entegratör plugin <= 3.7.103 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57688" }, { "rank": 124, "cve_id": "CVE-2026-11600", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00387, "epss_percentile": 0.31509, "kev": false, "kev_due_at": null, "vendor": "envothemes", "product": "Envo's Templates & Widgets for Elementor and WooCommerce", "cwe": "CWE-862", "title": "Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11600" }, { "rank": 125, "cve_id": "CVE-2026-55119", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00386, "epss_percentile": 0.31349, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Talk Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55119" }, { "rank": 126, "cve_id": "CVE-2026-50721", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00386, "epss_percentile": 0.31433, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-347", "title": "IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50721" }, { "rank": 127, "cve_id": "CVE-2026-13125", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0038, "epss_percentile": 0.30774, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-306", "title": "GeoVision GeoWebPlayer 1.1.1.0 Websocket Server function vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13125" }, { "rank": 128, "cve_id": "CVE-2026-59092", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00377, "epss_percentile": 0.30432, "kev": false, "kev_due_at": null, "vendor": "juicedata", "product": "juicefs", "cwe": "CWE-489", "title": "JuiceFS - Authentication Bypass via pprof and metrics Endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59092" }, { "rank": 129, "cve_id": "CVE-2026-13131", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29784, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13131" }, { "rank": 130, "cve_id": "CVE-2026-13132", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29784, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13132" }, { "rank": 131, "cve_id": "CVE-2026-57264", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29785, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57264" }, { "rank": 132, "cve_id": "CVE-2026-57265", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29784, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57265" }, { "rank": 133, "cve_id": "CVE-2026-57266", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29783, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57266" }, { "rank": 134, "cve_id": "CVE-2026-57267", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29784, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57267" }, { "rank": 135, "cve_id": "CVE-2026-57269", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29785, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57269" }, { "rank": 136, "cve_id": "CVE-2026-57270", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29783, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57270" }, { "rank": 137, "cve_id": "CVE-2026-57271", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00371, "epss_percentile": 0.29785, "kev": false, "kev_due_at": null, "vendor": "GeoVision Inc.", "product": "GeoWebPlayer", "cwe": "CWE-129", "title": "GeoVision GeoWebPlayer Websocket Server out-of-bounds read vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57271" }, { "rank": 138, "cve_id": "CVE-2025-69132", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00371, "epss_percentile": 0.29814, "kev": false, "kev_due_at": null, "vendor": "Zozothemes", "product": "Corpkit", "cwe": "CWE-201", "title": "WordPress Corpkit theme <= 1.0.5 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69132" }, { "rank": 139, "cve_id": "CVE-2026-57347", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00371, "epss_percentile": 0.29816, "kev": false, "kev_due_at": null, "vendor": "jetmonsters", "product": "Hotel Booking Lite", "cwe": "CWE-201", "title": "WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57347" }, { "rank": 140, "cve_id": "CVE-2026-55113", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0037, "epss_percentile": 0.29667, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Talk Application", "cwe": "CWE-918", "title": "A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55113" }, { "rank": 141, "cve_id": "CVE-2026-55118", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00367, "epss_percentile": 0.29344, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "cwe": "CWE-284", "title": "A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55118" }, { "rank": 142, "cve_id": "CVE-2026-56842", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28909, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "cwe": "CWE-863", "title": "A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56842" }, { "rank": 143, "cve_id": "CVE-2025-69094", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.28395, "kev": false, "kev_due_at": null, "vendor": "ThemeMove", "product": "Unicamp", "cwe": "CWE-89", "title": "WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69094" }, { "rank": 144, "cve_id": "CVE-2026-57687", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.28393, "kev": false, "kev_due_at": null, "vendor": "Hiroaki Miyashita", "product": "Custom Field Template", "cwe": "CWE-89", "title": "WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57687" }, { "rank": 145, "cve_id": "CVE-2026-57752", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.2839, "kev": false, "kev_due_at": null, "vendor": "iNET", "product": "iNET Webkit", "cwe": "CWE-89", "title": "WordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57752" }, { "rank": 146, "cve_id": "CVE-2026-57756", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.28391, "kev": false, "kev_due_at": null, "vendor": "友人a丶", "product": "nicen-localize-image", "cwe": "CWE-89", "title": "WordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57756" }, { "rank": 147, "cve_id": "CVE-2026-57765", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00357, "epss_percentile": 0.2839, "kev": false, "kev_due_at": null, "vendor": "Levelfourdevelopment", "product": "WP EasyCart", "cwe": "CWE-89", "title": "WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57765" }, { "rank": 148, "cve_id": "CVE-2026-10089", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00357, "epss_percentile": 0.2837, "kev": false, "kev_due_at": null, "vendor": "figureone", "product": "Insert Pages", "cwe": "CWE-79", "title": "Insert Pages <= 3.11.4 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Field Keys (Meta Key Names)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10089" }, { "rank": 149, "cve_id": "CVE-2026-55112", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00356, "epss_percentile": 0.28278, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "Dream Machines", "cwe": "CWE-284", "title": "A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55112" }, { "rank": 150, "cve_id": "CVE-2026-52188", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00353, "epss_percentile": 0.27913, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-119", "title": "Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead//sub_497498 component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52188" }, { "rank": 151, "cve_id": "CVE-2026-13371", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00351, "epss_percentile": 0.27685, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-502", "title": "WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13371" }, { "rank": 152, "cve_id": "CVE-2026-50282", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00351, "epss_percentile": 0.27655, "kev": false, "kev_due_at": null, "vendor": "craftcms", "product": "cms", "cwe": "CWE-862", "title": "Craft CMS: Unauthorized Deletion of Destination Folders During Forced Moves", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50282" }, { "rank": 153, "cve_id": "CVE-2026-13252", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00349, "epss_percentile": 0.27489, "kev": false, "kev_due_at": null, "vendor": "themeisle", "product": "RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator", "cwe": "CWE-79", "title": "RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13252" }, { "rank": 154, "cve_id": "CVE-2026-59102", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00347, "epss_percentile": 0.27234, "kev": false, "kev_due_at": null, "vendor": "forgejo", "product": "forgejo", "cwe": "CWE-79", "title": "Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59102" }, { "rank": 155, "cve_id": "CVE-2026-39448", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00346, "epss_percentile": 0.27201, "kev": false, "kev_due_at": null, "vendor": "CoderPress", "product": "NOWPayments for WooCommerce", "cwe": "CWE-862", "title": "WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39448" }, { "rank": 156, "cve_id": "CVE-2026-50722", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00346, "epss_percentile": 0.27188, "kev": false, "kev_due_at": null, "vendor": "The Libreswan Project", "product": "libreswan", "cwe": "CWE-347", "title": "IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50722" }, { "rank": 157, "cve_id": "CVE-2026-57669", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0034, "epss_percentile": 0.26537, "kev": false, "kev_due_at": null, "vendor": "Vsourz Digital", "product": "Advanced Contact form 7 DB", "cwe": "CWE-862", "title": "WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57669" }, { "rank": 158, "cve_id": "CVE-2026-57731", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0034, "epss_percentile": 0.26538, "kev": false, "kev_due_at": null, "vendor": "UX-themes", "product": "Flatsome", "cwe": "CWE-862", "title": "WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57731" }, { "rank": 159, "cve_id": "CVE-2026-59096", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00337, "epss_percentile": 0.26136, "kev": false, "kev_due_at": null, "vendor": "dapr", "product": "dapr", "cwe": "CWE-346", "title": "Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59096" }, { "rank": 160, "cve_id": "CVE-2026-10104", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00335, "epss_percentile": 0.2589, "kev": false, "kev_due_at": null, "vendor": "nikhilgadhiya", "product": "Product Video Gallery for Woocommerce", "cwe": "CWE-79", "title": "Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via custom_thumbnail Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10104" }, { "rank": 161, "cve_id": "CVE-2026-27433", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00332, "epss_percentile": 0.25577, "kev": false, "kev_due_at": null, "vendor": "StylemixThemes", "product": "Motors", "cwe": "CWE-862", "title": "WordPress Motors theme <= 5.6.80 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27433" }, { "rank": 162, "cve_id": "CVE-2026-57680", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00332, "epss_percentile": 0.25575, "kev": false, "kev_due_at": null, "vendor": "Themeum", "product": "Kirki", "cwe": "CWE-639", "title": "WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57680" }, { "rank": 163, "cve_id": "CVE-2026-54886", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00331, "epss_percentile": 0.2542, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-400", "title": "SSH SFTP server denial of service via extended channel data infinite loop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54886" }, { "rank": 164, "cve_id": "CVE-2026-57753", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.0033, "epss_percentile": 0.25316, "kev": false, "kev_due_at": null, "vendor": "Nathanbarry", "product": "Kit (formerly ConvertKit) for WooCommerce", "cwe": "CWE-497", "title": "WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57753" }, { "rank": 165, "cve_id": "CVE-2026-54477", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00327, "epss_percentile": 0.24996, "kev": false, "kev_due_at": null, "vendor": "Gardyn", "product": "Gardyn Home Firmware", "cwe": "CWE-644", "title": "Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54477" }, { "rank": 166, "cve_id": "CVE-2026-8079", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00323, "epss_percentile": 0.24604, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "Flowmon", "cwe": "CWE-863", "title": "Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8079" }, { "rank": 167, "cve_id": "CVE-2026-14336", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00321, "epss_percentile": 0.2434, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse CSI - PIA", "cwe": "CWE-918", "title": "PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_known, pia/models.py:139) instead of validating the issuer as a properly host-bounded URL. An attacker can craft an issuer such as https://ci.eclipse.org@evil.host (userinfo trick) or https://ci.eclipse.org.evil.host (suffix trick) that satisfies the prefix check while pointing the OIDC discovery and JWKS fetches at a server the attacker controls. An unauthenticated caller of POST /v1/upload/sbom can use this to force PIA to make outbound HTTP(S) requests to an arbitrary attacker-chosen host, and to have oidc.verify_token accept a JWT signed with the attacker's own key.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14336" }, { "rank": 168, "cve_id": "CVE-2026-53358", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00318, "epss_percentile": 0.24014, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": "CWE-667", "title": "Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53358" }, { "rank": 169, "cve_id": "CVE-2026-11781", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.00316, "epss_percentile": 0.23724, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Adminify", "cwe": null, "title": "Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11781" }, { "rank": 170, "cve_id": "CVE-2026-57353", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00299, "epss_percentile": 0.2195, "kev": false, "kev_due_at": null, "vendor": "LinkWhisper", "product": "Link Whisper Premium", "cwe": "CWE-862", "title": "WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57353" }, { "rank": 171, "cve_id": "CVE-2026-57355", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00299, "epss_percentile": 0.21949, "kev": false, "kev_due_at": null, "vendor": "RadiusTheme", "product": "Classified Listing", "cwe": "CWE-862", "title": "WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57355" }, { "rank": 172, "cve_id": "CVE-2026-58579", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00298, "epss_percentile": 0.21847, "kev": false, "kev_due_at": null, "vendor": "infiniflow", "product": "ragflow", "cwe": "CWE-79", "title": "RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58579" }, { "rank": 173, "cve_id": "CVE-2025-66076", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.21352, "kev": false, "kev_due_at": null, "vendor": "dylan ngo", "product": "Woostify Sites Library", "cwe": "CWE-862", "title": "WordPress Woostify Sites Library plugin <= 1.6.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-66076" }, { "rank": 174, "cve_id": "CVE-2026-57750", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.21353, "kev": false, "kev_due_at": null, "vendor": "Keksdieb", "product": "ez Form Calculator Premium", "cwe": "CWE-862", "title": "WordPress ez Form Calculator Premium plugin <= 2.14.1.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57750" }, { "rank": 175, "cve_id": "CVE-2026-57760", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00294, "epss_percentile": 0.21355, "kev": false, "kev_due_at": null, "vendor": "Sendcloud", "product": "Sendcloud Shipping", "cwe": "CWE-862", "title": "WordPress Sendcloud Shipping plugin <= 1.0.29 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57760" }, { "rank": 176, "cve_id": "CVE-2026-59100", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00291, "epss_percentile": 0.21019, "kev": false, "kev_due_at": null, "vendor": "lobehub", "product": "lobehub", "cwe": "CWE-639", "title": "LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59100" }, { "rank": 177, "cve_id": "CVE-2026-57746", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0029, "epss_percentile": 0.20929, "kev": false, "kev_due_at": null, "vendor": "ThemeREX", "product": "Booked", "cwe": "CWE-862", "title": "WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57746" }, { "rank": 178, "cve_id": "CVE-2026-11578", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.00281, "epss_percentile": 0.20053, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Fluent Forms", "cwe": null, "title": "Fluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11578" }, { "rank": 179, "cve_id": "CVE-2026-8699", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00279, "epss_percentile": 0.19845, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "Archer C5 v6.8", "cwe": "CWE-79", "title": "Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8699" }, { "rank": 180, "cve_id": "CVE-2026-11965", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.19323, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "User Registration & Membership", "cwe": null, "title": "User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11965" }, { "rank": 181, "cve_id": "CVE-2026-13722", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00272, "epss_percentile": 0.19018, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-347", "title": "WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13722" }, { "rank": 182, "cve_id": "CVE-2026-53357", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00272, "epss_percentile": 0.19027, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": "CWE-416", "title": "Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53357" }, { "rank": 183, "cve_id": "CVE-2026-55110", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18779, "kev": false, "kev_due_at": null, "vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "cwe": "CWE-942", "title": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55110" }, { "rank": 184, "cve_id": "CVE-2026-13373", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18734, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-79", "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13373" }, { "rank": 185, "cve_id": "CVE-2026-13374", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18733, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-79", "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13374" }, { "rank": 186, "cve_id": "CVE-2026-13375", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18733, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-79", "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Autotask Technology Integration Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13375" }, { "rank": 187, "cve_id": "CVE-2026-13376", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18734, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-79", "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13376" }, { "rank": 188, "cve_id": "CVE-2026-13377", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00271, "epss_percentile": 0.18734, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-79", "title": "WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13377" }, { "rank": 189, "cve_id": "CVE-2026-57689", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0027, "epss_percentile": 0.18689, "kev": false, "kev_due_at": null, "vendor": "Fuelthemes", "product": "Werkstatt", "cwe": "CWE-862", "title": "WordPress Werkstatt theme <= 4.7.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57689" }, { "rank": 190, "cve_id": "CVE-2026-57730", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.0027, "epss_percentile": 0.18688, "kev": false, "kev_due_at": null, "vendor": "UX-themes", "product": "Flatsome", "cwe": "CWE-862", "title": "WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57730" }, { "rank": 191, "cve_id": "CVE-2026-8247", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00268, "epss_percentile": 0.18452, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-787", "title": "WatchGuard Firebox admd Out of Bounds Write Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8247" }, { "rank": 192, "cve_id": "CVE-2026-57348", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00266, "epss_percentile": 0.18069, "kev": false, "kev_due_at": null, "vendor": "Cozmoslabs", "product": "Paid Member Subscriptions", "cwe": "CWE-918", "title": "WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57348" }, { "rank": 193, "cve_id": "CVE-2026-58653", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00264, "epss_percentile": 0.17851, "kev": false, "kev_due_at": null, "vendor": "PraisonAI", "product": "PraisonAI", "cwe": "CWE-639", "title": "PraisonAI - Authorization Bypass via Unvalidated project_id in Issue Create/Update", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58653" }, { "rank": 194, "cve_id": "CVE-2026-53422", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00262, "epss_percentile": 0.17574, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-204", "title": "SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53422" }, { "rank": 195, "cve_id": "CVE-2026-57352", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.0026, "epss_percentile": 0.17337, "kev": false, "kev_due_at": null, "vendor": "VillaTheme", "product": "ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce", "cwe": "CWE-1390", "title": "WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57352" }, { "rank": 196, "cve_id": "CVE-2026-57685", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00254, "epss_percentile": 0.16622, "kev": false, "kev_due_at": null, "vendor": "drfuri", "product": "Martfury - WooCommerce Marketplace WordPress Theme", "cwe": "CWE-862", "title": "WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.2.8 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57685" }, { "rank": 197, "cve_id": "CVE-2025-69152", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16246, "kev": false, "kev_due_at": null, "vendor": "ThemeGoods", "product": "Artale | Wedding Photography WordPress", "cwe": "CWE-79", "title": "WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69152" }, { "rank": 198, "cve_id": "CVE-2025-69153", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16245, "kev": false, "kev_due_at": null, "vendor": "designthemes", "product": "Trendy Travel", "cwe": "CWE-79", "title": "WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69153" }, { "rank": 199, "cve_id": "CVE-2025-69154", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16246, "kev": false, "kev_due_at": null, "vendor": "designthemes", "product": "SpaLab | Beauty Salon WordPress Theme", "cwe": "CWE-79", "title": "WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69154" }, { "rank": 200, "cve_id": "CVE-2025-69155", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16245, "kev": false, "kev_due_at": null, "vendor": "Designthemes", "product": "Fitness Zone WordPress Theme", "cwe": "CWE-79", "title": "WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69155" }, { "rank": 201, "cve_id": "CVE-2025-69156", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16256, "kev": false, "kev_due_at": null, "vendor": "Design themes", "product": "Kids Zone - Children WordPress Theme", "cwe": "CWE-79", "title": "WordPress Kids Zone - Children WordPress Theme theme <= 5.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-69156" }, { "rank": 202, "cve_id": "CVE-2026-27402", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16258, "kev": false, "kev_due_at": null, "vendor": "Designthemes", "product": "Kids Life | Children School WordPress", "cwe": "CWE-79", "title": "WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27402" }, { "rank": 203, "cve_id": "CVE-2026-27404", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16257, "kev": false, "kev_due_at": null, "vendor": "Designthemes", "product": "LMS", "cwe": "CWE-79", "title": "WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27404" }, { "rank": 204, "cve_id": "CVE-2026-27408", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16276, "kev": false, "kev_due_at": null, "vendor": "imithemes", "product": "NativeChurch", "cwe": "CWE-79", "title": "WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27408" }, { "rank": 205, "cve_id": "CVE-2026-27425", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16248, "kev": false, "kev_due_at": null, "vendor": "Themesuite", "product": "Automotive Listings", "cwe": "CWE-79", "title": "WordPress Automotive Listings plugin <= 18.6 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27425" }, { "rank": 206, "cve_id": "CVE-2026-27426", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16248, "kev": false, "kev_due_at": null, "vendor": "Themesuite", "product": "Automotive Car Dealership Business", "cwe": "CWE-79", "title": "WordPress Automotive Car Dealership Business theme <= 13.3.3 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27426" }, { "rank": 207, "cve_id": "CVE-2026-27430", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16277, "kev": false, "kev_due_at": null, "vendor": "tranmautritam", "product": "TheFox", "cwe": "CWE-79", "title": "WordPress TheFox theme <= 3.9.76 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27430" }, { "rank": 208, "cve_id": "CVE-2026-57343", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16255, "kev": false, "kev_due_at": null, "vendor": "Contempoinc", "product": "Real Estate 7", "cwe": "CWE-79", "title": "WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57343" }, { "rank": 209, "cve_id": "CVE-2026-57344", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16266, "kev": false, "kev_due_at": null, "vendor": "RadiusTheme", "product": "Classified Listing", "cwe": "CWE-79", "title": "WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57344" }, { "rank": 210, "cve_id": "CVE-2026-57345", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16276, "kev": false, "kev_due_at": null, "vendor": "Webraketen", "product": "Internal Links Manager", "cwe": "CWE-79", "title": "WordPress Internal Links Manager plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57345" }, { "rank": 211, "cve_id": "CVE-2026-57349", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16262, "kev": false, "kev_due_at": null, "vendor": "etruel", "product": "WPeMatico RSS Feed Fetcher", "cwe": "CWE-79", "title": "WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.17 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57349" }, { "rank": 212, "cve_id": "CVE-2026-57350", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16254, "kev": false, "kev_due_at": null, "vendor": "Andy Fragen", "product": "WP Debugging", "cwe": "CWE-79", "title": "WordPress WP Debugging plugin <= 2.12.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57350" }, { "rank": 213, "cve_id": "CVE-2026-57351", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16254, "kev": false, "kev_due_at": null, "vendor": "Haktan Suren", "product": "HandL UTM Grabber", "cwe": "CWE-79", "title": "WordPress HandL UTM Grabber plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57351" }, { "rank": 214, "cve_id": "CVE-2026-57356", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16258, "kev": false, "kev_due_at": null, "vendor": "Moreconvert Team", "product": "MC Woocommerce Wishlist", "cwe": "CWE-79", "title": "WordPress MC Woocommerce Wishlist plugin <= 1.9.19 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57356" }, { "rank": 215, "cve_id": "CVE-2026-57357", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16258, "kev": false, "kev_due_at": null, "vendor": "Search Atlas Group", "product": "Search Atlas SEO", "cwe": "CWE-79", "title": "WordPress Search Atlas SEO plugin <= 2.6.6 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57357" }, { "rank": 216, "cve_id": "CVE-2026-57358", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16259, "kev": false, "kev_due_at": null, "vendor": "SysBasics", "product": "Customize My Account for WooCommerce", "cwe": "CWE-79", "title": "WordPress Customize My Account for WooCommerce plugin <= 4.3.9 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57358" }, { "rank": 217, "cve_id": "CVE-2026-57359", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16278, "kev": false, "kev_due_at": null, "vendor": "ReviewX", "product": "ReviewX", "cwe": "CWE-79", "title": "WordPress ReviewX plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57359" }, { "rank": 218, "cve_id": "CVE-2026-57360", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16277, "kev": false, "kev_due_at": null, "vendor": "impleCode", "product": "eCommerce Product Catalog", "cwe": "CWE-79", "title": "WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57360" }, { "rank": 219, "cve_id": "CVE-2026-57361", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16271, "kev": false, "kev_due_at": null, "vendor": "Ays Pro", "product": "Survey Maker", "cwe": "CWE-79", "title": "WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57361" }, { "rank": 220, "cve_id": "CVE-2026-57362", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16267, "kev": false, "kev_due_at": null, "vendor": "QuantumCloud", "product": "ChatBot", "cwe": "CWE-79", "title": "WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57362" }, { "rank": 221, "cve_id": "CVE-2026-57366", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16266, "kev": false, "kev_due_at": null, "vendor": "Greg Winiarski", "product": "WPAdverts", "cwe": "CWE-79", "title": "WordPress WPAdverts plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57366" }, { "rank": 222, "cve_id": "CVE-2026-57426", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16249, "kev": false, "kev_due_at": null, "vendor": "Chill Media Labs S.R.L.", "product": "Modula - PRO", "cwe": "CWE-79", "title": "WordPress Modula - PRO plugin <= 2.10.8 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57426" }, { "rank": 223, "cve_id": "CVE-2026-57670", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.1625, "kev": false, "kev_due_at": null, "vendor": "Codepeople", "product": "Google Maps CP", "cwe": "CWE-79", "title": "WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57670" }, { "rank": 224, "cve_id": "CVE-2026-57671", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16251, "kev": false, "kev_due_at": null, "vendor": "Perfmatters", "product": "perfmatters", "cwe": "CWE-79", "title": "WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57671" }, { "rank": 225, "cve_id": "CVE-2026-57672", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16274, "kev": false, "kev_due_at": null, "vendor": "Melograno Venture Studio", "product": "wpDataTables", "cwe": "CWE-79", "title": "WordPress wpDataTables plugin <= 6.5.1.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57672" }, { "rank": 226, "cve_id": "CVE-2026-57673", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16274, "kev": false, "kev_due_at": null, "vendor": "Optimole", "product": "Optimole", "cwe": "CWE-79", "title": "WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57673" }, { "rank": 227, "cve_id": "CVE-2026-57674", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16269, "kev": false, "kev_due_at": null, "vendor": "Arraytics", "product": "Timetics", "cwe": "CWE-79", "title": "WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57674" }, { "rank": 228, "cve_id": "CVE-2026-57675", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16273, "kev": false, "kev_due_at": null, "vendor": "Jacob N. Breetvelt", "product": "WP Photo Album Plus", "cwe": "CWE-79", "title": "WordPress WP Photo Album Plus plugin <= 9.2.02.004 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57675" }, { "rank": 229, "cve_id": "CVE-2026-57678", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16255, "kev": false, "kev_due_at": null, "vendor": "ThemePunch", "product": "Slider Revolution", "cwe": "CWE-79", "title": "WordPress Slider Revolution plugin 7.0.0-7.0.16 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57678" }, { "rank": 230, "cve_id": "CVE-2026-57682", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16246, "kev": false, "kev_due_at": null, "vendor": "QuantumCloud", "product": "Simple Link Directory", "cwe": "CWE-79", "title": "WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57682" }, { "rank": 231, "cve_id": "CVE-2026-57686", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.1627, "kev": false, "kev_due_at": null, "vendor": "WPXPO", "product": "WowAddons", "cwe": "CWE-79", "title": "WordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57686" }, { "rank": 232, "cve_id": "CVE-2026-58580", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.0025, "epss_percentile": 0.1605, "kev": false, "kev_due_at": null, "vendor": "lobehub", "product": "lobehub", "cwe": "CWE-639", "title": "LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58580" }, { "rank": 233, "cve_id": "CVE-2026-54887", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00243, "epss_percentile": 0.15229, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-1394", "title": "DTLS server cookie bypass during startup window due to empty initial cookie secret", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54887" }, { "rank": 234, "cve_id": "CVE-2026-57762", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.0024, "epss_percentile": 0.14914, "kev": false, "kev_due_at": null, "vendor": "Andrew Fiebert", "product": "Simple URLs", "cwe": "CWE-79", "title": "WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57762" }, { "rank": 235, "cve_id": "CVE-2026-57681", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.0023, "epss_percentile": 0.13612, "kev": false, "kev_due_at": null, "vendor": "Paolo", "product": "GeoDirectory", "cwe": "CWE-918", "title": "WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57681" }, { "rank": 236, "cve_id": "CVE-2026-13728", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.0023, "epss_percentile": 0.1365, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Fireware OS", "cwe": "CWE-798", "title": "WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13728" }, { "rank": 237, "cve_id": "CVE-2026-8482", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00228, "epss_percentile": 0.13355, "kev": false, "kev_due_at": null, "vendor": "Stormshield", "product": "Stormshield Network Security", "cwe": "CWE-532", "title": "Information leak in NSRPC client history", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8482" }, { "rank": 238, "cve_id": "CVE-2026-4772", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00226, "epss_percentile": 0.13073, "kev": false, "kev_due_at": null, "vendor": "TR7 Cyber ​​Defense Inc.", "product": "WAF-ASP", "cwe": "CWE-79", "title": "Stored XSS in TR7's WAF-ASP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-4772" }, { "rank": 239, "cve_id": "CVE-2026-4770", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00226, "epss_percentile": 0.13071, "kev": false, "kev_due_at": null, "vendor": "TR7 Cyber ​​Defense Inc.", "product": "WAF-ASP", "cwe": "CWE-79", "title": "DOM-Based XSS in TR7's WAF-ASP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-4770" }, { "rank": 240, "cve_id": "CVE-2026-57342", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12885, "kev": false, "kev_due_at": null, "vendor": "ShortPixel", "product": "ShortPixel Adaptive Images", "cwe": "CWE-79", "title": "WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57342" }, { "rank": 241, "cve_id": "CVE-2026-57354", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12879, "kev": false, "kev_due_at": null, "vendor": "Crocoblock. Jetimpex Inc.", "product": "JetReviews", "cwe": "CWE-79", "title": "WordPress JetReviews plugin <= 3.0.0.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57354" }, { "rank": 242, "cve_id": "CVE-2026-57684", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12881, "kev": false, "kev_due_at": null, "vendor": "tranmautritam", "product": "TheFox", "cwe": "CWE-79", "title": "WordPress TheFox theme <= 3.9.70 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57684" }, { "rank": 243, "cve_id": "CVE-2026-57754", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12887, "kev": false, "kev_due_at": null, "vendor": "Livemesh", "product": "Livemesh Addons for WPBakery Page Builder", "cwe": "CWE-79", "title": "WordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57754" }, { "rank": 244, "cve_id": "CVE-2026-57755", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12889, "kev": false, "kev_due_at": null, "vendor": "Misbah WP", "product": "Mosaic Gallery – Advanced Gallery", "cwe": "CWE-79", "title": "WordPress Mosaic Gallery – Advanced Gallery plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57755" }, { "rank": 245, "cve_id": "CVE-2026-57763", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12883, "kev": false, "kev_due_at": null, "vendor": "Gordon Böhme", "product": "Structured Content", "cwe": "CWE-79", "title": "WordPress Structured Content plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57763" }, { "rank": 246, "cve_id": "CVE-2026-57764", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12886, "kev": false, "kev_due_at": null, "vendor": "Surbma", "product": "Surbma | Yoast SEO Breadcrumb Shortcode", "cwe": "CWE-79", "title": "WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57764" }, { "rank": 247, "cve_id": "CVE-2026-57759", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00201, "epss_percentile": 0.09846, "kev": false, "kev_due_at": null, "vendor": "Metagauss", "product": "ProfileGrid", "cwe": "CWE-352", "title": "WordPress ProfileGrid plugin <= 5.9.9.7 - CSRF to Account Takeover vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57759" }, { "rank": 248, "cve_id": "CVE-2026-57766", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00201, "epss_percentile": 0.09846, "kev": false, "kev_due_at": null, "vendor": "XplodedThemes", "product": "WPIDE – File Manager & Code Editor", "cwe": "CWE-352", "title": "WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57766" }, { "rank": 249, "cve_id": "CVE-2026-57751", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08638, "kev": false, "kev_due_at": null, "vendor": "Heateor Support", "product": "Heateor Social Login", "cwe": "CWE-352", "title": "WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57751" }, { "rank": 250, "cve_id": "CVE-2026-38972", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08602, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-427", "title": "Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibrary(L\"MSFTEDIT.DLL\") with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or another preferred DLL search location and achieve arbitrary code execution in the context of the user when the About dialog is opened.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-38972" }, { "rank": 251, "cve_id": "CVE-2026-58460", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00189, "epss_percentile": 0.0854, "kev": false, "kev_due_at": null, "vendor": "ajith-ab", "product": "react-native-receive-sharing-intent", "cwe": "CWE-22", "title": "react-native-receive-sharing-intent Path Traversal via _display_name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58460" }, { "rank": 252, "cve_id": "CVE-2026-54431", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00178, "epss_percentile": 0.07343, "kev": false, "kev_due_at": null, "vendor": "OpenIDC", "product": "liboauth2", "cwe": "CWE-358", "title": "Improper Data Validation in liboauth2", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54431" }, { "rank": 253, "cve_id": "CVE-2026-57747", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00174, "epss_percentile": 0.06884, "kev": false, "kev_due_at": null, "vendor": "ThemeREX", "product": "Booked", "cwe": "CWE-352", "title": "WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57747" }, { "rank": 254, "cve_id": "CVE-2026-12168", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00173, "epss_percentile": 0.06805, "kev": false, "kev_due_at": null, "vendor": "Little Orbit", "product": "GameFirst Anti-Cheat", "cwe": null, "title": "CVE-2026-12168", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12168" }, { "rank": 255, "cve_id": "CVE-2026-54430", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00169, "epss_percentile": 0.06318, "kev": false, "kev_due_at": null, "vendor": "OpenIDC", "product": "liboauth2", "cwe": "CWE-918", "title": "Server-Site Request Forgery in liboauth2", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54430" }, { "rank": 256, "cve_id": "CVE-2026-13743", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00162, "epss_percentile": 0.05616, "kev": false, "kev_due_at": null, "vendor": "CubeSpace", "product": "CW0057 Reaction Wheel", "cwe": "CWE-347", "title": "Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13743" }, { "rank": 257, "cve_id": "CVE-2026-57757", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00157, "epss_percentile": 0.05093, "kev": false, "kev_due_at": null, "vendor": "ploudapp", "product": "pCloud WP Backup", "cwe": "CWE-352", "title": "WordPress pCloud WP Backup plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57757" }, { "rank": 258, "cve_id": "CVE-2026-12166", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00152, "epss_percentile": 0.04583, "kev": false, "kev_due_at": null, "vendor": "Little Orbit", "product": "GameFirst Anti-Cheat", "cwe": null, "title": "CVE-2026-12166", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12166" }, { "rank": 259, "cve_id": "CVE-2026-12167", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00147, "epss_percentile": 0.04165, "kev": false, "kev_due_at": null, "vendor": "Little Orbit", "product": "GameFirst Anti-Cheat", "cwe": null, "title": "CVE-2026-12167", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12167" }, { "rank": 260, "cve_id": "CVE-2026-57690", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00142, "epss_percentile": 0.03712, "kev": false, "kev_due_at": null, "vendor": "Fuelthemes", "product": "Werkstatt", "cwe": "CWE-352", "title": "WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57690" }, { "rank": 261, "cve_id": "CVE-2026-13079", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.0014, "epss_percentile": 0.03571, "kev": false, "kev_due_at": null, "vendor": "WatchGuard", "product": "Mobile VPN with SSL Client", "cwe": "CWE-732", "title": "WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13079" }, { "rank": 262, "cve_id": "CVE-2026-54891", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00135, "epss_percentile": 0.03194, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-924", "title": "Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54891" }, { "rank": 263, "cve_id": "CVE-2026-57758", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00128, "epss_percentile": 0.02717, "kev": false, "kev_due_at": null, "vendor": "BeRocket", "product": "Permalink Manager for WooCommerce", "cwe": "CWE-352", "title": "WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57758" }, { "rank": 264, "cve_id": "CVE-2026-57761", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00128, "epss_percentile": 0.02717, "kev": false, "kev_due_at": null, "vendor": "BlueAstralThemes", "product": "SEOWP", "cwe": "CWE-352", "title": "WordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57761" }, { "rank": 265, "cve_id": "CVE-2026-58381", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00118, "epss_percentile": 0.01883, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "cwe": "CWE-415", "title": "Gimp: gimp: double-free in read_layer_block()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58381" } ], "transactions": [ { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-38971", "detail": "EXPLOIT PUBLISHED — CVE-2026-38971. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-38972", "detail": "EXPLOIT PUBLISHED — CVE-2026-38972. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-44941", "detail": "EXPLOIT PUBLISHED — CVE-2026-44941 (SUSE libzypp). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-8147", "detail": "EXPLOIT PUBLISHED — CVE-2026-8147 (mlflow/mlflow). Public exploit reference added." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }