{ "day": "2026-07-14", "boundary": "UTC calendar day", "published_count": 1007, "by_severity": { "CRITICAL": 89, "HIGH": 596, "MEDIUM": 275, "LOW": 47 }, "kev_count": 7, "exploit_reference_count": 42, "awaiting_enrichment_count": 0, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-50522", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.84606, "epss_percentile": 0.99684, "kev": true, "kev_due_at": "2026-07-25", "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-502", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50522" }, { "rank": 2, "cve_id": "CVE-2026-15409", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.83658, "epss_percentile": 0.99664, "kev": true, "kev_due_at": "2026-07-17", "vendor": "SonicWall", "product": "SMA1000", "cwe": "CWE-918", "title": "SonicWall SMA1000 Appliances", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15409" }, { "rank": 3, "cve_id": "CVE-2026-56164", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.26636, "epss_percentile": 0.9786, "kev": true, "kev_due_at": "2026-07-17", "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-306", "title": "Microsoft SharePoint Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56164" }, { "rank": 4, "cve_id": "CVE-2026-58644", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.15873, "epss_percentile": 0.96624, "kev": true, "kev_due_at": "2026-07-19", "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-502", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58644" }, { "rank": 5, "cve_id": "CVE-2026-15410", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.11791, "epss_percentile": 0.95751, "kev": true, "kev_due_at": "2026-07-17", "vendor": "SonicWall", "product": "SMA1000", "cwe": "CWE-94", "title": "SonicWall SMA1000 Appliances", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15410" }, { "rank": 6, "cve_id": "CVE-2026-55040", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.05578, "epss_percentile": 0.9227, "kev": true, "kev_due_at": "2026-08-21", "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-1390", "title": "Microsoft SharePoint Server Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55040" }, { "rank": 7, "cve_id": "CVE-2026-56155", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00346, "epss_percentile": 0.27175, "kev": true, "kev_due_at": "2026-07-28", "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1220", "title": "Active Directory Federation Services Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56155" }, { "rank": 8, "cve_id": "CVE-2026-48319", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.3229, "epss_percentile": 0.98188, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-22", "title": "ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48319" }, { "rank": 9, "cve_id": "CVE-2026-48320", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.0529, "epss_percentile": 0.9195, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-79", "title": "ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48320" }, { "rank": 10, "cve_id": "CVE-2026-48284", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.04895, "epss_percentile": 0.91409, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48284" }, { "rank": 11, "cve_id": "CVE-2026-58479", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.04404, "epss_percentile": 0.90574, "kev": false, "kev_due_at": null, "vendor": "Dan-in-CA", "product": "SIP", "cwe": "CWE-78", "title": "Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58479" }, { "rank": 12, "cve_id": "CVE-2026-13001", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.03757, "epss_percentile": 0.89046, "kev": false, "kev_due_at": null, "vendor": "eteubert", "product": "Podlove Podcast Publisher", "cwe": "CWE-20", "title": "Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13001" }, { "rank": 13, "cve_id": "CVE-2026-50509", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0353, "epss_percentile": 0.88341, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-502", "title": "Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50509" }, { "rank": 14, "cve_id": "CVE-2026-55009", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.02513, "epss_percentile": 0.83565, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-502", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55009" }, { "rank": 15, "cve_id": "CVE-2026-62392", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.02481, "epss_percentile": 0.83339, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Kylin", "cwe": "CWE-78", "title": "Apache Kylin: OS Command Injection via Async Query API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62392" }, { "rank": 16, "cve_id": "CVE-2026-54121", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.01788, "epss_percentile": 0.76628, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-285", "title": "Active Directory Certificate Services Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54121" }, { "rank": 17, "cve_id": "CVE-2026-50652", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0173, "epss_percentile": 0.75822, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Active Directory", "cwe": "CWE-502", "title": "Azure Active Directory Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50652" }, { "rank": 18, "cve_id": "CVE-2026-55944", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01532, "epss_percentile": 0.72837, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Dynamics NAV 2018", "cwe": "CWE-502", "title": "Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55944" }, { "rank": 19, "cve_id": "CVE-2026-48358", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.01486, "epss_percentile": 0.72027, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-116", "title": "Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48358" }, { "rank": 20, "cve_id": "CVE-2026-48324", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.01439, "epss_percentile": 0.71123, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-89", "title": "ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48324" }, { "rank": 21, "cve_id": "CVE-2026-50330", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01252, "epss_percentile": 0.67136, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Remote Desktop Client Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50330" }, { "rank": 22, "cve_id": "CVE-2026-50328", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01232, "epss_percentile": 0.66665, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-248", "title": "Windows Server Update Service (WSUS) Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50328" }, { "rank": 23, "cve_id": "CVE-2026-40378", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.6513, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-789", "title": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40378" }, { "rank": 24, "cve_id": "CVE-2026-44806", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65126, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-401", "title": "Windows Secure Channel Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44806" }, { "rank": 25, "cve_id": "CVE-2026-45646", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65128, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "AspNet.OData", "cwe": "CWE-770", "title": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45646" }, { "rank": 26, "cve_id": "CVE-2026-49787", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65129, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "HTTP.sys Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49787" }, { "rank": 27, "cve_id": "CVE-2026-49788", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65128, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-770", "title": "HTTP/2 Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49788" }, { "rank": 28, "cve_id": "CVE-2026-50304", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.6513, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50304" }, { "rank": 29, "cve_id": "CVE-2026-50355", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65128, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50355" }, { "rank": 30, "cve_id": "CVE-2026-50368", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65127, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50368" }, { "rank": 31, "cve_id": "CVE-2026-50411", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65127, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50411" }, { "rank": 32, "cve_id": "CVE-2026-50424", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65126, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-822", "title": "Windows Domain Controller Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50424" }, { "rank": 33, "cve_id": "CVE-2026-50496", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65128, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Network Policy Server SNMP Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50496" }, { "rank": 34, "cve_id": "CVE-2026-50506", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65129, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "AspNet.OData", "cwe": "CWE-770", "title": "OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50506" }, { "rank": 35, "cve_id": "CVE-2026-50647", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65126, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-835", "title": "Active Directory Federation Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50647" }, { "rank": 36, "cve_id": "CVE-2026-50653", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.6513, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Active Directory", "cwe": "CWE-835", "title": "Azure Active Directory Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50653" }, { "rank": 37, "cve_id": "CVE-2026-50695", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65126, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50695" }, { "rank": 38, "cve_id": "CVE-2026-50696", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65125, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50696" }, { "rank": 39, "cve_id": "CVE-2026-54119", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.6513, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-835", "title": "Windows Active Directory Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54119" }, { "rank": 40, "cve_id": "CVE-2026-54983", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65127, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54983" }, { "rank": 41, "cve_id": "CVE-2026-58627", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01174, "epss_percentile": 0.65129, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-400", "title": "Windows DHCP Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58627" }, { "rank": 42, "cve_id": "CVE-2026-48322", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.01172, "epss_percentile": 0.65044, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-94", "title": "ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48322" }, { "rank": 43, "cve_id": "CVE-2026-49181", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01172, "epss_percentile": 0.65061, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows DHCP Client Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49181" }, { "rank": 44, "cve_id": "CVE-2026-54117", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01164, "epss_percentile": 0.64867, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2025 (CU 6)", "cwe": "CWE-502", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54117" }, { "rank": 45, "cve_id": "CVE-2026-54118", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01164, "epss_percentile": 0.64868, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR)", "cwe": "CWE-502", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54118" }, { "rank": 46, "cve_id": "CVE-2026-49799", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01138, "epss_percentile": 0.64121, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-400", "title": "Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49799" }, { "rank": 47, "cve_id": "CVE-2026-50366", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01138, "epss_percentile": 0.64121, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50366" }, { "rank": 48, "cve_id": "CVE-2026-56168", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01138, "epss_percentile": 0.64122, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-476", "title": "Windows SMB Server Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56168" }, { "rank": 49, "cve_id": "CVE-2026-57976", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01138, "epss_percentile": 0.64121, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-476", "title": "Windows Active Directory Domain Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57976" }, { "rank": 50, "cve_id": "CVE-2026-38450", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01137, "epss_percentile": 0.64082, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-94", "title": "An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function", "url": "https://www.cve.org/CVERecord?id=CVE-2026-38450" }, { "rank": 51, "cve_id": "CVE-2026-56186", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01106, "epss_percentile": 0.63295, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Secure Channel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56186" }, { "rank": 52, "cve_id": "CVE-2026-57108", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01105, "epss_percentile": 0.63271, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-843", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57108" }, { "rank": 53, "cve_id": "CVE-2026-48318", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.01097, "epss_percentile": 0.63085, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-22", "title": "ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48318" }, { "rank": 54, "cve_id": "CVE-2026-15701", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": 0.01096, "epss_percentile": 0.63025, "kev": false, "kev_due_at": null, "vendor": "Totolink", "product": "NR1800X", "cwe": "CWE-119", "title": "Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15701" }, { "rank": 55, "cve_id": "CVE-2026-15669", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.01083, "epss_percentile": 0.6264, "kev": false, "kev_due_at": null, "vendor": "louisho5", "product": "picobot", "cwe": "CWE-77", "title": "louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15669" }, { "rank": 56, "cve_id": "CVE-2026-54108", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01079, "epss_percentile": 0.62515, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-73", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54108" }, { "rank": 57, "cve_id": "CVE-2026-50429", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.01069, "epss_percentile": 0.62255, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50429" }, { "rank": 58, "cve_id": "CVE-2026-48310", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.01047, "epss_percentile": 0.61594, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-22", "title": "Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48310" }, { "rank": 59, "cve_id": "CVE-2026-14903", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01042, "epss_percentile": 0.61427, "kev": false, "kev_due_at": null, "vendor": "ivanti", "product": "Xtraction", "cwe": "CWE-23", "title": "Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14903" }, { "rank": 60, "cve_id": "CVE-2026-58529", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.01036, "epss_percentile": 0.61271, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-125", "title": "Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58529" }, { "rank": 61, "cve_id": "CVE-2026-47302", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01029, "epss_percentile": 0.61055, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-770", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47302" }, { "rank": 62, "cve_id": "CVE-2026-50463", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01027, "epss_percentile": 0.60985, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50463" }, { "rank": 63, "cve_id": "CVE-2026-50470", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01027, "epss_percentile": 0.60985, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Network Policy Server SNMP Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50470" }, { "rank": 64, "cve_id": "CVE-2026-24227", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01021, "epss_percentile": 0.60774, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "TensorRT", "cwe": "CWE-502", "title": "NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24227" }, { "rank": 65, "cve_id": "CVE-2026-56170", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.01008, "epss_percentile": 0.60412, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-770", "title": "ASP.NET Core Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56170" }, { "rank": 66, "cve_id": "CVE-2026-48359", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.01004, "epss_percentile": 0.60305, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-611", "title": "Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48359" }, { "rank": 67, "cve_id": "CVE-2026-15428", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.01004, "epss_percentile": 0.60306, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "Archer VX1800v v1", "cwe": "CWE-78", "title": "OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15428" }, { "rank": 68, "cve_id": "CVE-2026-48356", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.01001, "epss_percentile": 0.60182, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-434", "title": "Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48356" }, { "rank": 69, "cve_id": "CVE-2026-50468", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00995, "epss_percentile": 0.59994, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2025 (CU 6)", "cwe": "CWE-126", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50468" }, { "rank": 70, "cve_id": "CVE-2026-54116", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00995, "epss_percentile": 0.59995, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2025 (CU 6)", "cwe": "CWE-843", "title": "Microsoft SQL Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54116" }, { "rank": 71, "cve_id": "CVE-2026-57982", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00995, "epss_percentile": 0.59994, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57982" }, { "rank": 72, "cve_id": "CVE-2026-47992", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00991, "epss_percentile": 0.5988, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-89", "title": "Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47992" }, { "rank": 73, "cve_id": "CVE-2026-47295", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00987, "epss_percentile": 0.59778, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR)", "cwe": "CWE-89", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47295" }, { "rank": 74, "cve_id": "CVE-2026-42990", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59392, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "SQL Server ODBC driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42990" }, { "rank": 75, "cve_id": "CVE-2026-49172", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59393, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows FTP Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49172" }, { "rank": 76, "cve_id": "CVE-2026-50447", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59393, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50447" }, { "rank": 77, "cve_id": "CVE-2026-50518", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59392, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50518" }, { "rank": 78, "cve_id": "CVE-2026-55010", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59392, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Minecraft Bedrock Dedicated Server", "cwe": "CWE-122", "title": "Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55010" }, { "rank": 79, "cve_id": "CVE-2026-56159", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59393, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "DHCP Server Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56159" }, { "rank": 80, "cve_id": "CVE-2026-56190", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00974, "epss_percentile": 0.59391, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Remote Desktop Protocol Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56190" }, { "rank": 81, "cve_id": "CVE-2026-50646", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00969, "epss_percentile": 0.59191, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 8.0", "cwe": "CWE-693", "title": ".NET Framework Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50646" }, { "rank": 82, "cve_id": "CVE-2026-47301", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00964, "epss_percentile": 0.58992, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Configuration Manager", "cwe": "CWE-284", "title": "Configuration Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47301" }, { "rank": 83, "cve_id": "CVE-2026-56196", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00955, "epss_percentile": 0.58729, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Admin Center", "cwe": "CWE-23", "title": "Windows Admin Center (WAC) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56196" }, { "rank": 84, "cve_id": "CVE-2026-50432", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00953, "epss_percentile": 0.58662, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50432" }, { "rank": 85, "cve_id": "CVE-2026-55021", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00946, "epss_percentile": 0.58458, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55021" }, { "rank": 86, "cve_id": "CVE-2026-55034", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00946, "epss_percentile": 0.58458, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55034" }, { "rank": 87, "cve_id": "CVE-2026-55052", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0094, "epss_percentile": 0.58247, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-862", "title": "Microsoft SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55052" }, { "rank": 88, "cve_id": "CVE-2026-58277", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0094, "epss_percentile": 0.58247, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-285", "title": "Microsoft SharePoint Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58277" }, { "rank": 89, "cve_id": "CVE-2026-50663", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00939, "epss_percentile": 0.58226, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Age of Empires II: Definitive Edition Game", "cwe": "CWE-23", "title": "Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50663" }, { "rank": 90, "cve_id": "CVE-2026-50649", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00938, "epss_percentile": 0.5818, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 8.0", "cwe": "CWE-502", "title": ".NET Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50649" }, { "rank": 91, "cve_id": "CVE-2026-50682", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0093, "epss_percentile": 0.57908, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-125", "title": "Active Directory Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50682" }, { "rank": 92, "cve_id": "CVE-2026-48351", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00927, "epss_percentile": 0.57791, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48351" }, { "rank": 93, "cve_id": "CVE-2026-48352", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00927, "epss_percentile": 0.5779, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-20", "title": "CAI Content Credentials | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48352" }, { "rank": 94, "cve_id": "CVE-2026-56197", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57611, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Admin Center", "cwe": "CWE-77", "title": "Windows Admin Center (WAC) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56197" }, { "rank": 95, "cve_id": "CVE-2026-50445", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57625, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50445" }, { "rank": 96, "cve_id": "CVE-2026-50497", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57626, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-193", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50497" }, { "rank": 97, "cve_id": "CVE-2026-50504", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57628, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50504" }, { "rank": 98, "cve_id": "CVE-2026-57979", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57625, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57979" }, { "rank": 99, "cve_id": "CVE-2026-58533", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57628, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58533" }, { "rank": 100, "cve_id": "CVE-2026-58535", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57628, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58535" }, { "rank": 101, "cve_id": "CVE-2026-58539", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00922, "epss_percentile": 0.57626, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58539" }, { "rank": 102, "cve_id": "CVE-2026-50376", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57627, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50376" }, { "rank": 103, "cve_id": "CVE-2026-54126", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57626, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54126" }, { "rank": 104, "cve_id": "CVE-2026-55003", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57625, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55003" }, { "rank": 105, "cve_id": "CVE-2026-55054", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57627, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55054" }, { "rank": 106, "cve_id": "CVE-2026-58546", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57626, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Remote Desktop Client Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58546" }, { "rank": 107, "cve_id": "CVE-2026-47429", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00922, "epss_percentile": 0.57629, "kev": false, "kev_due_at": null, "vendor": "vitest-dev", "product": "vitest", "cwe": "CWE-22", "title": "Vitest: Arbitrary file can be read and executed when Vitest UI server is listening", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47429" }, { "rank": 108, "cve_id": "CVE-2026-57092", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00913, "epss_percentile": 0.57385, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Windows VMSwitch Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57092" }, { "rank": 109, "cve_id": "CVE-2026-48564", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57385, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "DHCP Server Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48564" }, { "rank": 110, "cve_id": "CVE-2026-49178", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57384, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49178" }, { "rank": 111, "cve_id": "CVE-2026-50666", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57385, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Remote Access Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50666" }, { "rank": 112, "cve_id": "CVE-2026-55005", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57384, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-122", "title": "Microsoft Exchange Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55005" }, { "rank": 113, "cve_id": "CVE-2026-56194", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57387, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NFS Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56194" }, { "rank": 114, "cve_id": "CVE-2026-56642", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57386, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Service Fabric", "cwe": "CWE-121", "title": "Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56642" }, { "rank": 115, "cve_id": "CVE-2026-56647", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57386, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56647" }, { "rank": 116, "cve_id": "CVE-2026-58626", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00913, "epss_percentile": 0.57385, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-416", "title": "Windows Remote Desktop Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58626" }, { "rank": 117, "cve_id": "CVE-2026-55051", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00911, "epss_percentile": 0.57319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-918", "title": "Microsoft SharePoint Server Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55051" }, { "rank": 118, "cve_id": "CVE-2026-34348", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00907, "epss_percentile": 0.57191, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-693", "title": "Windows Event Logging Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34348" }, { "rank": 119, "cve_id": "CVE-2026-48259", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00897, "epss_percentile": 0.56887, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-918", "title": "Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48259" }, { "rank": 120, "cve_id": "CVE-2026-53633", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00896, "epss_percentile": 0.56833, "kev": false, "kev_due_at": null, "vendor": "vitest-dev", "product": "vitest", "cwe": "CWE-749", "title": "Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53633" }, { "rank": 121, "cve_id": "CVE-2026-48252", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00892, "epss_percentile": 0.56728, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-306", "title": "Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48252" }, { "rank": 122, "cve_id": "CVE-2026-48345", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00891, "epss_percentile": 0.56683, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Animate 2023", "cwe": "CWE-78", "title": "Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48345" }, { "rank": 123, "cve_id": "CVE-2026-48069", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00882, "epss_percentile": 0.56418, "kev": false, "kev_due_at": null, "vendor": "grpc", "product": "grpc-node", "cwe": "CWE-248", "title": "@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48069" }, { "rank": 124, "cve_id": "CVE-2026-47996", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00875, "epss_percentile": 0.56243, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47996" }, { "rank": 125, "cve_id": "CVE-2026-47282", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00874, "epss_percentile": 0.56201, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-522", "title": "GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47282" }, { "rank": 126, "cve_id": "CVE-2026-40400", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00868, "epss_percentile": 0.55998, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-23", "title": "Windows PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40400" }, { "rank": 127, "cve_id": "CVE-2026-48561", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00863, "epss_percentile": 0.55847, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Edge Copilot for Android", "cwe": "CWE-77", "title": "Microsoft Edge Copilot Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48561" }, { "rank": 128, "cve_id": "CVE-2026-55008", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00863, "epss_percentile": 0.55846, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Exchange Server 2016 Cumulative Update 23", "cwe": "CWE-79", "title": "Microsoft Exchange Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55008" }, { "rank": 129, "cve_id": "CVE-2026-50415", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0086, "epss_percentile": 0.55761, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-200", "title": "Windows Media Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50415" }, { "rank": 130, "cve_id": "CVE-2026-50324", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00855, "epss_percentile": 0.55572, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft .NET Framework 3.5 AND 4.7.2", "cwe": "CWE-835", "title": "Windows Active Directory Federation Services Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50324" }, { "rank": 131, "cve_id": "CVE-2026-15691", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.55533, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15691" }, { "rank": 132, "cve_id": "CVE-2026-15692", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.55531, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15692" }, { "rank": 133, "cve_id": "CVE-2026-15693", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.55532, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15693" }, { "rank": 134, "cve_id": "CVE-2026-15694", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.5553, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15694" }, { "rank": 135, "cve_id": "CVE-2026-15695", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.5553, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15695" }, { "rank": 136, "cve_id": "CVE-2026-15696", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00854, "epss_percentile": 0.5553, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "BE12 Pro", "cwe": "CWE-119", "title": "Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15696" }, { "rank": 137, "cve_id": "CVE-2026-51808", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0085, "epss_percentile": 0.55398, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-120", "title": "Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded function in source/core/interface/decoder.cpp", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51808" }, { "rank": 138, "cve_id": "CVE-2026-15429", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00842, "epss_percentile": 0.55151, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "Archer VX1800v v1", "cwe": "CWE-93", "title": "Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15429" }, { "rank": 139, "cve_id": "CVE-2026-50527", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0084, "epss_percentile": 0.55102, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-121", "title": ".NET Framework Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50527" }, { "rank": 140, "cve_id": "CVE-2026-50648", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0084, "epss_percentile": 0.55102, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-770", "title": ".NET Framework Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50648" }, { "rank": 141, "cve_id": "CVE-2026-50651", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0084, "epss_percentile": 0.55103, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-770", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50651" }, { "rank": 142, "cve_id": "CVE-2026-56185", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0084, "epss_percentile": 0.55095, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Admin Center", "cwe": "CWE-287", "title": "Windows Admin Center Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56185" }, { "rank": 143, "cve_id": "CVE-2026-48295", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00834, "epss_percentile": 0.54924, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Content Credentials Rust SDK", "cwe": "CWE-522", "title": "CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48295" }, { "rank": 144, "cve_id": "CVE-2026-48328", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.0082, "epss_percentile": 0.54494, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-20", "title": "ColdFusion | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48328" }, { "rank": 145, "cve_id": "CVE-2026-57090", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00819, "epss_percentile": 0.54453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57090" }, { "rank": 146, "cve_id": "CVE-2026-58594", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00819, "epss_percentile": 0.54455, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58594" }, { "rank": 147, "cve_id": "CVE-2026-50380", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00819, "epss_percentile": 0.54453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows GDI+ Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50380" }, { "rank": 148, "cve_id": "CVE-2026-50474", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00819, "epss_percentile": 0.54454, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50474" }, { "rank": 149, "cve_id": "CVE-2026-54990", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00819, "epss_percentile": 0.54452, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Remote Desktop Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54990" }, { "rank": 150, "cve_id": "CVE-2026-57094", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00819, "epss_percentile": 0.54453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57094" }, { "rank": 151, "cve_id": "CVE-2026-57102", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00819, "epss_percentile": 0.54454, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-829", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57102" }, { "rank": 152, "cve_id": "CVE-2026-49164", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00792, "epss_percentile": 0.53531, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Active Directory Domain Services Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49164" }, { "rank": 153, "cve_id": "CVE-2026-50439", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00792, "epss_percentile": 0.5353, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50439" }, { "rank": 154, "cve_id": "CVE-2026-50487", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00792, "epss_percentile": 0.5353, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows DNS Client Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50487" }, { "rank": 155, "cve_id": "CVE-2026-50694", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00792, "epss_percentile": 0.5353, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50694" }, { "rank": 156, "cve_id": "CVE-2026-54995", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00792, "epss_percentile": 0.5353, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54995" }, { "rank": 157, "cve_id": "CVE-2026-57087", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00792, "epss_percentile": 0.53546, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57087" }, { "rank": 158, "cve_id": "CVE-2026-58617", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00787, "epss_percentile": 0.53394, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Copilot for iOS", "cwe": "CWE-284", "title": "M365 Copilot for iOS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58617" }, { "rank": 159, "cve_id": "CVE-2026-15709", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00784, "epss_percentile": 0.53276, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-409", "title": "Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15709" }, { "rank": 160, "cve_id": "CVE-2026-3014", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00782, "epss_percentile": 0.53203, "kev": false, "kev_due_at": null, "vendor": "Milestone Systems", "product": "XProtect Management Server", "cwe": "CWE-78", "title": "Remote Code Execution by administrative user on the Management Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-3014" }, { "rank": 161, "cve_id": "CVE-2026-50360", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00778, "epss_percentile": 0.53095, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-303", "title": "Windows SMB Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50360" }, { "rank": 162, "cve_id": "CVE-2026-50444", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00778, "epss_percentile": 0.53095, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-306", "title": "Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50444" }, { "rank": 163, "cve_id": "CVE-2026-49169", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00753, "epss_percentile": 0.52273, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Server 2025", "cwe": "CWE-416", "title": "Windows DNS Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49169" }, { "rank": 164, "cve_id": "CVE-2026-53486", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00749, "epss_percentile": 0.52146, "kev": false, "kev_due_at": null, "vendor": "XhmikosR", "product": "decompress", "cwe": "CWE-22", "title": "decompress: Archive extraction can create files and links outside the target directory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53486" }, { "rank": 165, "cve_id": "CVE-2026-58319", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00747, "epss_percentile": 0.52076, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Doris", "cwe": "CWE-306", "title": "Apache Doris: Improper Authentication in Frontend HTTP API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58319" }, { "rank": 166, "cve_id": "CVE-2026-50340", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00742, "epss_percentile": 0.51901, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-416", "title": "Windows Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50340" }, { "rank": 167, "cve_id": "CVE-2026-50500", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00742, "epss_percentile": 0.51901, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Netlogon Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50500" }, { "rank": 168, "cve_id": "CVE-2026-50505", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00742, "epss_percentile": 0.51902, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50505" }, { "rank": 169, "cve_id": "CVE-2026-47303", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00736, "epss_percentile": 0.51683, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-302", "title": "ASP.NET Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47303" }, { "rank": 170, "cve_id": "CVE-2026-47767", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00721, "epss_percentile": 0.51165, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-436", "title": "Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47767" }, { "rank": 171, "cve_id": "CVE-2026-48347", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00721, "epss_percentile": 0.51146, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Animate 2023", "cwe": "CWE-78", "title": "Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48347" }, { "rank": 172, "cve_id": "CVE-2026-48332", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00716, "epss_percentile": 0.50995, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-918", "title": "ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48332" }, { "rank": 173, "cve_id": "CVE-2026-47997", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00709, "epss_percentile": 0.50717, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47997" }, { "rank": 174, "cve_id": "CVE-2026-47998", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00709, "epss_percentile": 0.50716, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47998" }, { "rank": 175, "cve_id": "CVE-2026-50686", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00707, "epss_percentile": 0.50669, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-843", "title": "Windows OLE Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50686" }, { "rank": 176, "cve_id": "CVE-2026-15714", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00706, "epss_percentile": 0.50601, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15714" }, { "rank": 177, "cve_id": "CVE-2026-49488", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00703, "epss_percentile": 0.50504, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache OpenMeetings", "cwe": "CWE-22", "title": "Apache OpenMeetings: Arbitrary File Read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49488" }, { "rank": 178, "cve_id": "CVE-2026-50369", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00701, "epss_percentile": 0.50422, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Remote Desktop Services Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50369" }, { "rank": 179, "cve_id": "CVE-2026-56649", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00699, "epss_percentile": 0.50338, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Network File System Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56649" }, { "rank": 180, "cve_id": "CVE-2026-55954", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00698, "epss_percentile": 0.50291, "kev": false, "kev_due_at": null, "vendor": "ueberauth", "product": "ueberauth_apple", "cwe": "CWE-290", "title": "Missing ID token claim validation in ueberauth_apple allows account takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55954" }, { "rank": 181, "cve_id": "CVE-2026-58595", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0069, "epss_percentile": 0.50018, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Bing Search for iOS", "cwe": "CWE-1021", "title": "Microsoft Bing App for IOS Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58595" }, { "rank": 182, "cve_id": "CVE-2026-46633", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00688, "epss_percentile": 0.49955, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-94", "title": "Twig: PHP code injection via `{% use %}` template name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46633" }, { "rank": 183, "cve_id": "CVE-2026-62390", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00686, "epss_percentile": 0.49888, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Kylin", "cwe": "CWE-89", "title": "Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62390" }, { "rank": 184, "cve_id": "CVE-2026-45304", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00684, "epss_percentile": 0.49798, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-776", "title": "Symfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion (\"Billion Laughs\")", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45304" }, { "rank": 185, "cve_id": "CVE-2026-45305", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00684, "epss_percentile": 0.49798, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-1333", "title": "Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45305" }, { "rank": 186, "cve_id": "CVE-2026-27690", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00682, "epss_percentile": 0.49717, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Approuter", "cwe": "CWE-444", "title": "HTTP Request Smuggling in SAP Approuter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27690" }, { "rank": 187, "cve_id": "CVE-2026-57898", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00681, "epss_percentile": 0.4966, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse BaSyx - Java Server SDK", "cwe": "CWE-22", "title": "In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable to an unauthenticated arbitrary file write through the AAS thumbnail API. The AAS thumbnail upload path accepted a client-controlled fileName request parameter and passed it through repository file handling as both a repository key and, during thumbnail retrieval, a local filesystem path. With the MongoDB file repository, the supplied filename was treated as an opaque GridFS key and was not normalized or restricted as a filesystem path. A remote attacker could upload thumbnail content using an absolute or traversal-style filename, then trigger thumbnail retrieval so that the uploaded bytes were written to the attacker-chosen path on the server filesystem. This could allow writing files anywhere the Java process has permission to write and may lead to remote code execution. The default InMemory backend is not affected by this specific path because it normalizes and restricts file paths to its temporary directory. The issue is fixed in Eclipse BaSyx Java Server SDK 2.0.0-milestone-13.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57898" }, { "rank": 188, "cve_id": "CVE-2026-51807", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00671, "epss_percentile": 0.49258, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-121", "title": "Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) caused by missing bounds validation before coding-pass lengths are written to j2k_codeblock::pass_length[128]. A crafted JPEG 2000 codestream containing malformed PPM packet headers can trigger a heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in source/core/coding/coding_units.cpp due to missing bounds validation for the j2k_codeblock::pass_length[128] array which can lead to heap corruption and process termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51807" }, { "rank": 189, "cve_id": "CVE-2026-59837", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": 0.0067, "epss_percentile": 0.49211, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiPAM", "cwe": "CWE-121", "title": "A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59837" }, { "rank": 190, "cve_id": "CVE-2026-47988", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00667, "epss_percentile": 0.49072, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47988" }, { "rank": 191, "cve_id": "CVE-2026-45077", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00666, "epss_percentile": 0.49061, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-502", "title": "Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45077" }, { "rank": 192, "cve_id": "CVE-2026-57089", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00665, "epss_percentile": 0.49028, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57089" }, { "rank": 193, "cve_id": "CVE-2026-5270", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00664, "epss_percentile": 0.48965, "kev": false, "kev_due_at": null, "vendor": "CIENA", "product": "Navigator NCS", "cwe": "CWE-287", "title": "Authentication Bypass in Navigator and Blue Planet Products", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5270" }, { "rank": 194, "cve_id": "CVE-2026-50685", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00663, "epss_percentile": 0.48945, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-415", "title": "Windows DHCP Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50685" }, { "rank": 195, "cve_id": "CVE-2026-15712", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.0066, "epss_percentile": 0.48839, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15712" }, { "rank": 196, "cve_id": "CVE-2026-50485", "cvss_base": 5.7, "cvss_severity": "MEDIUM", "epss_score": 0.00656, "epss_percentile": 0.48639, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Hyper-V Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50485" }, { "rank": 197, "cve_id": "CVE-2026-59203", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00655, "epss_percentile": 0.48601, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-835", "title": "Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59203" }, { "rank": 198, "cve_id": "CVE-2026-50502", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00654, "epss_percentile": 0.48567, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-1220", "title": "Windows Event Logging Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50502" }, { "rank": 199, "cve_id": "CVE-2026-55126", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00649, "epss_percentile": 0.48319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55126" }, { "rank": 200, "cve_id": "CVE-2026-15738", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.00647, "epss_percentile": 0.48246, "kev": false, "kev_due_at": null, "vendor": "Amazon", "product": "aws-load-balancer-controller", "cwe": "CWE-653", "title": "Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15738" }, { "rank": 201, "cve_id": "CVE-2026-58279", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00644, "epss_percentile": 0.48103, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure CycleCloud 8.9.1", "cwe": "CWE-862", "title": "Azure CycleCloud Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58279" }, { "rank": 202, "cve_id": "CVE-2026-46640", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00642, "epss_percentile": 0.48021, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-94", "title": "Twig: Arbitrary PHP code execution via `_self.()` macro-reference compilation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46640" }, { "rank": 203, "cve_id": "CVE-2026-47984", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00641, "epss_percentile": 0.47923, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-863", "title": "Adobe Commerce | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47984" }, { "rank": 204, "cve_id": "CVE-2026-50524", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00634, "epss_percentile": 0.47631, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-1287", "title": ".NET Framework Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50524" }, { "rank": 205, "cve_id": "CVE-2026-45133", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0063, "epss_percentile": 0.47448, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-674", "title": "Symfony: [Yaml] Harden the parser when handling untrusted input", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45133" }, { "rank": 206, "cve_id": "CVE-2026-45756", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0063, "epss_percentile": 0.47444, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-400", "title": "Symfony: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45756" }, { "rank": 207, "cve_id": "CVE-2026-47736", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0063, "epss_percentile": 0.47443, "kev": false, "kev_due_at": null, "vendor": "puma", "product": "puma", "cwe": "CWE-400", "title": "Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47736" }, { "rank": 208, "cve_id": "CVE-2026-47994", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00622, "epss_percentile": 0.47119, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47994" }, { "rank": 209, "cve_id": "CVE-2026-55002", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00618, "epss_percentile": 0.46887, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR)", "cwe": "CWE-73", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55002" }, { "rank": 210, "cve_id": "CVE-2026-48068", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00617, "epss_percentile": 0.46842, "kev": false, "kev_due_at": null, "vendor": "grpc", "product": "grpc-node", "cwe": "CWE-248", "title": "@grpc/grps-js: A malformed request can cause a server crash", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48068" }, { "rank": 211, "cve_id": "CVE-2026-46634", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00616, "epss_percentile": 0.46787, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46634" }, { "rank": 212, "cve_id": "CVE-2025-56365", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00616, "epss_percentile": 0.46815, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-617", "title": "A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is sent to a nonexistent endpoint and cluster (e.g., 0x34), the code incorrectly treats the endpoint as valid due to missing checks in CodegenDataModelProvider::Invoke. This causes a VerifyOrDie failure in ProcessCommandDataIB and results in a crash (SIGABRT). The issue has been acknowledged and fixed in a later revision (PR #37207).", "url": "https://www.cve.org/CVERecord?id=CVE-2025-56365" }, { "rank": 213, "cve_id": "CVE-2026-47428", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00613, "epss_percentile": 0.46628, "kev": false, "kev_due_at": null, "vendor": "vitest-dev", "product": "vitest", "cwe": "CWE-79", "title": "Vitest browser mode serves unsanitized otelCarrier query parameter as inline script", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47428" }, { "rank": 214, "cve_id": "CVE-2026-56188", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00607, "epss_percentile": 0.46356, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Server Network driver Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56188" }, { "rank": 215, "cve_id": "CVE-2026-50525", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00604, "epss_percentile": 0.46218, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-770", "title": ".NET Denial of Service Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50525" }, { "rank": 216, "cve_id": "CVE-2026-45067", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00598, "epss_percentile": 0.45946, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-93", "title": "Symfony: Email Header / SMTP Command Injection via CRLF in Symfony\\Component\\Mime\\Address", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45067" }, { "rank": 217, "cve_id": "CVE-2026-48489", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00596, "epss_percentile": 0.45832, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-863", "title": "Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48489" }, { "rank": 218, "cve_id": "CVE-2026-55023", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45775, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55023" }, { "rank": 219, "cve_id": "CVE-2026-55027", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45775, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55027" }, { "rank": 220, "cve_id": "CVE-2026-55028", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45775, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55028" }, { "rank": 221, "cve_id": "CVE-2026-55047", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45776, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55047" }, { "rank": 222, "cve_id": "CVE-2026-55050", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45776, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55050" }, { "rank": 223, "cve_id": "CVE-2026-55124", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45775, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-1287", "title": "Microsoft Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55124" }, { "rank": 224, "cve_id": "CVE-2026-55142", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45774, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-197", "title": "Microsoft Word Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55142" }, { "rank": 225, "cve_id": "CVE-2026-56192", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00595, "epss_percentile": 0.45776, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56192" }, { "rank": 226, "cve_id": "CVE-2026-15622", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0059, "epss_percentile": 0.45575, "kev": false, "kev_due_at": null, "vendor": "poco-ai", "product": "poco-claw", "cwe": "CWE-285", "title": "poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15622" }, { "rank": 227, "cve_id": "CVE-2025-56363", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00588, "epss_percentile": 0.45475, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-476", "title": "A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, Account Login, TargetNavigator, etc.). The function lacks proper validation of the delegate pointer before dereferencing. A remote unauthenticated attacker can exploit this issue by sending a crafted read request, causing the device to crash (denial of service). This issue has been confirmed in SDK version v1.4 (commit ab3d5ae).", "url": "https://www.cve.org/CVERecord?id=CVE-2025-56363" }, { "rank": 228, "cve_id": "CVE-2025-56364", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00583, "epss_percentile": 0.45239, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-457", "title": "A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID. The issue affects all versions before commit 0360cc3 (Dec 5, 2024) and leads to denial of service through SIGABRT. It is fixed by adding a .HasValue() check before access.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-56364" }, { "rank": 229, "cve_id": "CVE-2026-55016", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00583, "epss_percentile": 0.45223, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55016" }, { "rank": 230, "cve_id": "CVE-2026-55019", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00583, "epss_percentile": 0.45224, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55019" }, { "rank": 231, "cve_id": "CVE-2026-55020", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00583, "epss_percentile": 0.45224, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55020" }, { "rank": 232, "cve_id": "CVE-2026-55030", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00583, "epss_percentile": 0.45224, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55030" }, { "rank": 233, "cve_id": "CVE-2026-55135", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00583, "epss_percentile": 0.45225, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-79", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55135" }, { "rank": 234, "cve_id": "CVE-2025-56361", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00581, "epss_percentile": 0.45138, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-617", "title": "A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`). When a MoveToLevel command is executed and followed by a conflicting write to the OperationMode attribute (in the Pump Configuration and Control cluster), an invariant check (`minLevel < currentLevel`) fails and causes the device to abort. This leads to a denial of service condition. The issue is confirmed in SDK versions 1.3 and 1.4 (commit ab3d5ae), and is triggered remotely without authentication.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-56361" }, { "rank": 235, "cve_id": "CVE-2025-56362", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00581, "epss_percentile": 0.45137, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-617", "title": "A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a MoveToLevel command is sent and immediately followed by a write of OperationMode=2 (in the Pump Configuration and Control cluster), the server tick function violates the assertion `currentLevel < maxLevel`, resulting in a crash. This can be exploited remotely without authentication to cause denial of service. Affected versions include 1.3 and 1.4 (commit ab3d5ae).", "url": "https://www.cve.org/CVERecord?id=CVE-2025-56362" }, { "rank": 236, "cve_id": "CVE-2026-50683", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00576, "epss_percentile": 0.44854, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows DHCP Client Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50683" }, { "rank": 237, "cve_id": "CVE-2026-55035", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00574, "epss_percentile": 0.44764, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55035" }, { "rank": 238, "cve_id": "CVE-2026-49855", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00572, "epss_percentile": 0.44678, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-409", "title": "tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49855" }, { "rank": 239, "cve_id": "CVE-2026-55032", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44624, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55032" }, { "rank": 240, "cve_id": "CVE-2026-55033", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44622, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55033" }, { "rank": 241, "cve_id": "CVE-2026-55038", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44622, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55038" }, { "rank": 242, "cve_id": "CVE-2026-55055", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44623, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55055" }, { "rank": 243, "cve_id": "CVE-2026-55125", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44622, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55125" }, { "rank": 244, "cve_id": "CVE-2026-55127", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44622, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55127" }, { "rank": 245, "cve_id": "CVE-2026-55128", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44623, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55128" }, { "rank": 246, "cve_id": "CVE-2026-55130", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44623, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55130" }, { "rank": 247, "cve_id": "CVE-2026-55132", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44621, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-415", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55132" }, { "rank": 248, "cve_id": "CVE-2026-55134", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00571, "epss_percentile": 0.44623, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Word Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55134" }, { "rank": 249, "cve_id": "CVE-2026-45071", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.0057, "epss_percentile": 0.44595, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-611", "title": "Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45071" }, { "rank": 250, "cve_id": "CVE-2026-48736", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.0057, "epss_percentile": 0.44595, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-184", "title": "Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48736" }, { "rank": 251, "cve_id": "CVE-2026-50414", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00569, "epss_percentile": 0.44531, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Media Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50414" }, { "rank": 252, "cve_id": "CVE-2026-50398", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00569, "epss_percentile": 0.4453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Media Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50398" }, { "rank": 253, "cve_id": "CVE-2026-58608", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00569, "epss_percentile": 0.4453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows Print Spooler Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58608" }, { "rank": 254, "cve_id": "CVE-2026-48329", "cvss_base": 2.7, "cvss_severity": "LOW", "epss_score": 0.00567, "epss_percentile": 0.44451, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-613", "title": "ColdFusion | Insufficient Session Expiration (CWE-613)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48329" }, { "rank": 255, "cve_id": "CVE-2026-44747", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.00564, "epss_percentile": 0.44284, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Application Server ABAP", "cwe": "CWE-787", "title": "Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44747" }, { "rank": 256, "cve_id": "CVE-2026-52837", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00564, "epss_percentile": 0.4431, "kev": false, "kev_due_at": null, "vendor": "alextselegidis", "product": "easyappointments", "cwe": "CWE-200", "title": "Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52837" }, { "rank": 257, "cve_id": "CVE-2026-50528", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00563, "epss_percentile": 0.44221, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-863", "title": ".NET Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50528" }, { "rank": 258, "cve_id": "CVE-2026-15713", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00563, "epss_percentile": 0.44237, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-772", "title": "Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15713" }, { "rank": 259, "cve_id": "CVE-2026-14645", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00561, "epss_percentile": 0.44075, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-918", "title": "Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14645" }, { "rank": 260, "cve_id": "CVE-2026-50426", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00558, "epss_percentile": 0.43937, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-23", "title": "Windows DNS Server Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50426" }, { "rank": 261, "cve_id": "CVE-2026-58233", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00556, "epss_percentile": 0.43847, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Change and Transport System Attach Tool (ctsattach)", "cwe": "CWE-502", "title": "Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58233" }, { "rank": 262, "cve_id": "CVE-2026-48325", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00553, "epss_percentile": 0.4373, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-306", "title": "ColdFusion | Missing Authentication for Critical Function (CWE-306)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48325" }, { "rank": 263, "cve_id": "CVE-2026-15427", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00552, "epss_percentile": 0.43643, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "Archer VX1800v v1", "cwe": "CWE-78", "title": "OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15427" }, { "rank": 264, "cve_id": "CVE-2026-12583", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00552, "epss_percentile": 0.43661, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Newsletters", "cwe": "CWE-502", "title": "Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12583" }, { "rank": 265, "cve_id": "CVE-2026-15265", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00551, "epss_percentile": 0.43589, "kev": false, "kev_due_at": null, "vendor": "tenable", "product": "tenable_agent", "cwe": "CWE-22", "title": "Tenable Agent Path Traversal Leading to Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15265" }, { "rank": 266, "cve_id": "CVE-2026-52101", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.0055, "epss_percentile": 0.43507, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-200", "title": "An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go", "url": "https://www.cve.org/CVERecord?id=CVE-2026-52101" }, { "rank": 267, "cve_id": "CVE-2026-50659", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0055, "epss_percentile": 0.43533, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-116", "title": ".NET Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50659" }, { "rank": 268, "cve_id": "CVE-2026-51105", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00546, "epss_percentile": 0.43318, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-121", "title": "Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51105" }, { "rank": 269, "cve_id": "CVE-2026-11403", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43088, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository Manager", "cwe": "CWE-331", "title": "Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11403" }, { "rank": 270, "cve_id": "CVE-2026-15720", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43117, "kev": false, "kev_due_at": null, "vendor": "open5gs", "product": "open5gs", "cwe": "CWE-125", "title": "Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15720" }, { "rank": 271, "cve_id": "CVE-2026-42900", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43131, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Microsoft Windows App Store Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42900" }, { "rank": 272, "cve_id": "CVE-2026-50460", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43131, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50460" }, { "rank": 273, "cve_id": "CVE-2026-50365", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43109, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-287", "title": "Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50365" }, { "rank": 274, "cve_id": "CVE-2026-46627", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00542, "epss_percentile": 0.43124, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-400", "title": "Twig: Sandbox resource exhaustion via unbounded `for` / `range()`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46627" }, { "rank": 275, "cve_id": "CVE-2026-46629", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00542, "epss_percentile": 0.43124, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-770", "title": "Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46629" }, { "rank": 276, "cve_id": "CVE-2026-48580", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43052, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48580" }, { "rank": 277, "cve_id": "CVE-2026-50408", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43054, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50408" }, { "rank": 278, "cve_id": "CVE-2026-55042", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43052, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-908", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55042" }, { "rank": 279, "cve_id": "CVE-2026-55046", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43053, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55046" }, { "rank": 280, "cve_id": "CVE-2026-55057", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43053, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55057" }, { "rank": 281, "cve_id": "CVE-2026-55138", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43052, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55138" }, { "rank": 282, "cve_id": "CVE-2026-56195", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43054, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56195" }, { "rank": 283, "cve_id": "CVE-2026-57083", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43052, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows Media Photo Codec Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57083" }, { "rank": 284, "cve_id": "CVE-2026-57084", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00541, "epss_percentile": 0.43053, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57084" }, { "rank": 285, "cve_id": "CVE-2026-46644", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00538, "epss_percentile": 0.42858, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "polyfill", "cwe": "CWE-1289", "title": "symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalence", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46644" }, { "rank": 286, "cve_id": "CVE-2026-42975", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00536, "epss_percentile": 0.42754, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Bluetooth Port Driver Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42975" }, { "rank": 287, "cve_id": "CVE-2026-11802", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00536, "epss_percentile": 0.42775, "kev": false, "kev_due_at": null, "vendor": "themelooks", "product": "FoodBook Lite – Online Food Ordering System", "cwe": "CWE-862", "title": "FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11802" }, { "rank": 288, "cve_id": "CVE-2026-54982", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00535, "epss_percentile": 0.42735, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54982" }, { "rank": 289, "cve_id": "CVE-2026-12523", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00532, "epss_percentile": 0.42568, "kev": false, "kev_due_at": null, "vendor": "Cloudflare", "product": "quiche", "cwe": "CWE-400", "title": "Resource exhaustion in quiche HTTP/3 and QPACK layers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12523" }, { "rank": 290, "cve_id": "CVE-2025-53379", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00529, "epss_percentile": 0.42339, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiAuthenticator", "cwe": "CWE-125", "title": "A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-53379" }, { "rank": 291, "cve_id": "CVE-2026-47300", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00527, "epss_percentile": 0.4223, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": ".NET 10.0", "cwe": "CWE-303", "title": "ASP.NET Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47300" }, { "rank": 292, "cve_id": "CVE-2026-57969", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00527, "epss_percentile": 0.4223, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure CycleCloud 8.9.1", "cwe": "CWE-306", "title": "Azure CycleCloud Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57969" }, { "rank": 293, "cve_id": "CVE-2026-9292", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00527, "epss_percentile": 0.42253, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "FactoryTalk® DataMosaix™ Private Cloud", "cwe": "CWE-79", "title": "Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9292" }, { "rank": 294, "cve_id": "CVE-2026-47477", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00527, "epss_percentile": 0.42274, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-121", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47477" }, { "rank": 295, "cve_id": "CVE-2026-47478", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00527, "epss_percentile": 0.42228, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-910", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47478" }, { "rank": 296, "cve_id": "CVE-2026-55122", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00525, "epss_percentile": 0.42152, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55122" }, { "rank": 297, "cve_id": "CVE-2026-55145", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00525, "epss_percentile": 0.42105, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Copilot", "cwe": "CWE-77", "title": "Outlook Copilot Tampering Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55145" }, { "rank": 298, "cve_id": "CVE-2026-45068", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00524, "epss_percentile": 0.4208, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-88", "title": "Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45068" }, { "rank": 299, "cve_id": "CVE-2026-48038", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00524, "epss_percentile": 0.42047, "kev": false, "kev_due_at": null, "vendor": "hapijs", "product": "joi", "cwe": "CWE-248", "title": "joi: Uncaught RangeError on deeply nested input through recursive `link()` schemas", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48038" }, { "rank": 300, "cve_id": "CVE-2026-58528", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00524, "epss_percentile": 0.42076, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows USB Audio Class Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58528" }, { "rank": 301, "cve_id": "CVE-2026-49476", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00522, "epss_percentile": 0.41905, "kev": false, "kev_due_at": null, "vendor": "facelessuser", "product": "soupsieve", "cwe": "CWE-400", "title": "Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49476" }, { "rank": 302, "cve_id": "CVE-2026-49477", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00522, "epss_percentile": 0.41905, "kev": false, "kev_due_at": null, "vendor": "facelessuser", "product": "soupsieve", "cwe": "CWE-400", "title": "Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49477" }, { "rank": 303, "cve_id": "CVE-2026-54058", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00521, "epss_percentile": 0.41866, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-125", "title": "Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54058" }, { "rank": 304, "cve_id": "CVE-2026-62642", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00519, "epss_percentile": 0.41776, "kev": false, "kev_due_at": null, "vendor": "Roundcube", "product": "Webmail", "cwe": "CWE-835", "title": "In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62642" }, { "rank": 305, "cve_id": "CVE-2026-50338", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00517, "epss_percentile": 0.41614, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Spring Apps", "cwe": "CWE-287", "title": "Azure Spring Apps Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50338" }, { "rank": 306, "cve_id": "CVE-2026-36035", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00516, "epss_percentile": 0.41594, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-284", "title": "Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service (DoS) via removing the license from the webserver.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-36035" }, { "rank": 307, "cve_id": "CVE-2026-55121", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00513, "epss_percentile": 0.41333, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55121" }, { "rank": 308, "cve_id": "CVE-2026-58477", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00511, "epss_percentile": 0.4126, "kev": false, "kev_due_at": null, "vendor": "Dan-in-CA", "product": "SIP", "cwe": "CWE-915", "title": "Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP Parameters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58477" }, { "rank": 309, "cve_id": "CVE-2026-50453", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.0051, "epss_percentile": 0.41173, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows USB Audio Class Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50453" }, { "rank": 310, "cve_id": "CVE-2026-50379", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00509, "epss_percentile": 0.41074, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-362", "title": "Windows Media Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50379" }, { "rank": 311, "cve_id": "CVE-2026-56648", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00509, "epss_percentile": 0.41074, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-367", "title": "Windows NFS Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56648" }, { "rank": 312, "cve_id": "CVE-2026-58531", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00509, "epss_percentile": 0.41074, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows SMB Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58531" }, { "rank": 313, "cve_id": "CVE-2026-50665", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00509, "epss_percentile": 0.41125, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50665" }, { "rank": 314, "cve_id": "CVE-2026-59084", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00506, "epss_percentile": 0.40908, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Tomcat", "cwe": "CWE-1059", "title": "Apache Tomcat: EncryptInterceptor requirements not clearly documented", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59084" }, { "rank": 315, "cve_id": "CVE-2026-56169", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00506, "epss_percentile": 0.40878, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows Admin Center", "cwe": "CWE-287", "title": "Windows Admin Center Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56169" }, { "rank": 316, "cve_id": "CVE-2026-49807", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": 0.00506, "epss_percentile": 0.40888, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-200", "title": "Windows DirectX Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49807" }, { "rank": 317, "cve_id": "CVE-2026-50294", "cvss_base": 6.2, "cvss_severity": "MEDIUM", "epss_score": 0.00506, "epss_percentile": 0.40889, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-497", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50294" }, { "rank": 318, "cve_id": "CVE-2026-48001", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00506, "epss_percentile": 0.40863, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-200", "title": "Adobe Commerce | Information Exposure (CWE-200)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48001" }, { "rank": 319, "cve_id": "CVE-2026-57097", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00503, "epss_percentile": 0.40674, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-426", "title": "Microsoft XML Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57097" }, { "rank": 320, "cve_id": "CVE-2026-50370", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00502, "epss_percentile": 0.40643, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "DHCP Server Service Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50370" }, { "rank": 321, "cve_id": "CVE-2026-58229", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00502, "epss_percentile": 0.40609, "kev": false, "kev_due_at": null, "vendor": "elixir-mint", "product": "mint", "cwe": "CWE-770", "title": "Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58229" }, { "rank": 322, "cve_id": "CVE-2026-59246", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00502, "epss_percentile": 0.40609, "kev": false, "kev_due_at": null, "vendor": "elixir-mint", "product": "mint", "cwe": "CWE-770", "title": "Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59246" }, { "rank": 323, "cve_id": "CVE-2026-62644", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.005, "epss_percentile": 0.40507, "kev": false, "kev_due_at": null, "vendor": "Roundcube", "product": "Webmail", "cwe": "CWE-290", "title": "In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62644" }, { "rank": 324, "cve_id": "CVE-2026-12707", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.005, "epss_percentile": 0.40551, "kev": false, "kev_due_at": null, "vendor": "Cloudflare", "product": "quiche", "cwe": "CWE-770", "title": "Unbounded path event queue growth in quiche via peer-driven source connection ID rotation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12707" }, { "rank": 325, "cve_id": "CVE-2026-15752", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.005, "epss_percentile": 0.40502, "kev": false, "kev_due_at": null, "vendor": "zhinianboke", "product": "xianyu-auto-reply", "cwe": "CWE-862", "title": "zhinianboke xianyu-auto-reply Backend User Endpoint users authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15752" }, { "rank": 326, "cve_id": "CVE-2026-60114", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00499, "epss_percentile": 0.40486, "kev": false, "kev_due_at": null, "vendor": "Dan-in-CA", "product": "SIP", "cwe": "CWE-22", "title": "Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup Restore", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60114" }, { "rank": 327, "cve_id": "CVE-2026-56451", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00498, "epss_percentile": 0.4041, "kev": false, "kev_due_at": null, "vendor": "Siemens", "product": "Opcenter X", "cwe": "CWE-347", "title": "A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate the algorithm specified in the JSON Web Token (JWT) header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersonate any user including administrative accounts, potentially gaining full unauthorized access to the application.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56451" }, { "rank": 328, "cve_id": "CVE-2026-59733", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00497, "epss_percentile": 0.40367, "kev": false, "kev_due_at": null, "vendor": "rclone", "product": "rclone", "cwe": "CWE-22", "title": "rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59733" }, { "rank": 329, "cve_id": "CVE-2026-47296", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00497, "epss_percentile": 0.40336, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SQL Server 2016 Service Pack 3 (GDR)", "cwe": "CWE-89", "title": "Microsoft SQL Server Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47296" }, { "rank": 330, "cve_id": "CVE-2026-56157", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00496, "epss_percentile": 0.40261, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "cwe": "CWE-284", "title": "Microsoft SharePoint Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56157" }, { "rank": 331, "cve_id": "CVE-2026-56193", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00496, "epss_percentile": 0.40285, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56193" }, { "rank": 332, "cve_id": "CVE-2026-47632", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00495, "epss_percentile": 0.40203, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Azure Connected Machine Agent", "cwe": "CWE-295", "title": "Azure Connected Machine Agent Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47632" }, { "rank": 333, "cve_id": "CVE-2026-15677", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00495, "epss_percentile": 0.40203, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Job Portal", "cwe": "CWE-284", "title": "code-projects Online Job Portal JobSeekerInsert.php unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15677" }, { "rank": 334, "cve_id": "CVE-2026-57095", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00489, "epss_percentile": 0.39858, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Win32k Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57095" }, { "rank": 335, "cve_id": "CVE-2026-45074", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39813, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-290", "title": "Symfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45074" }, { "rank": 336, "cve_id": "CVE-2026-47476", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39763, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-400", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47476" }, { "rank": 337, "cve_id": "CVE-2026-47479", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39763, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-400", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47479" }, { "rank": 338, "cve_id": "CVE-2026-47480", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39763, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-248", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47480" }, { "rank": 339, "cve_id": "CVE-2026-47482", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39763, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-401", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47482" }, { "rank": 340, "cve_id": "CVE-2026-15715", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00486, "epss_percentile": 0.3961, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Class and Exam Timetabling System", "cwe": "CWE-79", "title": "SourceCodester Class and Exam Timetabling System exam.php cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15715" }, { "rank": 341, "cve_id": "CVE-2026-5269", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00483, "epss_percentile": 0.39401, "kev": false, "kev_due_at": null, "vendor": "CIENA", "product": "Navigator NCS", "cwe": "CWE-1393", "title": "Navigator NCS and MCP System Accounts with Default Passwords", "url": "https://www.cve.org/CVERecord?id=CVE-2026-5269" }, { "rank": 342, "cve_id": "CVE-2026-49804", "cvss_base": 6.6, "cvss_severity": "MEDIUM", "epss_score": 0.00483, "epss_percentile": 0.39392, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows USB Video Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49804" }, { "rank": 343, "cve_id": "CVE-2026-48805", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00483, "epss_percentile": 0.39417, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48805" }, { "rank": 344, "cve_id": "CVE-2026-57101", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00482, "epss_percentile": 0.39367, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-79", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57101" }, { "rank": 345, "cve_id": "CVE-2026-55139", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00482, "epss_percentile": 0.39357, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55139" }, { "rank": 346, "cve_id": "CVE-2026-11944", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00481, "epss_percentile": 0.39282, "kev": false, "kev_due_at": null, "vendor": "OS4ED", "product": "openSIS-Classic", "cwe": "CWE-22", "title": "openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11944" }, { "rank": 347, "cve_id": "CVE-2026-50661", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00481, "epss_percentile": 0.3932, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-693", "title": "Windows BitLocker Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50661" }, { "rank": 348, "cve_id": "CVE-2026-33842", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39147, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33842" }, { "rank": 349, "cve_id": "CVE-2026-34328", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39144, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-200", "title": "Windows Audio Service Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34328" }, { "rank": 350, "cve_id": "CVE-2026-34349", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39148, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-200", "title": "Windows Media Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34349" }, { "rank": 351, "cve_id": "CVE-2026-41087", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39148, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41087" }, { "rank": 352, "cve_id": "CVE-2026-50316", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39149, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-532", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50316" }, { "rank": 353, "cve_id": "CVE-2026-50334", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39146, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Push Notification Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50334" }, { "rank": 354, "cve_id": "CVE-2026-50339", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39145, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-200", "title": "Windows Push Notification Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50339" }, { "rank": 355, "cve_id": "CVE-2026-50350", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39146, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-200", "title": "Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50350" }, { "rank": 356, "cve_id": "CVE-2026-50352", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39145, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Cryptographic Services Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50352" }, { "rank": 357, "cve_id": "CVE-2026-50389", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39149, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50389" }, { "rank": 358, "cve_id": "CVE-2026-50394", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39145, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Media Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50394" }, { "rank": 359, "cve_id": "CVE-2026-50409", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39149, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Overlay Filter Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50409" }, { "rank": 360, "cve_id": "CVE-2026-50430", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.3915, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Push Notification Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50430" }, { "rank": 361, "cve_id": "CVE-2026-50431", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39146, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50431" }, { "rank": 362, "cve_id": "CVE-2026-50434", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39146, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-200", "title": "Windows Push Notification Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50434" }, { "rank": 363, "cve_id": "CVE-2026-50442", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39145, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50442" }, { "rank": 364, "cve_id": "CVE-2026-50456", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39144, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50456" }, { "rank": 365, "cve_id": "CVE-2026-50473", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39148, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50473" }, { "rank": 366, "cve_id": "CVE-2026-50483", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39147, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-200", "title": "Windows Graphics Component Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50483" }, { "rank": 367, "cve_id": "CVE-2026-50681", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39147, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Secure Channel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50681" }, { "rank": 368, "cve_id": "CVE-2026-56184", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39148, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-200", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56184" }, { "rank": 369, "cve_id": "CVE-2026-15625", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00478, "epss_percentile": 0.39132, "kev": false, "kev_due_at": null, "vendor": "nextlevelbuilder", "product": "GoClaw", "cwe": "CWE-183", "title": "nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklist", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15625" }, { "rank": 370, "cve_id": "CVE-2026-45496", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00475, "epss_percentile": 0.38911, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-22", "title": "Visual Studio Code Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45496" }, { "rank": 371, "cve_id": "CVE-2026-59891", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00473, "epss_percentile": 0.3881, "kev": false, "kev_due_at": null, "vendor": "sigstore", "product": "sigstore-js", "cwe": "CWE-522", "title": "Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59891" }, { "rank": 372, "cve_id": "CVE-2026-55898", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00473, "epss_percentile": 0.3877, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55898" }, { "rank": 373, "cve_id": "CVE-2026-46638", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00473, "epss_percentile": 0.38754, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46638" }, { "rank": 374, "cve_id": "CVE-2026-50678", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00472, "epss_percentile": 0.38739, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50678" }, { "rank": 375, "cve_id": "CVE-2026-48321", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00471, "epss_percentile": 0.38595, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48321" }, { "rank": 376, "cve_id": "CVE-2026-49176", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00471, "epss_percentile": 0.38634, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-269", "title": "Windows WalletService Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49176" }, { "rank": 377, "cve_id": "CVE-2026-50364", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00469, "epss_percentile": 0.38472, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-59", "title": "Windows Backup Service Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50364" }, { "rank": 378, "cve_id": "CVE-2026-48338", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00468, "epss_percentile": 0.38394, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-22", "title": "ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48338" }, { "rank": 379, "cve_id": "CVE-2026-49794", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00468, "epss_percentile": 0.38453, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows USB Audio Class Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49794" }, { "rank": 380, "cve_id": "CVE-2026-62641", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00467, "epss_percentile": 0.38371, "kev": false, "kev_due_at": null, "vendor": "Roundcube", "product": "Webmail", "cwe": "CWE-770", "title": "In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62641" }, { "rank": 381, "cve_id": "CVE-2026-44745", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38255, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Approuter", "cwe": "CWE-601", "title": "Open Redirect vulnerability in SAP Approuter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44745" }, { "rank": 382, "cve_id": "CVE-2026-47290", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47290" }, { "rank": 383, "cve_id": "CVE-2026-47305", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38326, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Visual Studio 2022 version 17.12", "cwe": "CWE-693", "title": "Visual Studio Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47305" }, { "rank": 384, "cve_id": "CVE-2026-47642", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38314, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47642" }, { "rank": 385, "cve_id": "CVE-2026-49796", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows GDI+ Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49796" }, { "rank": 386, "cve_id": "CVE-2026-49797", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38317, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49797" }, { "rank": 387, "cve_id": "CVE-2026-50301", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38316, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50301" }, { "rank": 388, "cve_id": "CVE-2026-50308", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38329, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50308" }, { "rank": 389, "cve_id": "CVE-2026-50313", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38329, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50313" }, { "rank": 390, "cve_id": "CVE-2026-50314", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38329, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50314" }, { "rank": 391, "cve_id": "CVE-2026-50347", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38327, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Data.dll Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50347" }, { "rank": 392, "cve_id": "CVE-2026-50362", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38315, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50362" }, { "rank": 393, "cve_id": "CVE-2026-50386", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38325, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50386" }, { "rank": 394, "cve_id": "CVE-2026-50388", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38324, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50388" }, { "rank": 395, "cve_id": "CVE-2026-50448", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38324, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50448" }, { "rank": 396, "cve_id": "CVE-2026-50461", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38323, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50461" }, { "rank": 397, "cve_id": "CVE-2026-50467", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38323, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50467" }, { "rank": 398, "cve_id": "CVE-2026-50471", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38328, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50471" }, { "rank": 399, "cve_id": "CVE-2026-50655", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38316, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50655" }, { "rank": 400, "cve_id": "CVE-2026-50675", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38323, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50675" }, { "rank": 401, "cve_id": "CVE-2026-54124", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38317, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-190", "title": "Windows Terminal Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54124" }, { "rank": 402, "cve_id": "CVE-2026-54131", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54131" }, { "rank": 403, "cve_id": "CVE-2026-54993", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38327, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54993" }, { "rank": 404, "cve_id": "CVE-2026-55017", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38322, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55017" }, { "rank": 405, "cve_id": "CVE-2026-55018", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38322, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55018" }, { "rank": 406, "cve_id": "CVE-2026-55022", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38325, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-843", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55022" }, { "rank": 407, "cve_id": "CVE-2026-55024", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38325, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-843", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55024" }, { "rank": 408, "cve_id": "CVE-2026-55025", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38325, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-843", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55025" }, { "rank": 409, "cve_id": "CVE-2026-55029", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.3832, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55029" }, { "rank": 410, "cve_id": "CVE-2026-55031", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38328, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55031" }, { "rank": 411, "cve_id": "CVE-2026-55036", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38322, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-126", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55036" }, { "rank": 412, "cve_id": "CVE-2026-55037", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38321, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55037" }, { "rank": 413, "cve_id": "CVE-2026-55039", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38316, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-191", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55039" }, { "rank": 414, "cve_id": "CVE-2026-55041", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38316, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55041" }, { "rank": 415, "cve_id": "CVE-2026-55043", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.3832, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55043" }, { "rank": 416, "cve_id": "CVE-2026-55044", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.3832, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55044" }, { "rank": 417, "cve_id": "CVE-2026-55048", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38321, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55048" }, { "rank": 418, "cve_id": "CVE-2026-55049", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38318, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55049" }, { "rank": 419, "cve_id": "CVE-2026-55053", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38322, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55053" }, { "rank": 420, "cve_id": "CVE-2026-55056", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38321, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55056" }, { "rank": 421, "cve_id": "CVE-2026-55058", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38318, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55058" }, { "rank": 422, "cve_id": "CVE-2026-55120", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38317, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55120" }, { "rank": 423, "cve_id": "CVE-2026-55123", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38319, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft PowerPoint Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55123" }, { "rank": 424, "cve_id": "CVE-2026-55129", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38326, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55129" }, { "rank": 425, "cve_id": "CVE-2026-55131", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38327, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55131" }, { "rank": 426, "cve_id": "CVE-2026-55133", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38317, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft OneNote Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55133" }, { "rank": 427, "cve_id": "CVE-2026-55136", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38327, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-822", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55136" }, { "rank": 428, "cve_id": "CVE-2026-55137", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38326, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55137" }, { "rank": 429, "cve_id": "CVE-2026-55140", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.3832, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55140" }, { "rank": 430, "cve_id": "CVE-2026-55141", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38318, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55141" }, { "rank": 431, "cve_id": "CVE-2026-55899", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38323, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-121", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55899" }, { "rank": 432, "cve_id": "CVE-2026-55947", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38314, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55947" }, { "rank": 433, "cve_id": "CVE-2026-55948", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38328, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-416", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55948" }, { "rank": 434, "cve_id": "CVE-2026-55949", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38324, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-908", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55949" }, { "rank": 435, "cve_id": "CVE-2026-56156", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38328, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56156" }, { "rank": 436, "cve_id": "CVE-2026-58609", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38315, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Graphics Component Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58609" }, { "rank": 437, "cve_id": "CVE-2026-58610", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38315, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58610" }, { "rank": 438, "cve_id": "CVE-2026-58618", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38314, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-122", "title": "Microsoft Excel Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58618" }, { "rank": 439, "cve_id": "CVE-2026-54988", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00461, "epss_percentile": 0.37965, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Excel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54988" }, { "rank": 440, "cve_id": "CVE-2026-15700", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00461, "epss_percentile": 0.37974, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "DedeCMS", "cwe": "CWE-22", "title": "DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15700" }, { "rank": 441, "cve_id": "CVE-2026-45073", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00458, "epss_percentile": 0.37724, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-89", "title": "Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45073" }, { "rank": 442, "cve_id": "CVE-2026-50416", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00458, "epss_percentile": 0.3773, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-200", "title": "Win32k Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50416" }, { "rank": 443, "cve_id": "CVE-2026-50419", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.00458, "epss_percentile": 0.3773, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50419" }, { "rank": 444, "cve_id": "CVE-2026-50462", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00457, "epss_percentile": 0.37711, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-73", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50462" }, { "rank": 445, "cve_id": "CVE-2026-15698", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00457, "epss_percentile": 0.37688, "kev": false, "kev_due_at": null, "vendor": "kofrasa", "product": "mingo", "cwe": "CWE-94", "title": "kofrasa mingo Update API updateMany prototype pollution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15698" }, { "rank": 446, "cve_id": "CVE-2026-15702", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00457, "epss_percentile": 0.37688, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "tamagui", "cwe": "CWE-94", "title": "tamagui config.ts updateConfig prototype pollution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15702" }, { "rank": 447, "cve_id": "CVE-2026-48000", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00456, "epss_percentile": 0.37656, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-601", "title": "Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48000" }, { "rank": 448, "cve_id": "CVE-2026-62393", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00454, "epss_percentile": 0.37486, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Kylin", "cwe": "CWE-280", "title": "Apache Kylin: Improper authorization in job information retrieval", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62393" }, { "rank": 449, "cve_id": "CVE-2026-15776", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00451, "epss_percentile": 0.37266, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-843", "title": "Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15776" }, { "rank": 450, "cve_id": "CVE-2026-55026", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00449, "epss_percentile": 0.37126, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-190", "title": "Microsoft Office Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55026" }, { "rank": 451, "cve_id": "CVE-2026-14504", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00447, "epss_percentile": 0.3702, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-862", "title": "Nexus Repository 3 - Authorization Bypass in Component Upload API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14504" }, { "rank": 452, "cve_id": "CVE-2026-15753", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00447, "epss_percentile": 0.37014, "kev": false, "kev_due_at": null, "vendor": "zhinianboke", "product": "xianyu-auto-reply", "cwe": "CWE-650", "title": "zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15753" }, { "rank": 453, "cve_id": "CVE-2026-55045", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00446, "epss_percentile": 0.36902, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cwe": "CWE-125", "title": "Microsoft Office Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55045" }, { "rank": 454, "cve_id": "CVE-2026-15697", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00446, "epss_percentile": 0.36956, "kev": false, "kev_due_at": null, "vendor": "svgdotjs", "product": "svg.js", "cwe": "CWE-94", "title": "svgdotjs svg.js npm Package API EventTarget.on prototype pollution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15697" }, { "rank": 455, "cve_id": "CVE-2026-15699", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00446, "epss_percentile": 0.36955, "kev": false, "kev_due_at": null, "vendor": "spencermountain", "product": "compromise", "cwe": "CWE-94", "title": "spencermountain compromise Public Root API extend.js nlp.extend prototype pollution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15699" }, { "rank": 456, "cve_id": "CVE-2026-59197", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00445, "epss_percentile": 0.36878, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-190", "title": "Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59197" }, { "rank": 457, "cve_id": "CVE-2026-45754", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00445, "epss_percentile": 0.3684, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-287", "title": "Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45754" }, { "rank": 458, "cve_id": "CVE-2026-48125", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00445, "epss_percentile": 0.36818, "kev": false, "kev_due_at": null, "vendor": "faisalman", "product": "ua-parser-js", "cwe": "CWE-400", "title": "UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48125" }, { "rank": 459, "cve_id": "CVE-2026-49180", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00444, "epss_percentile": 0.36738, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49180" }, { "rank": 460, "cve_id": "CVE-2026-49177", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00443, "epss_percentile": 0.36695, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows TCP/IP Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49177" }, { "rank": 461, "cve_id": "CVE-2026-15416", "cvss_base": 8.9, "cvss_severity": "HIGH", "epss_score": 0.00442, "epss_percentile": 0.36642, "kev": false, "kev_due_at": null, "vendor": "argoproj", "product": "argo-helm", "cwe": "CWE-306", "title": "Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15416" }, { "rank": 462, "cve_id": "CVE-2026-15389", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00441, "epss_percentile": 0.36542, "kev": false, "kev_due_at": null, "vendor": "Sesame Time", "product": "Sesame Time", "cwe": "CWE-639", "title": "Inadequate access control in Sesame Time session management", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15389" }, { "rank": 463, "cve_id": "CVE-2026-62643", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.0044, "epss_percentile": 0.36452, "kev": false, "kev_due_at": null, "vendor": "Roundcube", "product": "Webmail", "cwe": "CWE-918", "title": "In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. NOTE: this issue exists because of insufficient fixes for CVE-2026-35540 and CVE-2026-48843.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-62643" }, { "rank": 464, "cve_id": "CVE-2024-7708", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0044, "epss_percentile": 0.36483, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Jetty", "cwe": "CWE-400", "title": "For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak.", "url": "https://www.cve.org/CVERecord?id=CVE-2024-7708" }, { "rank": 465, "cve_id": "CVE-2026-49168", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.363, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Storage Spaces Direct Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49168" }, { "rank": 466, "cve_id": "CVE-2026-50298", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.36299, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Spaceport.sys Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50298" }, { "rank": 467, "cve_id": "CVE-2026-50299", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.36299, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-190", "title": "Windows Storage Spaces Direct Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50299" }, { "rank": 468, "cve_id": "CVE-2026-50492", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.363, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50492" }, { "rank": 469, "cve_id": "CVE-2026-50668", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.363, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50668" }, { "rank": 470, "cve_id": "CVE-2026-54132", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.363, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54132" }, { "rank": 471, "cve_id": "CVE-2026-11390", "cvss_base": 6.4, "cvss_severity": "MEDIUM", "epss_score": 0.00438, "epss_percentile": 0.36277, "kev": false, "kev_due_at": null, "vendor": "blazethemes", "product": "News Kit Addons For Elementor", "cwe": "CWE-79", "title": "News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11390" }, { "rank": 472, "cve_id": "CVE-2026-15690", "cvss_base": 1.3, "cvss_severity": "LOW", "epss_score": 0.00438, "epss_percentile": 0.36296, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "open62541", "cwe": "CWE-404", "title": "open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15690" }, { "rank": 473, "cve_id": "CVE-2026-47481", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00437, "epss_percentile": 0.36208, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "Triton Inference Server", "cwe": "CWE-288", "title": "NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47481" }, { "rank": 474, "cve_id": "CVE-2026-61520", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00437, "epss_percentile": 0.36204, "kev": false, "kev_due_at": null, "vendor": "SimpleMachines", "product": "SMF", "cwe": "CWE-918", "title": "Simple Machines Forum SSRF via image proxy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61520" }, { "rank": 475, "cve_id": "CVE-2026-44761", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00434, "epss_percentile": 0.35958, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP Commerce Cloud", "cwe": "CWE-1392", "title": "Insecure Sample Credentials in SAP Commerce Cloud", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44761" }, { "rank": 476, "cve_id": "CVE-2026-15711", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00431, "epss_percentile": 0.35644, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-770", "title": "Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15711" }, { "rank": 477, "cve_id": "CVE-2026-15675", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00431, "epss_percentile": 0.35654, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Job Portal", "cwe": "CWE-74", "title": "code-projects Online Job Portal EditUser.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15675" }, { "rank": 478, "cve_id": "CVE-2026-15676", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00431, "epss_percentile": 0.35655, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Job Portal", "cwe": "CWE-74", "title": "code-projects Online Job Portal DeleteUser.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15676" }, { "rank": 479, "cve_id": "CVE-2026-15703", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00431, "epss_percentile": 0.35655, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Simple and Nice Shopping Cart Script", "cwe": "CWE-74", "title": "SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15703" }, { "rank": 480, "cve_id": "CVE-2026-15619", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00431, "epss_percentile": 0.35711, "kev": false, "kev_due_at": null, "vendor": "mosaxiv", "product": "clawlet", "cwe": "CWE-918", "title": "mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15619" }, { "rank": 481, "cve_id": "CVE-2026-45075", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35537, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-863", "title": "Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45075" }, { "rank": 482, "cve_id": "CVE-2026-10051", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00429, "epss_percentile": 0.35529, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Jetty", "cwe": "CWE-200", "title": "In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection. Subsequent request that do not have trailers report the trailers of the first request. Subsequent request that do have trailers report the union of trailers of the first request and the current request.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10051" }, { "rank": 483, "cve_id": "CVE-2026-14902", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00429, "epss_percentile": 0.35538, "kev": false, "kev_due_at": null, "vendor": "ivanti", "product": "Xtraction", "cwe": "CWE-601", "title": "An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14902" }, { "rank": 484, "cve_id": "CVE-2025-11698", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00428, "epss_percentile": 0.35426, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image", "cwe": "CWE-120", "title": "CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2025-11698" }, { "rank": 485, "cve_id": "CVE-2025-12011", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00428, "epss_percentile": 0.35421, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570", "cwe": "CWE-120", "title": "CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2025-12011" }, { "rank": 486, "cve_id": "CVE-2025-12012", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00428, "epss_percentile": 0.35422, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570", "cwe": "CWE-120", "title": "CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2025-12012" }, { "rank": 487, "cve_id": "CVE-2026-8590", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.3542, "kev": false, "kev_due_at": null, "vendor": "Spotfire", "product": "Spotfire Enterprise", "cwe": null, "title": "Spotfire OAuth2 PKCE Bypass for public clients", "url": "https://www.cve.org/CVERecord?id=CVE-2026-8590" }, { "rank": 488, "cve_id": "CVE-2026-9140", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.3542, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "1718-AENTR/1719-AENTR", "cwe": "CWE-770", "title": "1718-AENTR/1719-AENTR - Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9140" }, { "rank": 489, "cve_id": "CVE-2026-10573", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.35419, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "1734 POINT I/O", "cwe": "CWE-770", "title": "1734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10573" }, { "rank": 490, "cve_id": "CVE-2026-12659", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00428, "epss_percentile": 0.35425, "kev": false, "kev_due_at": null, "vendor": "Rockwell Automation", "product": "The FLEX 5000® EtherNet/IP Adapter", "cwe": "CWE-415", "title": "Rockwell Automation Flex 5000® Adapter - Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12659" }, { "rank": 491, "cve_id": "CVE-2026-15626", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00425, "epss_percentile": 0.35163, "kev": false, "kev_due_at": null, "vendor": "nextlevelbuilder", "product": "GoClaw", "cwe": "CWE-22", "title": "nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15626" }, { "rank": 492, "cve_id": "CVE-2026-15629", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00425, "epss_percentile": 0.35163, "kev": false, "kev_due_at": null, "vendor": "louisho5", "product": "picobot", "cwe": "CWE-59", "title": "louisho5 picobot Workspace filesystem.go GetSkill link following", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15629" }, { "rank": 493, "cve_id": "CVE-2026-15627", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00419, "epss_percentile": 0.34669, "kev": false, "kev_due_at": null, "vendor": "nextlevelbuilder", "product": "GoClaw", "cwe": "CWE-200", "title": "nextlevelbuilder GoClaw tool.go handleNavigate information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15627" }, { "rank": 494, "cve_id": "CVE-2026-15767", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00418, "epss_percentile": 0.34601, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-122", "title": "Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15767" }, { "rank": 495, "cve_id": "CVE-2026-48806", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00418, "epss_percentile": 0.34554, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48806" }, { "rank": 496, "cve_id": "CVE-2026-50428", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00412, "epss_percentile": 0.33952, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 version 26H1", "cwe": "CWE-125", "title": "Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50428" }, { "rank": 497, "cve_id": "CVE-2026-54999", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0041, "epss_percentile": 0.33839, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-362", "title": "Windows TCP/IP Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54999" }, { "rank": 498, "cve_id": "CVE-2026-47423", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0041, "epss_percentile": 0.33766, "kev": false, "kev_due_at": null, "vendor": "cure53", "product": "DOMPurify", "cwe": "CWE-79", "title": "DOMPurify XSS via `selectedcontent` re-clone", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47423" }, { "rank": 499, "cve_id": "CVE-2026-50377", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00409, "epss_percentile": 0.33718, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50377" }, { "rank": 500, "cve_id": "CVE-2026-47999", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00409, "epss_percentile": 0.33678, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47999" }, { "rank": 501, "cve_id": "CVE-2026-48327", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00408, "epss_percentile": 0.33665, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "ColdFusion 2025", "cwe": "CWE-863", "title": "ColdFusion | Incorrect Authorization (CWE-863)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48327" }, { "rank": 502, "cve_id": "CVE-2026-50420", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00408, "epss_percentile": 0.33647, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-125", "title": "HTTP.sys Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50420" }, { "rank": 503, "cve_id": "CVE-2026-58547", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00407, "epss_percentile": 0.33535, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-122", "title": "Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58547" }, { "rank": 504, "cve_id": "CVE-2026-48808", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00407, "epss_percentile": 0.33554, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48808" }, { "rank": 505, "cve_id": "CVE-2026-10577", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.00406, "epss_percentile": 0.33411, "kev": false, "kev_due_at": null, "vendor": "Rockwell Auotmation", "product": "1715 EtherNet/IP Communications Module", "cwe": "CWE-306", "title": "Rockwell Automation 1715 Redundant IO – Access Control Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10577" }, { "rank": 506, "cve_id": "CVE-2026-10672", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00405, "epss_percentile": 0.33402, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-125", "title": "Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10672" }, { "rank": 507, "cve_id": "CVE-2026-49458", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33299, "kev": false, "kev_due_at": null, "vendor": "cure53", "product": "DOMPurify", "cwe": "CWE-79", "title": "DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49458" }, { "rank": 508, "cve_id": "CVE-2026-40422", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33288, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows File Explorer Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40422" }, { "rank": 509, "cve_id": "CVE-2026-49801", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33289, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows SMB Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49801" }, { "rank": 510, "cve_id": "CVE-2026-50300", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33287, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows DWM Core Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50300" }, { "rank": 511, "cve_id": "CVE-2026-50341", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33289, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows NTFS Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50341" }, { "rank": 512, "cve_id": "CVE-2026-50381", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33288, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "cwe": "CWE-843", "title": "Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50381" }, { "rank": 513, "cve_id": "CVE-2026-50383", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33287, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-126", "title": "Windows Print Spooler Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50383" }, { "rank": 514, "cve_id": "CVE-2026-50401", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33288, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-125", "title": "Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50401" }, { "rank": 515, "cve_id": "CVE-2026-50437", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33289, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows DWM Core Library Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50437" }, { "rank": 516, "cve_id": "CVE-2026-50455", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33287, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50455" }, { "rank": 517, "cve_id": "CVE-2026-50690", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33289, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows SMB Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50690" }, { "rank": 518, "cve_id": "CVE-2026-54997", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.3329, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-908", "title": "Windows SMB Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54997" }, { "rank": 519, "cve_id": "CVE-2026-58614", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00404, "epss_percentile": 0.33288, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Kernel Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58614" }, { "rank": 520, "cve_id": "CVE-2026-60118", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.33138, "kev": false, "kev_due_at": null, "vendor": "HiEventsDev", "product": "Hi.Events", "cwe": "CWE-862", "title": "Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60118" }, { "rank": 521, "cve_id": "CVE-2026-47732", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00402, "epss_percentile": 0.33007, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-863", "title": "Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47732" }, { "rank": 522, "cve_id": "CVE-2026-12478", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00401, "epss_percentile": 0.32934, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-125", "title": "Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12478" }, { "rank": 523, "cve_id": "CVE-2026-48334", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.004, "epss_percentile": 0.32854, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Illustrator Desktop 2026", "cwe": "CWE-20", "title": "Illustrator | Improper Input Validation (CWE-20)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48334" }, { "rank": 524, "cve_id": "CVE-2026-50657", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.004, "epss_percentile": 0.32875, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Defender for Endpoint for Mac", "cwe": "CWE-359", "title": "Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50657" }, { "rank": 525, "cve_id": "CVE-2026-15620", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00398, "epss_percentile": 0.32608, "kev": false, "kev_due_at": null, "vendor": "mosaxiv", "product": "clawlet", "cwe": "CWE-918", "title": "mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15620" }, { "rank": 526, "cve_id": "CVE-2026-15668", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00398, "epss_percentile": 0.32609, "kev": false, "kev_due_at": null, "vendor": "louisho5", "product": "picobot", "cwe": "CWE-918", "title": "louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15668" }, { "rank": 527, "cve_id": "CVE-2026-47995", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00397, "epss_percentile": 0.3251, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47995" }, { "rank": 528, "cve_id": "CVE-2026-15750", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00396, "epss_percentile": 0.32484, "kev": false, "kev_due_at": null, "vendor": "mastergo-design", "product": "mastergo-magic-mcp", "cwe": "CWE-918", "title": "mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15750" }, { "rank": 529, "cve_id": "CVE-2026-59835", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00395, "epss_percentile": 0.32355, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiSandbox", "cwe": "CWE-668", "title": "A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59835" }, { "rank": 530, "cve_id": "CVE-2026-50697", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00395, "epss_percentile": 0.3231, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-200", "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50697" }, { "rank": 531, "cve_id": "CVE-2026-50684", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00395, "epss_percentile": 0.32388, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-79", "title": "Active Directory Federation Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50684" }, { "rank": 532, "cve_id": "CVE-2026-46639", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00394, "epss_percentile": 0.32254, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox property and method bypass via object-destructuring assignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46639" }, { "rank": 533, "cve_id": "CVE-2026-59204", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00393, "epss_percentile": 0.32156, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-770", "title": "Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59204" }, { "rank": 534, "cve_id": "CVE-2026-56189", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00393, "epss_percentile": 0.32054, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56189" }, { "rank": 535, "cve_id": "CVE-2026-13699", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00393, "epss_percentile": 0.32145, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse KUKSA - Databroker", "cwe": "CWE-20", "title": "Databroker 0.6.1 PublishValue missing data_point panic", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13699" }, { "rank": 536, "cve_id": "CVE-2026-15643", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.0039, "epss_percentile": 0.31793, "kev": false, "kev_due_at": null, "vendor": "AWS", "product": "awslabs.healthlake-mcp-server", "cwe": "CWE-918", "title": "AWS HealthLake MCP Server SSRF via Pagination URL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15643" }, { "rank": 537, "cve_id": "CVE-2026-24233", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.0039, "epss_percentile": 0.31781, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "TensorRT-LLM", "cwe": "CWE-502", "title": "NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24233" }, { "rank": 538, "cve_id": "CVE-2026-45070", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.0039, "epss_percentile": 0.3183, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-93", "title": "Symfony: Email Header Injection via Non-Token Characters in Mime Parameter Names", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45070" }, { "rank": 539, "cve_id": "CVE-2026-48263", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.0039, "epss_percentile": 0.31779, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48263" }, { "rank": 540, "cve_id": "CVE-2026-48355", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.0039, "epss_percentile": 0.31779, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48355" }, { "rank": 541, "cve_id": "CVE-2026-48371", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.0039, "epss_percentile": 0.31779, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Commerce", "cwe": "CWE-79", "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48371" }, { "rank": 542, "cve_id": "CVE-2026-15043", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00387, "epss_percentile": 0.31465, "kev": false, "kev_due_at": null, "vendor": "HMBRAND", "product": "DBI::SQL::Nano", "cwe": "CWE-480", "title": "DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15043" }, { "rank": 543, "cve_id": "CVE-2026-60082", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00387, "epss_percentile": 0.31464, "kev": false, "kev_due_at": null, "vendor": "HMBRAND", "product": "DBI", "cwe": "CWE-125", "title": "DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60082" }, { "rank": 544, "cve_id": "CVE-2026-59199", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00385, "epss_percentile": 0.31322, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-787", "title": "Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59199" }, { "rank": 545, "cve_id": "CVE-2026-59200", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00385, "epss_percentile": 0.31321, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-400", "title": "Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59200" }, { "rank": 546, "cve_id": "CVE-2026-59205", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00385, "epss_percentile": 0.31321, "kev": false, "kev_due_at": null, "vendor": "python-pillow", "product": "Pillow", "cwe": "CWE-787", "title": "Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59205" }, { "rank": 547, "cve_id": "CVE-2026-23573", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00385, "epss_percentile": 0.31237, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiOS", "cwe": "CWE-79", "title": "An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9 may allow an authenticated remote user to execute code or commands via crafted requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-23573" }, { "rank": 548, "cve_id": "CVE-2025-43892", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00381, "epss_percentile": 0.3087, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiOS", "cwe": "CWE-126", "title": "A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-43892" }, { "rank": 549, "cve_id": "CVE-2026-15718", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00381, "epss_percentile": 0.30841, "kev": false, "kev_due_at": null, "vendor": "Mozilla", "product": "Firefox", "cwe": "CWE-763", "title": "Invalid pointer in the JavaScript: WebAssembly component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15718" }, { "rank": 550, "cve_id": "CVE-2026-49791", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0038, "epss_percentile": 0.30729, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-59", "title": "Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49791" }, { "rank": 551, "cve_id": "CVE-2026-15736", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00377, "epss_percentile": 0.30461, "kev": false, "kev_due_at": null, "vendor": "Snowflake", "product": "Snowflake SQLAlchemy", "cwe": "CWE-73", "title": "Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15736" }, { "rank": 552, "cve_id": "CVE-2026-58613", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00377, "epss_percentile": 0.30412, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58613" }, { "rank": 553, "cve_id": "CVE-2026-58478", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00376, "epss_percentile": 0.3033, "kev": false, "kev_due_at": null, "vendor": "Dan-in-CA", "product": "SIP", "cwe": "CWE-918", "title": "Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58478" }, { "rank": 554, "cve_id": "CVE-2026-50475", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00375, "epss_percentile": 0.30254, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-126", "title": "Windows Kernel Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50475" }, { "rank": 555, "cve_id": "CVE-2026-55011", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00374, "epss_percentile": 0.30123, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Malware Protection Engine", "cwe": "CWE-191", "title": "Microsoft Defender Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55011" }, { "rank": 556, "cve_id": "CVE-2026-55012", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00374, "epss_percentile": 0.30124, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Malware Protection Engine", "cwe": "CWE-190", "title": "Microsoft Defender Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55012" }, { "rank": 557, "cve_id": "CVE-2026-15628", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00374, "epss_percentile": 0.30159, "kev": false, "kev_due_at": null, "vendor": "zhayujie", "product": "chatgpt-on-wechat CowAgent", "cwe": "CWE-918", "title": "zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15628" }, { "rank": 558, "cve_id": "CVE-2025-62826", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00372, "epss_percentile": 0.29921, "kev": false, "kev_due_at": null, "vendor": "Fortinet", "product": "FortiPAM", "cwe": "CWE-113", "title": "An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-62826" }, { "rank": 559, "cve_id": "CVE-2026-59083", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.0037, "epss_percentile": 0.29678, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Tomcat", "cwe": "CWE-177", "title": "Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59083" }, { "rank": 560, "cve_id": "CVE-2026-50438", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0037, "epss_percentile": 0.29722, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft PC Manager", "cwe": "CWE-59", "title": "Microsoft PC Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50438" }, { "rank": 561, "cve_id": "CVE-2026-50454", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0037, "epss_percentile": 0.29722, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-23", "title": "Windows User Interface Core Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50454" }, { "rank": 562, "cve_id": "CVE-2026-50469", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0037, "epss_percentile": 0.29722, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-59", "title": "Windows Projected File System Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50469" }, { "rank": 563, "cve_id": "CVE-2026-58636", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0037, "epss_percentile": 0.29721, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft PC Manager", "cwe": "CWE-59", "title": "Microsoft PC Manager Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58636" }, { "rank": 564, "cve_id": "CVE-2026-57085", "cvss_base": 3.3, "cvss_severity": "LOW", "epss_score": 0.0037, "epss_percentile": 0.29716, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Print Spooler Information Disclosure Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57085" }, { "rank": 565, "cve_id": "CVE-2026-45063", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00367, "epss_percentile": 0.29326, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-290", "title": "Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45063" }, { "rank": 566, "cve_id": "CVE-2026-48807", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00367, "epss_percentile": 0.29371, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48807" }, { "rank": 567, "cve_id": "CVE-2026-48801", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00366, "epss_percentile": 0.29282, "kev": false, "kev_due_at": null, "vendor": "markdown-it", "product": "linkify-it", "cwe": "CWE-1333", "title": "linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48801" }, { "rank": 568, "cve_id": "CVE-2026-15624", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00366, "epss_percentile": 0.29255, "kev": false, "kev_due_at": null, "vendor": "nextlevelbuilder", "product": "GoClaw", "cwe": "CWE-918", "title": "nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15624" }, { "rank": 569, "cve_id": "CVE-2026-54572", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00365, "epss_percentile": 0.2915, "kev": false, "kev_due_at": null, "vendor": "rclone", "product": "rclone", "cwe": "CWE-59", "title": "rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54572" }, { "rank": 570, "cve_id": "CVE-2026-49853", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00365, "epss_percentile": 0.29157, "kev": false, "kev_due_at": null, "vendor": "tornadoweb", "product": "tornado", "cwe": "CWE-200", "title": "Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49853" }, { "rank": 571, "cve_id": "CVE-2026-60081", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00365, "epss_percentile": 0.29186, "kev": false, "kev_due_at": null, "vendor": "HMBRAND", "product": "DBI::ProfileData", "cwe": "CWE-770", "title": "DBI::ProfileData versions before 1.651 for Perl do not limit the path index", "url": "https://www.cve.org/CVERecord?id=CVE-2026-60081" }, { "rank": 572, "cve_id": "CVE-2026-49459", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00365, "epss_percentile": 0.29152, "kev": false, "kev_due_at": null, "vendor": "cure53", "product": "DOMPurify", "cwe": "CWE-79", "title": "DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49459" }, { "rank": 573, "cve_id": "CVE-2026-49798", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00364, "epss_percentile": 0.29099, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49798" }, { "rank": 574, "cve_id": "CVE-2026-54122", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00364, "epss_percentile": 0.29098, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows GDI+ Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54122" }, { "rank": 575, "cve_id": "CVE-2026-54128", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00364, "epss_percentile": 0.29099, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows DHCP Client Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54128" }, { "rank": 576, "cve_id": "CVE-2026-14646", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.2911, "kev": false, "kev_due_at": null, "vendor": "Sonatype", "product": "Nexus Repository 3", "cwe": "CWE-918", "title": "Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14646" }, { "rank": 577, "cve_id": "CVE-2026-50498", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00363, "epss_percentile": 0.28968, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-125", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50498" }, { "rank": 578, "cve_id": "CVE-2026-50501", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00363, "epss_percentile": 0.28968, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-121", "title": "Windows Resilient File System (ReFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50501" }, { "rank": 579, "cve_id": "CVE-2026-58530", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00363, "epss_percentile": 0.28967, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows Resilient File System (ReFS) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58530" }, { "rank": 580, "cve_id": "CVE-2026-58542", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00363, "epss_percentile": 0.28967, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "cwe": "CWE-122", "title": "Windows Media Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58542" }, { "rank": 581, "cve_id": "CVE-2026-49981", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00362, "epss_percentile": 0.28843, "kev": false, "kev_due_at": null, "vendor": "twigphp", "product": "Twig", "cwe": "CWE-693", "title": "Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49981" }, { "rank": 582, "cve_id": "CVE-2026-44752", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0036, "epss_percentile": 0.287, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP NetWeaver Application Server Java(Configuration Wizard)", "cwe": "CWE-79", "title": "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44752" }, { "rank": 583, "cve_id": "CVE-2026-50348", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0036, "epss_percentile": 0.28692, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50348" }, { "rank": 584, "cve_id": "CVE-2026-50452", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.0036, "epss_percentile": 0.28692, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-362", "title": "Windows Runtime Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50452" }, { "rank": 585, "cve_id": "CVE-2026-49789", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28582, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-121", "title": "Windows NTFS Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49789" }, { "rank": 586, "cve_id": "CVE-2026-49790", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28582, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-191", "title": "Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49790" }, { "rank": 587, "cve_id": "CVE-2026-50482", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28583, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50482" }, { "rank": 588, "cve_id": "CVE-2026-50510", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28562, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "GitHub Copilot Plugin for JetBrains IDEs", "cwe": "CWE-641", "title": "GitHub Copilot Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50510" }, { "rank": 589, "cve_id": "CVE-2026-58640", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00359, "epss_percentile": 0.28583, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-122", "title": "Windows NTFS Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58640" }, { "rank": 590, "cve_id": "CVE-2026-48253", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28609, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48253" }, { "rank": 591, "cve_id": "CVE-2026-48254", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28609, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48254" }, { "rank": 592, "cve_id": "CVE-2026-48255", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28609, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48255" }, { "rank": 593, "cve_id": "CVE-2026-48257", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.2861, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48257" }, { "rank": 594, "cve_id": "CVE-2026-48260", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28608, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48260" }, { "rank": 595, "cve_id": "CVE-2026-48261", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28608, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48261" }, { "rank": 596, "cve_id": "CVE-2026-48262", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00359, "epss_percentile": 0.28609, "kev": false, "kev_due_at": null, "vendor": "Adobe", "product": "Adobe Experience Manager as a Cloud Service", "cwe": "CWE-79", "title": "Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48262" }, { "rank": 597, "cve_id": "CVE-2026-9341", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00354, "epss_percentile": 0.28028, "kev": false, "kev_due_at": null, "vendor": "kodezen", "product": "Academy LMS", "cwe": "CWE-639", "title": "Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9341" }, { "rank": 598, "cve_id": "CVE-2026-50520", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00352, "epss_percentile": 0.27843, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Visual Studio Code", "cwe": "CWE-77", "title": "Visual Studio Code Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50520" }, { "rank": 599, "cve_id": "CVE-2026-49167", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0035, "epss_percentile": 0.27637, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Kernel Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49167" }, { "rank": 600, "cve_id": "CVE-2026-50312", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0035, "epss_percentile": 0.27638, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-416", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50312" }, { "rank": 601, "cve_id": "CVE-2026-58545", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0035, "epss_percentile": 0.27553, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1607", "cwe": "CWE-284", "title": "Windows Kernel Security Feature Bypass Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58545" }, { "rank": 602, "cve_id": "CVE-2026-59884", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00349, "epss_percentile": 0.27542, "kev": false, "kev_due_at": null, "vendor": "pyasn1", "product": "pyasn1", "cwe": "CWE-400", "title": "pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59884" }, { "rank": 603, "cve_id": "CVE-2026-47472", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00348, "epss_percentile": 0.27387, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "TensorRT-LLM", "cwe": "CWE-502", "title": "NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47472" }, { "rank": 604, "cve_id": "CVE-2026-58647", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00348, "epss_percentile": 0.2742, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Power BI Report Server", "cwe": "CWE-79", "title": "Microsoft PowerBI Report Server Spoofing Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58647" }, { "rank": 605, "cve_id": "CVE-2026-48784", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00348, "epss_percentile": 0.2742, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-172", "title": "Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48784" }, { "rank": 606, "cve_id": "CVE-2026-45065", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00348, "epss_percentile": 0.27421, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-185", "title": "Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45065" }, { "rank": 607, "cve_id": "CVE-2026-15678", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00348, "epss_percentile": 0.27404, "kev": false, "kev_due_at": null, "vendor": "code-projects", "product": "Online Job Portal", "cwe": "CWE-79", "title": "code-projects Online Job Portal DetailJob.php cross site scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15678" }, { "rank": 608, "cve_id": "CVE-2026-50374", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00347, "epss_percentile": 0.2725, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Windows 10 Version 1809", "cwe": "CWE-416", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50374" }, { "rank": 609, "cve_id": "CVE-2026-15766", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00347, "epss_percentile": 0.27225, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-457", "title": "Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15766" }, { "rank": 610, "cve_id": "CVE-2026-15770", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00347, "epss_percentile": 0.27223, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-457", "title": "Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15770" }, { "rank": 611, "cve_id": "CVE-2026-59889", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00346, "epss_percentile": 0.27149, "kev": false, "kev_due_at": null, "vendor": "FasterXML", "product": "jackson-databind", "cwe": "CWE-863", "title": "jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59889" }, { "rank": 612, "cve_id": "CVE-2026-44753", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00346, "epss_percentile": 0.27155, "kev": false, "kev_due_at": null, "vendor": "SAP_SE", "product": "SAP HANA Extended Application Services classic model (User Self Service)", "cwe": "CWE-204", "title": "Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44753" }, { "rank": 613, "cve_id": "CVE-2026-15773", "cvss_base": 9.6, "cvss_severity": "CRITICAL", "epss_score": 0.00345, "epss_percentile": 0.27051, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "Chrome", "cwe": "CWE-416", "title": "Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15773" }, { "rank": 614, "cve_id": "CVE-2026-48761", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00345, "epss_percentile": 0.2698, "kev": false, "kev_due_at": null, "vendor": "symfony", "product": "symfony", "cwe": "CWE-79", "title": "Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on , ,