{ "day": "2026-07-27", "boundary": "UTC calendar day", "published_count": 440, "by_severity": { "CRITICAL": 91, "HIGH": 167, "MEDIUM": 162, "LOW": 14 }, "kev_count": 2, "exploit_reference_count": 6, "awaiting_enrichment_count": 6, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2025-68686", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.2915, "epss_percentile": 0.98018, "kev": true, "kev_due_at": "2026-08-10", "vendor": "Fortinet", "product": "FortiOS", "cwe": "CWE-200", "title": "Fortinet FortiOS", "url": "https://www.cve.org/CVERecord?id=CVE-2025-68686" }, { "rank": 2, "cve_id": "CVE-2026-16812", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.01568, "epss_percentile": 0.73426, "kev": true, "kev_due_at": "2026-07-30", "vendor": "Arista Networks", "product": "VeloCloud Orchestrator On-Prem", "cwe": "CWE-78", "title": "VeloCloud Orchestrator OS Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16812" }, { "rank": 3, "cve_id": "CVE-2026-61511", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.33995, "epss_percentile": 0.98269, "kev": false, "kev_due_at": null, "vendor": "vBulletin", "product": "vBulletin", "cwe": "CWE-95", "title": "vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61511" }, { "rank": 4, "cve_id": "CVE-2026-48030", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.05849, "epss_percentile": 0.92602, "kev": false, "kev_due_at": null, "vendor": "pheditor", "product": "pheditor", "cwe": "CWE-78", "title": "Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48030" }, { "rank": 5, "cve_id": "CVE-2026-17191", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.02826, "epss_percentile": 0.85516, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "VeloCloud Orchestrator On-Prem", "cwe": "CWE-89", "title": "VeloCloud Orchestrator Flow Metrics API SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17191" }, { "rank": 6, "cve_id": "CVE-2026-17192", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.02338, "epss_percentile": 0.82296, "kev": false, "kev_due_at": null, "vendor": "Arista Networks", "product": "VeloCloud Orchestrator On-Prem", "cwe": "CWE-918", "title": "VeloCloud Orchestrator Missing Input Validation SSRF", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17192" }, { "rank": 7, "cve_id": "CVE-2026-12394", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.01492, "epss_percentile": 0.72136, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "MemberGlut", "cwe": "CWE-269", "title": "MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12394" }, { "rank": 8, "cve_id": "CVE-2026-59686", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.01414, "epss_percentile": 0.70668, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "LoadMaster", "cwe": "CWE-78", "title": "Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59686" }, { "rank": 9, "cve_id": "CVE-2026-45112", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.01075, "epss_percentile": 0.62403, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-770", "title": "Apache Thrift: Unbounded Read Leading to Denial of Service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45112" }, { "rank": 10, "cve_id": "CVE-2026-64641", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.01055, "epss_percentile": 0.61829, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-834", "title": "Next.js: Denial of Service in App Router using Server Actions", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64641" }, { "rank": 11, "cve_id": "CVE-2026-64642", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.01009, "epss_percentile": 0.60455, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-285", "title": "Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64642" }, { "rank": 12, "cve_id": "CVE-2026-43760", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00967, "epss_percentile": 0.59141, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43760" }, { "rank": 13, "cve_id": "CVE-2026-64649", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00872, "epss_percentile": 0.5613, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-918", "title": "Next.js: Server-Side Request Forgery in Server Actions on Custom Servers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64649" }, { "rank": 14, "cve_id": "CVE-2026-64704", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00847, "epss_percentile": 0.55308, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-843", "title": "A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64704" }, { "rank": 15, "cve_id": "CVE-2026-64645", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00837, "epss_percentile": 0.55016, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-601", "title": "Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64645" }, { "rank": 16, "cve_id": "CVE-2026-43777", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0081, "epss_percentile": 0.54153, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-20", "title": "This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43777" }, { "rank": 17, "cve_id": "CVE-2026-43803", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00785, "epss_percentile": 0.533, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43803" }, { "rank": 18, "cve_id": "CVE-2026-43810", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00785, "epss_percentile": 0.533, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43810" }, { "rank": 19, "cve_id": "CVE-2026-59250", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00779, "epss_percentile": 0.53139, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-120", "title": "Megaco flex scanner buffer overflow via oversized property parm name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59250" }, { "rank": 20, "cve_id": "CVE-2026-64703", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00775, "epss_percentile": 0.52998, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64703" }, { "rank": 21, "cve_id": "CVE-2026-43807", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00772, "epss_percentile": 0.52911, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious accessory may be able to cause unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43807" }, { "rank": 22, "cve_id": "CVE-2026-66050", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00737, "epss_percentile": 0.51738, "kev": false, "kev_due_at": null, "vendor": "nitroshare", "product": "nitroshare-desktop", "cwe": "CWE-22", "title": "NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66050" }, { "rank": 23, "cve_id": "CVE-2026-64695", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00725, "epss_percentile": 0.51312, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64695" }, { "rank": 24, "cve_id": "CVE-2026-13714", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0072, "epss_percentile": 0.51144, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Realtyna Organic IDX plugin + WPL Real Estate", "cwe": "CWE-434", "title": "Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13714" }, { "rank": 25, "cve_id": "CVE-2026-59687", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.0072, "epss_percentile": 0.51141, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "LoadMaster", "cwe": "CWE-78", "title": "Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59687" }, { "rank": 26, "cve_id": "CVE-2026-59688", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.0072, "epss_percentile": 0.51141, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "LoadMaster", "cwe": "CWE-78", "title": "Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59688" }, { "rank": 27, "cve_id": "CVE-2026-43682", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00717, "epss_percentile": 0.51034, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43682" }, { "rank": 28, "cve_id": "CVE-2026-64696", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00717, "epss_percentile": 0.51034, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64696" }, { "rank": 29, "cve_id": "CVE-2026-54540", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00712, "epss_percentile": 0.50819, "kev": false, "kev_due_at": null, "vendor": "pheditor", "product": "pheditor", "cwe": "CWE-78", "title": "Authenticated terminal command whitelist bypass in Pheditor", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54540" }, { "rank": 30, "cve_id": "CVE-2026-64771", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.007, "epss_percentile": 0.50408, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64771" }, { "rank": 31, "cve_id": "CVE-2026-43818", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00696, "epss_percentile": 0.50241, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43818" }, { "rank": 32, "cve_id": "CVE-2026-43750", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00689, "epss_percentile": 0.49986, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43750" }, { "rank": 33, "cve_id": "CVE-2026-24252", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00686, "epss_percentile": 0.4989, "kev": false, "kev_due_at": null, "vendor": "NVIDIA", "product": "NeMo Framework", "cwe": "CWE-78", "title": "NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-24252" }, { "rank": 34, "cve_id": "CVE-2026-64767", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00679, "epss_percentile": 0.49571, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64767" }, { "rank": 35, "cve_id": "CVE-2026-64644", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00675, "epss_percentile": 0.49444, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-407", "title": "Next.js: Denial of Service in the Image Optimization API using SVGs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64644" }, { "rank": 36, "cve_id": "CVE-2026-43769", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00673, "epss_percentile": 0.49317, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43769" }, { "rank": 37, "cve_id": "CVE-2026-43778", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00654, "epss_percentile": 0.48552, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43778" }, { "rank": 38, "cve_id": "CVE-2026-43799", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00654, "epss_percentile": 0.48553, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43799" }, { "rank": 39, "cve_id": "CVE-2026-43822", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00654, "epss_percentile": 0.48553, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43822" }, { "rank": 40, "cve_id": "CVE-2026-64700", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00654, "epss_percentile": 0.48552, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64700" }, { "rank": 41, "cve_id": "CVE-2026-64769", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00649, "epss_percentile": 0.48336, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64769" }, { "rank": 42, "cve_id": "CVE-2026-64770", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00649, "epss_percentile": 0.48336, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64770" }, { "rank": 43, "cve_id": "CVE-2026-64774", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00649, "epss_percentile": 0.48337, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64774" }, { "rank": 44, "cve_id": "CVE-2026-66015", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00646, "epss_percentile": 0.48183, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-269", "title": "JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66015" }, { "rank": 45, "cve_id": "CVE-2026-55969", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00645, "epss_percentile": 0.48137, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-190", "title": "Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969" }, { "rank": 46, "cve_id": "CVE-2026-49158", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00645, "epss_percentile": 0.48137, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-409", "title": "Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49158" }, { "rank": 47, "cve_id": "CVE-2026-64726", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00642, "epss_percentile": 0.48024, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64726" }, { "rank": 48, "cve_id": "CVE-2026-64733", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00642, "epss_percentile": 0.47995, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64733" }, { "rank": 49, "cve_id": "CVE-2026-65921", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00639, "epss_percentile": 0.47875, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-22", "title": "Potential path traversal leading to unauthorized file writes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65921" }, { "rank": 50, "cve_id": "CVE-2026-58023", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00636, "epss_percentile": 0.47757, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-125", "title": "Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58023" }, { "rank": 51, "cve_id": "CVE-2026-58662", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00635, "epss_percentile": 0.47705, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-125", "title": "Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58662" }, { "rank": 52, "cve_id": "CVE-2026-64772", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00634, "epss_percentile": 0.47654, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64772" }, { "rank": 53, "cve_id": "CVE-2026-48586", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00632, "epss_percentile": 0.47535, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-409", "title": "Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48586" }, { "rank": 54, "cve_id": "CVE-2026-43779", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00631, "epss_percentile": 0.47527, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43779" }, { "rank": 55, "cve_id": "CVE-2026-43812", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00624, "epss_percentile": 0.47234, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43812" }, { "rank": 56, "cve_id": "CVE-2026-43802", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00622, "epss_percentile": 0.471, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43802" }, { "rank": 57, "cve_id": "CVE-2026-43809", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00622, "epss_percentile": 0.47101, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43809" }, { "rank": 58, "cve_id": "CVE-2026-64731", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0061, "epss_percentile": 0.46514, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-22", "title": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64731" }, { "rank": 59, "cve_id": "CVE-2026-43871", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00607, "epss_percentile": 0.4635, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-835", "title": "Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43871" }, { "rank": 60, "cve_id": "CVE-2026-55968", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00607, "epss_percentile": 0.46351, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-407", "title": "Apache Thrift: Node.js quadratic-time DoS in server receive transports", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55968" }, { "rank": 61, "cve_id": "CVE-2026-58389", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00607, "epss_percentile": 0.4635, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-770", "title": "Apache Thrift: Rust binary protocol non-strict path missing string size limit", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58389" }, { "rank": 62, "cve_id": "CVE-2026-41608", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00607, "epss_percentile": 0.4635, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-409", "title": "Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41608" }, { "rank": 63, "cve_id": "CVE-2026-55579", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00603, "epss_percentile": 0.46157, "kev": false, "kev_due_at": null, "vendor": "pheditor", "product": "pheditor", "cwe": "CWE-798", "title": "Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55579" }, { "rank": 64, "cve_id": "CVE-2026-43694", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46109, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43694" }, { "rank": 65, "cve_id": "CVE-2026-43764", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46108, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43764" }, { "rank": 66, "cve_id": "CVE-2026-43773", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46108, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43773" }, { "rank": 67, "cve_id": "CVE-2026-43793", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46108, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-20", "title": "An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43793" }, { "rank": 68, "cve_id": "CVE-2026-64694", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46109, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64694" }, { "rank": 69, "cve_id": "CVE-2026-64697", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46108, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64697" }, { "rank": 70, "cve_id": "CVE-2026-64698", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00602, "epss_percentile": 0.46109, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or read kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64698" }, { "rank": 71, "cve_id": "CVE-2026-66729", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00596, "epss_percentile": 0.4581, "kev": false, "kev_due_at": null, "vendor": "boazsegev", "product": "facil.io", "cwe": "CWE-125", "title": "facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66729" }, { "rank": 72, "cve_id": "CVE-2026-66730", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00596, "epss_percentile": 0.4581, "kev": false, "kev_due_at": null, "vendor": "boazsegev", "product": "facil.io", "cwe": "CWE-835", "title": "facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66730" }, { "rank": 73, "cve_id": "CVE-2026-66731", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00596, "epss_percentile": 0.4581, "kev": false, "kev_due_at": null, "vendor": "boazsegev", "product": "facil.io", "cwe": "CWE-125", "title": "facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66731" }, { "rank": 74, "cve_id": "CVE-2026-45623", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00587, "epss_percentile": 0.45407, "kev": false, "kev_due_at": null, "vendor": "postcss", "product": "postcss", "cwe": "CWE-22", "title": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45623" }, { "rank": 75, "cve_id": "CVE-2026-28928", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00581, "epss_percentile": 0.45148, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28928" }, { "rank": 76, "cve_id": "CVE-2026-43814", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00581, "epss_percentile": 0.45148, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43814" }, { "rank": 77, "cve_id": "CVE-2026-64729", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00581, "epss_percentile": 0.45147, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64729" }, { "rank": 78, "cve_id": "CVE-2026-56748", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00579, "epss_percentile": 0.44999, "kev": false, "kev_due_at": null, "vendor": "Cribl", "product": "Cribl Stream", "cwe": "CWE-61", "title": "Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56748" }, { "rank": 79, "cve_id": "CVE-2026-65617", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00578, "epss_percentile": 0.44972, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-502", "title": "Potential remote code execution on an Artifactory package service container.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65617" }, { "rank": 80, "cve_id": "CVE-2026-64738", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00575, "epss_percentile": 0.44834, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-284", "title": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64738" }, { "rank": 81, "cve_id": "CVE-2026-64541", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00565, "epss_percentile": 0.44332, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64541" }, { "rank": 82, "cve_id": "CVE-2026-64702", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00556, "epss_percentile": 0.43864, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64702" }, { "rank": 83, "cve_id": "CVE-2026-64775", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00556, "epss_percentile": 0.43863, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-665", "title": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64775" }, { "rank": 84, "cve_id": "CVE-2026-66014", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00556, "epss_percentile": 0.43863, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-287", "title": "Potential authentication bypass leading to privilege escalation in Artifactory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66014" }, { "rank": 85, "cve_id": "CVE-2026-64746", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00553, "epss_percentile": 0.43714, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-862", "title": "An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64746" }, { "rank": 86, "cve_id": "CVE-2025-50455", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00552, "epss_percentile": 0.43678, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-89", "title": "SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIgniter Query Builder, enabling attackers to perform time-based queries and schema enumeration. Under certain MySQL configurations, the flaw may lead to remote code execution by writing a PHP shell using INTO OUTFILE.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-50455" }, { "rank": 87, "cve_id": "CVE-2026-55971", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00551, "epss_percentile": 0.43613, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-122", "title": "Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55971" }, { "rank": 88, "cve_id": "CVE-2026-64535", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00547, "epss_percentile": 0.43393, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "nvmet-tcp: Fix potential UAF when ddgst mismatch", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64535" }, { "rank": 89, "cve_id": "CVE-2026-64735", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00547, "epss_percentile": 0.4339, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-451", "title": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64735" }, { "rank": 90, "cve_id": "CVE-2026-43757", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00533, "epss_percentile": 0.42587, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43757" }, { "rank": 91, "cve_id": "CVE-2026-64762", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00533, "epss_percentile": 0.42587, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64762" }, { "rank": 92, "cve_id": "CVE-2026-64646", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00531, "epss_percentile": 0.42441, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-770", "title": "Next.js: Unbounded Server Action payload in Edge runtime", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64646" }, { "rank": 93, "cve_id": "CVE-2026-64739", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0052, "epss_percentile": 0.41837, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker may be able to cause unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64739" }, { "rank": 94, "cve_id": "CVE-2026-64643", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00516, "epss_percentile": 0.41599, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-201", "title": "Next.js: Unauthenticated Disclosure of Internal Server Function endpoints", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64643" }, { "rank": 95, "cve_id": "CVE-2026-39873", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00515, "epss_percentile": 0.41529, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39873" }, { "rank": 96, "cve_id": "CVE-2026-43710", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00515, "epss_percentile": 0.41529, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43710" }, { "rank": 97, "cve_id": "CVE-2026-64551", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00514, "epss_percentile": 0.4144, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "sctp: validate STALE_COOKIE cause length before reading staleness", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64551" }, { "rank": 98, "cve_id": "CVE-2026-43730", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00512, "epss_percentile": 0.41316, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43730" }, { "rank": 99, "cve_id": "CVE-2026-64751", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00498, "epss_percentile": 0.40418, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-416", "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64751" }, { "rank": 100, "cve_id": "CVE-2026-28982", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0049, "epss_percentile": 0.39926, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28982" }, { "rank": 101, "cve_id": "CVE-2026-64545", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0049, "epss_percentile": 0.39888, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net, bpf: check master for NULL in xdp_master_redirect()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64545" }, { "rank": 102, "cve_id": "CVE-2026-43748", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00488, "epss_percentile": 0.39771, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43748" }, { "rank": 103, "cve_id": "CVE-2026-64727", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00488, "epss_percentile": 0.39771, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-843", "title": "A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64727" }, { "rank": 104, "cve_id": "CVE-2026-64768", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00488, "epss_percentile": 0.39801, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may cause an unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64768" }, { "rank": 105, "cve_id": "CVE-2026-64730", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00485, "epss_percentile": 0.39518, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-451", "title": "The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64730" }, { "rank": 106, "cve_id": "CVE-2026-55970", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39156, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-126", "title": "Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55970" }, { "rank": 107, "cve_id": "CVE-2026-64757", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00468, "epss_percentile": 0.38432, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-119", "title": "A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64757" }, { "rank": 108, "cve_id": "CVE-2026-64713", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00467, "epss_percentile": 0.38336, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-203", "title": "This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64713" }, { "rank": 109, "cve_id": "CVE-2026-64720", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00462, "epss_percentile": 0.38014, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64720" }, { "rank": 110, "cve_id": "CVE-2026-43821", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00452, "epss_percentile": 0.37372, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-284", "title": "An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read files outside of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43821" }, { "rank": 111, "cve_id": "CVE-2026-64691", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00448, "epss_percentile": 0.37073, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64691" }, { "rank": 112, "cve_id": "CVE-2026-64743", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00442, "epss_percentile": 0.36615, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-285", "title": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64743" }, { "rank": 113, "cve_id": "CVE-2026-28931", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00438, "epss_percentile": 0.36282, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28931" }, { "rank": 114, "cve_id": "CVE-2026-51564", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00436, "epss_percentile": 0.36103, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-601", "title": "An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51564" }, { "rank": 115, "cve_id": "CVE-2026-42792", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00435, "epss_percentile": 0.36081, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-755", "title": "epmd permanent DoS via EMFILE on accept(2) in erts", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42792" }, { "rank": 116, "cve_id": "CVE-2026-43804", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00433, "epss_percentile": 0.35909, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-400", "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43804" }, { "rank": 117, "cve_id": "CVE-2026-66018", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00431, "epss_percentile": 0.35685, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-200", "title": "JFrog Artifactory build environment properties exposure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66018" }, { "rank": 118, "cve_id": "CVE-2026-64783", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00429, "epss_percentile": 0.35495, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-416", "title": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64783" }, { "rank": 119, "cve_id": "CVE-2026-54890", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.0042, "epss_percentile": 0.34762, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-191", "title": "BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54890" }, { "rank": 120, "cve_id": "CVE-2026-64534", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00419, "epss_percentile": 0.34611, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64534" }, { "rank": 121, "cve_id": "CVE-2026-65442", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00419, "epss_percentile": 0.34666, "kev": false, "kev_due_at": null, "vendor": "Subtle Web Inc", "product": "FormCraft", "cwe": "CWE-918", "title": "WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65442" }, { "rank": 122, "cve_id": "CVE-2026-17500", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00419, "epss_percentile": 0.34656, "kev": false, "kev_due_at": null, "vendor": "ggml-org", "product": "llama.cpp", "cwe": "CWE-404", "title": "ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17500" }, { "rank": 123, "cve_id": "CVE-2026-17501", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00419, "epss_percentile": 0.34656, "kev": false, "kev_due_at": null, "vendor": "ggml-org", "product": "llama.cpp", "cwe": "CWE-404", "title": "ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17501" }, { "rank": 124, "cve_id": "CVE-2026-28911", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00418, "epss_percentile": 0.34601, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28911" }, { "rank": 125, "cve_id": "CVE-2026-64719", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00415, "epss_percentile": 0.343, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-125", "title": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64719" }, { "rank": 126, "cve_id": "CVE-2026-43805", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00409, "epss_percentile": 0.33699, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43805" }, { "rank": 127, "cve_id": "CVE-2026-55685", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00403, "epss_percentile": 0.3314, "kev": false, "kev_due_at": null, "vendor": "remix-run", "product": "react-router", "cwe": "CWE-400", "title": "React Router: Unauthenticated Denial of Service via Inefficient Route Matching", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55685" }, { "rank": 128, "cve_id": "CVE-2026-66391", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00403, "epss_percentile": 0.33215, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Wicket", "cwe": "CWE-330", "title": "Apache Wicket: leaked and missing CSP headers", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66391" }, { "rank": 129, "cve_id": "CVE-2026-65894", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.004, "epss_percentile": 0.32836, "kev": false, "kev_due_at": null, "vendor": "CP-Plus", "product": "EZ-P21 IP Camera", "cwe": "CWE-307", "title": "Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65894" }, { "rank": 130, "cve_id": "CVE-2026-59528", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00398, "epss_percentile": 0.32613, "kev": false, "kev_due_at": null, "vendor": "shiptime", "product": "ShipTime: Discounted Shipping Rates", "cwe": "CWE-497", "title": "WordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59528" }, { "rank": 131, "cve_id": "CVE-2026-14289", "cvss_base": 9, "cvss_severity": "CRITICAL", "epss_score": 0.00396, "epss_percentile": 0.3246, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "FacturaONE para WooCommerce con VeriFactu", "cwe": "CWE-94", "title": "WP FacturaONE < 5.37 - Unauthenticated Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14289" }, { "rank": 132, "cve_id": "CVE-2026-58227", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00387, "epss_percentile": 0.31519, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-674", "title": "TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58227" }, { "rank": 133, "cve_id": "CVE-2026-59239", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00383, "epss_percentile": 0.31087, "kev": false, "kev_due_at": null, "vendor": "Roskus", "product": "Prospero Flow CRM", "cwe": "CWE-79", "title": "Stored XSS in Prospero Flow CRM email body allows administrator account takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59239" }, { "rank": 134, "cve_id": "CVE-2026-64531", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0038, "epss_percentile": 0.30747, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: openvswitch: reject oversized nested action attrs", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64531" }, { "rank": 135, "cve_id": "CVE-2026-65924", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00376, "epss_percentile": 0.30287, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-918", "title": "Server-Side Request Forgery (SSRF) via Terraform Remote repository", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65924" }, { "rank": 136, "cve_id": "CVE-2026-64728", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00373, "epss_percentile": 0.30004, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-693", "title": "A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64728" }, { "rank": 137, "cve_id": "CVE-2026-56747", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00372, "epss_percentile": 0.29932, "kev": false, "kev_due_at": null, "vendor": "Cribl", "product": "Cribl Stream", "cwe": "CWE-94", "title": "Code Injection in JSON Pointer Processing Component in Cribl Stream", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56747" }, { "rank": 138, "cve_id": "CVE-2026-9830", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00367, "epss_percentile": 0.29377, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "bookingpress-appointment-booking-pro", "cwe": "CWE-287", "title": "BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug", "url": "https://www.cve.org/CVERecord?id=CVE-2026-9830" }, { "rank": 139, "cve_id": "CVE-2026-65925", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00364, "epss_percentile": 0.29066, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-918", "title": "Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65925" }, { "rank": 140, "cve_id": "CVE-2026-55578", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00362, "epss_percentile": 0.28841, "kev": false, "kev_due_at": null, "vendor": "pheditor", "product": "pheditor", "cwe": "CWE-78", "title": "Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55578" }, { "rank": 141, "cve_id": "CVE-2026-13152", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00361, "epss_percentile": 0.28774, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Custom Fields Account Registration For Woocommerce", "cwe": "CWE-269", "title": "Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13152" }, { "rank": 142, "cve_id": "CVE-2026-59546", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00361, "epss_percentile": 0.28752, "kev": false, "kev_due_at": null, "vendor": "John Darrel", "product": "Hide My WP Ghost", "cwe": "CWE-639", "title": "WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59546" }, { "rank": 143, "cve_id": "CVE-2026-59730", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00359, "epss_percentile": 0.28529, "kev": false, "kev_due_at": null, "vendor": "withastro", "product": "astro", "cwe": "CWE-601", "title": "@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59730" }, { "rank": 144, "cve_id": "CVE-2026-66390", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00357, "epss_percentile": 0.28334, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Wicket", "cwe": "CWE-79", "title": "Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66390" }, { "rank": 145, "cve_id": "CVE-2026-65434", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00355, "epss_percentile": 0.28181, "kev": false, "kev_due_at": null, "vendor": "yoomoney", "product": "ЮKassa для WooCommerce", "cwe": "CWE-201", "title": "WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65434" }, { "rank": 146, "cve_id": "CVE-2026-64647", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00351, "epss_percentile": 0.27714, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-116", "title": "Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64647" }, { "rank": 147, "cve_id": "CVE-2026-54272", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.0035, "epss_percentile": 0.27605, "kev": false, "kev_due_at": null, "vendor": "beaugunderson", "product": "ip-address", "cwe": "CWE-20", "title": "ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-54272" }, { "rank": 148, "cve_id": "CVE-2026-17552", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00349, "epss_percentile": 0.275, "kev": false, "kev_due_at": null, "vendor": "RRWO", "product": "Plack::App::Prerender", "cwe": "CWE-918", "title": "Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17552" }, { "rank": 149, "cve_id": "CVE-2026-43792", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00348, "epss_percentile": 0.27368, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-285", "title": "An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43792" }, { "rank": 150, "cve_id": "CVE-2026-65923", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00342, "epss_percentile": 0.2669, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-918", "title": "Potential server-side request forgery in Artifactory Ansible repository handling", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65923" }, { "rank": 151, "cve_id": "CVE-2026-59560", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00342, "epss_percentile": 0.26728, "kev": false, "kev_due_at": null, "vendor": "Roxnor", "product": "FundEngine", "cwe": "CWE-862", "title": "WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59560" }, { "rank": 152, "cve_id": "CVE-2026-64648", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00336, "epss_percentile": 0.26027, "kev": false, "kev_due_at": null, "vendor": "vercel", "product": "next.js", "cwe": "CWE-524", "title": "Next.js: Response Body Cache Confusion for Requests Containing Bodies", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64648" }, { "rank": 153, "cve_id": "CVE-2026-64725", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00334, "epss_percentile": 0.25799, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64725" }, { "rank": 154, "cve_id": "CVE-2026-66398", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00329, "epss_percentile": 0.25192, "kev": false, "kev_due_at": null, "vendor": "thorsten", "product": "phpMyFAQ", "cwe": "CWE-494", "title": "phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66398" }, { "rank": 155, "cve_id": "CVE-2021-32084", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00327, "epss_percentile": 0.25008, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-284", "title": "An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API, leading to a potential compromise of the entire environment that is configured for KACE.", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32084" }, { "rank": 156, "cve_id": "CVE-2026-66395", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00327, "epss_percentile": 0.24964, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-79", "title": "SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66395" }, { "rank": 157, "cve_id": "CVE-2026-66397", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00325, "epss_percentile": 0.24771, "kev": false, "kev_due_at": null, "vendor": "thorsten", "product": "phpMyFAQ", "cwe": "CWE-22", "title": "phpMyFAQ before 4.1.6 Path Traversal via category image deletion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66397" }, { "rank": 158, "cve_id": "CVE-2026-65878", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00325, "epss_percentile": 0.24771, "kev": false, "kev_due_at": null, "vendor": "joomshaper.com", "product": "SP Page Builder extension for Joomla", "cwe": "CWE-22", "title": "Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65878" }, { "rank": 159, "cve_id": "CVE-2026-65436", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00325, "epss_percentile": 0.24796, "kev": false, "kev_due_at": null, "vendor": "Themeum", "product": "Kirki", "cwe": "CWE-22", "title": "WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65436" }, { "rank": 160, "cve_id": "CVE-2026-13597", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00323, "epss_percentile": 0.24533, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "微信二维码登陆", "cwe": "CWE-287", "title": "QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13597" }, { "rank": 161, "cve_id": "CVE-2025-15662", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00323, "epss_percentile": 0.24533, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Printcart Web to Print Product Designer for WooCommerce", "cwe": "CWE-918", "title": "Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2025-15662" }, { "rank": 162, "cve_id": "CVE-2026-59539", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00323, "epss_percentile": 0.24537, "kev": false, "kev_due_at": null, "vendor": "Cozmoslabs", "product": "Paid Member Subscriptions", "cwe": "CWE-639", "title": "WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59539" }, { "rank": 163, "cve_id": "CVE-2026-59729", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00323, "epss_percentile": 0.24534, "kev": false, "kev_due_at": null, "vendor": "withastro", "product": "astro", "cwe": "CWE-79", "title": "Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59729" }, { "rank": 164, "cve_id": "CVE-2026-66028", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00321, "epss_percentile": 0.24361, "kev": false, "kev_due_at": null, "vendor": "Creativeitem", "product": "Ekushey Project Manager CRM", "cwe": "CWE-303", "title": "Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66028" }, { "rank": 165, "cve_id": "CVE-2026-39875", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0032, "epss_percentile": 0.24259, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-276", "title": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39875" }, { "rank": 166, "cve_id": "CVE-2026-59251", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00319, "epss_percentile": 0.24079, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-770", "title": "Denial of service via exponential certificate policy tree growth in path validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59251" }, { "rank": 167, "cve_id": "CVE-2026-66476", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00316, "epss_percentile": 0.23731, "kev": false, "kev_due_at": null, "vendor": "Syed Balkhi", "product": "Easy Digital Downloads", "cwe": "CWE-22", "title": "WordPress Easy Digital Downloads plugin <= 3.6.9 - Arbitrary File Deletion vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66476" }, { "rank": 168, "cve_id": "CVE-2026-51078", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00315, "epss_percentile": 0.23697, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-200", "title": "An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51078" }, { "rank": 169, "cve_id": "CVE-2026-59531", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00315, "epss_percentile": 0.23625, "kev": false, "kev_due_at": null, "vendor": "Anh Tran", "product": "Falcon – WordPress Optimizations & Tweaks", "cwe": "CWE-1284", "title": "WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59531" }, { "rank": 170, "cve_id": "CVE-2026-66412", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00313, "epss_percentile": 0.23511, "kev": false, "kev_due_at": null, "vendor": "Leantime", "product": "Leantime", "cwe": "CWE-639", "title": "Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66412" }, { "rank": 171, "cve_id": "CVE-2026-65765", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00313, "epss_percentile": 0.23444, "kev": false, "kev_due_at": null, "vendor": "phoca.cz", "product": "Phoca Commander extension for Joomla", "cwe": "CWE-22", "title": "Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65765" }, { "rank": 172, "cve_id": "CVE-2026-51077", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0031, "epss_percentile": 0.23156, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-89", "title": "SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51077" }, { "rank": 173, "cve_id": "CVE-2026-59727", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.0031, "epss_percentile": 0.23081, "kev": false, "kev_due_at": null, "vendor": "withastro", "product": "astro", "cwe": "CWE-79", "title": "Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59727" }, { "rank": 174, "cve_id": "CVE-2026-17612", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00308, "epss_percentile": 0.22826, "kev": false, "kev_due_at": null, "vendor": "Honeywell", "product": "S35 Series 3M/5M/8M/PinHole Cameras", "cwe": "CWE-200", "title": "Audit Log Exposure through Unauthorized Access", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17612" }, { "rank": 175, "cve_id": "CVE-2026-53666", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00305, "epss_percentile": 0.22598, "kev": false, "kev_due_at": null, "vendor": "remix-run", "product": "react-router", "cwe": "CWE-470", "title": "React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53666" }, { "rank": 176, "cve_id": "CVE-2026-16554", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00302, "epss_percentile": 0.22181, "kev": false, "kev_due_at": null, "vendor": "DaveGamble", "product": "cJSON", "cwe": "CWE-190", "title": "Integer Overflow Leading to Heap Buffer Overflow in cJSON", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16554" }, { "rank": 177, "cve_id": "CVE-2026-66396", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00296, "epss_percentile": 0.21555, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-79", "title": "SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66396" }, { "rank": 178, "cve_id": "CVE-2026-66758", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00296, "epss_percentile": 0.21568, "kev": false, "kev_due_at": null, "vendor": "GNOME", "product": "GIMP", "cwe": "CWE-190", "title": "Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66758" }, { "rank": 179, "cve_id": "CVE-2026-40000", "cvss_base": 1.8, "cvss_severity": "LOW", "epss_score": 0.00296, "epss_percentile": 0.21611, "kev": false, "kev_due_at": null, "vendor": "ZTE", "product": "Blade A75 5G", "cwe": "CWE-22", "title": "Path Traversal Vulnerability in ZTE Blade A75 5G", "url": "https://www.cve.org/CVERecord?id=CVE-2026-40000" }, { "rank": 180, "cve_id": "CVE-2026-42017", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00295, "epss_percentile": 0.21436, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-200", "title": "Privilege escalation via JFrog Worker event token exposure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42017" }, { "rank": 181, "cve_id": "CVE-2026-59548", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00294, "epss_percentile": 0.21329, "kev": false, "kev_due_at": null, "vendor": "Byteflows", "product": "Byteflows Travel & Hotel Booking", "cwe": "CWE-497", "title": "WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59548" }, { "rank": 182, "cve_id": "CVE-2021-32085", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00293, "epss_percentile": 0.21267, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-798", "title": "An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the MySQL databases. Sensitive information is stored in the database, such as privileged credentials for other systems.", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32085" }, { "rank": 183, "cve_id": "CVE-2021-32087", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00293, "epss_percentile": 0.21268, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-798", "title": "An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service interface, which contains MySQL backups. Sensitive information is stored in the database, such as privileged credentials for other systems.", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32087" }, { "rank": 184, "cve_id": "CVE-2026-64742", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0029, "epss_percentile": 0.2095, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-319", "title": "This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64742" }, { "rank": 185, "cve_id": "CVE-2026-59240", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.20793, "kev": false, "kev_due_at": null, "vendor": "Roskus", "product": "Prospero Flow CRM", "cwe": "CWE-639", "title": "IDOR in Prospero Flow CRM allows deletion of other users' notifications", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59240" }, { "rank": 186, "cve_id": "CVE-2026-55737", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00288, "epss_percentile": 0.20753, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-195", "title": "Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55737" }, { "rank": 187, "cve_id": "CVE-2021-32088", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00287, "epss_percentile": 0.20615, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-384", "title": "An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32088" }, { "rank": 188, "cve_id": "CVE-2026-43813", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00286, "epss_percentile": 0.20495, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-20", "title": "A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43813" }, { "rank": 189, "cve_id": "CVE-2026-14856", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00286, "epss_percentile": 0.20543, "kev": false, "kev_due_at": null, "vendor": "Media Manager", "product": "TastyIgniter", "cwe": "CWE-79", "title": "Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14856" }, { "rank": 190, "cve_id": "CVE-2026-65879", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00284, "epss_percentile": 0.20378, "kev": false, "kev_due_at": null, "vendor": "joomshaper.com", "product": "SP Page Builder extension for Joomla", "cwe": "CWE-798", "title": "Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65879" }, { "rank": 191, "cve_id": "CVE-2026-15928", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00283, "epss_percentile": 0.20283, "kev": false, "kev_due_at": null, "vendor": "XMLRPC-C", "product": "XMLRPC-C", "cwe": "CWE-79", "title": "XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15928" }, { "rank": 192, "cve_id": "CVE-2026-53668", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.0028, "epss_percentile": 0.19881, "kev": false, "kev_due_at": null, "vendor": "remix-run", "product": "react-router", "cwe": "CWE-79", "title": "React Router: Open redirect can lead to XSS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53668" }, { "rank": 193, "cve_id": "CVE-2026-65433", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00279, "epss_percentile": 0.1983, "kev": false, "kev_due_at": null, "vendor": "themewant", "product": "RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg", "cwe": "CWE-862", "title": "WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65433" }, { "rank": 194, "cve_id": "CVE-2026-51565", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00279, "epss_percentile": 0.1982, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-79", "title": "Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-51565" }, { "rank": 195, "cve_id": "CVE-2026-59529", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.19734, "kev": false, "kev_due_at": null, "vendor": "motov.net", "product": "Ebook Store", "cwe": "CWE-862", "title": "WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59529" }, { "rank": 196, "cve_id": "CVE-2026-66824", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00277, "epss_percentile": 0.19575, "kev": false, "kev_due_at": null, "vendor": "lookyloo", "product": "lookyloo", "cwe": "CWE-79", "title": "Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66824" }, { "rank": 197, "cve_id": "CVE-2026-66825", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00277, "epss_percentile": 0.19576, "kev": false, "kev_due_at": null, "vendor": "pivotick", "product": "pivotick", "cwe": "CWE-79", "title": "Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66825" }, { "rank": 198, "cve_id": "CVE-2026-17529", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00276, "epss_percentile": 0.19513, "kev": false, "kev_due_at": null, "vendor": "AstrBotDevs", "product": "AstrBot", "cwe": "CWE-285", "title": "AstrBotDevs AstrBot astr_main_agent.py authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17529" }, { "rank": 199, "cve_id": "CVE-2026-12255", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00275, "epss_percentile": 0.19322, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "MainWP Child", "cwe": "CWE-287", "title": "MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12255" }, { "rank": 200, "cve_id": "CVE-2026-48145", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00274, "epss_percentile": 0.19235, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-297", "title": "Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48145" }, { "rank": 201, "cve_id": "CVE-2026-64540", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00274, "epss_percentile": 0.19219, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64540" }, { "rank": 202, "cve_id": "CVE-2026-64547", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00274, "epss_percentile": 0.19219, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: usb: net1080: validate packet_len before pad-byte access in rx_fixup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64547" }, { "rank": 203, "cve_id": "CVE-2026-59537", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00271, "epss_percentile": 0.18756, "kev": false, "kev_due_at": null, "vendor": "Sender", "product": "Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce", "cwe": "CWE-89", "title": "WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59537" }, { "rank": 204, "cve_id": "CVE-2026-59551", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.0027, "epss_percentile": 0.18601, "kev": false, "kev_due_at": null, "vendor": "rtCamp", "product": "rtMedia for WordPress, BuddyPress and bbPress", "cwe": "CWE-89", "title": "WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59551" }, { "rank": 205, "cve_id": "CVE-2026-43728", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.18512, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.6. An attacker may be able to modify the state of the Keychain.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43728" }, { "rank": 206, "cve_id": "CVE-2025-59181", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00268, "epss_percentile": 0.184, "kev": false, "kev_due_at": null, "vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "cwe": "CWE-35", "title": "Path traversal Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-59181" }, { "rank": 207, "cve_id": "CVE-2026-66394", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00266, "epss_percentile": 0.18284, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-79", "title": "SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66394" }, { "rank": 208, "cve_id": "CVE-2026-59728", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00265, "epss_percentile": 0.17988, "kev": false, "kev_due_at": null, "vendor": "withastro", "product": "astro", "cwe": "CWE-91", "title": "@astrojs/rss: XML Injection via Unescaped RSS Feed Fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59728" }, { "rank": 209, "cve_id": "CVE-2025-63913", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00263, "epss_percentile": 0.17684, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-400", "title": "An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of SBI PMU extension.", "url": "https://www.cve.org/CVERecord?id=CVE-2025-63913" }, { "rank": 210, "cve_id": "CVE-2026-65764", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00258, "epss_percentile": 0.17068, "kev": false, "kev_due_at": null, "vendor": "phoca.cz", "product": "Phoca Commander extension for Joomla", "cwe": "CWE-79", "title": "Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65764" }, { "rank": 211, "cve_id": "CVE-2026-64554", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00255, "epss_percentile": 0.16724, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64554" }, { "rank": 212, "cve_id": "CVE-2026-65922", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00253, "epss_percentile": 0.16521, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-862", "title": "Potential unauthorized modification of Artifactory internal metadata", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65922" }, { "rank": 213, "cve_id": "CVE-2026-59532", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00252, "epss_percentile": 0.16308, "kev": false, "kev_due_at": null, "vendor": "magepeopleteam", "product": "Booking and Rental Manager", "cwe": "CWE-1284", "title": "WordPress Booking and Rental Manager plugin <= 2.7.2 - Price Manipulation vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59532" }, { "rank": 214, "cve_id": "CVE-2026-48144", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00251, "epss_percentile": 0.16185, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-297", "title": "Apache Thrift: c_glib TLS Client Missing Hostname Verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48144" }, { "rank": 215, "cve_id": "CVE-2026-66759", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00251, "epss_percentile": 0.16281, "kev": false, "kev_due_at": null, "vendor": "GNOME", "product": "GIMP", "cwe": "CWE-125", "title": "Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66759" }, { "rank": 216, "cve_id": "CVE-2026-12001", "cvss_base": 5.2, "cvss_severity": "MEDIUM", "epss_score": 0.00251, "epss_percentile": 0.16239, "kev": false, "kev_due_at": null, "vendor": "TP-Link Systems Inc.", "product": "TL-WR850N v3", "cwe": "CWE-798", "title": "Hardcoded Credential Vulnerability in Multiple TP-Link Router Models", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12001" }, { "rank": 217, "cve_id": "CVE-2026-16481", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00249, "epss_percentile": 0.15917, "kev": false, "kev_due_at": null, "vendor": "Google", "product": "MCP Toolbox for Databases (googleapis/mcp-toolbox)", "cwe": "CWE-918", "title": "Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16481" }, { "rank": 218, "cve_id": "CVE-2026-64536", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00249, "epss_percentile": 0.16004, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64536" }, { "rank": 219, "cve_id": "CVE-2026-43776", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00244, "epss_percentile": 0.15293, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43776" }, { "rank": 220, "cve_id": "CVE-2026-64747", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00242, "epss_percentile": 0.15066, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64747" }, { "rank": 221, "cve_id": "CVE-2026-28981", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00241, "epss_percentile": 0.14971, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28981" }, { "rank": 222, "cve_id": "CVE-2026-13332", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.0024, "epss_percentile": 0.14794, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Masteriyo LMS", "cwe": "CWE-287", "title": "Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13332" }, { "rank": 223, "cve_id": "CVE-2026-10819", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.0024, "epss_percentile": 0.14839, "kev": false, "kev_due_at": null, "vendor": "Mattermost", "product": "Mattermost", "cwe": "CWE-409", "title": "Mattermost Server Denial of Service via Animated GIF Emoji Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10819" }, { "rank": 224, "cve_id": "CVE-2026-59530", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00238, "epss_percentile": 0.14641, "kev": false, "kev_due_at": null, "vendor": "Payment Plugins", "product": "Stripe For WooCommerce", "cwe": "CWE-862", "title": "WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59530" }, { "rank": 225, "cve_id": "CVE-2026-59534", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00238, "epss_percentile": 0.1464, "kev": false, "kev_due_at": null, "vendor": "Aurovrata Venet", "product": "Post My CF7 Form", "cwe": "CWE-862", "title": "WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59534" }, { "rank": 226, "cve_id": "CVE-2026-59536", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00238, "epss_percentile": 0.14641, "kev": false, "kev_due_at": null, "vendor": "CoCart Headless", "product": "CoCart – Headless ecommerce", "cwe": "CWE-862", "title": "WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59536" }, { "rank": 227, "cve_id": "CVE-2026-65766", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00237, "epss_percentile": 0.14429, "kev": false, "kev_due_at": null, "vendor": "joomshaper.com", "product": "SP Page Builder extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65766" }, { "rank": 228, "cve_id": "CVE-2026-43753", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00237, "epss_percentile": 0.14484, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43753" }, { "rank": 229, "cve_id": "CVE-2026-59557", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.14201, "kev": false, "kev_due_at": null, "vendor": "Franky", "product": "Events Made Easy", "cwe": "CWE-862", "title": "WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59557" }, { "rank": 230, "cve_id": "CVE-2026-65435", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.14203, "kev": false, "kev_due_at": null, "vendor": "Thrive Themes Coupon", "product": "Thrive Leads Version", "cwe": "CWE-862", "title": "WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65435" }, { "rank": 231, "cve_id": "CVE-2026-55953", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00234, "epss_percentile": 0.14029, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-757", "title": "TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-55953" }, { "rank": 232, "cve_id": "CVE-2026-42016", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00234, "epss_percentile": 0.14125, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-863", "title": "Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42016" }, { "rank": 233, "cve_id": "CVE-2026-17568", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00232, "epss_percentile": 0.13864, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-863", "title": "Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated non-administrative user holding the user-group membership management permission to escalate privileges to administrator via a crafted API request. This issue affects : * Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17568" }, { "rank": 234, "cve_id": "CVE-2026-14235", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00232, "epss_percentile": 0.13856, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Download Manager", "cwe": "CWE-284", "title": "WordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download Key", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14235" }, { "rank": 235, "cve_id": "CVE-2026-66757", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00232, "epss_percentile": 0.13862, "kev": false, "kev_due_at": null, "vendor": "GNOME", "product": "GIMP", "cwe": "CWE-190", "title": "Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66757" }, { "rank": 236, "cve_id": "CVE-2026-53669", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00232, "epss_percentile": 0.13795, "kev": false, "kev_due_at": null, "vendor": "remix-run", "product": "react-router", "cwe": "CWE-601", "title": "React Router: Open redirect via backslash in and useNavigate (CVE-2025-68470 bypass)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53669" }, { "rank": 237, "cve_id": "CVE-2026-66399", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00231, "epss_percentile": 0.13681, "kev": false, "kev_due_at": null, "vendor": "thorsten", "product": "phpMyFAQ", "cwe": "CWE-269", "title": "phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66399" }, { "rank": 238, "cve_id": "CVE-2026-43766", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00231, "epss_percentile": 0.1373, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-287", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker with physical access to a locked device may be able to view sensitive user information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43766" }, { "rank": 239, "cve_id": "CVE-2026-59527", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00229, "epss_percentile": 0.13525, "kev": false, "kev_due_at": null, "vendor": "RomanCode", "product": "MapSVG", "cwe": "CWE-89", "title": "WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59527" }, { "rank": 240, "cve_id": "CVE-2026-59533", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00229, "epss_percentile": 0.13523, "kev": false, "kev_due_at": null, "vendor": "Christoph Vielgrader", "product": "Relevanssi Light", "cwe": "CWE-89", "title": "WordPress Relevanssi Light plugin <= 1.2.2 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59533" }, { "rank": 241, "cve_id": "CVE-2026-59538", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00229, "epss_percentile": 0.13525, "kev": false, "kev_due_at": null, "vendor": "Ruben Garcia", "product": "GamiPress", "cwe": "CWE-89", "title": "WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59538" }, { "rank": 242, "cve_id": "CVE-2026-59549", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00229, "epss_percentile": 0.13523, "kev": false, "kev_due_at": null, "vendor": "rtCamp", "product": "rtMedia for WordPress, BuddyPress and bbPress", "cwe": "CWE-89", "title": "WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59549" }, { "rank": 243, "cve_id": "CVE-2026-59550", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00229, "epss_percentile": 0.13524, "kev": false, "kev_due_at": null, "vendor": "Strategy11 Team", "product": "AWP Classifieds", "cwe": "CWE-89", "title": "WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59550" }, { "rank": 244, "cve_id": "CVE-2026-14827", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00229, "epss_percentile": 0.13433, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Calendar", "cwe": "CWE-79", "title": "Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14827" }, { "rank": 245, "cve_id": "CVE-2026-65876", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00228, "epss_percentile": 0.13307, "kev": false, "kev_due_at": null, "vendor": "joomshaper.com", "product": "SP Page Builder extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65876" }, { "rank": 246, "cve_id": "CVE-2026-65893", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00228, "epss_percentile": 0.13287, "kev": false, "kev_due_at": null, "vendor": "CP-Plus", "product": "EZ-P21 IP Camera", "cwe": "CWE-489", "title": "Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65893" }, { "rank": 247, "cve_id": "CVE-2026-65877", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00226, "epss_percentile": 0.13137, "kev": false, "kev_due_at": null, "vendor": "joomshaper.com", "product": "SP Page Builder extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65877" }, { "rank": 248, "cve_id": "CVE-2026-59690", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.129, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "LoadMaster", "cwe": "CWE-862", "title": "Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59690" }, { "rank": 249, "cve_id": "CVE-2026-14820", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12795, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Quiz and Survey Master (QSM)", "cwe": "CWE-200", "title": "Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14820" }, { "rank": 250, "cve_id": "CVE-2026-66442", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00223, "epss_percentile": 0.12707, "kev": false, "kev_due_at": null, "vendor": "YayCommerce", "product": "YayPricing", "cwe": "CWE-862", "title": "WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66442" }, { "rank": 251, "cve_id": "CVE-2026-65616", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00221, "epss_percentile": 0.12416, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-347", "title": "Potential privilege escalation to JFrog administrator privileges", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65616" }, { "rank": 252, "cve_id": "CVE-2026-17527", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00221, "epss_percentile": 0.12475, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "cwe": "CWE-639", "title": "Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17527" }, { "rank": 253, "cve_id": "CVE-2026-64740", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0022, "epss_percentile": 0.12325, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-22", "title": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64740" }, { "rank": 254, "cve_id": "CVE-2026-66427", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.0022, "epss_percentile": 0.12242, "kev": false, "kev_due_at": null, "vendor": "jgwhite33", "product": "WP Google Review Slider", "cwe": "CWE-89", "title": "WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66427" }, { "rank": 255, "cve_id": "CVE-2026-10683", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.0022, "epss_percentile": 0.12246, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-835", "title": "DesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10683" }, { "rank": 256, "cve_id": "CVE-2026-10600", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00217, "epss_percentile": 0.11936, "kev": false, "kev_due_at": null, "vendor": "Mattermost", "product": "Mattermost", "cwe": "CWE-770", "title": "Denial of service via unbounded document content extraction in Mattermost Server", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10600" }, { "rank": 257, "cve_id": "CVE-2026-43771", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00214, "epss_percentile": 0.11566, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-121", "title": "A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43771" }, { "rank": 258, "cve_id": "CVE-2026-66053", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00214, "epss_percentile": 0.1151, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Thrift", "cwe": "CWE-297", "title": "Apache Thrift: Python TSSLSocket Hostname Matcher Import", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66053" }, { "rank": 259, "cve_id": "CVE-2026-17530", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00214, "epss_percentile": 0.11632, "kev": false, "kev_due_at": null, "vendor": "AstrBotDevs", "product": "AstrBot", "cwe": "CWE-285", "title": "AstrBotDevs AstrBot Subagent astr_agent_tool_exec.py _build_handoff_toolset authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17530" }, { "rank": 260, "cve_id": "CVE-2026-43772", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00213, "epss_percentile": 0.11425, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-22", "title": "A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43772" }, { "rank": 261, "cve_id": "CVE-2026-59535", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00213, "epss_percentile": 0.11411, "kev": false, "kev_due_at": null, "vendor": "Thrive Themes Coupon", "product": "Thrive Product Manager", "cwe": "CWE-862", "title": "WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59535" }, { "rank": 262, "cve_id": "CVE-2026-64732", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00213, "epss_percentile": 0.114, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-284", "title": "This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64732" }, { "rank": 263, "cve_id": "CVE-2026-48052", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00211, "epss_percentile": 0.1127, "kev": false, "kev_due_at": null, "vendor": "papra-hq", "product": "papra", "cwe": "CWE-639", "title": "Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48052" }, { "rank": 264, "cve_id": "CVE-2026-65618", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00209, "epss_percentile": 0.10898, "kev": false, "kev_due_at": null, "vendor": "jfrog", "product": "artifactory", "cwe": "CWE-918", "title": "Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65618" }, { "rank": 265, "cve_id": "CVE-2026-12493", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00208, "epss_percentile": 0.10843, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Clover Payment Gateway by Zaytech for WooCommerce", "cwe": "CWE-287", "title": "Clover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_order", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12493" }, { "rank": 266, "cve_id": "CVE-2026-64722", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00207, "epss_percentile": 0.1066, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-120", "title": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a 3D model may result in disclosure of process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64722" }, { "rank": 267, "cve_id": "CVE-2026-48051", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.00207, "epss_percentile": 0.1073, "kev": false, "kev_due_at": null, "vendor": "papra-hq", "product": "papra", "cwe": "CWE-918", "title": "Papra: SSRF via HTTP redirect bypass in webhook delivery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48051" }, { "rank": 268, "cve_id": "CVE-2026-64763", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00206, "epss_percentile": 0.1058, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64763" }, { "rank": 269, "cve_id": "CVE-2026-43698", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00205, "epss_percentile": 0.10382, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-88", "title": "An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43698" }, { "rank": 270, "cve_id": "CVE-2026-59559", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.10424, "kev": false, "kev_due_at": null, "vendor": "themewant", "product": "RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg", "cwe": "CWE-79", "title": "WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59559" }, { "rank": 271, "cve_id": "CVE-2026-64699", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.10378, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-457", "title": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64699" }, { "rank": 272, "cve_id": "CVE-2026-43765", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00204, "epss_percentile": 0.10232, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-59", "title": "This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify protected parts of the file system.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43765" }, { "rank": 273, "cve_id": "CVE-2026-43723", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00203, "epss_percentile": 0.10145, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-22", "title": "A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43723" }, { "rank": 274, "cve_id": "CVE-2026-14568", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00203, "epss_percentile": 0.10106, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration", "cwe": "CWE-287", "title": "WP User Frontend < 4.3.8 - Unauthenticated Author-less Attachment Deletion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14568" }, { "rank": 275, "cve_id": "CVE-2026-53667", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00203, "epss_percentile": 0.10146, "kev": false, "kev_due_at": null, "vendor": "remix-run", "product": "react-router", "cwe": "CWE-79", "title": "React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53667" }, { "rank": 276, "cve_id": "CVE-2026-64718", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00202, "epss_percentile": 0.10024, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "Safari", "cwe": "CWE-416", "title": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64718" }, { "rank": 277, "cve_id": "CVE-2026-39877", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00199, "epss_percentile": 0.09697, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to disclose kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39877" }, { "rank": 278, "cve_id": "CVE-2026-43774", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00199, "epss_percentile": 0.09706, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-787", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43774" }, { "rank": 279, "cve_id": "CVE-2026-17531", "cvss_base": 1.3, "cvss_severity": "LOW", "epss_score": 0.00199, "epss_percentile": 0.09716, "kev": false, "kev_due_at": null, "vendor": "unitedbyai", "product": "droidclaw", "cwe": "CWE-285", "title": "unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17531" }, { "rank": 280, "cve_id": "CVE-2026-43749", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00197, "epss_percentile": 0.0946, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-22", "title": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43749" }, { "rank": 281, "cve_id": "CVE-2026-66473", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00196, "epss_percentile": 0.09299, "kev": false, "kev_due_at": null, "vendor": "Xendit", "product": "Xendit Payment", "cwe": "CWE-862", "title": "WordPress Xendit Payment plugin <= 7.1.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66473" }, { "rank": 282, "cve_id": "CVE-2026-43738", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00196, "epss_percentile": 0.09332, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43738" }, { "rank": 283, "cve_id": "CVE-2026-12989", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00195, "epss_percentile": 0.09214, "kev": false, "kev_due_at": null, "vendor": "Ghost Robotics", "product": "Vision 60", "cwe": "CWE-306", "title": "Multiple vulnerabilities in Ghost Robotics' Vision 60", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12989" }, { "rank": 284, "cve_id": "CVE-2026-59689", "cvss_base": 8, "cvss_severity": "HIGH", "epss_score": 0.00195, "epss_percentile": 0.09227, "kev": false, "kev_due_at": null, "vendor": "Progress Software", "product": "LoadMaster", "cwe": "CWE-863", "title": "Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59689" }, { "rank": 285, "cve_id": "CVE-2026-64764", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00194, "epss_percentile": 0.09101, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64764" }, { "rank": 286, "cve_id": "CVE-2026-64765", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00194, "epss_percentile": 0.09101, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64765" }, { "rank": 287, "cve_id": "CVE-2026-28896", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00193, "epss_percentile": 0.08981, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28896" }, { "rank": 288, "cve_id": "CVE-2026-64710", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.08956, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64710" }, { "rank": 289, "cve_id": "CVE-2026-64734", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08829, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted contact may leak sensitive data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64734" }, { "rank": 290, "cve_id": "CVE-2026-64741", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08803, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64741" }, { "rank": 291, "cve_id": "CVE-2026-64744", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08803, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64744" }, { "rank": 292, "cve_id": "CVE-2026-65564", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08816, "kev": false, "kev_due_at": null, "vendor": "chrisvrichardson", "product": "MapPress Maps for WordPress", "cwe": "CWE-497", "title": "WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65564" }, { "rank": 293, "cve_id": "CVE-2026-66438", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08816, "kev": false, "kev_due_at": null, "vendor": "Tim Strifler", "product": "Exclusive Addons Elementor", "cwe": "CWE-497", "title": "WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66438" }, { "rank": 294, "cve_id": "CVE-2026-65445", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00191, "epss_percentile": 0.08705, "kev": false, "kev_due_at": null, "vendor": "iSaumya", "product": "Ad Invalid Click Protector (AICP)", "cwe": "CWE-862", "title": "WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65445" }, { "rank": 295, "cve_id": "CVE-2026-43754", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00191, "epss_percentile": 0.08734, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive kernel state.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43754" }, { "rank": 296, "cve_id": "CVE-2026-43758", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00191, "epss_percentile": 0.08734, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43758" }, { "rank": 297, "cve_id": "CVE-2021-32086", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.0019, "epss_percentile": 0.08697, "kev": false, "kev_due_at": null, "vendor": "n/a", "product": "n/a", "cwe": "CWE-321", "title": "An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. (This key is not unique for each installation.) An attacker that gains access to the MySQL server or a backup files can decrypt the secrets. Often, the decrypted secrets can be used to escalate privileges within KACE, or gain privileged access to unrelated systems or services.", "url": "https://www.cve.org/CVERecord?id=CVE-2021-32086" }, { "rank": 298, "cve_id": "CVE-2026-28973", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08604, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28973" }, { "rank": 299, "cve_id": "CVE-2026-28912", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08638, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-693", "title": "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28912" }, { "rank": 300, "cve_id": "CVE-2026-43729", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08605, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Processing a maliciously crafted image may corrupt process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43729" }, { "rank": 301, "cve_id": "CVE-2026-43733", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08605, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted image may corrupt process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43733" }, { "rank": 302, "cve_id": "CVE-2026-43780", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08605, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43780" }, { "rank": 303, "cve_id": "CVE-2026-64716", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.08604, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64716" }, { "rank": 304, "cve_id": "CVE-2026-28932", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00189, "epss_percentile": 0.08519, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-400", "title": "A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28932" }, { "rank": 305, "cve_id": "CVE-2026-43768", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00189, "epss_percentile": 0.08519, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-400", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43768" }, { "rank": 306, "cve_id": "CVE-2026-59552", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00188, "epss_percentile": 0.08435, "kev": false, "kev_due_at": null, "vendor": "Shahadat Hossain", "product": "3D Flipbook PDF Viewer & Embedder", "cwe": "CWE-918", "title": "WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59552" }, { "rank": 307, "cve_id": "CVE-2026-64708", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00188, "epss_percentile": 0.08369, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-693", "title": "A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may bypass Gatekeeper checks.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64708" }, { "rank": 308, "cve_id": "CVE-2026-43800", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00187, "epss_percentile": 0.08266, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43800" }, { "rank": 309, "cve_id": "CVE-2026-43797", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00186, "epss_percentile": 0.08136, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access information about a user's contacts.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43797" }, { "rank": 310, "cve_id": "CVE-2026-64745", "cvss_base": 2.4, "cvss_severity": "LOW", "epss_score": 0.00185, "epss_percentile": 0.08094, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-287", "title": "This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A person with physical access to a locked device may be able to access contacts and photos.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64745" }, { "rank": 311, "cve_id": "CVE-2026-64692", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00184, "epss_percentile": 0.08028, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64692" }, { "rank": 312, "cve_id": "CVE-2026-43714", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.0794, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-20", "title": "The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43714" }, { "rank": 313, "cve_id": "CVE-2026-43796", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.07941, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "This issue was addressed with improved data protection. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43796" }, { "rank": 314, "cve_id": "CVE-2026-43801", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.0794, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43801" }, { "rank": 315, "cve_id": "CVE-2026-64709", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.08003, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64709" }, { "rank": 316, "cve_id": "CVE-2026-64721", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00184, "epss_percentile": 0.0794, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-664", "title": "This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64721" }, { "rank": 317, "cve_id": "CVE-2026-64766", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00183, "epss_percentile": 0.07903, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-190", "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64766" }, { "rank": 318, "cve_id": "CVE-2026-20672", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.07857, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.3. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-20672" }, { "rank": 319, "cve_id": "CVE-2026-43763", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.0792, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to read files outside of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43763" }, { "rank": 320, "cve_id": "CVE-2026-28945", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00182, "epss_percentile": 0.07813, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to bypass network restrictions.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28945" }, { "rank": 321, "cve_id": "CVE-2026-13390", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00182, "epss_percentile": 0.07736, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "The Events Calendar", "cwe": "CWE-862", "title": "The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13390" }, { "rank": 322, "cve_id": "CVE-2026-43747", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.0763, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Parsing a maliciously crafted file may lead to an unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43747" }, { "rank": 323, "cve_id": "CVE-2026-64723", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00181, "epss_percentile": 0.07654, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-284", "title": "A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64723" }, { "rank": 324, "cve_id": "CVE-2025-59172", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.0018, "epss_percentile": 0.07582, "kev": false, "kev_due_at": null, "vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "cwe": "CWE-78", "title": "Improper Neutralization of Special Elements used in an OS Command Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-59172" }, { "rank": 325, "cve_id": "CVE-2026-43739", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07521, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43739" }, { "rank": 326, "cve_id": "CVE-2026-43744", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.0752, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing an audio stream in a maliciously crafted media file may terminate the process.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43744" }, { "rank": 327, "cve_id": "CVE-2026-43782", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07506, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43782" }, { "rank": 328, "cve_id": "CVE-2026-43816", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07521, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43816" }, { "rank": 329, "cve_id": "CVE-2026-43817", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07521, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-125", "title": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43817" }, { "rank": 330, "cve_id": "CVE-2026-64693", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.0752, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-843", "title": "A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64693" }, { "rank": 331, "cve_id": "CVE-2026-64724", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07521, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-400", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker on the local network may be able to cause a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64724" }, { "rank": 332, "cve_id": "CVE-2026-64776", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07612, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-125", "title": "The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64776" }, { "rank": 333, "cve_id": "CVE-2026-64549", "cvss_base": null, "cvss_severity": null, "epss_score": 0.0018, "epss_percentile": 0.07614, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64549" }, { "rank": 334, "cve_id": "CVE-2026-43759", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00179, "epss_percentile": 0.07452, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.6, watchOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43759" }, { "rank": 335, "cve_id": "CVE-2026-43673", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00177, "epss_percentile": 0.07223, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43673" }, { "rank": 336, "cve_id": "CVE-2026-43711", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00177, "epss_percentile": 0.07223, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43711" }, { "rank": 337, "cve_id": "CVE-2026-64749", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00177, "epss_percentile": 0.07283, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64749" }, { "rank": 338, "cve_id": "CVE-2026-64758", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00177, "epss_percentile": 0.07284, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-119", "title": "The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64758" }, { "rank": 339, "cve_id": "CVE-2026-64538", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00177, "epss_percentile": 0.07204, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64538" }, { "rank": 340, "cve_id": "CVE-2026-64544", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00177, "epss_percentile": 0.07203, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64544" }, { "rank": 341, "cve_id": "CVE-2026-64553", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00177, "epss_percentile": 0.07216, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: psample: fix info leak in PSAMPLE_ATTR_DATA", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64553" }, { "rank": 342, "cve_id": "CVE-2026-59553", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00175, "epss_percentile": 0.06979, "kev": false, "kev_due_at": null, "vendor": "RexTheme", "product": "Product Feed Manager", "cwe": "CWE-79", "title": "WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59553" }, { "rank": 343, "cve_id": "CVE-2026-59556", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00175, "epss_percentile": 0.06978, "kev": false, "kev_due_at": null, "vendor": "acowebs", "product": "Dynamic Pricing With Discount Rules for WooCommerce", "cwe": "CWE-79", "title": "WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59556" }, { "rank": 344, "cve_id": "CVE-2026-59558", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00175, "epss_percentile": 0.06979, "kev": false, "kev_due_at": null, "vendor": "wpdevelop", "product": "Booking Calendar", "cwe": "CWE-79", "title": "WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59558" }, { "rank": 345, "cve_id": "CVE-2026-64711", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00174, "epss_percentile": 0.06877, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-285", "title": "This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to leak sensitive user information.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64711" }, { "rank": 346, "cve_id": "CVE-2026-43681", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00173, "epss_percentile": 0.06739, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-120", "title": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43681" }, { "rank": 347, "cve_id": "CVE-2026-64755", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00173, "epss_percentile": 0.06751, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-200", "title": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64755" }, { "rank": 348, "cve_id": "CVE-2026-64537", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00173, "epss_percentile": 0.06707, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "bridge: cfm: reject invalid CCM interval at configuration time", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64537" }, { "rank": 349, "cve_id": "CVE-2026-64542", "cvss_base": null, "cvss_severity": null, "epss_score": 0.00173, "epss_percentile": 0.06709, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "ipv6: ndisc: fix NULL deref in accept_untracked_na()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64542" }, { "rank": 350, "cve_id": "CVE-2026-64737", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00171, "epss_percentile": 0.0654, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64737" }, { "rank": 351, "cve_id": "CVE-2026-65567", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00171, "epss_percentile": 0.06532, "kev": false, "kev_due_at": null, "vendor": "Nexcess", "product": "Event Tickets", "cwe": "CWE-862", "title": "WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65567" }, { "rank": 352, "cve_id": "CVE-2026-66477", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00171, "epss_percentile": 0.0653, "kev": false, "kev_due_at": null, "vendor": "Shufflehound", "product": "Gillion", "cwe": "CWE-862", "title": "WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66477" }, { "rank": 353, "cve_id": "CVE-2026-14236", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00171, "epss_percentile": 0.06539, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Contact Form 7", "cwe": "CWE-601", "title": "Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14236" }, { "rank": 354, "cve_id": "CVE-2026-43672", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.0017, "epss_percentile": 0.06434, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-863", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43672" }, { "rank": 355, "cve_id": "CVE-2026-43756", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0017, "epss_percentile": 0.06477, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-200", "title": "A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access user-sensitive data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43756" }, { "rank": 356, "cve_id": "CVE-2026-43775", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0017, "epss_percentile": 0.06426, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-285", "title": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43775" }, { "rank": 357, "cve_id": "CVE-2026-64707", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0017, "epss_percentile": 0.06464, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-732", "title": "A permissions issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to delete files for which it does not have permission.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64707" }, { "rank": 358, "cve_id": "CVE-2026-64754", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.06252, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-787", "title": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64754" }, { "rank": 359, "cve_id": "CVE-2026-12495", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00166, "epss_percentile": 0.05989, "kev": false, "kev_due_at": null, "vendor": "Mercusys", "product": "MB115-4G", "cwe": "CWE-121", "title": "Stack-Based Buffer Overflow in the Mercusys MB115-4G", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12495" }, { "rank": 360, "cve_id": "CVE-2026-43767", "cvss_base": 5, "cvss_severity": "MEDIUM", "epss_score": 0.00166, "epss_percentile": 0.0605, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-119", "title": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43767" }, { "rank": 361, "cve_id": "CVE-2026-43819", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.05873, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-284", "title": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43819" }, { "rank": 362, "cve_id": "CVE-2026-66029", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.05948, "kev": false, "kev_due_at": null, "vendor": "Creativeitem", "product": "Ekushey Project Manager CRM", "cwe": "CWE-79", "title": "Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66029" }, { "rank": 363, "cve_id": "CVE-2026-66030", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.05947, "kev": false, "kev_due_at": null, "vendor": "Creativeitem", "product": "Ekushey Project Manager CRM", "cwe": "CWE-79", "title": "Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66030" }, { "rank": 364, "cve_id": "CVE-2026-66031", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.05947, "kev": false, "kev_due_at": null, "vendor": "Creativeitem", "product": "Ekushey Project Manager CRM", "cwe": "CWE-79", "title": "Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66031" }, { "rank": 365, "cve_id": "CVE-2026-65568", "cvss_base": 5, "cvss_severity": "MEDIUM", "epss_score": 0.00165, "epss_percentile": 0.05946, "kev": false, "kev_due_at": null, "vendor": "Visual Composer", "product": "Visual Composer Website Builder", "cwe": "CWE-862", "title": "WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65568" }, { "rank": 366, "cve_id": "CVE-2026-13726", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00164, "epss_percentile": 0.05727, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "MPG", "cwe": "CWE-79", "title": "Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13726" }, { "rank": 367, "cve_id": "CVE-2026-12982", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.0558, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Document Gallery", "cwe": "CWE-79", "title": "Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12982" }, { "rank": 368, "cve_id": "CVE-2026-14190", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.05579, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Sina Extension for Elementor", "cwe": "CWE-79", "title": "Sina Extension for Elementor < 3.10.2 - Reflected XSS", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14190" }, { "rank": 369, "cve_id": "CVE-2026-17569", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00162, "epss_percentile": 0.05568, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-522", "title": "Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission on an entry to obtain a stored API token via the partial connection endpoint. This issue affects : * Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17569" }, { "rank": 370, "cve_id": "CVE-2026-17570", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00161, "epss_percentile": 0.05469, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "Server", "cwe": "CWE-639", "title": "Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user to disclose plaintext credential secrets via crafted API requests. This issue affects : * Devolutions Server 2026.2.4.0 through 2026.2.12.0 * Devolutions Server 2026.1.23.0 and earlier", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17570" }, { "rank": 371, "cve_id": "CVE-2026-10682", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0016, "epss_percentile": 0.05384, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-787", "title": "Out-of-bounds write in Zephyr `log_filter_set` syscall verifier reachable from userspace", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10682" }, { "rank": 372, "cve_id": "CVE-2026-56537", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.00159, "epss_percentile": 0.05293, "kev": false, "kev_due_at": null, "vendor": "HCLSoftware", "product": "Connections", "cwe": "CWE-209", "title": "HCL Connections is vulnerable to information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56537" }, { "rank": 373, "cve_id": "CVE-2026-56538", "cvss_base": 3.5, "cvss_severity": "LOW", "epss_score": 0.00159, "epss_percentile": 0.05293, "kev": false, "kev_due_at": null, "vendor": "HCLSoftware", "product": "Connections", "cwe": "CWE-213", "title": "HCL Connections is vulnerable to information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-56538" }, { "rank": 374, "cve_id": "CVE-2026-14189", "cvss_base": 3.8, "cvss_severity": "LOW", "epss_score": 0.00158, "epss_percentile": 0.05175, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "WPBot", "cwe": "CWE-89", "title": "WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14189" }, { "rank": 375, "cve_id": "CVE-2026-12383", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00156, "epss_percentile": 0.04945, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "cwe": "CWE-345", "title": "Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12383" }, { "rank": 376, "cve_id": "CVE-2026-61953", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00155, "epss_percentile": 0.0483, "kev": false, "kev_due_at": null, "vendor": "QuantumCloud", "product": "Simple Link Directory Pro", "cwe": "CWE-918", "title": "WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61953" }, { "rank": 377, "cve_id": "CVE-2026-39874", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00151, "epss_percentile": 0.04535, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-276", "title": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-39874" }, { "rank": 378, "cve_id": "CVE-2026-47078", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00149, "epss_percentile": 0.04369, "kev": false, "kev_due_at": null, "vendor": "Erlang", "product": "OTP", "cwe": "CWE-23", "title": "Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47078" }, { "rank": 379, "cve_id": "CVE-2026-43806", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00148, "epss_percentile": 0.04272, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-400", "title": "A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.6. A local attacker may be able to cause a denial of service.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43806" }, { "rank": 380, "cve_id": "CVE-2026-28849", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00147, "epss_percentile": 0.0417, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-290", "title": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28849" }, { "rank": 381, "cve_id": "CVE-2026-28900", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00147, "epss_percentile": 0.0417, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-290", "title": "A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28900" }, { "rank": 382, "cve_id": "CVE-2025-59177", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00146, "epss_percentile": 0.04132, "kev": false, "kev_due_at": null, "vendor": "Ericsson", "product": "Ericsson Packet Core Controller (PCC)", "cwe": "CWE-209", "title": "Generation of Error Message Containing Sensitive Information Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-59177" }, { "rank": 383, "cve_id": "CVE-2025-59178", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00146, "epss_percentile": 0.04132, "kev": false, "kev_due_at": null, "vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "cwe": "CWE-497", "title": "Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-59178" }, { "rank": 384, "cve_id": "CVE-2026-10082", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00144, "epss_percentile": 0.03948, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Advanced Ads", "cwe": "CWE-79", "title": "Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-10082" }, { "rank": 385, "cve_id": "CVE-2026-13400", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00144, "epss_percentile": 0.03948, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Simply Schedule Appointments", "cwe": "CWE-79", "title": "Simply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer Information", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13400" }, { "rank": 386, "cve_id": "CVE-2026-12991", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03747, "kev": false, "kev_due_at": null, "vendor": "Ghost Robotics", "product": "Vision 60", "cwe": "CWE-300", "title": "Multiple vulnerabilities in Ghost Robotics' Vision 60", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12991" }, { "rank": 387, "cve_id": "CVE-2026-64548", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03701, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64548" }, { "rank": 388, "cve_id": "CVE-2026-64552", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03702, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "virtio-net: fix len check in receive_big()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64552" }, { "rank": 389, "cve_id": "CVE-2026-61957", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03709, "kev": false, "kev_due_at": null, "vendor": "miniOrange", "product": "miniorange otp verification", "cwe": "CWE-79", "title": "WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-61957" }, { "rank": 390, "cve_id": "CVE-2026-65437", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03707, "kev": false, "kev_due_at": null, "vendor": "CleanTalk Inc", "product": "Spam protection, AntiSpam, FireWall by CleanTalk", "cwe": "CWE-79", "title": "WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65437" }, { "rank": 391, "cve_id": "CVE-2026-65438", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03707, "kev": false, "kev_due_at": null, "vendor": "Kofi Mokome", "product": "Message Filter for Contact Form 7", "cwe": "CWE-79", "title": "WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65438" }, { "rank": 392, "cve_id": "CVE-2026-65439", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03706, "kev": false, "kev_due_at": null, "vendor": "Themefic", "product": "Ultimate Addons for Contact Form 7", "cwe": "CWE-79", "title": "WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65439" }, { "rank": 393, "cve_id": "CVE-2026-65440", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03707, "kev": false, "kev_due_at": null, "vendor": "Roxnor", "product": "GetGenie", "cwe": "CWE-79", "title": "WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65440" }, { "rank": 394, "cve_id": "CVE-2026-65441", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03707, "kev": false, "kev_due_at": null, "vendor": "Nexcess", "product": "GiveWP", "cwe": "CWE-79", "title": "WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65441" }, { "rank": 395, "cve_id": "CVE-2026-65443", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03708, "kev": false, "kev_due_at": null, "vendor": "WP Media", "product": "BackWPup", "cwe": "CWE-79", "title": "WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65443" }, { "rank": 396, "cve_id": "CVE-2026-65446", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03708, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Kali Forms", "cwe": "CWE-79", "title": "WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65446" }, { "rank": 397, "cve_id": "CVE-2026-65447", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00142, "epss_percentile": 0.03708, "kev": false, "kev_due_at": null, "vendor": "Wasiliy Strecker / ContestGallery developer", "product": "Contest Gallery", "cwe": "CWE-79", "title": "WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65447" }, { "rank": 398, "cve_id": "CVE-2026-14203", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.03425, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Smart Manager", "cwe": "CWE-79", "title": "Smart Manager < 8.92.0 - Contributor+ Stored XSS via Post Title", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14203" }, { "rank": 399, "cve_id": "CVE-2026-43781", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.03407, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43781" }, { "rank": 400, "cve_id": "CVE-2026-28926", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00137, "epss_percentile": 0.03339, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4. An app may be able to elevate privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-28926" }, { "rank": 401, "cve_id": "CVE-2026-43770", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00137, "epss_percentile": 0.03287, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. An app may be able to access sensitive user data.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43770" }, { "rank": 402, "cve_id": "CVE-2026-17514", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00137, "epss_percentile": 0.03325, "kev": false, "kev_due_at": null, "vendor": "ZJONSSON", "product": "node-unzipper", "cwe": "CWE-22", "title": "ZJONSSON node-unzipper extract.js Extract path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17514" }, { "rank": 403, "cve_id": "CVE-2026-65557", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00136, "epss_percentile": 0.03227, "kev": false, "kev_due_at": null, "vendor": "Tychesoftwares", "product": "Abandoned Cart Lite for WooCommerce", "cwe": "CWE-79", "title": "WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65557" }, { "rank": 404, "cve_id": "CVE-2026-65563", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00136, "epss_percentile": 0.03227, "kev": false, "kev_due_at": null, "vendor": "Themeisle", "product": "Orbit Fox by ThemeIsle", "cwe": "CWE-79", "title": "WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65563" }, { "rank": 405, "cve_id": "CVE-2026-66475", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00136, "epss_percentile": 0.03229, "kev": false, "kev_due_at": null, "vendor": "acowebs", "product": "Checkout Field Editor for WooCommerce – Checkout Manager", "cwe": "CWE-79", "title": "WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66475" }, { "rank": 406, "cve_id": "CVE-2026-64533", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00135, "epss_percentile": 0.03175, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "fs/ntfs3: validate lcns_follow in log_replay conversion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64533" }, { "rank": 407, "cve_id": "CVE-2026-57917", "cvss_base": 4.8, "cvss_severity": "MEDIUM", "epss_score": 0.00135, "epss_percentile": 0.03161, "kev": false, "kev_due_at": null, "vendor": "Asseco", "product": "proCertum SmartSign", "cwe": "CWE-611", "title": "Improper Restriction of XML External Entity Reference in proCertum SmartSign", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57917" }, { "rank": 408, "cve_id": "CVE-2026-43665", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00134, "epss_percentile": 0.03097, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-862", "title": "This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A local attacker may be able to determine the legacy VNC password configured for Screen Sharing.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43665" }, { "rank": 409, "cve_id": "CVE-2026-65558", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00134, "epss_percentile": 0.03126, "kev": false, "kev_due_at": null, "vendor": "WPCenter", "product": "AffiliateX", "cwe": "CWE-918", "title": "WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65558" }, { "rank": 410, "cve_id": "CVE-2026-12990", "cvss_base": 7.7, "cvss_severity": "HIGH", "epss_score": 0.00131, "epss_percentile": 0.02903, "kev": false, "kev_due_at": null, "vendor": "Ghost Robotics", "product": "Vision 60", "cwe": "CWE-284", "title": "Multiple vulnerabilities in Ghost Robotics' Vision 60", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12990" }, { "rank": 411, "cve_id": "CVE-2026-43693", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.0013, "epss_percentile": 0.0285, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43693" }, { "rank": 412, "cve_id": "CVE-2026-64555", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00129, "epss_percentile": 0.02736, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64555" }, { "rank": 413, "cve_id": "CVE-2026-64532", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00128, "epss_percentile": 0.02704, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64532" }, { "rank": 414, "cve_id": "CVE-2026-65448", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02557, "kev": false, "kev_due_at": null, "vendor": "AcyMailing Newsletter Team", "product": "Anti Spam and list cleaner – AcyChecker", "cwe": "CWE-79", "title": "WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65448" }, { "rank": 415, "cve_id": "CVE-2026-65561", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02557, "kev": false, "kev_due_at": null, "vendor": "miniOrange", "product": "WordPress Social Login and Register", "cwe": "CWE-79", "title": "WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65561" }, { "rank": 416, "cve_id": "CVE-2026-65562", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02556, "kev": false, "kev_due_at": null, "vendor": "WPDeveloper", "product": "BetterDocs", "cwe": "CWE-79", "title": "WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-65562" }, { "rank": 417, "cve_id": "CVE-2026-66433", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02557, "kev": false, "kev_due_at": null, "vendor": "ShapedPlugin LLC", "product": "Location Weather", "cwe": "CWE-79", "title": "WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66433" }, { "rank": 418, "cve_id": "CVE-2026-66434", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02557, "kev": false, "kev_due_at": null, "vendor": "Sayontan Sinha", "product": "Photonic Gallery & Lightbox for Flickr, SmugMug & Others", "cwe": "CWE-79", "title": "WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66434" }, { "rank": 419, "cve_id": "CVE-2026-66445", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02558, "kev": false, "kev_due_at": null, "vendor": "100plugins", "product": "Open User Map", "cwe": "CWE-79", "title": "WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66445" }, { "rank": 420, "cve_id": "CVE-2026-66448", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00127, "epss_percentile": 0.02559, "kev": false, "kev_due_at": null, "vendor": "WP Chill", "product": "Gallery PhotoBlocks", "cwe": "CWE-79", "title": "WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66448" }, { "rank": 421, "cve_id": "CVE-2026-64543", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00126, "epss_percentile": 0.02475, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "tipc: fix use-after-free of the discoverer in tipc_disc_rcv()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64543" }, { "rank": 422, "cve_id": "CVE-2026-64550", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00126, "epss_percentile": 0.02491, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "net: qualcomm: rmnet: validate MAP frame length before ingress parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64550" }, { "rank": 423, "cve_id": "CVE-2026-64546", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00126, "epss_percentile": 0.0249, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "drm/edid: fix OOB read in drm_parse_tiled_block()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64546" }, { "rank": 424, "cve_id": "CVE-2026-43811", "cvss_base": 4.7, "cvss_severity": "MEDIUM", "epss_score": 0.00126, "epss_percentile": 0.02503, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "iOS and iPadOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to modify protected parts of the file system.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43811" }, { "rank": 425, "cve_id": "CVE-2026-17573", "cvss_base": 4, "cvss_severity": "MEDIUM", "epss_score": 0.00123, "epss_percentile": 0.02331, "kev": false, "kev_due_at": null, "vendor": "The HDF Group", "product": "HDF5", "cwe": "CWE-415", "title": "Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17573" }, { "rank": 426, "cve_id": "CVE-2026-64539", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00122, "epss_percentile": 0.02215, "kev": false, "kev_due_at": null, "vendor": "Linux", "product": "Linux", "cwe": null, "title": "Bluetooth: eir: Fix stack OOB write when prepending the Flags AD", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64539" }, { "rank": 427, "cve_id": "CVE-2026-17534", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00121, "epss_percentile": 0.02143, "kev": false, "kev_due_at": null, "vendor": "MoonshotAI", "product": "Kimi Code", "cwe": "CWE-918", "title": "Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17534" }, { "rank": 428, "cve_id": "CVE-2026-17523", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0012, "epss_percentile": 0.02046, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "cwe": "CWE-825", "title": "Kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17523" }, { "rank": 429, "cve_id": "CVE-2026-43755", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00117, "epss_percentile": 0.01825, "kev": false, "kev_due_at": null, "vendor": "Apple", "product": "macOS", "cwe": "CWE-362", "title": "A race condition was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-43755" }, { "rank": 430, "cve_id": "CVE-2026-66437", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00116, "epss_percentile": 0.01769, "kev": false, "kev_due_at": null, "vendor": "Themeisle", "product": "Feedzy", "cwe": "CWE-918", "title": "WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66437" }, { "rank": 431, "cve_id": "CVE-2026-17512", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00113, "epss_percentile": 0.01565, "kev": false, "kev_due_at": null, "vendor": "ggml-org", "product": "whisper.cpp", "cwe": "CWE-119", "title": "ggml-org whisper.cpp log_mel_spectrogram out-of-bounds", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17512" }, { "rank": 432, "cve_id": "CVE-2026-17513", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.00112, "epss_percentile": 0.01521, "kev": false, "kev_due_at": null, "vendor": "ggml-org", "product": "whisper.cpp", "cwe": "CWE-617", "title": "ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17513" }, { "rank": 433, "cve_id": "CVE-2025-59180", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00111, "epss_percentile": 0.01424, "kev": false, "kev_due_at": null, "vendor": "Ericsson", "product": "Packet Core Controller (PCC)", "cwe": "CWE-798", "title": "Use of Hard-coded Credentials Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2025-59180" }, { "rank": 434, "cve_id": "CVE-2026-15003", "cvss_base": 5.6, "cvss_severity": "MEDIUM", "epss_score": 0.00106, "epss_percentile": 0.01207, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Hardened Images", "cwe": "CWE-125", "title": "Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15003" }, { "rank": 435, "cve_id": "CVE-2026-17574", "cvss_base": 5.2, "cvss_severity": "MEDIUM", "epss_score": 0.00103, "epss_percentile": 0.01085, "kev": false, "kev_due_at": null, "vendor": "The HDF Group", "product": "HDF5", "cwe": "CWE-476", "title": "NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17574" }, { "rank": 436, "cve_id": "CVE-2026-17572", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.001, "epss_percentile": 0.00958, "kev": false, "kev_due_at": null, "vendor": "The HDF Group", "product": "HDF5", "cwe": "CWE-125", "title": "HDF5 SOHM List Index Heap Buffer Overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17572" }, { "rank": 437, "cve_id": "CVE-2026-66428", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00098, "epss_percentile": 0.00842, "kev": false, "kev_due_at": null, "vendor": "jgwhite33", "product": "WP Google Review Slider", "cwe": "CWE-352", "title": "WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66428" }, { "rank": 438, "cve_id": "CVE-2026-66474", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00098, "epss_percentile": 0.00842, "kev": false, "kev_due_at": null, "vendor": "HT Plugins", "product": "Insert Headers and Footers Code – HT Script", "cwe": "CWE-352", "title": "WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66474" }, { "rank": 439, "cve_id": "CVE-2026-57916", "cvss_base": 4.6, "cvss_severity": "MEDIUM", "epss_score": 0.00085, "epss_percentile": 0.0036, "kev": false, "kev_due_at": null, "vendor": "Asseco", "product": "proCertum SmartSign", "cwe": "CWE-73", "title": "Arbitrary Path Execution via CPS URI in proCertum SmartSign", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57916" }, { "rank": 440, "cve_id": "CVE-2026-14837", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00082, "epss_percentile": 0.0025, "kev": false, "kev_due_at": null, "vendor": "Lenze", "product": "c430", "cwe": "CWE-347", "title": "SSH Enablement Signature Verification Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14837" } ], "transactions": [ { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10682", "detail": "EXPLOIT PUBLISHED — CVE-2026-10682 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-10683", "detail": "EXPLOIT PUBLISHED — CVE-2026-10683 (zephyrproject zephyr). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17432", "detail": "EXPLOIT PUBLISHED — CVE-2026-17432 (NousResearch hermes-agent). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17433", "detail": "EXPLOIT PUBLISHED — CVE-2026-17433 (nanocoai NanoClaw). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17434", "detail": "EXPLOIT PUBLISHED — CVE-2026-17434 (nanocoai NanoClaw). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17457", "detail": "EXPLOIT PUBLISHED — CVE-2026-17457 (mf-yang openclaw-cn). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17458", "detail": "EXPLOIT PUBLISHED — CVE-2026-17458 (mf-yang openclaw-cn). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17459", "detail": "EXPLOIT PUBLISHED — CVE-2026-17459 (perwendel spark). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-17573", "detail": "EXPLOIT PUBLISHED — CVE-2026-17573 (The HDF Group HDF5). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-40033", "detail": "EXPLOIT PUBLISHED — CVE-2026-40033 (FreeRDP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-44421", "detail": "EXPLOIT PUBLISHED — CVE-2026-44421 (FreeRDP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-44422", "detail": "EXPLOIT PUBLISHED — CVE-2026-44422 (FreeRDP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-45623", "detail": "EXPLOIT PUBLISHED — CVE-2026-45623 (postcss). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47178", "detail": "EXPLOIT PUBLISHED — CVE-2026-47178 (strukturag libheif). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47247", "detail": "EXPLOIT PUBLISHED — CVE-2026-47247 (strukturag libheif). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47251", "detail": "EXPLOIT PUBLISHED — CVE-2026-47251 (strukturag libheif). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47254", "detail": "EXPLOIT PUBLISHED — CVE-2026-47254 (strukturag libheif). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-47709", "detail": "EXPLOIT PUBLISHED — CVE-2026-47709 (strukturag libheif). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63097", "detail": "EXPLOIT PUBLISHED — CVE-2026-63097 (matrix-org dendrite). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63107", "detail": "EXPLOIT PUBLISHED — CVE-2026-63107 (LimeSurvey). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63108", "detail": "EXPLOIT PUBLISHED — CVE-2026-63108 (RooCodeInc Roo-Code). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63720", "detail": "EXPLOIT PUBLISHED — CVE-2026-63720 (koxudaxi datamodel-code-generator). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63731", "detail": "EXPLOIT PUBLISHED — CVE-2026-63731 (hyperdxio hyperdx). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63770", "detail": "EXPLOIT PUBLISHED — CVE-2026-63770 (glanceapp glance). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-63771", "detail": "EXPLOIT PUBLISHED — CVE-2026-63771 (vrana adminer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-64824", "detail": "EXPLOIT PUBLISHED — CVE-2026-64824 (home-assistant Home Assistant Core). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-65708", "detail": "EXPLOIT PUBLISHED — CVE-2026-65708 (nuxsmin sysPass). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-65709", "detail": "EXPLOIT PUBLISHED — CVE-2026-65709 (nuxsmin sysPass). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-65710", "detail": "EXPLOIT PUBLISHED — CVE-2026-65710 (nuxsmin sysPass). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-66757", "detail": "EXPLOIT PUBLISHED — CVE-2026-66757 (GNOME GIMP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-66758", "detail": "EXPLOIT PUBLISHED — CVE-2026-66758 (GNOME GIMP). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-66759", "detail": "EXPLOIT PUBLISHED — CVE-2026-66759 (GNOME GIMP). Public exploit reference added." }, { "type": "RESCORED", "cve_id": "CVE-2026-40033", "detail": "RESCORED — CVE-2026-40033 (FreeRDP). CVSS 8.6 → 8.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-44422", "detail": "RESCORED — CVE-2026-44422 (FreeRDP). CVSS 7.5 → 8.8 (NVD)." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }