{ "day": "2026-08-14", "boundary": "UTC calendar day", "published_count": 201, "by_severity": { "CRITICAL": 24, "HIGH": 84, "MEDIUM": 72, "LOW": 20 }, "kev_count": 0, "exploit_reference_count": 2, "awaiting_enrichment_count": 1, "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.", "results": [ { "rank": 1, "cve_id": "CVE-2026-19682", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.02837, "epss_percentile": 0.85573, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-78", "title": "Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19682" }, { "rank": 2, "cve_id": "CVE-2026-19771", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.02795, "epss_percentile": 0.85346, "kev": false, "kev_due_at": null, "vendor": "Baicells", "product": "EG3661M", "cwe": "CWE-77", "title": "Baicells EG3661M LuCI Web luci os command injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19771" }, { "rank": 3, "cve_id": "CVE-2026-19681", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.02781, "epss_percentile": 0.85277, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-78", "title": "Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19681" }, { "rank": 4, "cve_id": "CVE-2026-19628", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.02662, "epss_percentile": 0.84547, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-78", "title": "Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19628" }, { "rank": 5, "cve_id": "CVE-2026-19188", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.01935, "epss_percentile": 0.78496, "kev": false, "kev_due_at": null, "vendor": "Haiwell", "product": "Haiwell IoT Cloud HMI Gateway", "cwe": "CWE-78", "title": "Haiwell IoT Cloud HMI Gateway OS Command Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19188" }, { "rank": 6, "cve_id": "CVE-2026-73680", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.01476, "epss_percentile": 0.71853, "kev": false, "kev_due_at": null, "vendor": "Cockpit HQ", "product": "Cockpit CMS", "cwe": "CWE-78", "title": "Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73680" }, { "rank": 7, "cve_id": "CVE-2026-17179", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.01176, "epss_percentile": 0.65181, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-78", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17179" }, { "rank": 8, "cve_id": "CVE-2026-73678", "cvss_base": 10, "cvss_severity": "CRITICAL", "epss_score": 0.01144, "epss_percentile": 0.64256, "kev": false, "kev_due_at": null, "vendor": "MindsDB", "product": "Minds Platform", "cwe": "CWE-94", "title": "MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73678" }, { "rank": 9, "cve_id": "CVE-2026-19679", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.01068, "epss_percentile": 0.62236, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-78", "title": "Improper Input Validation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19679" }, { "rank": 10, "cve_id": "CVE-2026-73679", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.0061, "epss_percentile": 0.46488, "kev": false, "kev_due_at": null, "vendor": "ImpressCMS", "product": "ImpressCMS", "cwe": "CWE-94", "title": "ImpressCMS Authenticated RCE via PHP Custom Tag eval()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73679" }, { "rank": 11, "cve_id": "CVE-2026-73633", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00601, "epss_percentile": 0.46096, "kev": false, "kev_due_at": null, "vendor": "Apache Software Foundation", "product": "Apache Struts", "cwe": "CWE-400", "title": "Apache Struts: Unbounded read of a JSON request body", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73633" }, { "rank": 12, "cve_id": "CVE-2026-19813", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00601, "epss_percentile": 0.46099, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19813" }, { "rank": 13, "cve_id": "CVE-2026-19822", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00601, "epss_percentile": 0.46098, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "W20E", "cwe": "CWE-119", "title": "Tenda W20E QoS Edit editQos lstAdd stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19822" }, { "rank": 14, "cve_id": "CVE-2026-19847", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00601, "epss_percentile": 0.46099, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19847" }, { "rank": 15, "cve_id": "CVE-2026-16915", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0057, "epss_percentile": 0.44565, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16915" }, { "rank": 16, "cve_id": "CVE-2026-18554", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0057, "epss_percentile": 0.44564, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18554" }, { "rank": 17, "cve_id": "CVE-2026-69414", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00557, "epss_percentile": 0.43923, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Malware Protection Engine", "cwe": "CWE-284", "title": "Microsoft Defender Elevation of Privilege Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69414" }, { "rank": 18, "cve_id": "CVE-2026-72970", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00532, "epss_percentile": 0.42559, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "cwe": "CWE-122", "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72970" }, { "rank": 19, "cve_id": "CVE-2026-66271", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00522, "epss_percentile": 0.4193, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-434", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66271" }, { "rank": 20, "cve_id": "CVE-2026-17184", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00513, "epss_percentile": 0.41369, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-73", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17184" }, { "rank": 21, "cve_id": "CVE-2026-73673", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00511, "epss_percentile": 0.41248, "kev": false, "kev_due_at": null, "vendor": "Netis Systems Co., Ltd.", "product": "Netis NC63 Wireless AC1200 Router", "cwe": "CWE-306", "title": "Netis NC63 V3.0.0.3327 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73673" }, { "rank": 22, "cve_id": "CVE-2026-50027", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00503, "epss_percentile": 0.40676, "kev": false, "kev_due_at": null, "vendor": "doobidoo", "product": "mcp-memory-service", "cwe": "CWE-306", "title": "mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50027" }, { "rank": 23, "cve_id": "CVE-2026-72819", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00502, "epss_percentile": 0.4062, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-94", "title": "Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72819" }, { "rank": 24, "cve_id": "CVE-2026-19626", "cvss_base": 9.4, "cvss_severity": "CRITICAL", "epss_score": 0.00497, "epss_percentile": 0.40359, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-95", "title": "Remote Code Execution", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19626" }, { "rank": 25, "cve_id": "CVE-2026-19812", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00493, "epss_percentile": 0.40088, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19812" }, { "rank": 26, "cve_id": "CVE-2026-19815", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00493, "epss_percentile": 0.40089, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19815" }, { "rank": 27, "cve_id": "CVE-2026-19844", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00493, "epss_percentile": 0.40088, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19844" }, { "rank": 28, "cve_id": "CVE-2026-73849", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00484, "epss_percentile": 0.39487, "kev": false, "kev_due_at": null, "vendor": "emlog", "product": "emlog", "cwe": "CWE-306", "title": "emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73849" }, { "rank": 29, "cve_id": "CVE-2026-19827", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00479, "epss_percentile": 0.39179, "kev": false, "kev_due_at": null, "vendor": "alldatacenter", "product": "alldata", "cwe": "CWE-22", "title": "alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19827" }, { "rank": 30, "cve_id": "CVE-2026-19830", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00474, "epss_percentile": 0.38881, "kev": false, "kev_due_at": null, "vendor": "TRENDnet", "product": "TEW-816DRM", "cwe": "CWE-400", "title": "TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19830" }, { "rank": 31, "cve_id": "CVE-2026-72827", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00473, "epss_percentile": 0.38751, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-1336", "title": "Grav CMS before 2.0.13 Remote Code Execution via Twig", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72827" }, { "rank": 32, "cve_id": "CVE-2026-72824", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00467, "epss_percentile": 0.38386, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-862", "title": "Grav before 1.0.13 API Key Scope Bypass via PagesController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72824" }, { "rank": 33, "cve_id": "CVE-2026-19788", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38305, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "AC1206", "cwe": "CWE-119", "title": "Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19788" }, { "rank": 34, "cve_id": "CVE-2026-19789", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38305, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "AC1206", "cwe": "CWE-119", "title": "Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19789" }, { "rank": 35, "cve_id": "CVE-2026-19790", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38305, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "G0", "cwe": "CWE-119", "title": "Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19790" }, { "rank": 36, "cve_id": "CVE-2026-19791", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38306, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "G0", "cwe": "CWE-119", "title": "Tenda G0 httpd web management interface module addStaticRoute stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19791" }, { "rank": 37, "cve_id": "CVE-2026-19792", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38307, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "G0", "cwe": "CWE-119", "title": "Tenda G0 httpd web management interface module setPortMapping buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19792" }, { "rank": 38, "cve_id": "CVE-2026-19811", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38308, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19811" }, { "rank": 39, "cve_id": "CVE-2026-19814", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38307, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19814" }, { "rank": 40, "cve_id": "CVE-2026-19821", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38308, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "AC12", "cwe": "CWE-119", "title": "Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19821" }, { "rank": 41, "cve_id": "CVE-2026-19823", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38309, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "W20E", "cwe": "CWE-119", "title": "Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19823" }, { "rank": 42, "cve_id": "CVE-2026-19824", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38306, "kev": false, "kev_due_at": null, "vendor": "Tenda", "product": "W20E", "cwe": "CWE-119", "title": "Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19824" }, { "rank": 43, "cve_id": "CVE-2026-19845", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38306, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19845" }, { "rank": 44, "cve_id": "CVE-2026-19846", "cvss_base": 7.4, "cvss_severity": "HIGH", "epss_score": 0.00466, "epss_percentile": 0.38308, "kev": false, "kev_due_at": null, "vendor": "TOTOLINK", "product": "A800R", "cwe": "CWE-119", "title": "TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19846" }, { "rank": 45, "cve_id": "CVE-2026-73683", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00441, "epss_percentile": 0.36569, "kev": false, "kev_due_at": null, "vendor": "Laravel", "product": "Socialite", "cwe": "CWE-294", "title": "Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73683" }, { "rank": 46, "cve_id": "CVE-2026-72830", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.0044, "epss_percentile": 0.36479, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-269", "title": "Grav API Plugin before 1.0.13 RCE via ConfigController scope bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72830" }, { "rank": 47, "cve_id": "CVE-2026-17182", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00439, "epss_percentile": 0.36371, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-287", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17182" }, { "rank": 48, "cve_id": "CVE-2026-17173", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00437, "epss_percentile": 0.36209, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17173" }, { "rank": 49, "cve_id": "CVE-2026-19762", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00424, "epss_percentile": 0.35148, "kev": false, "kev_due_at": null, "vendor": "DTStack", "product": "Taier", "cwe": "CWE-22", "title": "DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19762" }, { "rank": 50, "cve_id": "CVE-2026-66270", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00423, "epss_percentile": 0.35074, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-434", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66270" }, { "rank": 51, "cve_id": "CVE-2026-46603", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00417, "epss_percentile": 0.3451, "kev": false, "kev_due_at": null, "vendor": "golang.org/x/image", "product": "golang.org/x/image/vp8l", "cwe": "CWE-789", "title": "Excessive memory allocation during VP8L decoding in golang.org/x/image", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46603" }, { "rank": 52, "cve_id": "CVE-2026-48528", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00404, "epss_percentile": 0.33247, "kev": false, "kev_due_at": null, "vendor": "NCEAS", "product": "metacat", "cwe": "CWE-89", "title": "Metacat has an unauthenticated SQL injection vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48528" }, { "rank": 53, "cve_id": "CVE-2026-72815", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00397, "epss_percentile": 0.32535, "kev": false, "kev_due_at": null, "vendor": "go-chi", "product": "chi", "cwe": "CWE-290", "title": "go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72815" }, { "rank": 54, "cve_id": "CVE-2026-72813", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00394, "epss_percentile": 0.32263, "kev": false, "kev_due_at": null, "vendor": "actix", "product": "actix-web", "cwe": "CWE-248", "title": "actix-files before 0.6.10 Denial of Service via empty Range header", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72813" }, { "rank": 55, "cve_id": "CVE-2026-17181", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00389, "epss_percentile": 0.31655, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17181" }, { "rank": 56, "cve_id": "CVE-2026-19871", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00386, "epss_percentile": 0.31371, "kev": false, "kev_due_at": null, "vendor": "Roskus", "product": "Prospero Flow CRM", "cwe": "CWE-798", "title": "Use of hard-coded credentials in Prospero Flow CRM employee onboarding", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19871" }, { "rank": 57, "cve_id": "CVE-2026-72814", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00382, "epss_percentile": 0.30947, "kev": false, "kev_due_at": null, "vendor": "actix", "product": "actix-web", "cwe": "CWE-22", "title": "actix-web before 0.6.10 Information Disclosure via Files", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72814" }, { "rank": 58, "cve_id": "CVE-2026-19763", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00382, "epss_percentile": 0.30897, "kev": false, "kev_due_at": null, "vendor": "DTStack", "product": "Taier", "cwe": "CWE-22", "title": "DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19763" }, { "rank": 59, "cve_id": "CVE-2026-19837", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00373, "epss_percentile": 0.29996, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Bagisto", "cwe": "CWE-200", "title": "Webkul Bagisto Customer Search search information disclosure", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19837" }, { "rank": 60, "cve_id": "CVE-2026-19829", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00365, "epss_percentile": 0.29203, "kev": false, "kev_due_at": null, "vendor": "648540858", "product": "wvp-GB28181-pro", "cwe": "CWE-22", "title": "648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19829" }, { "rank": 61, "cve_id": "CVE-2026-17081", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00361, "epss_percentile": 0.28783, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17081" }, { "rank": 62, "cve_id": "CVE-2026-72822", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00345, "epss_percentile": 0.27094, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-306", "title": "Grav before 1.0.13 Authentication Bypass via disable2fa", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72822" }, { "rank": 63, "cve_id": "CVE-2026-69101", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.0034, "epss_percentile": 0.26517, "kev": false, "kev_due_at": null, "vendor": "datavane", "product": "tis", "cwe": "CWE-611", "title": "Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint", "url": "https://www.cve.org/CVERecord?id=CVE-2026-69101" }, { "rank": 64, "cve_id": "CVE-2026-12949", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00339, "epss_percentile": 0.26395, "kev": false, "kev_due_at": null, "vendor": "Wishlist Member", "product": "Wishlist Member", "cwe": "CWE-640", "title": "Wishlist Member X <= 3.34.1 - Unauthenticated Account Takeover via 'mergewith' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12949" }, { "rank": 65, "cve_id": "CVE-2026-72820", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00339, "epss_percentile": 0.2636, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-22", "title": "Grav 2.0.11 Path Traversal via Backup Profile Configuration", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72820" }, { "rank": 66, "cve_id": "CVE-2026-72835", "cvss_base": 7.6, "cvss_severity": "HIGH", "epss_score": 0.00338, "epss_percentile": 0.26243, "kev": false, "kev_due_at": null, "vendor": "filebrowser", "product": "filebrowser", "cwe": "CWE-41", "title": "filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72835" }, { "rank": 67, "cve_id": "CVE-2026-18178", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00337, "epss_percentile": 0.26172, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-22", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18178" }, { "rank": 68, "cve_id": "CVE-2026-45699", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00335, "epss_percentile": 0.25912, "kev": false, "kev_due_at": null, "vendor": "Netatalk", "product": "netatalk", "cwe": "CWE-191", "title": "Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45699" }, { "rank": 69, "cve_id": "CVE-2026-73051", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00335, "epss_percentile": 0.25863, "kev": false, "kev_due_at": null, "vendor": "actix", "product": "actix-web", "cwe": "CWE-444", "title": "actix-http before 3.12.1 HTTP Request Smuggling via CL.TE", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73051" }, { "rank": 70, "cve_id": "CVE-2026-19909", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00334, "epss_percentile": 0.25773, "kev": false, "kev_due_at": null, "vendor": "PAX Technology", "product": "Q80", "cwe": "CWE-59", "title": "PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19909" }, { "rank": 71, "cve_id": "CVE-2025-7639", "cvss_base": 6.1, "cvss_severity": "MEDIUM", "epss_score": 0.00333, "epss_percentile": 0.25679, "kev": false, "kev_due_at": null, "vendor": "AVEVA", "product": "AVEVA Enterprise SCADA", "cwe": "CWE-502", "title": "AVEVA Enterprise SCADA Deserialization of Untrusted Data", "url": "https://www.cve.org/CVERecord?id=CVE-2025-7639" }, { "rank": 72, "cve_id": "CVE-2026-19880", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00331, "epss_percentile": 0.25486, "kev": false, "kev_due_at": null, "vendor": "QOS.CH Sarl", "product": "Logback-classic", "cwe": "CWE-22", "title": "Incomplete protection against CVE-2025-11226", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19880" }, { "rank": 73, "cve_id": "CVE-2026-19826", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00328, "epss_percentile": 0.25161, "kev": false, "kev_due_at": null, "vendor": "alldatacenter", "product": "alldata", "cwe": "CWE-20", "title": "alldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserialization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19826" }, { "rank": 74, "cve_id": "CVE-2026-15205", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00324, "epss_percentile": 0.24685, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Paymob for WooCommerce", "cwe": "CWE-89", "title": "Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-15205" }, { "rank": 75, "cve_id": "CVE-2026-17186", "cvss_base": 9.8, "cvss_severity": "CRITICAL", "epss_score": 0.00322, "epss_percentile": 0.24485, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-78", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17186" }, { "rank": 76, "cve_id": "CVE-2026-72836", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00321, "epss_percentile": 0.24298, "kev": false, "kev_due_at": null, "vendor": "filebrowser", "product": "filebrowser", "cwe": "CWE-178", "title": "FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72836" }, { "rank": 77, "cve_id": "CVE-2026-72810", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00313, "epss_percentile": 0.23443, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-862", "title": "SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72810" }, { "rank": 78, "cve_id": "CVE-2026-17177", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00313, "epss_percentile": 0.23502, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-674", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17177" }, { "rank": 79, "cve_id": "CVE-2026-19834", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00309, "epss_percentile": 0.22945, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Bagisto", "cwe": "CWE-285", "title": "Webkul Bagisto Admin Customer Impersonation Feature login-as-customer authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19834" }, { "rank": 80, "cve_id": "CVE-2025-71405", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00307, "epss_percentile": 0.22785, "kev": false, "kev_due_at": null, "vendor": "go-chi", "product": "chi", "cwe": "CWE-601", "title": "go-chi chi before v5.2.2 Open Redirect via RedirectSlashes", "url": "https://www.cve.org/CVERecord?id=CVE-2025-71405" }, { "rank": 81, "cve_id": "CVE-2026-63361", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00305, "epss_percentile": 0.22508, "kev": false, "kev_due_at": null, "vendor": "LimeSurvey", "product": "LimeSurvey", "cwe": "CWE-79", "title": "LimeSurvey Community Edition 7.0.5+260623 - Reflected XSS in HTML editor popup", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63361" }, { "rank": 82, "cve_id": "CVE-2026-74245", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00305, "epss_percentile": 0.22591, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-306", "title": "Quay: unauthenticated exported logs download in quay", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74245" }, { "rank": 83, "cve_id": "CVE-2026-17175", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00305, "epss_percentile": 0.22557, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-287", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17175" }, { "rank": 84, "cve_id": "CVE-2026-72826", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00302, "epss_percentile": 0.22207, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-266", "title": "Grav before 1.0.13 Scope Bypass via createApiKey", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72826" }, { "rank": 85, "cve_id": "CVE-2026-72829", "cvss_base": 9.3, "cvss_severity": "CRITICAL", "epss_score": 0.00302, "epss_percentile": 0.22206, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-269", "title": "Grav before 1.0.13 API Key Scope Bypass via UsersController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72829" }, { "rank": 86, "cve_id": "CVE-2026-72831", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00302, "epss_percentile": 0.22214, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-863", "title": "Grav through 2.0.11 Authentication Bypass via Flex Objects", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72831" }, { "rank": 87, "cve_id": "CVE-2026-72837", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.003, "epss_percentile": 0.22039, "kev": false, "kev_due_at": null, "vendor": "filebrowser", "product": "filebrowser", "cwe": "CWE-284", "title": "File Browser before 2.63.20 Privilege Escalation via Proxy Authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72837" }, { "rank": 88, "cve_id": "CVE-2026-49826", "cvss_base": 0, "cvss_severity": "NONE", "epss_score": 0.00299, "epss_percentile": 0.21876, "kev": false, "kev_due_at": null, "vendor": "concourse", "product": "concourse", "cwe": "CWE-601", "title": "Concourse login flow has an open redirect issue", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49826" }, { "rank": 89, "cve_id": "CVE-2026-72838", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00295, "epss_percentile": 0.21472, "kev": false, "kev_due_at": null, "vendor": "filebrowser", "product": "filebrowser", "cwe": "CWE-770", "title": "FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72838" }, { "rank": 90, "cve_id": "CVE-2026-19836", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00294, "epss_percentile": 0.21335, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Bagisto", "cwe": "CWE-285", "title": "Webkul Bagisto Backend Customer Detail Feature view authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19836" }, { "rank": 91, "cve_id": "CVE-2026-19838", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00294, "epss_percentile": 0.21335, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Bagisto", "cwe": "CWE-285", "title": "Webkul Bagisto Backend Reporting Endpoint sales authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19838" }, { "rank": 92, "cve_id": "CVE-2026-19828", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00288, "epss_percentile": 0.20769, "kev": false, "kev_due_at": null, "vendor": "648540858", "product": "wvp-GB28181-pro", "cwe": "CWE-22", "title": "648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19828" }, { "rank": 93, "cve_id": "CVE-2026-1621", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00286, "epss_percentile": 0.2059, "kev": false, "kev_due_at": null, "vendor": "Universal Software Inc.", "product": "E-Municipality", "cwe": "CWE-305", "title": "Register Bypass in Universal Sotware's E-Municipality", "url": "https://www.cve.org/CVERecord?id=CVE-2026-1621" }, { "rank": 94, "cve_id": "CVE-2026-16879", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.00285, "epss_percentile": 0.20402, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-285", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16879" }, { "rank": 95, "cve_id": "CVE-2026-19870", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00282, "epss_percentile": 0.20078, "kev": false, "kev_due_at": null, "vendor": "Roskus", "product": "Prospero Flow CRM", "cwe": "CWE-639", "title": "IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19870" }, { "rank": 96, "cve_id": "CVE-2026-14290", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00282, "epss_percentile": 0.20115, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Embed Google Photos album", "cwe": "CWE-79", "title": "Embed Google Photos Album Easily <= 2.2.1 - Contributor+ Stored XSS via link Shortcode Attribute", "url": "https://www.cve.org/CVERecord?id=CVE-2026-14290" }, { "rank": 97, "cve_id": "CVE-2026-18403", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.0028, "epss_percentile": 0.19937, "kev": false, "kev_due_at": null, "vendor": "LimeSurvey", "product": "LimeSurvey", "cwe": "CWE-89", "title": "LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18403" }, { "rank": 98, "cve_id": "CVE-2026-18039", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00279, "epss_percentile": 0.1981, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Essential Addons for Elementor", "cwe": "CWE-269", "title": "Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18039" }, { "rank": 99, "cve_id": "CVE-2026-19768", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00278, "epss_percentile": 0.19662, "kev": false, "kev_due_at": null, "vendor": "Devolutions", "product": "PowerShell Universal", "cwe": "CWE-94", "title": "Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped when written to the settings configuration file.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19768" }, { "rank": 100, "cve_id": "CVE-2026-72812", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00275, "epss_percentile": 0.19316, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-862", "title": "SiYuan before v3.7.4 Missing Authorization via refreshBacklink", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72812" }, { "rank": 101, "cve_id": "CVE-2026-72828", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00272, "epss_percentile": 0.19037, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-269", "title": "Grav before 1.0.13 API Key Scope Bypass via InvitationsController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72828" }, { "rank": 102, "cve_id": "CVE-2026-73850", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.18513, "kev": false, "kev_due_at": null, "vendor": "emlog", "product": "emlog", "cwe": "CWE-89", "title": "Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73850" }, { "rank": 103, "cve_id": "CVE-2026-49989", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00269, "epss_percentile": 0.18519, "kev": false, "kev_due_at": null, "vendor": "crate", "product": "crate", "cwe": "CWE-863", "title": "CrateDB's Blob HTTP handler bypasses authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49989" }, { "rank": 104, "cve_id": "CVE-2026-19784", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00268, "epss_percentile": 0.18412, "kev": false, "kev_due_at": null, "vendor": "francoisjacquet", "product": "RosarioSIS", "cwe": "CWE-285", "title": "francoisjacquet RosarioSIS Referrals.php DBUpdate authorization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19784" }, { "rank": 105, "cve_id": "CVE-2026-34492", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00267, "epss_percentile": 0.18371, "kev": false, "kev_due_at": null, "vendor": "Johnson Controls", "product": "Airwall", "cwe": "CWE-73", "title": "Airwall - Arbitrary file read", "url": "https://www.cve.org/CVERecord?id=CVE-2026-34492" }, { "rank": 106, "cve_id": "CVE-2026-16905", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00266, "epss_percentile": 0.1801, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-287", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16905" }, { "rank": 107, "cve_id": "CVE-2026-12743", "cvss_base": 4.9, "cvss_severity": "MEDIUM", "epss_score": 0.00266, "epss_percentile": 0.18302, "kev": false, "kev_due_at": null, "vendor": "cservit", "product": "affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display", "cwe": "CWE-89", "title": "affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12743" }, { "rank": 108, "cve_id": "CVE-2026-74243", "cvss_base": 8.2, "cvss_severity": "HIGH", "epss_score": 0.00265, "epss_percentile": 0.17915, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-306", "title": "Quay: unauthenticated secscan notification endpoint in quay when psk is unset", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74243" }, { "rank": 109, "cve_id": "CVE-2026-18109", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00265, "epss_percentile": 0.17917, "kev": false, "kev_due_at": null, "vendor": "boldgrid", "product": "W3 Total Cache", "cwe": "CWE-79", "title": "W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name", "url": "https://www.cve.org/CVERecord?id=CVE-2026-18109" }, { "rank": 110, "cve_id": "CVE-2026-58224", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.17733, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-353", "title": "Samba: ctdb fails to do integrity checking of received packets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-58224" }, { "rank": 111, "cve_id": "CVE-2026-19825", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00263, "epss_percentile": 0.17704, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Simple Client Management System", "cwe": "CWE-74", "title": "SourceCodester Simple Client Management System Master.php save_service sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19825" }, { "rank": 112, "cve_id": "CVE-2026-19835", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00262, "epss_percentile": 0.17599, "kev": false, "kev_due_at": null, "vendor": "Webkul", "product": "Bagisto", "cwe": "CWE-266", "title": "Webkul Bagisto Customer Item Deletion Endpoint access control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19835" }, { "rank": 113, "cve_id": "CVE-2026-72833", "cvss_base": 8.7, "cvss_severity": "HIGH", "epss_score": 0.00261, "epss_percentile": 0.17448, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-269", "title": "Grav 1.0.6 through 1.0.11 Privilege Escalation via Scoped API Keys", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72833" }, { "rank": 114, "cve_id": "CVE-2026-16810", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00259, "epss_percentile": 0.17168, "kev": false, "kev_due_at": null, "vendor": "bitpressadmin", "product": "Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder", "cwe": "CWE-89", "title": "Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16810" }, { "rank": 115, "cve_id": "CVE-2026-74242", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00259, "epss_percentile": 0.17194, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-639", "title": "Quay: repository notification uuid idor in quay api", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74242" }, { "rank": 116, "cve_id": "CVE-2026-74250", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00254, "epss_percentile": 0.16609, "kev": false, "kev_due_at": null, "vendor": "OpenStack", "product": "Ironic", "cwe": "CWE-226", "title": "In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74250" }, { "rank": 117, "cve_id": "CVE-2026-19764", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00254, "epss_percentile": 0.16583, "kev": false, "kev_due_at": null, "vendor": "Raisecom", "product": "Communication Command and Dispatch Management Platform", "cwe": "CWE-74", "title": "Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19764" }, { "rank": 118, "cve_id": "CVE-2026-66272", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00254, "epss_percentile": 0.16603, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-200", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-66272" }, { "rank": 119, "cve_id": "CVE-2026-72811", "cvss_base": 9.9, "cvss_severity": "CRITICAL", "epss_score": 0.0025, "epss_percentile": 0.1614, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-89", "title": "SiYuan before v3.7.4 SQL Injection via backlink search", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72811" }, { "rank": 120, "cve_id": "CVE-2026-19767", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.0025, "epss_percentile": 0.1606, "kev": false, "kev_due_at": null, "vendor": "itsourcecode", "product": "Hospital Management System", "cwe": "CWE-74", "title": "itsourcecode Hospital Management System viewdoctortimings.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19767" }, { "rank": 121, "cve_id": "CVE-2026-53472", "cvss_base": 6.3, "cvss_severity": "MEDIUM", "epss_score": 0.00248, "epss_percentile": 0.15859, "kev": false, "kev_due_at": null, "vendor": null, "product": "migration-planner", "cwe": "CWE-79", "title": "Migration-planner: credentialurl validator accepts javascript: urls", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53472" }, { "rank": 122, "cve_id": "CVE-2026-71570", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00243, "epss_percentile": 0.15229, "kev": false, "kev_due_at": null, "vendor": "icagenda.com", "product": "iCagenda extension for Joomla", "cwe": "CWE-284", "title": "Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71570" }, { "rank": 123, "cve_id": "CVE-2026-16708", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00238, "epss_percentile": 0.1455, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-15", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16708" }, { "rank": 124, "cve_id": "CVE-2026-19879", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.14244, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat build of Apache Camel for Spring Boot 4", "cwe": "CWE-681", "title": "Io.undertow/undertow: undertow: http response header integrity issue due to character truncation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19879" }, { "rank": 125, "cve_id": "CVE-2026-63649", "cvss_base": 4.1, "cvss_severity": "MEDIUM", "epss_score": 0.00235, "epss_percentile": 0.14279, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "OpenVPN", "cwe": "CWE-183", "title": "The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63649" }, { "rank": 126, "cve_id": "CVE-2026-19680", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00232, "epss_percentile": 0.13811, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-89", "title": "SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19680" }, { "rank": 127, "cve_id": "CVE-2026-50029", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00232, "epss_percentile": 0.13886, "kev": false, "kev_due_at": null, "vendor": "sunnyadn", "product": "js-toml", "cwe": "CWE-697", "title": "js-toml has silent type confusion via falsy-primitive duplicate-key bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50029" }, { "rank": 128, "cve_id": "CVE-2026-19631", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00231, "epss_percentile": 0.1369, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-89", "title": "SQL Injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19631" }, { "rank": 129, "cve_id": "CVE-2026-67365", "cvss_base": 9.2, "cvss_severity": "CRITICAL", "epss_score": 0.00228, "epss_percentile": 0.13307, "kev": false, "kev_due_at": null, "vendor": "icagenda.com", "product": "iCagenda extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67365" }, { "rank": 130, "cve_id": "CVE-2026-19629", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00228, "epss_percentile": 0.13345, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-863", "title": "Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19629" }, { "rank": 131, "cve_id": "CVE-2026-72834", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00228, "epss_percentile": 0.13376, "kev": false, "kev_due_at": null, "vendor": "filebrowser", "product": "filebrowser", "cwe": "CWE-200", "title": "filebrowser before 2.63.19 Permission Bypass via checksum", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72834" }, { "rank": 132, "cve_id": "CVE-2026-63650", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00228, "epss_percentile": 0.13352, "kev": false, "kev_due_at": null, "vendor": "OpenVPN", "product": "OpenVPN", "cwe": "CWE-295", "title": "OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63650" }, { "rank": 133, "cve_id": "CVE-2026-19839", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00227, "epss_percentile": 0.13193, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Simple Doctors Appointment System", "cwe": "CWE-284", "title": "SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19839" }, { "rank": 134, "cve_id": "CVE-2026-19908", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00225, "epss_percentile": 0.12908, "kev": false, "kev_due_at": null, "vendor": "PAX Technology", "product": "Q80", "cwe": "CWE-306", "title": "PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19908" }, { "rank": 135, "cve_id": "CVE-2026-73845", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12805, "kev": false, "kev_due_at": null, "vendor": "ondata", "product": "ckan-mcp-server", "cwe": "CWE-20", "title": "CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73845" }, { "rank": 136, "cve_id": "CVE-2026-57469", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00224, "epss_percentile": 0.12832, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "PiCtory", "cwe": "CWE-352", "title": "Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57469" }, { "rank": 137, "cve_id": "CVE-2026-73844", "cvss_base": 3.7, "cvss_severity": "LOW", "epss_score": 0.00223, "epss_percentile": 0.12661, "kev": false, "kev_due_at": null, "vendor": "ondata", "product": "ckan-mcp-server", "cwe": "CWE-209", "title": "CKAN MCP Server: Information disclosure via verbose error reflection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73844" }, { "rank": 138, "cve_id": "CVE-2026-16739", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00221, "epss_percentile": 0.12394, "kev": false, "kev_due_at": null, "vendor": "Unknown", "product": "Epeken All Kurir for Woocommerce", "cwe": "CWE-287", "title": "Epeken All Kurir <= 2.1.2 - Unauthenticated Order Payment Confirmation Forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16739" }, { "rank": 139, "cve_id": "CVE-2026-19639", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.0022, "epss_percentile": 0.1224, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-1284", "title": "Improper Access Control", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19639" }, { "rank": 140, "cve_id": "CVE-2026-72816", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00219, "epss_percentile": 0.12173, "kev": false, "kev_due_at": null, "vendor": "go-chi", "product": "chi", "cwe": "CWE-290", "title": "go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72816" }, { "rank": 141, "cve_id": "CVE-2026-71571", "cvss_base": 8.6, "cvss_severity": "HIGH", "epss_score": 0.00218, "epss_percentile": 0.12054, "kev": false, "kev_due_at": null, "vendor": "icagenda.com", "product": "iCagenda extension for Joomla", "cwe": "CWE-89", "title": "Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11", "url": "https://www.cve.org/CVERecord?id=CVE-2026-71571" }, { "rank": 142, "cve_id": "CVE-2026-50523", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00216, "epss_percentile": 0.11835, "kev": false, "kev_due_at": null, "vendor": "Microsoft", "product": "PowerShell 7.4", "cwe": "CWE-77", "title": "Microsoft PowerShell Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-50523" }, { "rank": 143, "cve_id": "CVE-2026-19787", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.0021, "epss_percentile": 0.1104, "kev": false, "kev_due_at": null, "vendor": "SourceCodester", "product": "Air Cargo Management System", "cwe": "CWE-74", "title": "SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19787" }, { "rank": 144, "cve_id": "CVE-2026-19765", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00209, "epss_percentile": 0.10985, "kev": false, "kev_due_at": null, "vendor": "eyaushev", "product": "swagger-testcase-mcp", "cwe": "CWE-918", "title": "eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19765" }, { "rank": 145, "cve_id": "CVE-2026-74248", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00208, "epss_percentile": 0.10825, "kev": false, "kev_due_at": null, "vendor": "OpenStack", "product": "Octavia", "cwe": "CWE-863", "title": "OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74248" }, { "rank": 146, "cve_id": "CVE-2026-73630", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.10395, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-203", "title": "SiYuan before v3.7.4 Information Disclosure via authFilePublishAccess", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73630" }, { "rank": 147, "cve_id": "CVE-2026-17209", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.10422, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-79", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17209" }, { "rank": 148, "cve_id": "CVE-2026-19785", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00205, "epss_percentile": 0.10362, "kev": false, "kev_due_at": null, "vendor": "francoisjacquet", "product": "RosarioSIS", "cwe": "CWE-74", "title": "francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19785" }, { "rank": 149, "cve_id": "CVE-2026-17227", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00202, "epss_percentile": 0.09992, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-89", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17227" }, { "rank": 150, "cve_id": "CVE-2026-16772", "cvss_base": 8.1, "cvss_severity": "HIGH", "epss_score": 0.00201, "epss_percentile": 0.09858, "kev": false, "kev_due_at": null, "vendor": "Akaunting", "product": "Akaunting", "cwe": "CWE-269", "title": "CVE-2026-16772", "url": "https://www.cve.org/CVERecord?id=CVE-2026-16772" }, { "rank": 151, "cve_id": "CVE-2026-72825", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.00199, "epss_percentile": 0.09659, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-862", "title": "Grav before 1.0.13 API-key scope cap bypass via ReportsController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72825" }, { "rank": 152, "cve_id": "CVE-2026-73847", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00197, "epss_percentile": 0.09406, "kev": false, "kev_due_at": null, "vendor": "emlog", "product": "emlog", "cwe": "CWE-352", "title": "Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73847" }, { "rank": 153, "cve_id": "CVE-2026-73048", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00194, "epss_percentile": 0.0912, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-862", "title": "SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73048" }, { "rank": 154, "cve_id": "CVE-2026-73049", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00194, "epss_percentile": 0.09121, "kev": false, "kev_due_at": null, "vendor": "siyuan-note", "product": "siyuan", "cwe": "CWE-863", "title": "SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73049" }, { "rank": 155, "cve_id": "CVE-2026-72823", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00193, "epss_percentile": 0.0893, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-862", "title": "Grav before 1.0.13 API-key scope cap bypass via DemoController", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72823" }, { "rank": 156, "cve_id": "CVE-2026-17079", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00192, "epss_percentile": 0.08885, "kev": false, "kev_due_at": null, "vendor": "IBM", "product": "Db2 Mirror for i", "cwe": "CWE-693", "title": "IBM Db2 Mirror for i is affected by multiple vulnerabilities", "url": "https://www.cve.org/CVERecord?id=CVE-2026-17079" }, { "rank": 157, "cve_id": "CVE-2026-19794", "cvss_base": 7.2, "cvss_severity": "HIGH", "epss_score": 0.0019, "epss_percentile": 0.0866, "kev": false, "kev_due_at": null, "vendor": "gamerz", "product": "WP-Stats", "cwe": "CWE-79", "title": "WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19794" }, { "rank": 158, "cve_id": "CVE-2026-19910", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00186, "epss_percentile": 0.08194, "kev": false, "kev_due_at": null, "vendor": "PAX Technology", "product": "Q80", "cwe": "CWE-347", "title": "PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19910" }, { "rank": 159, "cve_id": "CVE-2026-19841", "cvss_base": 2.3, "cvss_severity": "LOW", "epss_score": 0.00186, "epss_percentile": 0.08135, "kev": false, "kev_due_at": null, "vendor": "TRENDNET", "product": "TEW-813DRU", "cwe": "CWE-266", "title": "TRENDNET TEW-813DRU vsftpd vsftpd.conf default permission", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19841" }, { "rank": 160, "cve_id": "CVE-2026-74241", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00183, "epss_percentile": 0.07862, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-90", "title": "Quay: ldap referral filter injection in quay external ldap authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74241" }, { "rank": 161, "cve_id": "CVE-2026-72859", "cvss_base": 8.3, "cvss_severity": "HIGH", "epss_score": 0.00181, "epss_percentile": 0.07687, "kev": false, "kev_due_at": null, "vendor": "budibase", "product": "server", "cwe": "CWE-863", "title": "Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72859" }, { "rank": 162, "cve_id": "CVE-2026-72832", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.0018, "epss_percentile": 0.07579, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-79", "title": "Grav before 2.0.12 Stored XSS via quoted-attribute bypass", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72832" }, { "rank": 163, "cve_id": "CVE-2026-27871", "cvss_base": 2.9, "cvss_severity": "LOW", "epss_score": 0.00177, "epss_percentile": 0.07265, "kev": false, "kev_due_at": null, "vendor": "Johnson Controls", "product": "TL280", "cwe": "CWE-327", "title": "TL280", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27871" }, { "rank": 164, "cve_id": "CVE-2026-46439", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00174, "epss_percentile": 0.06911, "kev": false, "kev_due_at": null, "vendor": "oscal-compass", "product": "compliance-trestle", "cwe": "CWE-94", "title": "compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46439" }, { "rank": 165, "cve_id": "CVE-2026-74240", "cvss_base": 5.4, "cvss_severity": "MEDIUM", "epss_score": 0.00173, "epss_percentile": 0.06697, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-287", "title": "Quay: jwt claim validation bypasses in quay federated robot and sso authentication", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74240" }, { "rank": 166, "cve_id": "CVE-2026-53970", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.0017, "epss_percentile": 0.06452, "kev": false, "kev_due_at": null, "vendor": "lucasgelfond", "product": "ZeroBrew", "cwe": "CWE-494", "title": "ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb", "url": "https://www.cve.org/CVERecord?id=CVE-2026-53970" }, { "rank": 167, "cve_id": "CVE-2026-12363", "cvss_base": 4.2, "cvss_severity": "MEDIUM", "epss_score": 0.00168, "epss_percentile": 0.06185, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-787", "title": "Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12363" }, { "rank": 168, "cve_id": "CVE-2026-19786", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00166, "epss_percentile": 0.0601, "kev": false, "kev_due_at": null, "vendor": "francoisjacquet", "product": "RosarioSIS", "cwe": "CWE-352", "title": "francoisjacquet RosarioSIS Modules.php cross-site request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19786" }, { "rank": 169, "cve_id": "CVE-2026-47192", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00165, "epss_percentile": 0.05838, "kev": false, "kev_due_at": null, "vendor": "siemens", "product": "kas", "cwe": "CWE-347", "title": "kas's late signature validation may allow unnoticed repository manipulations", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47192" }, { "rank": 170, "cve_id": "CVE-2026-47766", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00161, "epss_percentile": 0.05473, "kev": false, "kev_due_at": null, "vendor": "containers", "product": "crun", "cwe": "CWE-61", "title": "crun follows rootfs /dev symlink while creating default devices", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47766" }, { "rank": 171, "cve_id": "CVE-2026-47191", "cvss_base": 2.1, "cvss_severity": "LOW", "epss_score": 0.00159, "epss_percentile": 0.05246, "kev": false, "kev_due_at": null, "vendor": "siemens", "product": "kas", "cwe": "CWE-347", "title": "kas checks out SHA-like git branches as valid commits", "url": "https://www.cve.org/CVERecord?id=CVE-2026-47191" }, { "rank": 172, "cve_id": "CVE-2026-19636", "cvss_base": 6, "cvss_severity": "MEDIUM", "epss_score": 0.00156, "epss_percentile": 0.04995, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-1270", "title": "Insuffucient Protections Lead to Brute Force", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19636" }, { "rank": 173, "cve_id": "CVE-2026-67366", "cvss_base": 5.3, "cvss_severity": "MEDIUM", "epss_score": 0.00151, "epss_percentile": 0.04467, "kev": false, "kev_due_at": null, "vendor": "icagenda.com", "product": "iCagenda extension for Joomla", "cwe": "CWE-352", "title": "Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11", "url": "https://www.cve.org/CVERecord?id=CVE-2026-67366" }, { "rank": 174, "cve_id": "CVE-2025-10308", "cvss_base": 4.3, "cvss_severity": "MEDIUM", "epss_score": 0.00151, "epss_percentile": 0.0451, "kev": false, "kev_due_at": null, "vendor": "alian", "product": "Astro Booking Engine", "cwe": "CWE-352", "title": "Astro Booking Engine <= 1.4.0 - Cross-Site Request Forgery to Settings Reset", "url": "https://www.cve.org/CVERecord?id=CVE-2025-10308" }, { "rank": 175, "cve_id": "CVE-2026-72817", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.0015, "epss_percentile": 0.0444, "kev": false, "kev_due_at": null, "vendor": "go-chi", "product": "chi", "cwe": "CWE-345", "title": "go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72817" }, { "rank": 176, "cve_id": "CVE-2026-49457", "cvss_base": 9.1, "cvss_severity": "CRITICAL", "epss_score": 0.00149, "epss_percentile": 0.04326, "kev": false, "kev_due_at": null, "vendor": "benoitc", "product": "erlang_quic", "cwe": "CWE-295", "title": "QUIC has Broken TLS verification", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49457" }, { "rank": 177, "cve_id": "CVE-2026-74247", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00145, "epss_percentile": 0.03952, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-918", "title": "Quay: ssrf via build archive_url in quay build api", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74247" }, { "rank": 178, "cve_id": "CVE-2026-74244", "cvss_base": 7.5, "cvss_severity": "HIGH", "epss_score": 0.00141, "epss_percentile": 0.03682, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat OpenShift Update Service", "cwe": "CWE-347", "title": "Quay: stripe webhook accepts forged events without signature verification in quay", "url": "https://www.cve.org/CVERecord?id=CVE-2026-74244" }, { "rank": 179, "cve_id": "CVE-2026-72821", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00138, "epss_percentile": 0.03416, "kev": false, "kev_due_at": null, "vendor": "getgrav", "product": "grav", "cwe": "CWE-79", "title": "Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle", "url": "https://www.cve.org/CVERecord?id=CVE-2026-72821" }, { "rank": 180, "cve_id": "CVE-2026-73846", "cvss_base": 6.5, "cvss_severity": "MEDIUM", "epss_score": 0.00137, "epss_percentile": 0.03317, "kev": false, "kev_due_at": null, "vendor": "ondata", "product": "ckan-mcp-server", "cwe": "CWE-345", "title": "CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning", "url": "https://www.cve.org/CVERecord?id=CVE-2026-73846" }, { "rank": 181, "cve_id": "CVE-2026-19635", "cvss_base": 8.5, "cvss_severity": "HIGH", "epss_score": 0.00132, "epss_percentile": 0.02987, "kev": false, "kev_due_at": null, "vendor": "Tenable, Inc.", "product": "Security Center", "cwe": "CWE-78", "title": "Local Privilege Escalation", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19635" }, { "rank": 182, "cve_id": "CVE-2026-49282", "cvss_base": 5.1, "cvss_severity": "MEDIUM", "epss_score": 0.00132, "epss_percentile": 0.0295, "kev": false, "kev_due_at": null, "vendor": "capstone-engine", "product": "capstone", "cwe": "CWE-125", "title": "Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49282" }, { "rank": 183, "cve_id": "CVE-2026-19884", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.0013, "epss_percentile": 0.02875, "kev": false, "kev_due_at": null, "vendor": "Eclipse Foundation", "product": "Eclipse Theia", "cwe": "CWE-15", "title": "In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applications built on Theia that include the git integration, such as the Theia IDE. Both Theia's own `@theia/git` extension and the builtin VS Code `git` extension run git commands such as `git status` as soon as a repository is detected. Since git honors repository-local configuration, a folder containing an attacker-controlled `.git/config` with `core.fsmonitor` (or a comparable hook-like setting) causes the configured command to be executed. The configuration can be delivered by burying a bare repository inside a regular repository (OVE-20210718-0001), so cloning an attacker-supplied repository and opening it in a Theia-based application is sufficient to execute arbitrary commands with the privileges of the user, without any confirmation prompt. As of 1.70.0, plugins that declare `capabilities.untrustedWorkspaces.supported: false`, which includes the builtin git extension, are no longer loaded or activated in an untrusted workspace, and the deprecated `@theia/git` extension has been removed, so no git command is executed against an untrusted folder.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19884" }, { "rank": 184, "cve_id": "CVE-2026-49263", "cvss_base": 2, "cvss_severity": "LOW", "epss_score": 0.00128, "epss_percentile": 0.02707, "kev": false, "kev_due_at": null, "vendor": "capstone-engine", "product": "capstone", "cwe": "CWE-197", "title": "Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49263" }, { "rank": 185, "cve_id": "CVE-2026-57472", "cvss_base": 6.9, "cvss_severity": "MEDIUM", "epss_score": 0.00124, "epss_percentile": 0.02347, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "RevPiPyLoad", "cwe": "CWE-22", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57472" }, { "rank": 186, "cve_id": "CVE-2026-57471", "cvss_base": 6.8, "cvss_severity": "MEDIUM", "epss_score": 0.00124, "epss_percentile": 0.02347, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "RevPiPyLoad", "cwe": "CWE-22", "title": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad", "url": "https://www.cve.org/CVERecord?id=CVE-2026-57471" }, { "rank": 187, "cve_id": "CVE-2026-12366", "cvss_base": 8.8, "cvss_severity": "HIGH", "epss_score": 0.0012, "epss_percentile": 0.02037, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-416", "title": "Use-after-free freeing an armed dynamically-allocated k_timer in Zephyr userspace object disposal", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12366" }, { "rank": 188, "cve_id": "CVE-2026-12364", "cvss_base": 8.4, "cvss_severity": "HIGH", "epss_score": 0.00119, "epss_percentile": 0.01953, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-822", "title": "Missing user-space pointer validation in logging syscall z_log_msg_static_create allows kernel memory disclosure and denial of service", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12364" }, { "rank": 189, "cve_id": "CVE-2026-49986", "cvss_base": 7.1, "cvss_severity": "HIGH", "epss_score": 0.00113, "epss_percentile": 0.01551, "kev": false, "kev_due_at": null, "vendor": "cdeust", "product": "Cortex", "cwe": "CWE-829", "title": "Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`", "url": "https://www.cve.org/CVERecord?id=CVE-2026-49986" }, { "rank": 190, "cve_id": "CVE-2026-64887", "cvss_base": 7, "cvss_severity": "HIGH", "epss_score": 0.00113, "epss_percentile": 0.01561, "kev": false, "kev_due_at": null, "vendor": "Johnson Controls", "product": "Airwall", "cwe": "CWE-321", "title": "Airwall - Hardcoded Secrets", "url": "https://www.cve.org/CVERecord?id=CVE-2026-64887" }, { "rank": 191, "cve_id": "CVE-2026-19617", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.0011, "epss_percentile": 0.01396, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-770", "title": "Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19617" }, { "rank": 192, "cve_id": "CVE-2026-19770", "cvss_base": 1.9, "cvss_severity": "LOW", "epss_score": 0.0011, "epss_percentile": 0.01399, "kev": false, "kev_due_at": null, "vendor": "feedmob", "product": "fm-mcp-servers", "cwe": "CWE-918", "title": "feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery", "url": "https://www.cve.org/CVERecord?id=CVE-2026-19770" }, { "rank": 193, "cve_id": "CVE-2026-13002", "cvss_base": 4.4, "cvss_severity": "MEDIUM", "epss_score": 0.00108, "epss_percentile": 0.01286, "kev": false, "kev_due_at": null, "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "cwe": "CWE-835", "title": "Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13002" }, { "rank": 194, "cve_id": "CVE-2026-46380", "cvss_base": 6.7, "cvss_severity": "MEDIUM", "epss_score": 0.001, "epss_percentile": 0.00956, "kev": false, "kev_due_at": null, "vendor": "oscal-compass", "product": "compliance-trestle", "cwe": "CWE-918", "title": "compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem", "url": "https://www.cve.org/CVERecord?id=CVE-2026-46380" }, { "rank": 195, "cve_id": "CVE-2026-12365", "cvss_base": 5.8, "cvss_severity": "MEDIUM", "epss_score": 0.001, "epss_percentile": 0.00909, "kev": false, "kev_due_at": null, "vendor": "zephyrproject", "product": "zephyr", "cwe": "CWE-416", "title": "Use-after-free in Zephyr delayable work-queue cancellation under SMP timing race", "url": "https://www.cve.org/CVERecord?id=CVE-2026-12365" }, { "rank": 196, "cve_id": "CVE-2026-13196", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00099, "epss_percentile": 0.00888, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "piControl", "cwe": "CWE-787", "title": "Out-of-bounds Write in KUNBUS piControl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13196" }, { "rank": 197, "cve_id": "CVE-2026-13197", "cvss_base": 7.3, "cvss_severity": "HIGH", "epss_score": 0.00096, "epss_percentile": 0.0077, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "piControl", "cwe": "CWE-362", "title": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13197" }, { "rank": 198, "cve_id": "CVE-2026-13198", "cvss_base": 5.9, "cvss_severity": "MEDIUM", "epss_score": 0.00096, "epss_percentile": 0.0077, "kev": false, "kev_due_at": null, "vendor": "KUNBUS", "product": "piControl", "cwe": "CWE-362", "title": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13198" }, { "rank": 199, "cve_id": "CVE-2026-63700", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.00086, "epss_percentile": 0.00375, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-269", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63700" }, { "rank": 200, "cve_id": "CVE-2026-63701", "cvss_base": 7.8, "cvss_severity": "HIGH", "epss_score": 0.0008, "epss_percentile": 0.00205, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-269", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63701" }, { "rank": 201, "cve_id": "CVE-2026-63702", "cvss_base": 5.5, "cvss_severity": "MEDIUM", "epss_score": 0.00079, "epss_percentile": 0.00166, "kev": false, "kev_due_at": null, "vendor": "Dell", "product": "Wyse Management Suite (WMS)", "cwe": "CWE-798", "title": "Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63702" } ], "transactions": [ { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2010-0738", "detail": "EXPLOIT PUBLISHED — CVE-2010-0738. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2010-1428", "detail": "EXPLOIT PUBLISHED — CVE-2010-1428. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2010-2861", "detail": "EXPLOIT PUBLISHED — CVE-2010-2861. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2012-0507", "detail": "EXPLOIT PUBLISHED — CVE-2012-0507. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2016-3351", "detail": "EXPLOIT PUBLISHED — CVE-2016-3351. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2019-25765", "detail": "EXPLOIT PUBLISHED — CVE-2019-25765 (ASP-CMS Project ASP-CMS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-30116", "detail": "EXPLOIT PUBLISHED — CVE-2021-30116. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2021-30119", "detail": "EXPLOIT PUBLISHED — CVE-2021-30119. Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-13328", "detail": "EXPLOIT PUBLISHED — CVE-2026-13328 (Unknown Food Menu). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-13610", "detail": "EXPLOIT PUBLISHED — CVE-2026-13610 (Unknown KiviCare). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-14229", "detail": "EXPLOIT PUBLISHED — CVE-2026-14229 (Unknown ECS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-14230", "detail": "EXPLOIT PUBLISHED — CVE-2026-14230 (Unknown ECS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-16007", "detail": "EXPLOIT PUBLISHED — CVE-2026-16007 (AppFlowy-IO AppFlowy-Cloud). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-16541", "detail": "EXPLOIT PUBLISHED — CVE-2026-16541 (Unknown Simply Schedule Appointments). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-16611", "detail": "EXPLOIT PUBLISHED — CVE-2026-16611 (Unknown Product Feed PRO for WooCommerce by AdTribes). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-18216", "detail": "EXPLOIT PUBLISHED — CVE-2026-18216 (Unknown Backup Migration). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-18807", "detail": "EXPLOIT PUBLISHED — CVE-2026-18807 (Unknown ECS). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19710", "detail": "EXPLOIT PUBLISHED — CVE-2026-19710 (SourceCodester Simple Student Information System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19750", "detail": "EXPLOIT PUBLISHED — CVE-2026-19750 (Tenda CH). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19752", "detail": "EXPLOIT PUBLISHED — CVE-2026-19752 (EnzoVezzaro mcp-dominican-layer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19753", "detail": "EXPLOIT PUBLISHED — CVE-2026-19753 (Model Context Protocol mcp-rdf-explorer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19895", "detail": "EXPLOIT PUBLISHED — CVE-2026-19895 (opensourcepos Open Source Point of Sale). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19897", "detail": "EXPLOIT PUBLISHED — CVE-2026-19897 (mangroup dtale). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19900", "detail": "EXPLOIT PUBLISHED — CVE-2026-19900 (LB-LINK X-PRO). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19903", "detail": "EXPLOIT PUBLISHED — CVE-2026-19903 (SourceCodester Online Clothing Store). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19917", "detail": "EXPLOIT PUBLISHED — CVE-2026-19917 (code-projects Online Food Order System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-19920", "detail": "EXPLOIT PUBLISHED — CVE-2026-19920 (code-projects Online Shopping System). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-34881", "detail": "EXPLOIT PUBLISHED — CVE-2026-34881 (OpenStack Glance). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-39883", "detail": "EXPLOIT PUBLISHED — CVE-2026-39883 (open-telemetry opentelemetry-go). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-4035", "detail": "EXPLOIT PUBLISHED — CVE-2026-4035 (mlflow/mlflow). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-43001", "detail": "EXPLOIT PUBLISHED — CVE-2026-43001 (OpenStack Keystone). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-54297", "detail": "EXPLOIT PUBLISHED — CVE-2026-54297 (lostisland faraday). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-59109", "detail": "EXPLOIT PUBLISHED — CVE-2026-59109 (Zalktis Programmas (SIA \"Zalktis Programmas\") Zalktis). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-62241", "detail": "EXPLOIT PUBLISHED — CVE-2026-62241 (MohibShaikh clawvet). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-72741", "detail": "EXPLOIT PUBLISHED — CVE-2026-72741 (goodrain rainbond). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-72777", "detail": "EXPLOIT PUBLISHED — CVE-2026-72777 (DayuanJiang next-ai-draw-io). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73037", "detail": "EXPLOIT PUBLISHED — CVE-2026-73037 (DayuanJiang next-ai-draw-io). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73481", "detail": "EXPLOIT PUBLISHED — CVE-2026-73481 (phplist3). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73482", "detail": "EXPLOIT PUBLISHED — CVE-2026-73482 (phplist3). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73506", "detail": "EXPLOIT PUBLISHED — CVE-2026-73506 (JanDeDobbeleer oh-my-posh). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73514", "detail": "EXPLOIT PUBLISHED — CVE-2026-73514 (PostGIS address_standardizer). Public exploit reference added." }, { "type": "EXPLOIT_PUBLISHED", "cve_id": "CVE-2026-73515", "detail": "EXPLOIT PUBLISHED — CVE-2026-73515 (PostGIS). Public exploit reference added." }, { "type": "RESCORED", "cve_id": "CVE-2016-1019", "detail": "RESCORED — CVE-2016-1019. CVSS 7.8 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-30116", "detail": "RESCORED — CVE-2021-30116. CVSS 10 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2021-30120", "detail": "RESCORED — CVE-2021-30120. CVSS 9.9 → 7.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-13601", "detail": "RESCORED — CVE-2026-13601 (Red Hat Enterprise Linux 8). CVSS 7.1 → 6.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-19757", "detail": "RESCORED — CVE-2026-19757 (Dromara lamp-cloud). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-19758", "detail": "RESCORED — CVE-2026-19758 (dromara lamp-cloud). CVSS 6.9 → 5.5 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-20156", "detail": "RESCORED — CVE-2026-20156 (Cisco RoomOS Software). CVSS 8.1 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-20157", "detail": "RESCORED — CVE-2026-20157 (Cisco RoomOS Software). CVSS 7.5 → 9.8 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-34993", "detail": "RESCORED — CVE-2026-34993 (aio-libs aiohttp). CVSS 6.4 → 7.3 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-4035", "detail": "RESCORED — CVE-2026-4035 (mlflow/mlflow). CVSS 9.1 → 7.7 (NVD)." }, { "type": "RESCORED", "cve_id": "CVE-2026-43001", "detail": "RESCORED — CVE-2026-43001 (OpenStack Keystone). CVSS 7.9 → 8 (NVD)." } ], "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/." }