{
  "day": "2026-08-17",
  "boundary": "UTC calendar day",
  "published_count": 337,
  "by_severity": {
    "CRITICAL": 66,
    "HIGH": 111,
    "MEDIUM": 120,
    "LOW": 38
  },
  "kev_count": 1,
  "exploit_reference_count": 3,
  "awaiting_enrichment_count": 2,
  "ranking": "Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.",
  "results": [
    {
      "rank": 1,
      "cve_id": "CVE-2026-64849",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.1641,
      "epss_percentile": 0.9673,
      "kev": true,
      "kev_due_at": "2026-09-02",
      "vendor": "mlflow",
      "product": "mlflow",
      "cwe": "CWE-918",
      "title": "MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64849"
    },
    {
      "rank": 2,
      "cve_id": "CVE-2026-19478",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.06001,
      "epss_percentile": 0.92759,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GitLab",
      "product": "GitLab",
      "cwe": "CWE-94",
      "title": "Improper Control of Generation of Code ('Code Injection') in GitLab",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19478"
    },
    {
      "rank": 3,
      "cve_id": "CVE-2026-73522",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.02361,
      "epss_percentile": 0.8247,
      "kev": false,
      "kev_due_at": null,
      "vendor": "COVESA",
      "product": "Open1722",
      "cwe": "CWE-121",
      "title": "COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73522"
    },
    {
      "rank": 4,
      "cve_id": "CVE-2026-19976",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.02055,
      "epss_percentile": 0.79804,
      "kev": false,
      "kev_due_at": null,
      "vendor": "COMFAST",
      "product": "CF-N1-S",
      "cwe": "CWE-74",
      "title": "COMFAST CF-N1-S mbox-config sub_44A968 command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19976"
    },
    {
      "rank": 5,
      "cve_id": "CVE-2026-65640",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.01947,
      "epss_percentile": 0.78635,
      "kev": false,
      "kev_due_at": null,
      "vendor": "WordPress",
      "product": "WordPress",
      "cwe": "CWE-434",
      "title": "WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript in use on the server * A malicious user with the `upload_files` capability This issue affects all versions of WordPress. Version 7.0.4 has been released, containing a fix for the vulnerability, and as a courtesy to users on older branches the fix has been backported to all branches back to 4.7.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65640"
    },
    {
      "rank": 6,
      "cve_id": "CVE-2026-73851",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.01479,
      "epss_percentile": 0.71903,
      "kev": false,
      "kev_due_at": null,
      "vendor": "microsoft",
      "product": "kiota",
      "cwe": "CWE-22",
      "title": "Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73851"
    },
    {
      "rank": 7,
      "cve_id": "CVE-2026-75002",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.01324,
      "epss_percentile": 0.68755,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-77",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75002"
    },
    {
      "rank": 8,
      "cve_id": "CVE-2026-50776",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.01323,
      "epss_percentile": 0.68706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-22",
      "title": "Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50776"
    },
    {
      "rank": 9,
      "cve_id": "CVE-2026-19983",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.01308,
      "epss_percentile": 0.68408,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GL.iNet",
      "product": "A1300",
      "cwe": "CWE-77",
      "title": "GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19983"
    },
    {
      "rank": 10,
      "cve_id": "CVE-2026-75011",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.01088,
      "epss_percentile": 0.6276,
      "kev": false,
      "kev_due_at": null,
      "vendor": "kylecui",
      "product": "NetForensicMCP",
      "cwe": "CWE-74",
      "title": "kylecui NetForensicMCP index.js execAsync command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75011"
    },
    {
      "rank": 11,
      "cve_id": "CVE-2026-19981",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0105,
      "epss_percentile": 0.6167,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GL.iNet",
      "product": "A1300",
      "cwe": "CWE-77",
      "title": "GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19981"
    },
    {
      "rank": 12,
      "cve_id": "CVE-2026-19982",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0105,
      "epss_percentile": 0.6167,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GL.iNet",
      "product": "BE9300",
      "cwe": "CWE-77",
      "title": "GL.iNet BE9300/MT6000 Firewall-management RPC os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19982"
    },
    {
      "rank": 13,
      "cve_id": "CVE-2026-67918",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00908,
      "epss_percentile": 0.57228,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-22",
      "title": "Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67918"
    },
    {
      "rank": 14,
      "cve_id": "CVE-2026-75047",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00861,
      "epss_percentile": 0.5578,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-409",
      "title": "In JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75047"
    },
    {
      "rank": 15,
      "cve_id": "CVE-2026-67919",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00831,
      "epss_percentile": 0.54837,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67919"
    },
    {
      "rank": 16,
      "cve_id": "CVE-2026-75050",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00798,
      "epss_percentile": 0.53742,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-770",
      "title": "In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75050"
    },
    {
      "rank": 17,
      "cve_id": "CVE-2026-74997",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00766,
      "epss_percentile": 0.52705,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-78",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74997"
    },
    {
      "rank": 18,
      "cve_id": "CVE-2026-19977",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00726,
      "epss_percentile": 0.51332,
      "kev": false,
      "kev_due_at": null,
      "vendor": "EFM",
      "product": "ipTIME A3004T",
      "cwe": "CWE-287",
      "title": "EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19977"
    },
    {
      "rank": 19,
      "cve_id": "CVE-2026-68004",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00717,
      "epss_percentile": 0.51004,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-284",
      "title": "An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_security.cpp, and SRS RTMP listener components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68004"
    },
    {
      "rank": 20,
      "cve_id": "CVE-2026-19978",
      "cvss_base": 1.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00692,
      "epss_percentile": 0.50094,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jiantao88",
      "product": "android-mcp-server",
      "cwe": "CWE-77",
      "title": "jiantao88 android-mcp-server Command Execution index.js child_process.exec os command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19978"
    },
    {
      "rank": 21,
      "cve_id": "CVE-2026-16139",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00653,
      "epss_percentile": 0.48499,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "ShareFile Storage Zones Controller",
      "cwe": "CWE-20",
      "title": "Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16139"
    },
    {
      "rank": 22,
      "cve_id": "CVE-2026-74845",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0065,
      "epss_percentile": 0.48376,
      "kev": false,
      "kev_due_at": null,
      "vendor": "2100 Technology",
      "product": "Official Document Management System",
      "cwe": "CWE-434",
      "title": "2100 Technology｜Official Document Management System - Arbitrary File Upload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74845"
    },
    {
      "rank": 23,
      "cve_id": "CVE-2026-75482",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00622,
      "epss_percentile": 0.47133,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SWE-agent",
      "product": "SWE-agent",
      "cwe": "CWE-22",
      "title": "SWE-agent Trajectory Inspector Path Traversal File Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75482"
    },
    {
      "rank": 24,
      "cve_id": "CVE-2025-27770",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.0061,
      "epss_percentile": 0.46501,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uptrain-ai",
      "product": "uptrain",
      "cwe": "CWE-74",
      "title": "UpTrain vulnerable to Remote code execution at `/create_project`",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27770"
    },
    {
      "rank": 25,
      "cve_id": "CVE-2025-27771",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.0061,
      "epss_percentile": 0.46501,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uptrain-ai",
      "product": "uptrain",
      "cwe": "CWE-74",
      "title": "Uptrain vulnerable to remote code execution via `/add_prompts` endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27771"
    },
    {
      "rank": 26,
      "cve_id": "CVE-2025-27772",
      "cvss_base": 7.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.0061,
      "epss_percentile": 0.46501,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uptrain-ai",
      "product": "uptrain",
      "cwe": "CWE-74",
      "title": "Uptrain vulnerable to remote code execution via `/new_run` endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27772"
    },
    {
      "rank": 27,
      "cve_id": "CVE-2026-38165",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00596,
      "epss_percentile": 0.45803,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-38165"
    },
    {
      "rank": 28,
      "cve_id": "CVE-2026-67926",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00589,
      "epss_percentile": 0.45528,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67926"
    },
    {
      "rank": 29,
      "cve_id": "CVE-2026-67965",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00589,
      "epss_percentile": 0.45528,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-78",
      "title": "An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67965"
    },
    {
      "rank": 30,
      "cve_id": "CVE-2026-50768",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00587,
      "epss_percentile": 0.45432,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-434",
      "title": "File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50768"
    },
    {
      "rank": 31,
      "cve_id": "CVE-2026-67678",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00587,
      "epss_percentile": 0.45431,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-434",
      "title": "File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67678"
    },
    {
      "rank": 32,
      "cve_id": "CVE-2026-74843",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00584,
      "epss_percentile": 0.45266,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Wavlink",
      "product": "WN531P3",
      "cwe": "CWE-119",
      "title": "Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74843"
    },
    {
      "rank": 33,
      "cve_id": "CVE-2026-67868",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00576,
      "epss_percentile": 0.44882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-122",
      "title": "A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67868"
    },
    {
      "rank": 34,
      "cve_id": "CVE-2026-39254",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00561,
      "epss_percentile": 0.44133,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-120",
      "title": "Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39254"
    },
    {
      "rank": 35,
      "cve_id": "CVE-2026-39255",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00561,
      "epss_percentile": 0.44133,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-120",
      "title": "Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dup_wcs components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-39255"
    },
    {
      "rank": 36,
      "cve_id": "CVE-2026-47698",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0056,
      "epss_percentile": 0.44041,
      "kev": false,
      "kev_due_at": null,
      "vendor": "patriksimek",
      "product": "vm2",
      "cwe": "CWE-913",
      "title": "vm2: Sandbox Breakout Using Dangerous Host Proto Mutators",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47698"
    },
    {
      "rank": 37,
      "cve_id": "CVE-2026-65974",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00557,
      "epss_percentile": 0.4393,
      "kev": false,
      "kev_due_at": null,
      "vendor": "frappe",
      "product": "erpnext",
      "cwe": "CWE-1336",
      "title": "ERPNext: Server-Side Template Injection leading to Remote Code Execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65974"
    },
    {
      "rank": 38,
      "cve_id": "CVE-2026-64780",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00552,
      "epss_percentile": 0.43656,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64780"
    },
    {
      "rank": 39,
      "cve_id": "CVE-2026-64781",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00552,
      "epss_percentile": 0.43657,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-20",
      "title": "The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64781"
    },
    {
      "rank": 40,
      "cve_id": "CVE-2026-71479",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00519,
      "epss_percentile": 0.4178,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumNous",
      "product": "new-api",
      "cwe": "CWE-190",
      "title": "New API: Integer overflow in quota billing yields negative charges (self-crediting)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71479"
    },
    {
      "rank": 41,
      "cve_id": "CVE-2026-16137",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00519,
      "epss_percentile": 0.41733,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "ShareFile Storage Zones Controller",
      "cwe": "CWE-22",
      "title": "Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16137"
    },
    {
      "rank": 42,
      "cve_id": "CVE-2026-75110",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00516,
      "epss_percentile": 0.41549,
      "kev": false,
      "kev_due_at": null,
      "vendor": "MemTensor",
      "product": "MemOS",
      "cwe": "CWE-697",
      "title": "MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75110"
    },
    {
      "rank": 43,
      "cve_id": "CVE-2026-50772",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00515,
      "epss_percentile": 0.41483,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50772"
    },
    {
      "rank": 44,
      "cve_id": "CVE-2026-44845",
      "cvss_base": 6.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00501,
      "epss_percentile": 0.40605,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jumpserver",
      "product": "jumpserver",
      "cwe": "CWE-1336",
      "title": "JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44845"
    },
    {
      "rank": 45,
      "cve_id": "CVE-2026-71979",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00482,
      "epss_percentile": 0.39339,
      "kev": false,
      "kev_due_at": null,
      "vendor": "indilib",
      "product": "indi",
      "cwe": "CWE-121",
      "title": "INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71979"
    },
    {
      "rank": 46,
      "cve_id": "CVE-2026-57233",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0048,
      "epss_percentile": 0.39235,
      "kev": false,
      "kev_due_at": null,
      "vendor": "notepad-plus-plus",
      "product": "notepad-plus-plus",
      "cwe": "CWE-22",
      "title": "Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57233"
    },
    {
      "rank": 47,
      "cve_id": "CVE-2026-56685",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00476,
      "epss_percentile": 0.38973,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-78",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56685"
    },
    {
      "rank": 48,
      "cve_id": "CVE-2026-19650",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00473,
      "epss_percentile": 0.388,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GitLab",
      "product": "GitLab",
      "cwe": "CWE-352",
      "title": "Cross-Site Request Forgery (CSRF) in GitLab",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19650"
    },
    {
      "rank": 49,
      "cve_id": "CVE-2026-43795",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43795"
    },
    {
      "rank": 50,
      "cve_id": "CVE-2026-64784",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38778,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-125",
      "title": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64784"
    },
    {
      "rank": 51,
      "cve_id": "CVE-2026-65331",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-703",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65331"
    },
    {
      "rank": 52,
      "cve_id": "CVE-2026-65332",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38775,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-703",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65332"
    },
    {
      "rank": 53,
      "cve_id": "CVE-2026-65333",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65333"
    },
    {
      "rank": 54,
      "cve_id": "CVE-2026-65334",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65334"
    },
    {
      "rank": 55,
      "cve_id": "CVE-2026-65335",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38777,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65335"
    },
    {
      "rank": 56,
      "cve_id": "CVE-2026-65336",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38777,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-20",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65336"
    },
    {
      "rank": 57,
      "cve_id": "CVE-2026-65337",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38775,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-20",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65337"
    },
    {
      "rank": 58,
      "cve_id": "CVE-2026-65338",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38777,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65338"
    },
    {
      "rank": 59,
      "cve_id": "CVE-2026-65340",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00473,
      "epss_percentile": 0.38777,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-20",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65340"
    },
    {
      "rank": 60,
      "cve_id": "CVE-2026-64868",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00467,
      "epss_percentile": 0.38348,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumNous",
      "product": "new-api",
      "cwe": "CWE-400",
      "title": "New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64868"
    },
    {
      "rank": 61,
      "cve_id": "CVE-2026-64859",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00464,
      "epss_percentile": 0.38148,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumNous",
      "product": "new-api",
      "cwe": "CWE-200",
      "title": "New API: User List API Leaks Root User Access Token Leading to Privilege Escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64859"
    },
    {
      "rank": 62,
      "cve_id": "CVE-2026-74872",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0046,
      "epss_percentile": 0.37877,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-426",
      "title": "openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74872"
    },
    {
      "rank": 63,
      "cve_id": "CVE-2026-65351",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00458,
      "epss_percentile": 0.37726,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-703",
      "title": "This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65351"
    },
    {
      "rank": 64,
      "cve_id": "CVE-2026-67967",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00454,
      "epss_percentile": 0.37478,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-121",
      "title": "Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67967"
    },
    {
      "rank": 65,
      "cve_id": "CVE-2026-40506",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00448,
      "epss_percentile": 0.371,
      "kev": false,
      "kev_due_at": null,
      "vendor": "openemr",
      "product": "openemr",
      "cwe": "CWE-22",
      "title": "OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40506"
    },
    {
      "rank": 66,
      "cve_id": "CVE-2026-50775",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0044,
      "epss_percentile": 0.36479,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-918",
      "title": "A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50775"
    },
    {
      "rank": 67,
      "cve_id": "CVE-2026-71472",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00439,
      "epss_percentile": 0.36378,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
      "cwe": "CWE-78",
      "title": "Acm-search-v2-rhel9: search-v2-operator: shell-command and sql injection in postgresql-start.sh via cr-supplied work_mem",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71472"
    },
    {
      "rank": 68,
      "cve_id": "CVE-2025-27621",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00432,
      "epss_percentile": 0.35785,
      "kev": false,
      "kev_due_at": null,
      "vendor": "uptrain-ai",
      "product": "uptrain",
      "cwe": "CWE-287",
      "title": "UpTrain has a Constant Default API Key",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27621"
    },
    {
      "rank": 69,
      "cve_id": "CVE-2026-15218",
      "cvss_base": 7.9,
      "cvss_severity": "HIGH",
      "epss_score": 0.00428,
      "epss_percentile": 0.35466,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat OpenShift AI (RHOAI)",
      "cwe": "CWE-266",
      "title": "Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15218"
    },
    {
      "rank": 70,
      "cve_id": "CVE-2026-56686",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00424,
      "epss_percentile": 0.35091,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-78",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56686"
    },
    {
      "rank": 71,
      "cve_id": "CVE-2026-59910",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00424,
      "epss_percentile": 0.3509,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-78",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59910"
    },
    {
      "rank": 72,
      "cve_id": "CVE-2026-67917",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00414,
      "epss_percentile": 0.3421,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-89",
      "title": "zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The `azuracast:restore` command executes the `db.sql` file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate privileges",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67917"
    },
    {
      "rank": 73,
      "cve_id": "CVE-2026-68005",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.0041,
      "epss_percentile": 0.33792,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-400",
      "title": "An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68005"
    },
    {
      "rank": 74,
      "cve_id": "CVE-2026-74895",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00409,
      "epss_percentile": 0.3369,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-693",
      "title": "openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74895"
    },
    {
      "rank": 75,
      "cve_id": "CVE-2026-67966",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00407,
      "epss_percentile": 0.33582,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-306",
      "title": "Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67966"
    },
    {
      "rank": 76,
      "cve_id": "CVE-2026-67960",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00403,
      "epss_percentile": 0.33223,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67960"
    },
    {
      "rank": 77,
      "cve_id": "CVE-2026-51346",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00403,
      "epss_percentile": 0.33151,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-89",
      "title": "SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store() functions.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-51346"
    },
    {
      "rank": 78,
      "cve_id": "CVE-2026-67854",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00397,
      "epss_percentile": 0.32486,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-89",
      "title": "SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67854"
    },
    {
      "rank": 79,
      "cve_id": "CVE-2026-74886",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00396,
      "epss_percentile": 0.3244,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-184",
      "title": "openssl_encrypt before 1.4.0 Plugin Import Guard Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74886"
    },
    {
      "rank": 80,
      "cve_id": "CVE-2026-19965",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00396,
      "epss_percentile": 0.32417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "automad",
      "cwe": "CWE-203",
      "title": "automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19965"
    },
    {
      "rank": 81,
      "cve_id": "CVE-2026-64779",
      "cvss_base": 3.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00394,
      "epss_percentile": 0.32174,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-362",
      "title": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64779"
    },
    {
      "rank": 82,
      "cve_id": "CVE-2026-74894",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00393,
      "epss_percentile": 0.3216,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-287",
      "title": "openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74894"
    },
    {
      "rank": 83,
      "cve_id": "CVE-2026-19979",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00393,
      "epss_percentile": 0.32158,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GL.iNet",
      "product": "A1300",
      "cwe": "CWE-285",
      "title": "GL.iNet XE3000 WebDAV Service MOVE authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19979"
    },
    {
      "rank": 84,
      "cve_id": "CVE-2026-19997",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.00393,
      "epss_percentile": 0.3211,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-285",
      "title": "Webkul Bagisto Backend Sales RMA Endpoint requests authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19997"
    },
    {
      "rank": 85,
      "cve_id": "CVE-2026-75111",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00389,
      "epss_percentile": 0.31736,
      "kev": false,
      "kev_due_at": null,
      "vendor": "evidentlyai",
      "product": "evidently",
      "cwe": "CWE-22",
      "title": "Evidently UI Path Traversal via Dataset Materialization Filename",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75111"
    },
    {
      "rank": 86,
      "cve_id": "CVE-2026-74899",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00388,
      "epss_percentile": 0.31619,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-95",
      "title": "openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74899"
    },
    {
      "rank": 87,
      "cve_id": "CVE-2026-74799",
      "cvss_base": 9.2,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00385,
      "epss_percentile": 0.31279,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-215",
      "title": "SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74799"
    },
    {
      "rank": 88,
      "cve_id": "CVE-2026-71518",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00384,
      "epss_percentile": 0.31208,
      "kev": false,
      "kev_due_at": null,
      "vendor": "typemill",
      "product": "typemill",
      "cwe": "CWE-863",
      "title": "Typemill < 2.26.0 Authorization Bypass via Media File Download Route",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71518"
    },
    {
      "rank": 89,
      "cve_id": "CVE-2026-47686",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00379,
      "epss_percentile": 0.30655,
      "kev": false,
      "kev_due_at": null,
      "vendor": "patriksimek",
      "product": "vm2",
      "cwe": "CWE-693",
      "title": "vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47686"
    },
    {
      "rank": 90,
      "cve_id": "CVE-2026-73646",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00377,
      "epss_percentile": 0.30388,
      "kev": false,
      "kev_due_at": null,
      "vendor": "postcss",
      "product": "postcss",
      "cwe": "CWE-22",
      "title": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73646"
    },
    {
      "rank": 91,
      "cve_id": "CVE-2026-74238",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00375,
      "epss_percentile": 0.30183,
      "kev": false,
      "kev_due_at": null,
      "vendor": "tier4",
      "product": "nebula",
      "cwe": "CWE-125",
      "title": "TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74238"
    },
    {
      "rank": 92,
      "cve_id": "CVE-2026-74868",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00375,
      "epss_percentile": 0.30185,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-307",
      "title": "SiYuan before 3.7.4 Brute-Force Authentication via Publish Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74868"
    },
    {
      "rank": 93,
      "cve_id": "CVE-2026-65343",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00374,
      "epss_percentile": 0.30143,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-416",
      "title": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65343"
    },
    {
      "rank": 94,
      "cve_id": "CVE-2026-74878",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00372,
      "epss_percentile": 0.29939,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-770",
      "title": "openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74878"
    },
    {
      "rank": 95,
      "cve_id": "CVE-2026-59902",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00371,
      "epss_percentile": 0.29844,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netty",
      "product": "netty",
      "cwe": "CWE-400",
      "title": "Netty: Memory Exhaustion in SctpMessageCompletionHandler",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59902"
    },
    {
      "rank": 96,
      "cve_id": "CVE-2026-19974",
      "cvss_base": 2.9,
      "cvss_severity": "LOW",
      "epss_score": 0.00371,
      "epss_percentile": 0.29833,
      "kev": false,
      "kev_due_at": null,
      "vendor": "treefrogframework",
      "product": "treefrog-framework",
      "cwe": "CWE-287",
      "title": "treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19974"
    },
    {
      "rank": 97,
      "cve_id": "CVE-2026-64715",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00368,
      "epss_percentile": 0.29437,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-416",
      "title": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64715"
    },
    {
      "rank": 98,
      "cve_id": "CVE-2026-19968",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00368,
      "epss_percentile": 0.29424,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Open Asset Import Library",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19968"
    },
    {
      "rank": 99,
      "cve_id": "CVE-2026-74798",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00366,
      "epss_percentile": 0.2924,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-22",
      "title": "SiYuan kernel Path Traversal via database_clean MCP tool",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74798"
    },
    {
      "rank": 100,
      "cve_id": "CVE-2026-64866",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00363,
      "epss_percentile": 0.28944,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumNous",
      "product": "new-api",
      "cwe": "CWE-862",
      "title": "New API: Admin can reset passkeys for same-level or higher-privileged users",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64866"
    },
    {
      "rank": 101,
      "cve_id": "CVE-2026-75012",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0036,
      "epss_percentile": 0.28665,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TOTOLINK",
      "product": "EX1200L",
      "cwe": "CWE-404",
      "title": "TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75012"
    },
    {
      "rank": 102,
      "cve_id": "CVE-2026-75013",
      "cvss_base": 5.7,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0036,
      "epss_percentile": 0.28665,
      "kev": false,
      "kev_due_at": null,
      "vendor": "TOTOLINK",
      "product": "EX1200L",
      "cwe": "CWE-404",
      "title": "TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75013"
    },
    {
      "rank": 103,
      "cve_id": "CVE-2026-55674",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00356,
      "epss_percentile": 0.28248,
      "kev": false,
      "kev_due_at": null,
      "vendor": "discourse",
      "product": "discourse",
      "cwe": "CWE-79",
      "title": "Discourse: Cache poisoning/XSS via color scheme cookies",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55674"
    },
    {
      "rank": 104,
      "cve_id": "CVE-2026-75479",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00356,
      "epss_percentile": 0.28268,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jeecgboot",
      "product": "jimureport",
      "cwe": "CWE-306",
      "title": "JimuReport Unauthenticated Report Listing and Share Token Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75479"
    },
    {
      "rank": 105,
      "cve_id": "CVE-2026-42162",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00349,
      "epss_percentile": 0.27445,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-22",
      "title": "Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42162"
    },
    {
      "rank": 106,
      "cve_id": "CVE-2026-64782",
      "cvss_base": 3.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00348,
      "epss_percentile": 0.27424,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-362",
      "title": "A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64782"
    },
    {
      "rank": 107,
      "cve_id": "CVE-2026-19998",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00347,
      "epss_percentile": 0.27284,
      "kev": false,
      "kev_due_at": null,
      "vendor": "code-projects",
      "product": "Online Shopping System",
      "cwe": "CWE-79",
      "title": "code-projects Online Shopping System offersmail.php cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19998"
    },
    {
      "rank": 108,
      "cve_id": "CVE-2026-43794",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00346,
      "epss_percentile": 0.27146,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43794"
    },
    {
      "rank": 109,
      "cve_id": "CVE-2026-19996",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00344,
      "epss_percentile": 0.26923,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-266",
      "title": "Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19996"
    },
    {
      "rank": 110,
      "cve_id": "CVE-2026-19970",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00343,
      "epss_percentile": 0.26857,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Open Asset Import Library",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19970"
    },
    {
      "rank": 111,
      "cve_id": "CVE-2026-63667",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00341,
      "epss_percentile": 0.26635,
      "kev": false,
      "kev_due_at": null,
      "vendor": "apostrophecms",
      "product": "apostrophe",
      "cwe": "CWE-22",
      "title": "ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63667"
    },
    {
      "rank": 112,
      "cve_id": "CVE-2026-71486",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00341,
      "epss_percentile": 0.26671,
      "kev": false,
      "kev_due_at": null,
      "vendor": "vllm-project",
      "product": "vllm",
      "cwe": "CWE-400",
      "title": "vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71486"
    },
    {
      "rank": 113,
      "cve_id": "CVE-2026-75006",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0034,
      "epss_percentile": 0.26559,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-918",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for CVE-2026-35540, CVE-2026-48843 and CVE-2026-62643.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75006"
    },
    {
      "rank": 114,
      "cve_id": "CVE-2026-50770",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00339,
      "epss_percentile": 0.26372,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-269",
      "title": "An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50770"
    },
    {
      "rank": 115,
      "cve_id": "CVE-2026-50774",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00339,
      "epss_percentile": 0.26371,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-269",
      "title": "An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50774"
    },
    {
      "rank": 116,
      "cve_id": "CVE-2026-71980",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00339,
      "epss_percentile": 0.26343,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BelledonneCommunications",
      "product": "bcg729",
      "cwe": "CWE-125",
      "title": "Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71980"
    },
    {
      "rank": 117,
      "cve_id": "CVE-2026-61666",
      "cvss_base": 8.9,
      "cvss_severity": "HIGH",
      "epss_score": 0.00338,
      "epss_percentile": 0.26258,
      "kev": false,
      "kev_due_at": null,
      "vendor": "faye",
      "product": "websocket-driver-ruby",
      "cwe": "CWE-248",
      "title": "websocket-driver: Denial of service via malformed Host header",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61666"
    },
    {
      "rank": 118,
      "cve_id": "CVE-2026-75103",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00338,
      "epss_percentile": 0.26258,
      "kev": false,
      "kev_due_at": null,
      "vendor": "crawlab-team",
      "product": "crawlab",
      "cwe": "CWE-639",
      "title": "Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75103"
    },
    {
      "rank": 119,
      "cve_id": "CVE-2026-74896",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00337,
      "epss_percentile": 0.26106,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-693",
      "title": "openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74896"
    },
    {
      "rank": 120,
      "cve_id": "CVE-2026-74900",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00337,
      "epss_percentile": 0.26106,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-391",
      "title": "openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74900"
    },
    {
      "rank": 121,
      "cve_id": "CVE-2026-50769",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00335,
      "epss_percentile": 0.25885,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-89",
      "title": "The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is vulnerable to SQL injection allowing an attacker to execute arbitrary code.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50769"
    },
    {
      "rank": 122,
      "cve_id": "CVE-2026-65346",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00333,
      "epss_percentile": 0.25693,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-190",
      "title": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65346"
    },
    {
      "rank": 123,
      "cve_id": "CVE-2026-42163",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00331,
      "epss_percentile": 0.25416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-284",
      "title": "Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42163"
    },
    {
      "rank": 124,
      "cve_id": "CVE-2026-44846",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00328,
      "epss_percentile": 0.25141,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jumpserver",
      "product": "jumpserver",
      "cwe": "CWE-863",
      "title": "JumpServer: Privilege Overwrite via Organization Invite Logic Flaw",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-44846"
    },
    {
      "rank": 125,
      "cve_id": "CVE-2026-75014",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00328,
      "epss_percentile": 0.25153,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Pet Grooming Management Software",
      "cwe": "CWE-74",
      "title": "SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75014"
    },
    {
      "rank": 126,
      "cve_id": "CVE-2026-73523",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00324,
      "epss_percentile": 0.24648,
      "kev": false,
      "kev_due_at": null,
      "vendor": "COVESA",
      "product": "Open1722",
      "cwe": "CWE-197",
      "title": "COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73523"
    },
    {
      "rank": 127,
      "cve_id": "CVE-2026-75531",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00324,
      "epss_percentile": 0.24715,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pandora-analysis",
      "product": "pandora",
      "cwe": "CWE-79",
      "title": "Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75531"
    },
    {
      "rank": 128,
      "cve_id": "CVE-2026-74253",
      "cvss_base": 10,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00323,
      "epss_percentile": 0.24559,
      "kev": false,
      "kev_due_at": null,
      "vendor": "regularlabs.com",
      "product": "Sourcerer extension for Joomla",
      "cwe": "CWE-94",
      "title": "Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74253"
    },
    {
      "rank": 129,
      "cve_id": "CVE-2026-66792",
      "cvss_base": 9.9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00323,
      "epss_percentile": 0.24611,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Multicluster Global Hub",
      "cwe": "CWE-863",
      "title": "Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66792"
    },
    {
      "rank": 130,
      "cve_id": "CVE-2026-45791",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00322,
      "epss_percentile": 0.24456,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokploy",
      "product": "dokploy",
      "cwe": "CWE-613",
      "title": "Dokploy: Password Change Does Not Revoke Active Sessions",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45791"
    },
    {
      "rank": 131,
      "cve_id": "CVE-2026-75000",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00322,
      "epss_percentile": 0.24494,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-669",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate \"by\" attribute may lead to remote image blocking bypass, which in turn may lead to information disclosure or privilege escalation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75000"
    },
    {
      "rank": 132,
      "cve_id": "CVE-2026-64778",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0032,
      "epss_percentile": 0.24203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-200",
      "title": "The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a maliciously crafted website may leak sensitive data.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64778"
    },
    {
      "rank": 133,
      "cve_id": "CVE-2026-73560",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00319,
      "epss_percentile": 0.24137,
      "kev": false,
      "kev_due_at": null,
      "vendor": "vllm-project",
      "product": "vllm",
      "cwe": "CWE-918",
      "title": "vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73560"
    },
    {
      "rank": 134,
      "cve_id": "CVE-2026-12553",
      "cvss_base": 8.9,
      "cvss_severity": "HIGH",
      "epss_score": 0.00312,
      "epss_percentile": 0.23294,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HP Inc.",
      "product": "Web Jetadmin",
      "cwe": "CWE-787",
      "title": "HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12553"
    },
    {
      "rank": 135,
      "cve_id": "CVE-2026-71553",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00312,
      "epss_percentile": 0.23397,
      "kev": false,
      "kev_due_at": null,
      "vendor": "apostrophecms",
      "product": "apostrophe",
      "cwe": "CWE-1321",
      "title": "ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71553"
    },
    {
      "rank": 136,
      "cve_id": "CVE-2026-19992",
      "cvss_base": 1.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00312,
      "epss_percentile": 0.2333,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Orange View Limited",
      "product": "DualSafe Password Manager & Digital Vault Extension",
      "cwe": "CWE-200",
      "title": "Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19992"
    },
    {
      "rank": 137,
      "cve_id": "CVE-2026-65976",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00311,
      "epss_percentile": 0.23181,
      "kev": false,
      "kev_due_at": null,
      "vendor": "deskflow",
      "product": "deskflow",
      "cwe": "CWE-400",
      "title": "Deskflow: Clipboard receiver can accumulate data beyond Deskflow's configured clipboard size limit",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65976"
    },
    {
      "rank": 138,
      "cve_id": "CVE-2026-47683",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.0031,
      "epss_percentile": 0.2308,
      "kev": false,
      "kev_due_at": null,
      "vendor": "patriksimek",
      "product": "vm2",
      "cwe": "CWE-770",
      "title": "vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-47683"
    },
    {
      "rank": 139,
      "cve_id": "CVE-2026-19987",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00308,
      "epss_percentile": 0.22913,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Best Employee Management System",
      "cwe": "CWE-548",
      "title": "SourceCodester Best Employee Management System Profile exposure of information through directory listing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19987"
    },
    {
      "rank": 140,
      "cve_id": "CVE-2026-42164",
      "cvss_base": 9.8,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00307,
      "epss_percentile": 0.22819,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-200",
      "title": "Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42164"
    },
    {
      "rank": 141,
      "cve_id": "CVE-2026-74880",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00307,
      "epss_percentile": 0.22819,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-598",
      "title": "openssl_encrypt before 1.4.0 Token Leakage via Query Parameters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74880"
    },
    {
      "rank": 142,
      "cve_id": "CVE-2026-75003",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00307,
      "epss_percentile": 0.22777,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-669",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75003"
    },
    {
      "rank": 143,
      "cve_id": "CVE-2026-74892",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00306,
      "epss_percentile": 0.22669,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-798",
      "title": "openssl_encrypt before 1.4.0 Hardcoded Secret Key",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74892"
    },
    {
      "rank": 144,
      "cve_id": "CVE-2026-75106",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00305,
      "epss_percentile": 0.22558,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpnForm",
      "product": "OpnForm",
      "cwe": "CWE-340",
      "title": "OpnForm Editable Submission Secret Derivation via Empty Hashids Salt",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75106"
    },
    {
      "rank": 145,
      "cve_id": "CVE-2026-65832",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00303,
      "epss_percentile": 0.22303,
      "kev": false,
      "kev_due_at": null,
      "vendor": "deskflow",
      "product": "deskflow",
      "cwe": "CWE-125",
      "title": "Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65832"
    },
    {
      "rank": 146,
      "cve_id": "CVE-2026-75045",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00299,
      "epss_percentile": 0.21905,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-288",
      "title": "In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75045"
    },
    {
      "rank": 147,
      "cve_id": "CVE-2026-40126",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00297,
      "epss_percentile": 0.21706,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OutSystems",
      "product": "Service Center",
      "cwe": "CWE-79",
      "title": "DOM-based Cross-Site Scripting in OutSystems Service Center",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40126"
    },
    {
      "rank": 148,
      "cve_id": "CVE-2026-10080",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00296,
      "epss_percentile": 0.21608,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-704",
      "title": "Boards plugin panics on WebSocket command with non-string field types",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10080"
    },
    {
      "rank": 149,
      "cve_id": "CVE-2026-16467",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00293,
      "epss_percentile": 0.21213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dolusoft Software Technologies",
      "product": "Fortilogger",
      "cwe": "CWE-862",
      "title": "Broken Access Control in Dolusoft Software's Fortilogger",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16467"
    },
    {
      "rank": 150,
      "cve_id": "CVE-2026-64787",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00293,
      "epss_percentile": 0.21256,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-416",
      "title": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
    },
    {
      "rank": 151,
      "cve_id": "CVE-2026-71424",
      "cvss_base": 9.6,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00291,
      "epss_percentile": 0.21034,
      "kev": false,
      "kev_due_at": null,
      "vendor": "onyx-dot-app",
      "product": "onyx",
      "cwe": "CWE-200",
      "title": "Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71424"
    },
    {
      "rank": 152,
      "cve_id": "CVE-2026-17639",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00289,
      "epss_percentile": 0.20815,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HP Inc",
      "product": "HP Smart Tank 5101 All-in-One Printer",
      "cwe": "CWE-400",
      "title": "Certain HP Smart Tank All in One – Potential Denial of Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17639"
    },
    {
      "rank": 153,
      "cve_id": "CVE-2026-74800",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00288,
      "epss_percentile": 0.20767,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-79",
      "title": "SiYuan before v3.7.4 Stored XSS via assets endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74800"
    },
    {
      "rank": 154,
      "cve_id": "CVE-2026-19969",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00288,
      "epss_percentile": 0.20785,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Open Asset Import Library",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19969"
    },
    {
      "rank": 155,
      "cve_id": "CVE-2026-51977",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00287,
      "epss_percentile": 0.20608,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-321",
      "title": "An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-51977"
    },
    {
      "rank": 156,
      "cve_id": "CVE-2026-68762",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00286,
      "epss_percentile": 0.20553,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "Ktor",
      "cwe": "CWE-835",
      "title": "In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68762"
    },
    {
      "rank": 157,
      "cve_id": "CVE-2026-75004",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00286,
      "epss_percentile": 0.20505,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-77",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75004"
    },
    {
      "rank": 158,
      "cve_id": "CVE-2026-63178",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00285,
      "epss_percentile": 0.20425,
      "kev": false,
      "kev_due_at": null,
      "vendor": "onyx-dot-app",
      "product": "onyx",
      "cwe": "CWE-639",
      "title": "Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63178"
    },
    {
      "rank": 159,
      "cve_id": "CVE-2026-19994",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00285,
      "epss_percentile": 0.20416,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-285",
      "title": "Webkul Bagisto Configuration Management execute authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19994"
    },
    {
      "rank": 160,
      "cve_id": "CVE-2026-74891",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00284,
      "epss_percentile": 0.20379,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-798",
      "title": "openssl_encrypt before 1.4.0 Hardcoded Database Credentials",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74891"
    },
    {
      "rank": 161,
      "cve_id": "CVE-2026-45790",
      "cvss_base": 8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00284,
      "epss_percentile": 0.20304,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dokploy",
      "product": "dokploy",
      "cwe": "CWE-269",
      "title": "Dokploy: Invitation Role Escalation Allows Organization Takeover",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45790"
    },
    {
      "rank": 162,
      "cve_id": "CVE-2026-75481",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00283,
      "epss_percentile": 0.20277,
      "kev": false,
      "kev_due_at": null,
      "vendor": "skypilot-org",
      "product": "skypilot",
      "cwe": "CWE-269",
      "title": "SkyPilot Authentication Bypass via Service Account Role Escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75481"
    },
    {
      "rank": 163,
      "cve_id": "CVE-2026-48053",
      "cvss_base": 5.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00282,
      "epss_percentile": 0.20111,
      "kev": false,
      "kev_due_at": null,
      "vendor": "learningequality",
      "product": "kolibri",
      "cwe": "CWE-918",
      "title": "Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48053"
    },
    {
      "rank": 164,
      "cve_id": "CVE-2026-19971",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00282,
      "epss_percentile": 0.20105,
      "kev": false,
      "kev_due_at": null,
      "vendor": "LB-Link",
      "product": "WR1210M",
      "cwe": "CWE-287",
      "title": "LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19971"
    },
    {
      "rank": 165,
      "cve_id": "CVE-2026-74254",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00281,
      "epss_percentile": 0.19994,
      "kev": false,
      "kev_due_at": null,
      "vendor": "joomlack.fr",
      "product": "Page Builder CK extension for Joomla",
      "cwe": "CWE-89",
      "title": "Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74254"
    },
    {
      "rank": 166,
      "cve_id": "CVE-2026-19693",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0028,
      "epss_percentile": 0.19917,
      "kev": false,
      "kev_due_at": null,
      "vendor": "max-mapper",
      "product": "extract-zip",
      "cwe": "CWE-59",
      "title": "extract-zip arbitrary file write outside the destination directory via a symlink at the final path component",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19693"
    },
    {
      "rank": 167,
      "cve_id": "CVE-2026-74881",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0028,
      "epss_percentile": 0.19921,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-942",
      "title": "openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74881"
    },
    {
      "rank": 168,
      "cve_id": "CVE-2026-59893",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00279,
      "epss_percentile": 0.19792,
      "kev": false,
      "kev_due_at": null,
      "vendor": "andialbrecht",
      "product": "sqlparse",
      "cwe": "CWE-1333",
      "title": "sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59893"
    },
    {
      "rank": 169,
      "cve_id": "CVE-2026-75010",
      "cvss_base": 6.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00279,
      "epss_percentile": 0.19778,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-669",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via crafted session data. This issue only affects Roundcube instances using the password plugin with its modoboa driver.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75010"
    },
    {
      "rank": 170,
      "cve_id": "CVE-2026-33437",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00278,
      "epss_percentile": 0.19711,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Stirling-Tools",
      "product": "Stirling-PDF",
      "cwe": "CWE-79",
      "title": "Stirling PDF: Stored XSS in Info Summary",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33437"
    },
    {
      "rank": 171,
      "cve_id": "CVE-2026-75077",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00278,
      "epss_percentile": 0.19739,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Class and Exam Timetabling System",
      "cwe": "CWE-79",
      "title": "SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75077"
    },
    {
      "rank": 172,
      "cve_id": "CVE-2026-75105",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00277,
      "epss_percentile": 0.19549,
      "kev": false,
      "kev_due_at": null,
      "vendor": "phpipam",
      "product": "phpipam",
      "cwe": "CWE-639",
      "title": "phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75105"
    },
    {
      "rank": 173,
      "cve_id": "CVE-2026-75529",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00277,
      "epss_percentile": 0.19576,
      "kev": false,
      "kev_due_at": null,
      "vendor": "pandora-analysis",
      "product": "pandora",
      "cwe": "CWE-79",
      "title": "Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75529"
    },
    {
      "rank": 174,
      "cve_id": "CVE-2026-19993",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00277,
      "epss_percentile": 0.19569,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-840",
      "title": "Webkul Bagisto RMA State Validation update-status behavioral workflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19993"
    },
    {
      "rank": 175,
      "cve_id": "CVE-2026-13700",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00273,
      "epss_percentile": 0.19158,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "WooMS",
      "cwe": "CWE-918",
      "title": "WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13700"
    },
    {
      "rank": 176,
      "cve_id": "CVE-2026-19999",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00273,
      "epss_percentile": 0.1916,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Open Asset Import Library Assimp",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19999"
    },
    {
      "rank": 177,
      "cve_id": "CVE-2026-75078",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00273,
      "epss_percentile": 0.1911,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Class and Exam Timetabling System",
      "cwe": "CWE-79",
      "title": "SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75078"
    },
    {
      "rank": 178,
      "cve_id": "CVE-2026-45698",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00272,
      "epss_percentile": 0.18988,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Netatalk",
      "product": "netatalk",
      "cwe": "CWE-191",
      "title": "Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45698"
    },
    {
      "rank": 179,
      "cve_id": "CVE-2026-56677",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00271,
      "epss_percentile": 0.18798,
      "kev": false,
      "kev_due_at": null,
      "vendor": "decolua",
      "product": "9router",
      "cwe": "CWE-306",
      "title": "9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56677"
    },
    {
      "rank": 180,
      "cve_id": "CVE-2026-75081",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00271,
      "epss_percentile": 0.18812,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-840",
      "title": "Webkul Bagisto store behavioral workflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75081"
    },
    {
      "rank": 181,
      "cve_id": "CVE-2026-19988",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00269,
      "epss_percentile": 0.18535,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Alaev",
      "product": "SEO Tools Extension",
      "cwe": "CWE-74",
      "title": "Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19988"
    },
    {
      "rank": 182,
      "cve_id": "CVE-2026-74998",
      "cvss_base": 7.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00268,
      "epss_percentile": 0.18487,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-79",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74998"
    },
    {
      "rank": 183,
      "cve_id": "CVE-2026-35219",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00268,
      "epss_percentile": 0.18422,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Budibase",
      "product": "budibase",
      "cwe": "CWE-918",
      "title": "Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-35219"
    },
    {
      "rank": 184,
      "cve_id": "CVE-2026-74884",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00266,
      "epss_percentile": 0.18018,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-73",
      "title": "openssl_encrypt before 1.4.0 Path Traversal via plugin_id",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74884"
    },
    {
      "rank": 185,
      "cve_id": "CVE-2026-54336",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00266,
      "epss_percentile": 0.18064,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jumpserver",
      "product": "jumpserver",
      "cwe": "CWE-22",
      "title": "JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54336"
    },
    {
      "rank": 186,
      "cve_id": "CVE-2026-74801",
      "cvss_base": 8.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00265,
      "epss_percentile": 0.17917,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-78",
      "title": "SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74801"
    },
    {
      "rank": 187,
      "cve_id": "CVE-2026-43667",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00265,
      "epss_percentile": 0.1793,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-617",
      "title": "A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be able to cause a denial-of-service.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43667"
    },
    {
      "rank": 188,
      "cve_id": "CVE-2026-74893",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00264,
      "epss_percentile": 0.17816,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-798",
      "title": "openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74893"
    },
    {
      "rank": 189,
      "cve_id": "CVE-2026-65822",
      "cvss_base": 7.6,
      "cvss_severity": "HIGH",
      "epss_score": 0.00264,
      "epss_percentile": 0.17781,
      "kev": false,
      "kev_due_at": null,
      "vendor": "frappe",
      "product": "erpnext",
      "cwe": "CWE-89",
      "title": "ERPNext: SQL Injection in \"Inactive Customers\" report via unvalidated `doctype` filter",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65822"
    },
    {
      "rank": 190,
      "cve_id": "CVE-2026-19967",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00264,
      "epss_percentile": 0.179,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Open Asset Import Library",
      "product": "Assimp",
      "cwe": "CWE-119",
      "title": "Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19967"
    },
    {
      "rank": 191,
      "cve_id": "CVE-2026-54284",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00263,
      "epss_percentile": 0.17668,
      "kev": false,
      "kev_due_at": null,
      "vendor": "andialbrecht",
      "product": "sqlparse",
      "cwe": "CWE-407",
      "title": "sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54284"
    },
    {
      "rank": 192,
      "cve_id": "CVE-2026-71491",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00263,
      "epss_percentile": 0.17668,
      "kev": false,
      "kev_due_at": null,
      "vendor": "andialbrecht",
      "product": "sqlparse",
      "cwe": "CWE-400",
      "title": "sqlparse: Quadratic O(n²) DoS in group_comments",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71491"
    },
    {
      "rank": 193,
      "cve_id": "CVE-2026-75079",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00263,
      "epss_percentile": 0.17703,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Class and Exam Timetabling System",
      "cwe": "CWE-74",
      "title": "SourceCodester Class and Exam Timetabling System edit_subject2.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75079"
    },
    {
      "rank": 194,
      "cve_id": "CVE-2026-75080",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00263,
      "epss_percentile": 0.17698,
      "kev": false,
      "kev_due_at": null,
      "vendor": "SourceCodester",
      "product": "Class and Exam Timetabling System",
      "cwe": "CWE-74",
      "title": "SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75080"
    },
    {
      "rank": 195,
      "cve_id": "CVE-2026-13202",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00262,
      "epss_percentile": 0.17568,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OpenText",
      "product": "Opentext Directory Services",
      "cwe": "CWE-79",
      "title": "HTML Injection in OTDS Swagger UI",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13202"
    },
    {
      "rank": 196,
      "cve_id": "CVE-2026-74842",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00262,
      "epss_percentile": 0.17603,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kira-Pgr",
      "product": "PromptShopMCP",
      "cwe": "CWE-918",
      "title": "Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74842"
    },
    {
      "rank": 197,
      "cve_id": "CVE-2026-74877",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00261,
      "epss_percentile": 0.17448,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-639",
      "title": "openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74877"
    },
    {
      "rank": 198,
      "cve_id": "CVE-2026-9816",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00261,
      "epss_percentile": 0.1741,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Insufficient server-side validation of board member role fields permits privilege escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9816"
    },
    {
      "rank": 199,
      "cve_id": "CVE-2026-67925",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00261,
      "epss_percentile": 0.17411,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-79",
      "title": "Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67925"
    },
    {
      "rank": 200,
      "cve_id": "CVE-2026-74879",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00259,
      "epss_percentile": 0.17184,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-209",
      "title": "openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74879"
    },
    {
      "rank": 201,
      "cve_id": "CVE-2026-75049",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00259,
      "epss_percentile": 0.17213,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-862",
      "title": "In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75049"
    },
    {
      "rank": 202,
      "cve_id": "CVE-2026-74869",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00258,
      "epss_percentile": 0.17052,
      "kev": false,
      "kev_due_at": null,
      "vendor": "stoatchat",
      "product": "stoatchat",
      "cwe": "CWE-862",
      "title": "stoatchat before 0.15.0 Missing Authorization via Subscribe",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74869"
    },
    {
      "rank": 203,
      "cve_id": "CVE-2026-63409",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.00258,
      "epss_percentile": 0.17141,
      "kev": false,
      "kev_due_at": null,
      "vendor": "deskflow",
      "product": "deskflow",
      "cwe": "CWE-125",
      "title": "Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow client",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63409"
    },
    {
      "rank": 204,
      "cve_id": "CVE-2026-14832",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00257,
      "epss_percentile": 0.16988,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Unknown",
      "product": "ShopSmart Loyalty for WooCommerce",
      "cwe": "CWE-639",
      "title": "ShopSmart Loyalty for WooCommerce <= 1.0.0 - Unauthenticated Sensitive Information Disclosure via shopsmart_check_phone",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14832"
    },
    {
      "rank": 205,
      "cve_id": "CVE-2026-74883",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00256,
      "epss_percentile": 0.16944,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-693",
      "title": "openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74883"
    },
    {
      "rank": 206,
      "cve_id": "CVE-2026-57485",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00256,
      "epss_percentile": 0.16835,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Stirling-Tools",
      "product": "Stirling-PDF",
      "cwe": "CWE-200",
      "title": "Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57485"
    },
    {
      "rank": 207,
      "cve_id": "CVE-2026-68517",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00256,
      "epss_percentile": 0.16902,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nicolargo",
      "product": "glances",
      "cwe": "CWE-942",
      "title": "Glances: REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68517"
    },
    {
      "rank": 208,
      "cve_id": "CVE-2026-11817",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00256,
      "epss_percentile": 0.16793,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Grafana",
      "product": "Grafana OSS",
      "cwe": "CWE-863",
      "title": "CVE-2026-11817 CVE Record",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-11817"
    },
    {
      "rank": 209,
      "cve_id": "CVE-2026-74874",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00255,
      "epss_percentile": 0.16672,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-338",
      "title": "openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74874"
    },
    {
      "rank": 210,
      "cve_id": "CVE-2026-16138",
      "cvss_base": 8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00255,
      "epss_percentile": 0.16771,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Progress",
      "product": "ShareFile Storage Zones Controller",
      "cwe": "CWE-502",
      "title": "Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16138"
    },
    {
      "rank": 211,
      "cve_id": "CVE-2026-19972",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00255,
      "epss_percentile": 0.16719,
      "kev": false,
      "kev_due_at": null,
      "vendor": "itsourcecode",
      "product": "Hospital Management System",
      "cwe": "CWE-74",
      "title": "itsourcecode Hospital Management System viewpatient.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19972"
    },
    {
      "rank": 212,
      "cve_id": "CVE-2026-22072",
      "cvss_base": 8.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00253,
      "epss_percentile": 0.16432,
      "kev": false,
      "kev_due_at": null,
      "vendor": "OPPO",
      "product": "OPPO Health",
      "cwe": "CWE-20",
      "title": "Arbitrary URL Loading in WebView Leading to Token Leakage Risk",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22072"
    },
    {
      "rank": 213,
      "cve_id": "CVE-2026-9859",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00253,
      "epss_percentile": 0.16505,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Mattermost Boards plugin didn’t enforce role-based authorization on board channel link allowing board editors to expose boards to arbitrary channels",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9859"
    },
    {
      "rank": 214,
      "cve_id": "CVE-2026-75007",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00248,
      "epss_percentile": 0.15839,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-77",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75007"
    },
    {
      "rank": 215,
      "cve_id": "CVE-2026-65341",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00246,
      "epss_percentile": 0.15548,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "Safari",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65341"
    },
    {
      "rank": 216,
      "cve_id": "CVE-2026-59903",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00245,
      "epss_percentile": 0.15467,
      "kev": false,
      "kev_due_at": null,
      "vendor": "netty",
      "product": "netty",
      "cwe": "CWE-524",
      "title": "Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59903"
    },
    {
      "rank": 217,
      "cve_id": "CVE-2026-64657",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00244,
      "epss_percentile": 0.15288,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Budibase",
      "product": "budibase",
      "cwe": "CWE-89",
      "title": "Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64657"
    },
    {
      "rank": 218,
      "cve_id": "CVE-2026-54356",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00244,
      "epss_percentile": 0.15379,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Budibase",
      "product": "budibase",
      "cwe": "CWE-862",
      "title": "Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54356"
    },
    {
      "rank": 219,
      "cve_id": "CVE-2026-75109",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00243,
      "epss_percentile": 0.1516,
      "kev": false,
      "kev_due_at": null,
      "vendor": "determined-ai",
      "product": "determined",
      "cwe": "CWE-862",
      "title": "Determined Missing Authorization Check on Generic Task Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75109"
    },
    {
      "rank": 220,
      "cve_id": "CVE-2026-64865",
      "cvss_base": 6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00243,
      "epss_percentile": 0.15254,
      "kev": false,
      "kev_due_at": null,
      "vendor": "QuantumNous",
      "product": "new-api",
      "cwe": "CWE-362",
      "title": "New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64865"
    },
    {
      "rank": 221,
      "cve_id": "CVE-2026-19986",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00242,
      "epss_percentile": 0.15116,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "Adblock for Youtube Extension",
      "cwe": "CWE-266",
      "title": "Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19986"
    },
    {
      "rank": 222,
      "cve_id": "CVE-2026-74901",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.0024,
      "epss_percentile": 0.1488,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-347",
      "title": "openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74901"
    },
    {
      "rank": 223,
      "cve_id": "CVE-2026-66795",
      "cvss_base": 9.1,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00239,
      "epss_percentile": 0.14667,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Multicluster Engine for Kubernetes",
      "cwe": "CWE-295",
      "title": "Managedcluster-import-controller: managedcluster-import-controller: csr auto-approver does not validate certificate subject, signername, or requester identity",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66795"
    },
    {
      "rank": 224,
      "cve_id": "CVE-2026-50601",
      "cvss_base": 6.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00239,
      "epss_percentile": 0.14776,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Acer",
      "product": "Planet9 desktop application",
      "cwe": "CWE-798",
      "title": "Planet9 Hardcoded Credentials Vulnerability Information",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50601"
    },
    {
      "rank": 225,
      "cve_id": "CVE-2026-14564",
      "cvss_base": 9,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00238,
      "epss_percentile": 0.14553,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Innotim Software Telecommunications and Consulting Trade Ltd. Co.",
      "product": "Logsign SIEM",
      "cwe": "CWE-522",
      "title": "Sensitive Data Exposure in Innotim Software's Logsign SIEM",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-14564"
    },
    {
      "rank": 226,
      "cve_id": "CVE-2026-75480",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00238,
      "epss_percentile": 0.14631,
      "kev": false,
      "kev_due_at": null,
      "vendor": "volcengine",
      "product": "OpenViking",
      "cwe": "CWE-863",
      "title": "OpenViking Debug Vector Endpoints Multi-tenant Data Exposure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75480"
    },
    {
      "rank": 227,
      "cve_id": "CVE-2026-52886",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00238,
      "epss_percentile": 0.14556,
      "kev": false,
      "kev_due_at": null,
      "vendor": "notepad-plus-plus",
      "product": "notepad-plus-plus",
      "cwe": "CWE-22",
      "title": "Notepad++: session.xml backupFilePath starts_with Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52886"
    },
    {
      "rank": 228,
      "cve_id": "CVE-2026-68520",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00237,
      "epss_percentile": 0.14417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nicolargo",
      "product": "glances",
      "cwe": "CWE-200",
      "title": "Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68520"
    },
    {
      "rank": 229,
      "cve_id": "CVE-2026-63670",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00236,
      "epss_percentile": 0.14282,
      "kev": false,
      "kev_due_at": null,
      "vendor": "apostrophecms",
      "product": "apostrophe",
      "cwe": "CWE-79",
      "title": "ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63670"
    },
    {
      "rank": 230,
      "cve_id": "CVE-2026-19966",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00235,
      "epss_percentile": 0.14197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "CodeCanyon",
      "product": "TimeCamp Integration for CRM",
      "cwe": "CWE-285",
      "title": "CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19966"
    },
    {
      "rank": 231,
      "cve_id": "CVE-2026-18674",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00234,
      "epss_percentile": 0.14121,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Kong Inc.",
      "product": "Kong Mesh",
      "cwe": "CWE-345",
      "title": "Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-18674"
    },
    {
      "rank": 232,
      "cve_id": "CVE-2026-16471",
      "cvss_base": 7.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00232,
      "epss_percentile": 0.13858,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dolusoft Software Technologies",
      "product": "Sonlogger",
      "cwe": "CWE-862",
      "title": "Broken Access Control in Dolusoft Software's Sonlogger",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16471"
    },
    {
      "rank": 233,
      "cve_id": "CVE-2026-65330",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00232,
      "epss_percentile": 0.13849,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65330"
    },
    {
      "rank": 234,
      "cve_id": "CVE-2026-65347",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00232,
      "epss_percentile": 0.13848,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-400",
      "title": "The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65347"
    },
    {
      "rank": 235,
      "cve_id": "CVE-2026-75044",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0023,
      "epss_percentile": 0.13632,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-862",
      "title": "In JetBrains YouTrack before 2025.3.156085, 2026.1.13914, 2026.2.18095 missing authorisation allowed an authenticated user to delete arbitrary entities via the mailbox endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75044"
    },
    {
      "rank": 236,
      "cve_id": "CVE-2026-19980",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00228,
      "epss_percentile": 0.1329,
      "kev": false,
      "kev_due_at": null,
      "vendor": "GL.iNet",
      "product": "A1300",
      "cwe": "CWE-74",
      "title": "GL.iNet XE3000 Language Update ui.update_langs code injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19980"
    },
    {
      "rank": 237,
      "cve_id": "CVE-2026-59829",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00228,
      "epss_percentile": 0.13283,
      "kev": false,
      "kev_due_at": null,
      "vendor": "discourse",
      "product": "discourse",
      "cwe": "CWE-862",
      "title": "Discourse: Review queue exposes flag-related private message excerpts to category group moderators",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59829"
    },
    {
      "rank": 238,
      "cve_id": "CVE-2026-74873",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00227,
      "epss_percentile": 0.13267,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-214",
      "title": "openssl_encrypt before 1.4.0 Password Exposure via CLI Argument",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74873"
    },
    {
      "rank": 239,
      "cve_id": "CVE-2026-73424",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00224,
      "epss_percentile": 0.12816,
      "kev": false,
      "kev_due_at": null,
      "vendor": "withastro",
      "product": "astro",
      "cwe": "CWE-441",
      "title": "Astro: Unauthenticated path override in the @astrojs/vercel ISR function",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73424"
    },
    {
      "rank": 240,
      "cve_id": "CVE-2026-15623",
      "cvss_base": 9.4,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00222,
      "epss_percentile": 0.1259,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Google Cloud",
      "product": "Google SecOps (Chronicle SOAR)",
      "cwe": "CWE-89",
      "title": "Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15623"
    },
    {
      "rank": 241,
      "cve_id": "CVE-2026-63669",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00221,
      "epss_percentile": 0.12392,
      "kev": false,
      "kev_due_at": null,
      "vendor": "apostrophecms",
      "product": "apostrophe",
      "cwe": "CWE-639",
      "title": "ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-63669"
    },
    {
      "rank": 242,
      "cve_id": "CVE-2026-69146",
      "cvss_base": 6.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00221,
      "epss_percentile": 0.12407,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mlflow",
      "product": "mlflow",
      "cwe": "CWE-862",
      "title": "MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69146"
    },
    {
      "rank": 243,
      "cve_id": "CVE-2026-75051",
      "cvss_base": 8.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.0022,
      "epss_percentile": 0.12309,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-862",
      "title": "In JetBrains YouTrack before 2026.2.17917 unauthorised project transfer between organisations was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75051"
    },
    {
      "rank": 244,
      "cve_id": "CVE-2026-16049",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00218,
      "epss_percentile": 0.12049,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-862",
      "title": "_GitLab Plugin allows cross-channel post injection and phishing via missing channel permission checks in issue API endpoints_",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16049"
    },
    {
      "rank": 245,
      "cve_id": "CVE-2026-69148",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00217,
      "epss_percentile": 0.11893,
      "kev": false,
      "kev_due_at": null,
      "vendor": "mlflow",
      "product": "mlflow",
      "cwe": "CWE-862",
      "title": "MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-69148"
    },
    {
      "rank": 246,
      "cve_id": "CVE-2026-74999",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00215,
      "epss_percentile": 0.11707,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Roundcube",
      "product": "Webmail",
      "cwe": "CWE-79",
      "title": "In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the \"Add to address book\" action was subject to stored XSS.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74999"
    },
    {
      "rank": 247,
      "cve_id": "CVE-2026-71566",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00212,
      "epss_percentile": 0.11315,
      "kev": false,
      "kev_due_at": null,
      "vendor": "openshift-metal3",
      "product": "fakefish",
      "cwe": "CWE-306",
      "title": "KubeVirt backend is not authenticated",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71566"
    },
    {
      "rank": 248,
      "cve_id": "CVE-2026-74858",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00209,
      "epss_percentile": 0.10987,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jae-jae",
      "product": "fetcher-mcp",
      "cwe": "CWE-918",
      "title": "jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74858"
    },
    {
      "rank": 249,
      "cve_id": "CVE-2026-19984",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.00209,
      "epss_percentile": 0.10985,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jkawamoto",
      "product": "mcp-florence2",
      "cwe": "CWE-918",
      "title": "jkawamoto mcp-florence2 __init__.py get_images server-side request forgery",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19984"
    },
    {
      "rank": 250,
      "cve_id": "CVE-2026-74887",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00207,
      "epss_percentile": 0.10608,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-338",
      "title": "openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74887"
    },
    {
      "rank": 251,
      "cve_id": "CVE-2026-75046",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00206,
      "epss_percentile": 0.10501,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-862",
      "title": "In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75046"
    },
    {
      "rank": 252,
      "cve_id": "CVE-2026-74876",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00201,
      "epss_percentile": 0.0996,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-347",
      "title": "openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74876"
    },
    {
      "rank": 253,
      "cve_id": "CVE-2026-74889",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00201,
      "epss_percentile": 0.09961,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-326",
      "title": "openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74889"
    },
    {
      "rank": 254,
      "cve_id": "CVE-2026-75048",
      "cvss_base": 8.2,
      "cvss_severity": "HIGH",
      "epss_score": 0.002,
      "epss_percentile": 0.09836,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "YouTrack",
      "cwe": "CWE-79",
      "title": "In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75048"
    },
    {
      "rank": 255,
      "cve_id": "CVE-2026-19973",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.002,
      "epss_percentile": 0.09802,
      "kev": false,
      "kev_due_at": null,
      "vendor": "itsourcecode",
      "product": "Hospital Management System",
      "cwe": "CWE-74",
      "title": "itsourcecode Hospital Management System viewpaymentreport.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19973"
    },
    {
      "rank": 256,
      "cve_id": "CVE-2026-20000",
      "cvss_base": 2.1,
      "cvss_severity": "LOW",
      "epss_score": 0.002,
      "epss_percentile": 0.09809,
      "kev": false,
      "kev_due_at": null,
      "vendor": "itsourcecode",
      "product": "Hospital Management System",
      "cwe": "CWE-74",
      "title": "itsourcecode Hospital Management System viewprescriptionrecord.php sql injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20000"
    },
    {
      "rank": 257,
      "cve_id": "CVE-2026-71567",
      "cvss_base": 7.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00195,
      "epss_percentile": 0.09247,
      "kev": false,
      "kev_due_at": null,
      "vendor": "openshift-metal3",
      "product": "fakefish",
      "cwe": "CWE-78",
      "title": "User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71567"
    },
    {
      "rank": 258,
      "cve_id": "CVE-2026-53960",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00195,
      "epss_percentile": 0.0924,
      "kev": false,
      "kev_due_at": null,
      "vendor": "discourse",
      "product": "discourse",
      "cwe": "CWE-862",
      "title": "Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53960"
    },
    {
      "rank": 259,
      "cve_id": "CVE-2026-16045",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00195,
      "epss_percentile": 0.09173,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Delegated OAuth tokens could revoke unrelated OAuth application authorizations",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16045"
    },
    {
      "rank": 260,
      "cve_id": "CVE-2026-54758",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00194,
      "epss_percentile": 0.09042,
      "kev": false,
      "kev_due_at": null,
      "vendor": "notepad-plus-plus",
      "product": "notepad-plus-plus",
      "cwe": "CWE-121",
      "title": "Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54758"
    },
    {
      "rank": 261,
      "cve_id": "CVE-2026-70412",
      "cvss_base": 3.5,
      "cvss_severity": "LOW",
      "epss_score": 0.00194,
      "epss_percentile": 0.09063,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "iDRAC9",
      "cwe": "CWE-1330",
      "title": "Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70412"
    },
    {
      "rank": 262,
      "cve_id": "CVE-2026-19995",
      "cvss_base": 2,
      "cvss_severity": "LOW",
      "epss_score": 0.00191,
      "epss_percentile": 0.08744,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Webkul",
      "product": "Bagisto",
      "cwe": "CWE-79",
      "title": "Webkul Bagisto RMA Message send-message cross site scripting",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19995"
    },
    {
      "rank": 263,
      "cve_id": "CVE-2026-75104",
      "cvss_base": 6.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0019,
      "epss_percentile": 0.08601,
      "kev": false,
      "kev_due_at": null,
      "vendor": "huggingface",
      "product": "transformers",
      "cwe": "CWE-22",
      "title": "Hugging Face Transformers Path Traversal via Checkpoint Index",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75104"
    },
    {
      "rank": 264,
      "cve_id": "CVE-2026-74875",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00188,
      "epss_percentile": 0.08444,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-345",
      "title": "openssl_encrypt before 1.4.0 Schema Validation Bypass",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74875"
    },
    {
      "rank": 265,
      "cve_id": "CVE-2026-74870",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00188,
      "epss_percentile": 0.08417,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-532",
      "title": "openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74870"
    },
    {
      "rank": 266,
      "cve_id": "CVE-2026-50771",
      "cvss_base": 6.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00184,
      "epss_percentile": 0.08016,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-79",
      "title": "Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50771"
    },
    {
      "rank": 267,
      "cve_id": "CVE-2026-75053",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00182,
      "epss_percentile": 0.07825,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-918",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75053"
    },
    {
      "rank": 268,
      "cve_id": "CVE-2026-74579",
      "cvss_base": null,
      "cvss_severity": null,
      "epss_score": 0.0018,
      "epss_percentile": 0.07616,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Linux",
      "product": "Linux",
      "cwe": null,
      "title": "netfilter: nft_payload: fix mask build for partial field offload",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74579"
    },
    {
      "rank": 269,
      "cve_id": "CVE-2026-12630",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00172,
      "epss_percentile": 0.06689,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-125",
      "title": "6LoWPAN IPHC uncompression out-of-bounds read on reserved destination addressing mode",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12630"
    },
    {
      "rank": 270,
      "cve_id": "CVE-2026-28984",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00172,
      "epss_percentile": 0.06672,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28984"
    },
    {
      "rank": 271,
      "cve_id": "CVE-2026-73410",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00171,
      "epss_percentile": 0.06527,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Budibase",
      "product": "budibase",
      "cwe": "CWE-367",
      "title": "Budibase: SSRF via DNS rebinding in the REST datasource integration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73410"
    },
    {
      "rank": 272,
      "cve_id": "CVE-2026-75108",
      "cvss_base": 5.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00171,
      "epss_percentile": 0.06586,
      "kev": false,
      "kev_due_at": null,
      "vendor": "next-terminal",
      "product": "next-terminal",
      "cwe": "CWE-862",
      "title": "Next Terminal Missing Per-Asset Authorization on Portal Endpoints",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75108"
    },
    {
      "rank": 273,
      "cve_id": "CVE-2026-16044",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0017,
      "epss_percentile": 0.06429,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Insufficient validation of guest board admin privileges on archive import",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16044"
    },
    {
      "rank": 274,
      "cve_id": "CVE-2026-19975",
      "cvss_base": 1.3,
      "cvss_severity": "LOW",
      "epss_score": 0.0017,
      "epss_percentile": 0.06438,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Azuriom",
      "product": "CMS",
      "cwe": "CWE-362",
      "title": "Azuriom CMS Money Transfer ProfileController.php transferMoney toctou",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19975"
    },
    {
      "rank": 275,
      "cve_id": "CVE-2026-65329",
      "cvss_base": 5.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00169,
      "epss_percentile": 0.0638,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-287",
      "title": "An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65329"
    },
    {
      "rank": 276,
      "cve_id": "CVE-2026-55704",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00169,
      "epss_percentile": 0.06337,
      "kev": false,
      "kev_due_at": null,
      "vendor": "discourse",
      "product": "discourse",
      "cwe": "CWE-862",
      "title": "Discourse: Shared-draft titles and excerpts leak through group post serialization",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55704"
    },
    {
      "rank": 277,
      "cve_id": "CVE-2026-74888",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00167,
      "epss_percentile": 0.06101,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-327",
      "title": "openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74888"
    },
    {
      "rank": 278,
      "cve_id": "CVE-2026-50773",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00166,
      "epss_percentile": 0.06053,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-427",
      "title": "An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50773"
    },
    {
      "rank": 279,
      "cve_id": "CVE-2026-12629",
      "cvss_base": 4.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00166,
      "epss_percentile": 0.05969,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-835",
      "title": "PL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12629"
    },
    {
      "rank": 280,
      "cve_id": "CVE-2026-74890",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00165,
      "epss_percentile": 0.05957,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-345",
      "title": "openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74890"
    },
    {
      "rank": 281,
      "cve_id": "CVE-2026-12519",
      "cvss_base": 5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00163,
      "epss_percentile": 0.0569,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-787",
      "title": "Out-of-bounds stack read and write in Zephyr WNC-M14A2A modem socket-notify parsing",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12519"
    },
    {
      "rank": 282,
      "cve_id": "CVE-2026-16047",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00162,
      "epss_percentile": 0.05534,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-862",
      "title": "Board channel linking without read channel permission validation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16047"
    },
    {
      "rank": 283,
      "cve_id": "CVE-2026-9693",
      "cvss_base": 3.5,
      "cvss_severity": "LOW",
      "epss_score": 0.00159,
      "epss_percentile": 0.05293,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-459",
      "title": "Mattermost thread memberships persist after team removal, exposing private channel thread metadata on re-invite",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9693"
    },
    {
      "rank": 284,
      "cve_id": "CVE-2026-46345",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00158,
      "epss_percentile": 0.05177,
      "kev": false,
      "kev_due_at": null,
      "vendor": "oscal-compass",
      "product": "compliance-trestle",
      "cwe": "CWE-22",
      "title": "compliance-trestle - jinja has an Arbitrary File Write via Path Traversal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46345"
    },
    {
      "rank": 285,
      "cve_id": "CVE-2026-10527",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00154,
      "epss_percentile": 0.04748,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Boards plugin retains Board Admin rights for users demoted to System Guest",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10527"
    },
    {
      "rank": 286,
      "cve_id": "CVE-2026-16048",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00154,
      "epss_percentile": 0.04726,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Channel member roles accept out-of-scope roles",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16048"
    },
    {
      "rank": 287,
      "cve_id": "CVE-2026-75056",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00152,
      "epss_percentile": 0.04573,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-78",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75056"
    },
    {
      "rank": 288,
      "cve_id": "CVE-2026-16046",
      "cvss_base": 4.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00152,
      "epss_percentile": 0.04612,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Missing run-state validation on finished playbook runs",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-16046"
    },
    {
      "rank": 289,
      "cve_id": "CVE-2026-34398",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00151,
      "epss_percentile": 0.04473,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeCAD",
      "product": "FreeCAD",
      "cwe": "CWE-95",
      "title": "FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34398"
    },
    {
      "rank": 290,
      "cve_id": "CVE-2026-15754",
      "cvss_base": 4.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0015,
      "epss_percentile": 0.04375,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-863",
      "title": "Missing per-channel team-scope check in ABAC access control policy unassign allows cross-team policy removal",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-15754"
    },
    {
      "rank": 291,
      "cve_id": "CVE-2026-75060",
      "cvss_base": 8.4,
      "cvss_severity": "HIGH",
      "epss_score": 0.00145,
      "epss_percentile": 0.04019,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "PyCharm",
      "cwe": "CWE-306",
      "title": "In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75060"
    },
    {
      "rank": 292,
      "cve_id": "CVE-2026-19589",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00144,
      "epss_percentile": 0.03944,
      "kev": false,
      "kev_due_at": null,
      "vendor": "HashiCorp",
      "product": "Packer",
      "cwe": "CWE-22",
      "title": "Packer vulnerable to arbitrary file write via crafted plugin archive during installation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19589"
    },
    {
      "rank": 293,
      "cve_id": "CVE-2026-64788",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00144,
      "epss_percentile": 0.03923,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-119",
      "title": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64788"
    },
    {
      "rank": 294,
      "cve_id": "CVE-2026-75059",
      "cvss_base": 4.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0014,
      "epss_percentile": 0.03603,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "PyCharm",
      "cwe": "CWE-79",
      "title": "In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75059"
    },
    {
      "rank": 295,
      "cve_id": "CVE-2026-68518",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00139,
      "epss_percentile": 0.03516,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nicolargo",
      "product": "glances",
      "cwe": "CWE-78",
      "title": "Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68518"
    },
    {
      "rank": 296,
      "cve_id": "CVE-2026-62982",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00138,
      "epss_percentile": 0.03432,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nicolargo",
      "product": "glances",
      "cwe": "CWE-78",
      "title": "Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62982"
    },
    {
      "rank": 297,
      "cve_id": "CVE-2026-56089",
      "cvss_base": 3.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00136,
      "epss_percentile": 0.03278,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-35",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56089"
    },
    {
      "rank": 298,
      "cve_id": "CVE-2026-34789",
      "cvss_base": 7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00135,
      "epss_percentile": 0.03181,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeCAD",
      "product": "FreeCAD",
      "cwe": "CWE-94",
      "title": "FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34789"
    },
    {
      "rank": 299,
      "cve_id": "CVE-2026-34399",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00134,
      "epss_percentile": 0.03152,
      "kev": false,
      "kev_due_at": null,
      "vendor": "FreeCAD",
      "product": "FreeCAD",
      "cwe": "CWE-95",
      "title": "FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34399"
    },
    {
      "rank": 300,
      "cve_id": "CVE-2026-75057",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00133,
      "epss_percentile": 0.03025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-532",
      "title": "In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75057"
    },
    {
      "rank": 301,
      "cve_id": "CVE-2026-75052",
      "cvss_base": 3.6,
      "cvss_severity": "LOW",
      "epss_score": 0.00133,
      "epss_percentile": 0.03022,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-77",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75052"
    },
    {
      "rank": 302,
      "cve_id": "CVE-2026-65339",
      "cvss_base": 5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00131,
      "epss_percentile": 0.02882,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-693",
      "title": "A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
    },
    {
      "rank": 303,
      "cve_id": "CVE-2026-67961",
      "cvss_base": 7.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.0013,
      "epss_percentile": 0.02839,
      "kev": false,
      "kev_due_at": null,
      "vendor": "n/a",
      "product": "n/a",
      "cwe": "CWE-94",
      "title": "An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-67961"
    },
    {
      "rank": 304,
      "cve_id": "CVE-2026-74882",
      "cvss_base": 8.7,
      "cvss_severity": "HIGH",
      "epss_score": 0.00129,
      "epss_percentile": 0.02761,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-345",
      "title": "openssl_encrypt before 1.4.0 Insecure Default Configuration",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74882"
    },
    {
      "rank": 305,
      "cve_id": "CVE-2026-59894",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00129,
      "epss_percentile": 0.02746,
      "kev": false,
      "kev_due_at": null,
      "vendor": "andialbrecht",
      "product": "sqlparse",
      "cwe": "CWE-94",
      "title": "sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59894"
    },
    {
      "rank": 306,
      "cve_id": "CVE-2026-40145",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00127,
      "epss_percentile": 0.02563,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BeyondTrust",
      "product": "Endpoint Privilege Management (Windows deployment)",
      "cwe": "CWE-1220",
      "title": "Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40145"
    },
    {
      "rank": 307,
      "cve_id": "CVE-2026-68765",
      "cvss_base": 5.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00127,
      "epss_percentile": 0.02593,
      "kev": false,
      "kev_due_at": null,
      "vendor": "hashcat",
      "product": "hashcat",
      "cwe": "CWE-122",
      "title": "hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68765"
    },
    {
      "rank": 308,
      "cve_id": "CVE-2026-56090",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00126,
      "epss_percentile": 0.02509,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-427",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-56090"
    },
    {
      "rank": 309,
      "cve_id": "CVE-2026-68519",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00125,
      "epss_percentile": 0.02466,
      "kev": false,
      "kev_due_at": null,
      "vendor": "nicolargo",
      "product": "glances",
      "cwe": "CWE-78",
      "title": "Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68519"
    },
    {
      "rank": 310,
      "cve_id": "CVE-2026-74885",
      "cvss_base": 9.3,
      "cvss_severity": "CRITICAL",
      "epss_score": 0.00122,
      "epss_percentile": 0.02159,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-117",
      "title": "openssl_encrypt before 1.4.0 Logging Bug and Race Condition",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74885"
    },
    {
      "rank": 311,
      "cve_id": "CVE-2026-75054",
      "cvss_base": 6.3,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0012,
      "epss_percentile": 0.02025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-918",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75054"
    },
    {
      "rank": 312,
      "cve_id": "CVE-2026-75055",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0012,
      "epss_percentile": 0.02025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-611",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75055"
    },
    {
      "rank": 313,
      "cve_id": "CVE-2026-75058",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0012,
      "epss_percentile": 0.02025,
      "kev": false,
      "kev_due_at": null,
      "vendor": "JetBrains",
      "product": "IntelliJ IDEA",
      "cwe": "CWE-611",
      "title": "In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75058"
    },
    {
      "rank": 314,
      "cve_id": "CVE-2026-75483",
      "cvss_base": 4.8,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0012,
      "epss_percentile": 0.02032,
      "kev": false,
      "kev_due_at": null,
      "vendor": "romkatv",
      "product": "powerlevel10k",
      "cwe": "CWE-150",
      "title": "powerlevel10k Control Character Injection via package.json Version",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75483"
    },
    {
      "rank": 315,
      "cve_id": "CVE-2026-40144",
      "cvss_base": 7.3,
      "cvss_severity": "HIGH",
      "epss_score": 0.00119,
      "epss_percentile": 0.01935,
      "kev": false,
      "kev_due_at": null,
      "vendor": "BeyondTrust",
      "product": "Endpoint Privilege Management (Windows deployments)",
      "cwe": "CWE-125",
      "title": "Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-40144"
    },
    {
      "rank": 316,
      "cve_id": "CVE-2026-64760",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00119,
      "epss_percentile": 0.0198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-200",
      "title": "An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64760"
    },
    {
      "rank": 317,
      "cve_id": "CVE-2026-59909",
      "cvss_base": 7.1,
      "cvss_severity": "HIGH",
      "epss_score": 0.00118,
      "epss_percentile": 0.01902,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-35",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59909"
    },
    {
      "rank": 318,
      "cve_id": "CVE-2026-65349",
      "cvss_base": 6.6,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00117,
      "epss_percentile": 0.01848,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Apple",
      "product": "iOS and iPadOS",
      "cwe": "CWE-125",
      "title": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65349"
    },
    {
      "rank": 319,
      "cve_id": "CVE-2026-50602",
      "cvss_base": 8.5,
      "cvss_severity": "HIGH",
      "epss_score": 0.00109,
      "epss_percentile": 0.01335,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Acer",
      "product": "Planet9 background service",
      "cwe": "CWE-732",
      "title": "Planet9 Incorrect Permission Assignment Vulnerability Information",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-50602"
    },
    {
      "rank": 320,
      "cve_id": "CVE-2026-59911",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00109,
      "epss_percentile": 0.01361,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Dell",
      "product": "ObjectScale",
      "cwe": "CWE-532",
      "title": "Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59911"
    },
    {
      "rank": 321,
      "cve_id": "CVE-2026-9771",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.00106,
      "epss_percentile": 0.01203,
      "kev": false,
      "kev_due_at": null,
      "vendor": "zephyrproject",
      "product": "zephyr",
      "cwe": "CWE-822",
      "title": "Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9771"
    },
    {
      "rank": 322,
      "cve_id": "CVE-2026-74802",
      "cvss_base": 0,
      "cvss_severity": "NONE",
      "epss_score": 0.00104,
      "epss_percentile": 0.01107,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-346",
      "title": "SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74802"
    },
    {
      "rank": 323,
      "cve_id": "CVE-2026-74867",
      "cvss_base": 2.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00103,
      "epss_percentile": 0.01094,
      "kev": false,
      "kev_due_at": null,
      "vendor": "siyuan-note",
      "product": "siyuan",
      "cwe": "CWE-352",
      "title": "SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74867"
    },
    {
      "rank": 324,
      "cve_id": "CVE-2026-70495",
      "cvss_base": 8.8,
      "cvss_severity": "HIGH",
      "epss_score": 0.001,
      "epss_percentile": 0.00958,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Red Hat",
      "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
      "cwe": "CWE-269",
      "title": "Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-70495"
    },
    {
      "rank": 325,
      "cve_id": "CVE-2026-71858",
      "cvss_base": 5.4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00099,
      "epss_percentile": 0.00869,
      "kev": false,
      "kev_due_at": null,
      "vendor": "notepad-plus-plus",
      "product": "notepad-plus-plus",
      "cwe": "CWE-78",
      "title": "Notepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-71858"
    },
    {
      "rank": 326,
      "cve_id": "CVE-2026-74871",
      "cvss_base": 6.9,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00093,
      "epss_percentile": 0.00637,
      "kev": false,
      "kev_due_at": null,
      "vendor": "jahlives",
      "product": "openssl_encrypt",
      "cwe": "CWE-916",
      "title": "openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74871"
    },
    {
      "rank": 327,
      "cve_id": "CVE-2026-75587",
      "cvss_base": 3.3,
      "cvss_severity": "LOW",
      "epss_score": 0.00093,
      "epss_percentile": 0.00604,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Mattermost",
      "product": "Mattermost",
      "cwe": "CWE-200",
      "title": "Plaintext pre-auth secret exposure via Desktop App diagnostics report",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75587"
    },
    {
      "rank": 328,
      "cve_id": "CVE-2026-49302",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00091,
      "epss_percentile": 0.00555,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-200",
      "title": "Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49302"
    },
    {
      "rank": 329,
      "cve_id": "CVE-2026-49307",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00091,
      "epss_percentile": 0.00531,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-200",
      "title": "Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49307"
    },
    {
      "rank": 330,
      "cve_id": "CVE-2026-58560",
      "cvss_base": 4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00089,
      "epss_percentile": 0.00468,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-476",
      "title": "Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58560"
    },
    {
      "rank": 331,
      "cve_id": "CVE-2026-58561",
      "cvss_base": 4,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00089,
      "epss_percentile": 0.00458,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-476",
      "title": "Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58561"
    },
    {
      "rank": 332,
      "cve_id": "CVE-2026-49308",
      "cvss_base": 5.5,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00087,
      "epss_percentile": 0.00418,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-264",
      "title": "Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49308"
    },
    {
      "rank": 333,
      "cve_id": "CVE-2026-49301",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.00086,
      "epss_percentile": 0.00381,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-200",
      "title": "Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49301"
    },
    {
      "rank": 334,
      "cve_id": "CVE-2026-49304",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0008,
      "epss_percentile": 0.00199,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-264",
      "title": "Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49304"
    },
    {
      "rank": 335,
      "cve_id": "CVE-2026-49305",
      "cvss_base": 6.2,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0008,
      "epss_percentile": 0.00193,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-755",
      "title": "Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49305"
    },
    {
      "rank": 336,
      "cve_id": "CVE-2026-49303",
      "cvss_base": 5.1,
      "cvss_severity": "MEDIUM",
      "epss_score": 0.0008,
      "epss_percentile": 0.00198,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-264",
      "title": "Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49303"
    },
    {
      "rank": 337,
      "cve_id": "CVE-2026-49306",
      "cvss_base": 3.3,
      "cvss_severity": "LOW",
      "epss_score": 0.0008,
      "epss_percentile": 0.00197,
      "kev": false,
      "kev_due_at": null,
      "vendor": "Huawei",
      "product": "HarmonyOS",
      "cwe": "CWE-416",
      "title": "UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49306"
    }
  ],
  "transactions": [
    {
      "type": "KEV_ADDED",
      "cve_id": "CVE-2025-62593",
      "detail": "ADDED TO KEV — CVE-2025-62593 (ray-project ray). Remediation due August 20, 2026."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2018-8727",
      "detail": "EXPLOIT PUBLISHED — CVE-2018-8727. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2019-10869",
      "detail": "EXPLOIT PUBLISHED — CVE-2019-10869. Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2025-23368",
      "detail": "EXPLOIT PUBLISHED — CVE-2025-23368 (wildfly-core). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-2332",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-2332 (Eclipse Foundation Eclipse Jetty). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-24842",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-24842 (isaacs node-tar). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-27606",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-27606 (rollup). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-27727",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-27727 (swaldman mchange-commons-java). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-27962",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-27962 (authlib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-28498",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-28498 (authlib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-28802",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-28802 (authlib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-29074",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-29074 (svgo). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-32597",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-32597 (jpadilla pyjwt). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-33487",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-33487 (russellhaering goxmldsig). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-35172",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-35172 (distribution). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-40938",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-40938 (tektoncd pipeline). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-41134",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-41134 (microsoft kiota). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-42041",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-42041 (axios). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-42880",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-42880 (argoproj argo-cd). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-42945",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-42945 (F5 NGINX Plus). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4598",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4598 (jsrsasign). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4599",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4599 (jsrsasign). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4600",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4600 (jsrsasign). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4601",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4601 (jsrsasign). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4602",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4602 (jsrsasign). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-48526",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-48526 (jpadilla pyjwt). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-4878",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-4878 (Red Hat Enterprise Linux 10). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58010",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58010 (GNOME GLib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58012",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58012 (GNOME GLib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58013",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58013 (GNOME GLib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58014",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added."
    },
    {
      "type": "EXPLOIT_PUBLISHED",
      "cve_id": "CVE-2026-58015",
      "detail": "EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2023-6931",
      "detail": "RESCORED — CVE-2023-6931 (Linux Kernel). CVSS 7.8 → 7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2025-6666",
      "detail": "RESCORED — CVE-2025-6666 (motogadget mo.lock Ignition Lock). CVSS 1 → 0.3 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-15370",
      "detail": "RESCORED — CVE-2026-15370 (Red Hat Enterprise Linux 10). CVSS 6.7 → 7.3 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-16713",
      "detail": "RESCORED — CVE-2026-16713 (IBM Documentation Offline). CVSS 4.3 → 5.3 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-16929",
      "detail": "RESCORED — CVE-2026-16929 (IBM i). CVSS 5.3 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19895",
      "detail": "RESCORED — CVE-2026-19895 (opensourcepos Open Source Point of Sale). CVSS 6.3 → 2.9 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19897",
      "detail": "RESCORED — CVE-2026-19897 (mangroup dtale). CVSS 6.3 → 2.9 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19900",
      "detail": "RESCORED — CVE-2026-19900 (LB-LINK X-PRO). CVSS 9.2 → 8.2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19903",
      "detail": "RESCORED — CVE-2026-19903 (SourceCodester Online Clothing Store). CVSS 6.9 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19917",
      "detail": "RESCORED — CVE-2026-19917 (code-projects Online Food Order System). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19920",
      "detail": "RESCORED — CVE-2026-19920 (code-projects Online Shopping System). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19922",
      "detail": "RESCORED — CVE-2026-19922 (code-projects Online Shopping System). CVSS 5.1 → 2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19925",
      "detail": "RESCORED — CVE-2026-19925 (SourceCodester Stock Management System). CVSS 5.1 → 2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19927",
      "detail": "RESCORED — CVE-2026-19927 (OpenBoxes). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19930",
      "detail": "RESCORED — CVE-2026-19930 (Dolibarr). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19933",
      "detail": "RESCORED — CVE-2026-19933 (DefaultFuction Customer-Relationship-Management-In-C-Project). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19958",
      "detail": "RESCORED — CVE-2026-19958 (iatsiuk pptr-mcp). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19961",
      "detail": "RESCORED — CVE-2026-19961 (Edimax EW-7478APC). CVSS 9.4 → 8.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19962",
      "detail": "RESCORED — CVE-2026-19962 (Edimax EW-7478APC). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19963",
      "detail": "RESCORED — CVE-2026-19963 (Edimax EW-7478APC). CVSS 5.3 → 2.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-19964",
      "detail": "RESCORED — CVE-2026-19964 (Jij-Inc Jij-MCP-Server). CVSS 5.1 → 2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-2100",
      "detail": "RESCORED — CVE-2026-2100 (p11-glue p11-kit). CVSS 5.3 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-2332",
      "detail": "RESCORED — CVE-2026-2332 (Eclipse Foundation Eclipse Jetty). CVSS 7.4 → 9.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-32591",
      "detail": "RESCORED — CVE-2026-32591 (Red Hat Quay 3.1). CVSS 5.2 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-33216",
      "detail": "RESCORED — CVE-2026-33216 (nats-io nats-server). CVSS 8.6 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-33217",
      "detail": "RESCORED — CVE-2026-33217 (nats-io nats-server). CVSS 7.1 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-33247",
      "detail": "RESCORED — CVE-2026-33247 (nats-io nats-server). CVSS 7.4 → 5.3 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-33997",
      "detail": "RESCORED — CVE-2026-33997 (moby). CVSS 6.8 → 8.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-35425",
      "detail": "RESCORED — CVE-2026-35425 (Microsoft Azure API Management (APIM)). CVSS 8 → 7.2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-40938",
      "detail": "RESCORED — CVE-2026-40938 (tektoncd pipeline). CVSS 7.5 → 8.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-42041",
      "detail": "RESCORED — CVE-2026-42041 (axios). CVSS 4.8 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-4598",
      "detail": "RESCORED — CVE-2026-4598 (jsrsasign). CVSS 8.7 → 7.7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-45998",
      "detail": "RESCORED — CVE-2026-45998 (Linux). CVSS 7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-4600",
      "detail": "RESCORED — CVE-2026-4600 (jsrsasign). CVSS 9.1 → 8.1 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-4601",
      "detail": "RESCORED — CVE-2026-4601 (jsrsasign). CVSS 9.4 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-4602",
      "detail": "RESCORED — CVE-2026-4602 (jsrsasign). CVSS 8.7 → 7.7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-46579",
      "detail": "RESCORED — CVE-2026-46579 (Red Hat OpenShift Container Platform 4.12). CVSS 7.4 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-4878",
      "detail": "RESCORED — CVE-2026-4878 (Red Hat Enterprise Linux 10). CVSS 6.7 → 7 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-52972",
      "detail": "RESCORED — CVE-2026-52972 (Linux). CVSS 7 → 5.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-53059",
      "detail": "RESCORED — CVE-2026-53059 (Linux). CVSS 6.3 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-57104",
      "detail": "RESCORED — CVE-2026-57104 (Microsoft Azure Storage Explorer). CVSS 8.8 → 9.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58010",
      "detail": "RESCORED — CVE-2026-58010 (GNOME GLib). CVSS 6.5 → 8.2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58011",
      "detail": "RESCORED — CVE-2026-58011 (GNOME GLib). CVSS 6.5 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58012",
      "detail": "RESCORED — CVE-2026-58012 (GNOME GLib). CVSS 6.5 → 8.2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58013",
      "detail": "RESCORED — CVE-2026-58013 (GNOME GLib). CVSS 6.5 → 8.2 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58014",
      "detail": "RESCORED — CVE-2026-58014 (GNOME GLib). CVSS 7.3 → 8.6 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58015",
      "detail": "RESCORED — CVE-2026-58015 (GNOME GLib). CVSS 5.9 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-58612",
      "detail": "RESCORED — CVE-2026-58612 (Microsoft PowerShell 7.4). CVSS 7.4 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-59845",
      "detail": "RESCORED — CVE-2026-59845 (Red Hat Enterprise Linux 10). CVSS 5.3 → 5.9 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-59847",
      "detail": "RESCORED — CVE-2026-59847 (Red Hat Enterprise Linux 10). CVSS 5.9 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-59850",
      "detail": "RESCORED — CVE-2026-59850 (Red Hat Enterprise Linux 10). CVSS 4.3 → 7.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-65675",
      "detail": "RESCORED — CVE-2026-65675 (Microsoft Visual Studio Code CoPilot Chat Extension). CVSS 7.1 → 6.5 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-65799",
      "detail": "RESCORED — CVE-2026-65799 (Microsoft Windows 10 Version 1607). CVSS 6.7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-65813",
      "detail": "RESCORED — CVE-2026-65813 (Microsoft Exchange Server 2016 Cumulative Update 23). CVSS 6.5 → 8.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-70304",
      "detail": "RESCORED — CVE-2026-70304 (Microsoft Windows 10 Version 1607). CVSS 6.7 → 7.8 (NVD)."
    },
    {
      "type": "RESCORED",
      "cve_id": "CVE-2026-70340",
      "detail": "RESCORED — CVE-2026-70340 (Microsoft Azure CycleCloud 8.9.1). CVSS 8.1 → 8.8 (NVD)."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2018-8727",
      "detail": "ENRICHED — CVE-2018-8727. Received CVSS 7.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2019-10869",
      "detail": "ENRICHED — CVE-2019-10869. Received CVSS 8.1 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-53325",
      "detail": "ENRICHED — CVE-2026-53325 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-53382",
      "detail": "ENRICHED — CVE-2026-53382 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-53385",
      "detail": "ENRICHED — CVE-2026-53385 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-53393",
      "detail": "ENRICHED — CVE-2026-53393 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-53403",
      "detail": "ENRICHED — CVE-2026-53403 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63794",
      "detail": "ENRICHED — CVE-2026-63794 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63798",
      "detail": "ENRICHED — CVE-2026-63798 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-63804",
      "detail": "ENRICHED — CVE-2026-63804 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64187",
      "detail": "ENRICHED — CVE-2026-64187 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64192",
      "detail": "ENRICHED — CVE-2026-64192 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64205",
      "detail": "ENRICHED — CVE-2026-64205 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64207",
      "detail": "ENRICHED — CVE-2026-64207 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64244",
      "detail": "ENRICHED — CVE-2026-64244 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64245",
      "detail": "ENRICHED — CVE-2026-64245 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64246",
      "detail": "ENRICHED — CVE-2026-64246 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64248",
      "detail": "ENRICHED — CVE-2026-64248 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64249",
      "detail": "ENRICHED — CVE-2026-64249 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64250",
      "detail": "ENRICHED — CVE-2026-64250 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64252",
      "detail": "ENRICHED — CVE-2026-64252 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64253",
      "detail": "ENRICHED — CVE-2026-64253 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64254",
      "detail": "ENRICHED — CVE-2026-64254 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64256",
      "detail": "ENRICHED — CVE-2026-64256 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64258",
      "detail": "ENRICHED — CVE-2026-64258 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64262",
      "detail": "ENRICHED — CVE-2026-64262 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64263",
      "detail": "ENRICHED — CVE-2026-64263 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64264",
      "detail": "ENRICHED — CVE-2026-64264 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64267",
      "detail": "ENRICHED — CVE-2026-64267 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64270",
      "detail": "ENRICHED — CVE-2026-64270 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64271",
      "detail": "ENRICHED — CVE-2026-64271 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64272",
      "detail": "ENRICHED — CVE-2026-64272 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64273",
      "detail": "ENRICHED — CVE-2026-64273 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64274",
      "detail": "ENRICHED — CVE-2026-64274 (Linux). Received CVSS 7.8 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64275",
      "detail": "ENRICHED — CVE-2026-64275 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64278",
      "detail": "ENRICHED — CVE-2026-64278 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64282",
      "detail": "ENRICHED — CVE-2026-64282 (Linux). Received CVSS 4.7 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64283",
      "detail": "ENRICHED — CVE-2026-64283 (Linux). Received CVSS 7.0 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64285",
      "detail": "ENRICHED — CVE-2026-64285 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64288",
      "detail": "ENRICHED — CVE-2026-64288 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64289",
      "detail": "ENRICHED — CVE-2026-64289 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64290",
      "detail": "ENRICHED — CVE-2026-64290 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64291",
      "detail": "ENRICHED — CVE-2026-64291 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64292",
      "detail": "ENRICHED — CVE-2026-64292 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64294",
      "detail": "ENRICHED — CVE-2026-64294 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64295",
      "detail": "ENRICHED — CVE-2026-64295 (Linux). Received CVSS 5.5 and CPE data from NVD."
    },
    {
      "type": "ENRICHED",
      "cve_id": "CVE-2026-64297",
      "detail": "ENRICHED — CVE-2026-64297 (Linux). Received CVSS 5.5 and CPE data from NVD."
    }
  ],
  "attribution": "CVE Program, NVD (NIST), CISA KEV, FIRST EPSS, OSV. See /security/methodology/."
}