{ "meta": { "generated": "2026-07-22T09:09:04.530Z", "schemaVersion": "1.0", "source": "https://defend.network", "docs": "https://defend.network/api/", "license": "CC BY 4.0", "licenseUrl": "https://creativecommons.org/licenses/by/4.0/", "attribution": "Data by defend.network (https://defend.network), licensed CC BY 4.0. Underlying CVE facts from NVD (NIST), the CISA KEV catalog, and FIRST.org EPSS.", "count": 166 }, "cves": [ { "id": "CVE-2008-4128", "product": "Cisco IOS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2008-4128.html", "kevDateAdded": "2026-07-13", "kevDueDate": "2026-07-16", "cvss": { "score": 4.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, "epss": { "score": 0.23857, "percentile": 0.97582, "date": "2026-07-21" }, "references": [ "http://www.securityfocus.com/bid/31218", "https://exchange.xforce.ibmcloud.com/vulnerabilities/45226", "https://www.exploit-db.com/exploits/6476" ], "lastUpdated": "2026-07-14T05:16:15.780" }, { "id": "CVE-2021-27137", "product": "Dd-Wrt", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2021-27137.html", "kevDateAdded": "2026-07-21", "kevDueDate": "2026-07-24", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.05447, "percentile": 0.91861, "date": "2026-07-21" }, "references": [ "https://svn.dd-wrt.com/changeset/45724", "https://securityaffairs.com/193290/uncategorized/iot-botnet-c0xmo-adds-competitor-killing-capability.html", "https://ssd-disclosure.com/ssd-advisory-dd-wrt-upnp-buffer-overflow/" ], "lastUpdated": "2026-07-22T05:17:07.330" }, { "id": "CVE-2022-0492", "product": "Linux Kernel", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2022-0492.html", "kevDateAdded": "2026-06-02", "kevDueDate": "2026-06-05", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.05528, "percentile": 0.91951, "date": "2026-07-21" }, "references": [ "https://bugzilla.redhat.com/show_bug.cgi?id=2051505", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af" ], "lastUpdated": "2026-06-17T04:20:42.910" }, { "id": "CVE-2022-4304", "product": "Openssl (also: Stormshield)", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2022-4304.html", "cvss": { "score": 5.9, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.16195, "percentile": 0.96591, "date": "2026-07-21" }, "references": [ "https://www.openssl.org/news/secadv/20230207.txt", "https://security.gentoo.org/glsa/202402-08" ], "lastUpdated": "2026-06-17T05:20:32.457" }, { "id": "CVE-2023-4346", "product": "KNX Association KNX Protocol Connection Authorization Option 1", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2023-4346.html", "kevDateAdded": "2026-07-15", "kevDueDate": "2026-07-29", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00855, "percentile": 0.54365, "date": "2026-07-21" }, "references": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4346" ], "lastUpdated": "2026-07-16T05:16:16.603" }, { "id": "CVE-2024-21182", "product": "Oracle WebLogic Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2024-21182.html", "kevDateAdded": "2026-06-01", "kevDueDate": "2026-06-04", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.49689, "percentile": 0.98772, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/cpujul2024.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21182" ], "lastUpdated": "2026-06-17T07:08:41.710" }, { "id": "CVE-2024-3721", "product": "TBK DVR", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2024-3721.html", "cvss": { "score": 6.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, "epss": { "score": 0.86489, "percentile": 0.99718, "date": "2026-07-21" }, "references": [ "https://github.com/netsecfish/tbk_dvr_command_injection", "https://vuldb.com/?ctiid.260573", "https://vuldb.com/?id.260573" ], "lastUpdated": "2026-06-17T07:44:52.320" }, { "id": "CVE-2024-42009", "product": "Roundcube Webmail", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2024-42009.html", "kevDateAdded": "2025-06-09", "kevDueDate": "2025-06-30", "cvss": { "score": 9.3, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" }, "epss": { "score": 0.84446, "percentile": 0.99674, "date": "2026-07-21" }, "references": [ "https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8", "https://sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/", "https://github.com/roundcube/roundcubemail/releases" ], "lastUpdated": "2026-06-17T07:48:37.930" }, { "id": "CVE-2024-57726", "product": "Simple-Help Simplehelp", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2024-57726.html", "kevDateAdded": "2026-04-24", "kevDueDate": "2026-05-08", "cvss": { "score": 9.9, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.08632, "percentile": 0.94514, "date": "2026-07-21" }, "references": [ "https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/", "https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-dragonforce", "https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier" ], "lastUpdated": "2026-06-17T08:13:58.677" }, { "id": "CVE-2024-7399", "product": "Samsung MagicINFO 9 Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2024-7399.html", "kevDateAdded": "2026-04-24", "kevDueDate": "2026-05-08", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.91941, "percentile": 0.99807, "date": "2026-07-21" }, "references": [ "https://security.samsungtv.com/securityUpdates", "https://arcticwolf.com/resources/blog-uk/arctic-wolf-observes-exploitation-of-path-traversal-vulnerability-in-samsung-magicinfo-9-server-cve-2024-7399/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7399" ], "lastUpdated": "2026-06-17T08:20:01.167" }, { "id": "CVE-2025-48595", "product": "Android Framework", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-48595.html", "kevDateAdded": "2026-06-02", "kevDueDate": "2026-06-05", "cvss": { "score": 8.4, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01714, "percentile": 0.74904, "date": "2026-07-21" }, "references": [ "https://source.android.com/docs/security/bulletin/2026/2026-06-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48595" ], "lastUpdated": "2026-07-22T08:10:00.117" }, { "id": "CVE-2025-53521", "product": "F5 BIG-IP", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-53521.html", "kevDateAdded": "2026-03-27", "kevDueDate": "2026-03-30", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.02213, "percentile": 0.8068, "date": "2026-07-21" }, "references": [ "https://my.f5.com/manage/s/article/K000156741", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53521" ], "lastUpdated": "2026-06-17T09:38:22.483" }, { "id": "CVE-2025-55182", "product": "Meta React Server Components", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-55182.html", "kevDateAdded": "2025-12-05", "kevDueDate": "2025-12-12", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.99562, "percentile": 0.99942, "date": "2026-07-21" }, "references": [ "http://www.openwall.com/lists/oss-security/2025/12/03/4", "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components", "https://www.facebook.com/security/advisories/cve-2025-55182" ], "lastUpdated": "2026-06-17T09:41:24.913" }, { "id": "CVE-2025-5777", "product": "Citrix NetScaler ADC And Gateway", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-5777.html", "kevDateAdded": "2025-07-10", "kevDueDate": "2025-07-11", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.9987, "percentile": 0.99963, "date": "2026-07-21" }, "references": [ "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420", "https://citrixbleed.com", "https://horizon3.ai/attack-research/attack-blogs/cve-2025-5777-citrixbleed-2-write-up-maybe/" ], "lastUpdated": "2026-06-17T09:48:43.670" }, { "id": "CVE-2025-59528", "product": "Flowiseai Flowise", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2025-59528.html", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.90183, "percentile": 0.99785, "date": "2026-07-21" }, "references": [ "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3gcm-f6qx-ff7p", "https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts#L132", "https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts#L220" ], "lastUpdated": "2026-06-17T09:46:20.590" }, { "id": "CVE-2025-67038", "product": "Lantronix EDS5000", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-67038.html", "kevDateAdded": "2026-06-23", "kevDueDate": "2026-06-26", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00889, "percentile": 0.55389, "date": "2026-07-21" }, "references": [ "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-67038" ], "lastUpdated": "2026-07-06T12:39:49.570" }, { "id": "CVE-2025-8088", "product": "RARLAB WinRAR", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2025-8088.html", "kevDateAdded": "2025-08-12", "kevDueDate": "2025-09-02", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.80906, "percentile": 0.99588, "date": "2026-07-21" }, "references": [ "https://support.dtsearch.com/faq/dts0245.htm", "https://www.vicarius.io/vsociety/posts/cve-2025-8088-detect-winrar-zero-day", "https://www.vicarius.io/vsociety/posts/cve-2025-8088-mitigate-winrar-zero-day-using-srp-and-ifeo" ], "lastUpdated": "2026-06-17T10:06:17.243" }, { "id": "CVE-2026-0257", "product": "Palo Alto Networks PAN-OS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-0257.html", "kevDateAdded": "2026-05-29", "kevDueDate": "2026-06-01", "cvss": { "score": 9.1, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" }, "epss": { "score": 0.86678, "percentile": 0.99722, "date": "2026-07-21" }, "references": [ "https://security.paloaltonetworks.com/CVE-2026-0257", "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0257" ], "lastUpdated": "2026-06-17T10:10:37.953" }, { "id": "CVE-2026-0300", "product": "Palo Alto Networks PAN-OS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-0300.html", "kevDateAdded": "2026-05-06", "kevDueDate": "2026-05-09", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.32074, "percentile": 0.98131, "date": "2026-07-21" }, "references": [ "https://security.paloaltonetworks.com/CVE-2026-0300", "https://cert-portal.siemens.com/productcert/html/ssa-967325.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0300" ], "lastUpdated": "2026-06-17T10:10:43.073" }, { "id": "CVE-2026-0770", "product": "Langflow", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-0770.html", "kevDateAdded": "2026-07-21", "kevDueDate": "2026-07-24", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.0", "version": "3.0", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.10371, "percentile": 0.95225, "date": "2026-07-21" }, "references": [ "https://www.zerodayinitiative.com/advisories/ZDI-26-036/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0770" ], "lastUpdated": "2026-07-22T05:17:08.693" }, { "id": "CVE-2026-0847", "product": "Nltk", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0847.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.00924, "percentile": 0.5649, "date": "2026-07-21" }, "references": [ "https://huntr.com/bounties/fc69914f-36a9-4c18-8503-10013b39f966", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:19712" ], "lastUpdated": "2026-07-15T02:17:57.520" }, { "id": "CVE-2026-0848", "product": "Nltk", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0848.html", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.0", "version": "3.0", "vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.00809, "percentile": 0.52884, "date": "2026-07-21" }, "references": [ "https://huntr.com/bounties/08b109bb-ac24-403f-9422-1c246ce60202" ], "lastUpdated": "2026-06-17T10:11:29.703" }, { "id": "CVE-2026-0849", "product": "Zephyrproject Zephyr", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0849.html", "cvss": { "score": 6.8, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0024, "percentile": 0.15185, "date": "2026-07-21" }, "references": [ "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-ff4p-3ggg-prp6" ], "lastUpdated": "2026-06-17T10:11:29.810" }, { "id": "CVE-2026-0850", "product": "Carmelo Intern Membership Management System", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0850.html", "cvss": { "score": 7.2, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00311, "percentile": 0.23182, "date": "2026-07-21" }, "references": [ "https://github.com/xkalami-Tta0/CVE/blob/main/Intern%20Membership%20Management%20System/Intern%20Membership%20Management%20System%20delete_activity.php%20sql%20injection.md", "https://vuldb.com/?id.340445", "https://vuldb.com/?submit.733486" ], "lastUpdated": "2026-06-17T10:11:29.920" }, { "id": "CVE-2026-0851", "product": "Fabian Online Music Site", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0851.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00319, "percentile": 0.24104, "date": "2026-07-21" }, "references": [ "https://github.com/tuo159515/sql-injection/issues/2", "https://vuldb.com/?id.340446", "https://vuldb.com/?submit.733644" ], "lastUpdated": "2026-06-17T10:11:30.063" }, { "id": "CVE-2026-0891", "product": "Mozilla Firefox", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-0891.html", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00414, "percentile": 0.33691, "date": "2026-07-21" }, "references": [ "https://www.mozilla.org/security/advisories/mfsa2026-01/", "https://www.mozilla.org/security/advisories/mfsa2026-03/", "https://www.mozilla.org/security/advisories/mfsa2026-04/" ], "lastUpdated": "2026-07-15T02:17:59.923" }, { "id": "CVE-2026-10520", "product": "Ivanti Sentry", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-10520.html", "kevDateAdded": "2026-06-11", "kevDueDate": "2026-06-14", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.99041, "percentile": 0.99927, "date": "2026-07-21" }, "references": [ "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US", "https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520" ], "lastUpdated": "2026-06-17T10:12:16.930" }, { "id": "CVE-2026-11247", "product": "Google Chrome", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-11247.html", "cvss": { "score": 3.1, "severity": "LOW", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" }, "epss": { "score": 0.00177, "percentile": 0.07488, "date": "2026-07-21" }, "references": [ "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html", "https://issues.chromium.org/issues/497865734" ], "lastUpdated": "2026-06-17T10:13:47.647" }, { "id": "CVE-2026-11645", "product": "Google Chromium V8", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-11645.html", "kevDateAdded": "2026-06-09", "kevDueDate": "2026-06-23", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01654, "percentile": 0.74002, "date": "2026-07-21" }, "references": [ "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html", "https://issues.chromium.org/issues/506689381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-11645" ], "lastUpdated": "2026-06-17T10:14:19.413" }, { "id": "CVE-2026-12569", "product": "PTC Windchill And FlexPLM", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-12569.html", "kevDateAdded": "2026-06-25", "kevDueDate": "2026-06-28", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01247, "percentile": 0.66054, "date": "2026-07-21" }, "references": [ "https://www.ptc.com/en/support/article/CS473270", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-12569" ], "lastUpdated": "2026-06-30T18:16:43.113" }, { "id": "CVE-2026-12957", "product": "Amazon Q Developer", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-12957.html", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00118, "percentile": 0.02046, "date": "2026-07-21" }, "references": [ "https://aws.amazon.com/security/security-bulletins/2026-047-aws/", "https://github.com/aws/language-servers/security/advisories/GHSA-xhcr-j4j9-3gh7" ], "lastUpdated": "2026-06-23T19:36:18.347" }, { "id": "CVE-2026-15409", "product": "SonicWall SMA1000 Appliances", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-15409.html", "kevDateAdded": "2026-07-14", "kevDueDate": "2026-07-17", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.01266, "percentile": 0.66544, "date": "2026-07-21" }, "references": [ "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15409" ], "lastUpdated": "2026-07-16T05:16:18.293" }, { "id": "CVE-2026-15410", "product": "SonicWall SMA1000 Appliances", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-15410.html", "kevDateAdded": "2026-07-14", "kevDueDate": "2026-07-17", "cvss": { "score": 7.2, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01486, "percentile": 0.71201, "date": "2026-07-21" }, "references": [ "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15410" ], "lastUpdated": "2026-07-16T05:16:18.470" }, { "id": "CVE-2026-15718", "product": "Mozilla Firefox", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-15718.html", "cvss": { "score": 4.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" }, "epss": { "score": 0.00156, "percentile": 0.05253, "date": "2026-07-21" }, "references": [ "https://www.mozilla.org/security/advisories/mfsa2026-67/", "https://bugzilla.mozilla.org/show_bug.cgi?id=2045443", "https://www.mozilla.org/security/advisories/mfsa2026-70/" ], "lastUpdated": "2026-07-21T13:17:02.267" }, { "id": "CVE-2026-15719", "product": "Mozilla Firefox", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-15719.html", "cvss": { "score": 5.4, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, "epss": { "score": 0.00133, "percentile": 0.03245, "date": "2026-07-21" }, "references": [ "https://www.mozilla.org/security/advisories/mfsa2026-67/", "https://bugzilla.mozilla.org/show_bug.cgi?id=2043820", "https://www.mozilla.org/security/advisories/mfsa2026-69/" ], "lastUpdated": "2026-07-21T13:17:02.470" }, { "id": "CVE-2026-1723", "product": "Windows Server 2022/2025", "exploitation": "none", "status": "review", "verification": "partial", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-1723.html", "epss": { "score": 0.00901, "percentile": 0.55748, "date": "2026-07-21" }, "references": [ "https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2026-0001/PANW-2026-0001.md", "https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html" ], "lastUpdated": "2026-06-17T10:16:24.003" }, { "id": "CVE-2026-1731", "product": "BeyondTrust Remote Support (RS) And Privileged Remote Access (PRA)", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-1731.html", "kevDateAdded": "2026-02-13", "kevDueDate": "2026-02-16", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.88115, "percentile": 0.99751, "date": "2026-07-21" }, "references": [ "https://www.beyondtrust.com/trust-center/security-advisories/bt26-02", "https://github.com/win3zz/CVE-2026-1731", "https://www.greynoise.io/blog/reconnaissance-beyondtrust-rce-cve-2026-1731" ], "lastUpdated": "2026-06-17T10:16:24.797" }, { "id": "CVE-2026-20131", "product": "Cisco Secure Firewall Management Center (FMC)", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20131.html", "kevDateAdded": "2026-03-19", "kevDueDate": "2026-03-22", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.27551, "percentile": 0.97865, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh", "https://aws.amazon.com/blogs/security/amazon-threat-intelligence-teams-identify-interlock-ransomware-campaign-targeting-enterprise-firewalls/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20131" ], "lastUpdated": "2026-06-17T10:17:10.937" }, { "id": "CVE-2026-20182", "product": "Cisco Catalyst SD-WAN", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20182.html", "kevDateAdded": "2026-05-14", "kevDueDate": "2026-05-17", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.88496, "percentile": 0.99757, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20182" ], "lastUpdated": "2026-06-17T15:06:02.767" }, { "id": "CVE-2026-20184", "product": "See advisory", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-20184.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0052, "percentile": 0.40785, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL" ], "lastUpdated": "2026-06-17T10:17:16.380" }, { "id": "CVE-2026-20230", "product": "Cisco Unified Communications Manager", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20230.html", "kevDateAdded": "2026-06-25", "kevDueDate": "2026-06-28", "cvss": { "score": 8.6, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" }, "epss": { "score": 0.41694, "percentile": 0.98537, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW", "https://denizhalil.com/2026/06/12/cve-2026-20230-cisco-unified-cm-ssrf/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20230" ], "lastUpdated": "2026-07-01T18:15:24.060" }, { "id": "CVE-2026-20245", "product": "Cisco Catalyst SD-WAN Manager", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20245.html", "kevDateAdded": "2026-06-09", "kevDueDate": "2026-06-23", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.25323, "percentile": 0.97712, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20245" ], "lastUpdated": "2026-07-21T19:23:39.570" }, { "id": "CVE-2026-20253", "product": "Splunk Enterprise", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20253.html", "kevDateAdded": "2026-06-18", "kevDueDate": "2026-06-21", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.88171, "percentile": 0.99752, "date": "2026-07-21" }, "references": [ "https://advisory.splunk.com/advisories/SVD-2026-0603", "https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20253" ], "lastUpdated": "2026-06-19T06:17:01.950" }, { "id": "CVE-2026-20262", "product": "Cisco Catalyst SD-WAN Manager", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-20262.html", "kevDateAdded": "2026-06-15", "kevDueDate": "2026-06-29", "cvss": { "score": 6.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, "epss": { "score": 0.07683, "percentile": 0.93939, "date": "2026-07-21" }, "references": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20262" ], "lastUpdated": "2026-06-17T13:20:04.900" }, { "id": "CVE-2026-20896", "product": "Gitea", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-20896.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00783, "percentile": 0.52029, "date": "2026-07-21" }, "references": [ "https://blog.gitea.com/release-of-1.26.3-and-1.26.4/", "https://github.com/go-gitea/gitea/pull/38151", "https://github.com/go-gitea/gitea/releases/tag/v1.26.3" ], "lastUpdated": "2026-07-07T18:16:35.380" }, { "id": "CVE-2026-21985", "product": "Oracle Vm Virtualbox", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-21985.html", "cvss": { "score": 6, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" }, "epss": { "score": 0.00236, "percentile": 0.14625, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/cpujan2026.html" ], "lastUpdated": "2026-06-17T10:19:18.030" }, { "id": "CVE-2026-21992", "product": "Oracle Identity Manager", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-21992.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01008, "percentile": 0.59235, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/alert-cve-2026-21992.html" ], "lastUpdated": "2026-06-17T10:19:19.263" }, { "id": "CVE-2026-22019", "product": "Oracle Peoplesoft Enterprise Hcm Shared Components", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-22019.html", "cvss": { "score": 5.4, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, "epss": { "score": 0.00152, "percentile": 0.04812, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/cpuapr2026.html" ], "lastUpdated": "2026-06-17T10:19:22.110" }, { "id": "CVE-2026-23111", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-23111.html", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00344, "percentile": 0.26751, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/1444ff890b4653add12f734ffeffc173d42862dd", "https://git.kernel.org/stable/c/42c574c1504aa089a0a142e4c13859327570473d", "https://git.kernel.org/stable/c/8b68a45f9722f2babe9e7bad00aa74638addf081" ], "lastUpdated": "2026-07-15T02:18:39.597" }, { "id": "CVE-2026-23479", "product": "Redis", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-23479.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01286, "percentile": 0.66994, "date": "2026-07-21" }, "references": [ "https://github.com/redis/redis/security/advisories/GHSA-93m2-935m-8rj3", "https://github.com/redis/redis/releases/tag/8.6.3", "https://access.redhat.com/errata/RHSA-2026:14316" ], "lastUpdated": "2026-07-16T12:17:04.390" }, { "id": "CVE-2026-23918", "product": "Apache Http Server", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-23918.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.4581, "percentile": 0.98672, "date": "2026-07-21" }, "references": [ "https://httpd.apache.org/security/vulnerabilities_24.html", "http://www.openwall.com/lists/oss-security/2026/05/04/19", "https://access.redhat.com/errata/RHSA-2026:13938" ], "lastUpdated": "2026-07-15T02:18:45.927" }, { "id": "CVE-2026-25089", "product": "Fortinet FortiSandbox", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-25089.html", "kevDateAdded": "2026-07-16", "kevDueDate": "2026-07-19", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.36135, "percentile": 0.98311, "date": "2026-07-21" }, "references": [ "https://fortiguard.fortinet.com/psirt/FG-IR-26-141", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-25089" ], "lastUpdated": "2026-07-17T05:16:38.687" }, { "id": "CVE-2026-25847", "product": "Jetbrains Pycharm", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-25847.html", "cvss": { "score": 6.1, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "epss": { "score": 0.00201, "percentile": 0.10204, "date": "2026-07-21" }, "references": [ "https://www.jetbrains.com/privacy-security/issues-fixed/" ], "lastUpdated": "2026-06-17T10:25:19.153" }, { "id": "CVE-2026-25874", "product": "Huggingface Lerobot", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-25874.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.15547, "percentile": 0.96463, "date": "2026-07-21" }, "references": [ "https://github.com/huggingface/lerobot/pull/3048", "https://chocapikk.com/posts/2026/lerobot-pickle-rce/", "https://github.com/huggingface/lerobot/issues/3047" ], "lastUpdated": "2026-07-14T16:16:57.380" }, { "id": "CVE-2026-26980", "product": "Ghost", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-26980.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.69996, "percentile": 0.99303, "date": "2026-07-21" }, "references": [ "https://github.com/TryGhost/Ghost/commit/30868d632b2252b638bc8a4c8ebf73964592ed91", "https://github.com/TryGhost/Ghost/security/advisories/GHSA-w52v-v783-gw97", "https://github.com/TryGhost/Ghost/releases/tag/v6.19.1" ], "lastUpdated": "2026-06-17T10:26:28.773" }, { "id": "CVE-2026-28318", "product": "SolarWinds Serv-U", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-28318.html", "kevDateAdded": "2026-06-05", "kevDueDate": "2026-06-19", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.10659, "percentile": 0.95314, "date": "2026-07-21" }, "references": [ "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28318", "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-28318" ], "lastUpdated": "2026-06-17T10:28:27.190" }, { "id": "CVE-2026-2847", "product": "Utt 520 Firmware", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2847.html", "cvss": { "score": 7.2, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.09229, "percentile": 0.94799, "date": "2026-07-21" }, "references": [ "https://github.com/cha0yang1/UTT520CVE/blob/main/UTTRCE2.md", "https://vuldb.com/?id.347083", "https://vuldb.com/?submit.753965" ], "lastUpdated": "2026-06-17T10:31:52.450" }, { "id": "CVE-2026-2848", "product": "Oretnom23 Simple Responsive Tourism Website", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2848.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00326, "percentile": 0.2484, "date": "2026-07-21" }, "references": [ "https://github.com/anupeng/CVE/issues/1", "https://vuldb.com/?id.347084", "https://vuldb.com/?submit.753967" ], "lastUpdated": "2026-06-17T10:31:52.580" }, { "id": "CVE-2026-2850", "product": "Yeqifu Warehouse", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2850.html", "cvss": { "score": 6.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" }, "epss": { "score": 0.00202, "percentile": 0.1032, "date": "2026-07-21" }, "references": [ "https://github.com/yeqifu/warehouse/issues/61", "https://github.com/yeqifu/warehouse/issues/61#issue-3846669982", "https://vuldb.com/?id.347086" ], "lastUpdated": "2026-06-17T10:31:52.860" }, { "id": "CVE-2026-2851", "product": "Yeqifu Warehouse", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2851.html", "cvss": { "score": 5.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, "epss": { "score": 0.00199, "percentile": 0.09917, "date": "2026-07-21" }, "references": [ "https://github.com/yeqifu/warehouse/issues/62", "https://github.com/yeqifu/warehouse/issues/62#issue-3846670634", "https://vuldb.com/?id.347087" ], "lastUpdated": "2026-06-17T10:31:52.993" }, { "id": "CVE-2026-2852", "product": "Yeqifu Warehouse", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2852.html", "cvss": { "score": 6.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, "epss": { "score": 0.0022, "percentile": 0.12536, "date": "2026-07-21" }, "references": [ "https://github.com/yeqifu/warehouse/issues/63", "https://vuldb.com/?id.347088", "https://vuldb.com/?submit.754431" ], "lastUpdated": "2026-06-17T10:31:53.127" }, { "id": "CVE-2026-2853", "product": "Dlink Dwr-M960 Firmware", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2853.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00863, "percentile": 0.54604, "date": "2026-07-21" }, "references": [ "https://github.com/LX-66-LX/cve-new/issues/10", "https://vuldb.com/?id.347092", "https://vuldb.com/?submit.754456" ], "lastUpdated": "2026-06-17T10:31:53.260" }, { "id": "CVE-2026-2854", "product": "Dlink Dwr-M960 Firmware", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2854.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00642, "percentile": 0.46763, "date": "2026-07-21" }, "references": [ "https://github.com/LX-66-LX/cve-new/issues/11", "https://vuldb.com/?id.347093", "https://vuldb.com/?submit.754457" ], "lastUpdated": "2026-06-17T10:31:53.403" }, { "id": "CVE-2026-2855", "product": "Dlink Dwr-M960 Firmware", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2855.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0062, "percentile": 0.45779, "date": "2026-07-21" }, "references": [ "https://github.com/LX-66-LX/cve-new/issues/12", "https://vuldb.com/?id.347094", "https://vuldb.com/?submit.754458" ], "lastUpdated": "2026-06-17T10:31:53.540" }, { "id": "CVE-2026-2856", "product": "Dlink Dwr-M960 Firmware", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-2856.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00642, "percentile": 0.46763, "date": "2026-07-21" }, "references": [ "https://github.com/LX-66-LX/cve-new/issues/13", "https://vuldb.com/?id.347095", "https://vuldb.com/?submit.754474" ], "lastUpdated": "2026-06-17T10:31:53.673" }, { "id": "CVE-2026-29014", "product": "Metinfo", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-29014.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.39688, "percentile": 0.98467, "date": "2026-07-21" }, "references": [ "https://karmainsecurity.com/KIS-2026-06", "https://www.vulncheck.com/advisories/metinfo-cms-unauthenticated-php-code-injection-rce", "http://seclists.org/fulldisclosure/2026/Apr/1" ], "lastUpdated": "2026-06-17T10:29:28.967" }, { "id": "CVE-2026-29201", "product": "cPanel & WHM", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-29201.html", "cvss": { "score": 8.6, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" }, "epss": { "score": 0.00435, "percentile": 0.35373, "date": "2026-07-21" }, "references": [ "https://support.cpanel.net/hc/en-us/articles/40311033698327-Security-CVE-2026-29201-cPanel-WHM-WP2-Security-Update-May-08-2026" ], "lastUpdated": "2026-06-17T10:29:46.400" }, { "id": "CVE-2026-3055", "product": "Citrix NetScaler", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-3055.html", "kevDateAdded": "2026-03-30", "kevDueDate": "2026-04-02", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.83996, "percentile": 0.99666, "date": "2026-07-21" }, "references": [ "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300", "https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3055" ], "lastUpdated": "2026-06-17T10:42:58.157" }, { "id": "CVE-2026-31431", "product": "Linux Kernel", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-31431.html", "kevDateAdded": "2026-05-01", "kevDueDate": "2026-05-15", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.96267, "percentile": 0.99872, "date": "2026-07-21" }, "references": [ "http://www.openwall.com/lists/oss-security/2026/04/29/23", "http://www.openwall.com/lists/oss-security/2026/04/29/26", "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c" ], "lastUpdated": "2026-07-15T02:19:47.730" }, { "id": "CVE-2026-31542", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31542.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00122, "percentile": 0.02362, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/1f6aa5bbf1d0f81a8a2aafc16136e7dd9a609ff3", "https://git.kernel.org/stable/c/79f0faf81d3bbbe5f07bf6892450d3740a1b290d", "https://git.kernel.org/stable/c/9956d4892e78812246336c7ea51f5aa62018049e" ], "lastUpdated": "2026-06-17T10:33:56.650" }, { "id": "CVE-2026-31543", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31543.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00121, "percentile": 0.02243, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/36f46b0e36892eba08978eef7502ff3c94ddba77", "https://git.kernel.org/stable/c/4897bd307ba8757c31a3325ba6730961be606016", "https://git.kernel.org/stable/c/ed8d91f469845d62d44c565a55d2ab1767969357" ], "lastUpdated": "2026-06-17T10:33:56.753" }, { "id": "CVE-2026-31544", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31544.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00121, "percentile": 0.02243, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/555317d6100164748f7d09f80142739bd29f0cda", "https://git.kernel.org/stable/c/70d9bd9a2e683afe6200b0c20af22f06f1a199a4", "https://git.kernel.org/stable/c/8414d2800c34528467df23ce6192c254a73e4459" ], "lastUpdated": "2026-06-17T10:33:56.850" }, { "id": "CVE-2026-31545", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31545.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00123, "percentile": 0.02443, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/0c2320c3c860d281cbc2f49fc574c1947a6b9e2a", "https://git.kernel.org/stable/c/2a175bc3c338c6b2bc55004e93dd35a2467bdca2", "https://git.kernel.org/stable/c/4de9ed2ea22d611b4149969266b45a86ea8daf35" ], "lastUpdated": "2026-06-17T10:33:56.953" }, { "id": "CVE-2026-31546", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31546.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00129, "percentile": 0.0291, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/017d674cf6930e9586a29ee808c7ca09d1396d07", "https://git.kernel.org/stable/c/0a3f8cd3f370247ded14d38d216b49dd30eade76", "https://git.kernel.org/stable/c/19f0fd87df0e5746b24f5caa465a66a8c6e6e241" ], "lastUpdated": "2026-07-14T13:18:45.277" }, { "id": "CVE-2026-31547", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31547.html", "cvss": { "score": 5.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00107, "percentile": 0.01396, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/65d046b2d8e0d6d855379a981869005fd6b6a41b", "https://git.kernel.org/stable/c/c409ecce9adcf815e86bc2f68834982e5a9c4e76" ], "lastUpdated": "2026-06-17T10:33:57.213" }, { "id": "CVE-2026-31635", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-31635.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00817, "percentile": 0.53141, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/a2567217ade970ecc458144b6be469bc015b23e5", "https://git.kernel.org/stable/c/beee051f259acd286fed64c32c2b31e6f5097eb5", "https://git.kernel.org/stable/c/e2f1a80d8b1ed6a5ae585a399c2b46500bdcc305" ], "lastUpdated": "2026-06-17T10:34:08.150" }, { "id": "CVE-2026-32201", "product": "Microsoft SharePoint Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-32201.html", "kevDateAdded": "2026-04-14", "kevDueDate": "2026-04-28", "cvss": { "score": 6.5, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, "epss": { "score": 0.21476, "percentile": 0.97347, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-32201" ], "lastUpdated": "2026-06-17T10:35:20.103" }, { "id": "CVE-2026-3300", "product": "WordPress Everest Forms Pro", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-3300.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.40992, "percentile": 0.98512, "date": "2026-07-21" }, "references": [ "https://everestforms.net/changelog/", "https://plugins.trac.wordpress.org/browser/everest-forms/tags/3.4.3/includes/class-evf-form-task.php#L584", "https://www.wordfence.com/threat-intel/vulnerabilities/id/389c0b89-e408-4ad5-9723-a16b745771f0?source=cve" ], "lastUpdated": "2026-06-17T10:43:22.287" }, { "id": "CVE-2026-33017", "product": "Langflow", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-33017.html", "kevDateAdded": "2026-03-25", "kevDueDate": "2026-04-08", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.98191, "percentile": 0.99909, "date": "2026-07-21" }, "references": [ "https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx", "https://github.com/langflow-ai/langflow/commit/73b6612e3ef25fdae0a752d75b0fabd47328d4f0", "https://github.com/advisories/GHSA-rvqx-wpfh-mfx7" ], "lastUpdated": "2026-06-17T10:36:47.177" }, { "id": "CVE-2026-33032", "product": "Nginxui Nginx Ui", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-33032.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.38477, "percentile": 0.98416, "date": "2026-07-21" }, "references": [ "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h6c2-x2m2-mwhf", "https://websec.net/blog/cve-2026-33032-unauthenticated-nginx-ui-mcp-takeover-69e1200f9fceb1f3fbe9c47f" ], "lastUpdated": "2026-06-17T10:36:49.207" }, { "id": "CVE-2026-33626", "product": "Internlm Lmdeploy", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-33626.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.4525, "percentile": 0.98654, "date": "2026-07-21" }, "references": [ "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq", "https://github.com/InternLM/lmdeploy/commit/71d64a339edb901e9005358e0633fbbab367d626" ], "lastUpdated": "2026-06-17T10:37:48.497" }, { "id": "CVE-2026-3381", "product": "Pmqs Compress\\", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-3381.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00548, "percentile": 0.42312, "date": "2026-07-21" }, "references": [ "https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/", "https://www.cve.org/CVERecord?id=CVE-2026-27171", "https://github.com/madler/zlib" ], "lastUpdated": "2026-06-17T10:43:29.847" }, { "id": "CVE-2026-33825", "product": "Microsoft Defender", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-33825.html", "kevDateAdded": "2026-04-22", "kevDueDate": "2026-05-06", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.06749, "percentile": 0.93237, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825", "https://www.huntress.com/blog/nightmare-eclipse-intrusion", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33825" ], "lastUpdated": "2026-06-17T10:38:09.690" }, { "id": "CVE-2026-34040", "product": "Docker Engine", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-34040.html", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.08123, "percentile": 0.94215, "date": "2026-07-21" }, "references": [ "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2", "https://github.com/moby/moby/releases/tag/docker-v29.3.1" ], "lastUpdated": "2026-06-17T10:38:28.383" }, { "id": "CVE-2026-34197", "product": "Apache ActiveMQ", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34197.html", "kevDateAdded": "2026-04-16", "kevDueDate": "2026-04-30", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.96666, "percentile": 0.99878, "date": "2026-07-21" }, "references": [ "https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "http://www.openwall.com/lists/oss-security/2026/04/06/3", "https://access.redhat.com/security/cve/CVE-2026-34197" ], "lastUpdated": "2026-07-15T02:20:30.640" }, { "id": "CVE-2026-34522", "product": "Sillytavern", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-34522.html", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" }, "epss": { "score": 0.0041, "percentile": 0.33294, "date": "2026-07-21" }, "references": [ "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf", "https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0" ], "lastUpdated": "2026-06-17T10:39:10.080" }, { "id": "CVE-2026-34523", "product": "Sillytavern", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-34523.html", "cvss": { "score": 5.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, "epss": { "score": 0.00449, "percentile": 0.36408, "date": "2026-07-21" }, "references": [ "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-525j-2hrj-m8fp", "https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0" ], "lastUpdated": "2026-06-17T10:39:10.183" }, { "id": "CVE-2026-34524", "product": "Sillytavern", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-34524.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0057, "percentile": 0.43469, "date": "2026-07-21" }, "references": [ "https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-vprr-q85p-79mf", "https://github.com/SillyTavern/SillyTavern/releases/tag/1.17.0" ], "lastUpdated": "2026-06-17T10:39:10.290" }, { "id": "CVE-2026-34621", "product": "Adobe Acrobat And Reader", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34621.html", "kevDateAdded": "2026-04-13", "kevDueDate": "2026-04-27", "cvss": { "score": 8.6, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.07086, "percentile": 0.93525, "date": "2026-07-21" }, "references": [ "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34621" ], "lastUpdated": "2026-06-17T10:39:20.060" }, { "id": "CVE-2026-34908", "product": "Ubiquiti UniFi OS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34908.html", "kevDateAdded": "2026-06-23", "kevDueDate": "2026-06-26", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.02452, "percentile": 0.8262, "date": "2026-07-21" }, "references": [ "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b", "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34908" ], "lastUpdated": "2026-06-24T14:50:41.720" }, { "id": "CVE-2026-34909", "product": "Ubiquiti UniFi OS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34909.html", "kevDateAdded": "2026-06-23", "kevDueDate": "2026-06-26", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.02269, "percentile": 0.81139, "date": "2026-07-21" }, "references": [ "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b", "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909" ], "lastUpdated": "2026-06-24T14:49:53.287" }, { "id": "CVE-2026-34910", "product": "Ubiquiti UniFi OS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34910.html", "kevDateAdded": "2026-06-23", "kevDueDate": "2026-06-26", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.78555, "percentile": 0.99541, "date": "2026-07-21" }, "references": [ "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b", "https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34910" ], "lastUpdated": "2026-06-24T14:49:47.237" }, { "id": "CVE-2026-34926", "product": "Trend Micro Apex One", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-34926.html", "kevDateAdded": "2026-05-21", "kevDueDate": "2026-06-04", "cvss": { "score": 6.7, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L" }, "epss": { "score": 0.12682, "percentile": 0.95829, "date": "2026-07-21" }, "references": [ "https://success.trendmicro.com/en-US/solution/KA-0023430", "https://success.trendmicro.com/ja-JP/solution/KA-0022974", "https://jvn.jp/en/vu/JVNVU90583059/" ], "lastUpdated": "2026-06-17T10:39:49.727" }, { "id": "CVE-2026-3502", "product": "TrueConf Client", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-3502.html", "kevDateAdded": "2026-04-02", "kevDueDate": "2026-04-16", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L" }, "epss": { "score": 0.0575, "percentile": 0.92244, "date": "2026-07-21" }, "references": [ "https://research.checkpoint.com/2026/operation-truechaos-0-day-exploitation-against-southeast-asian-government-targets/", "https://trueconf.com/blog/update/trueconf-8-5", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-3502" ], "lastUpdated": "2026-06-17T10:43:41.010" }, { "id": "CVE-2026-35273", "product": "Oracle PeopleSoft Enterprise PeopleTools", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-35273.html", "kevDateAdded": "2026-06-12", "kevDueDate": "2026-06-15", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.9233, "percentile": 0.99812, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/alert-cve-2026-35273.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35273" ], "lastUpdated": "2026-06-17T10:40:19.560" }, { "id": "CVE-2026-35401", "product": "Saleor", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-35401.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, "epss": { "score": 0.00268, "percentile": 0.18678, "date": "2026-07-21" }, "references": [ "https://github.com/saleor/saleor/security/advisories/GHSA-gqqv-xwx3-jj4h" ], "lastUpdated": "2026-06-17T10:40:31.960" }, { "id": "CVE-2026-35616", "product": "Fortinet FortiClient EMS", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-35616.html", "kevDateAdded": "2026-04-06", "kevDueDate": "2026-04-09", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.88505, "percentile": 0.99757, "date": "2026-07-21" }, "references": [ "https://fortiguard.fortinet.com/psirt/FG-IR-26-099", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616" ], "lastUpdated": "2026-06-17T10:40:52.190" }, { "id": "CVE-2026-3854", "product": "Github Enterprise Server", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-3854.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.35858, "percentile": 0.983, "date": "2026-07-21" }, "references": [ "https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.25", "https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.20", "https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.16" ], "lastUpdated": "2026-06-17T10:44:20.717" }, { "id": "CVE-2026-39808", "product": "Fortinet FortiSandbox", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-39808.html", "kevDateAdded": "2026-07-16", "kevDueDate": "2026-07-19", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.84158, "percentile": 0.99668, "date": "2026-07-21" }, "references": [ "https://fortiguard.fortinet.com/psirt/FG-IR-26-100", "https://github.com/samu-delucas/CVE-2026-39808", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-39808" ], "lastUpdated": "2026-07-17T05:16:38.870" }, { "id": "CVE-2026-39813", "product": "Fortinet Fortisandbox", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-39813.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.16739, "percentile": 0.96692, "date": "2026-07-21" }, "references": [ "https://fortiguard.fortinet.com/psirt/FG-IR-26-112" ], "lastUpdated": "2026-06-18T13:25:36.770" }, { "id": "CVE-2026-39987", "product": "Coreweave Marimo", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-39987.html", "kevDateAdded": "2026-04-23", "kevDueDate": "2026-05-07", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.95645, "percentile": 0.99862, "date": "2026-07-21" }, "references": [ "https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc", "https://github.com/marimo-team/marimo/commit/c24d4806398f30be6b12acd6c60d1d7c68cfd12a", "https://github.com/marimo-team/marimo/pull/9098" ], "lastUpdated": "2026-06-17T10:42:51.460" }, { "id": "CVE-2026-4020", "product": "WordPress Gravity SMTP", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-4020.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.39704, "percentile": 0.98468, "date": "2026-07-21" }, "references": [ "https://docs.gravitysmtp.com/gravity-smtp-changelog/", "https://plugins.trac.wordpress.org/browser/gravitysmtp/tags/2.1.4/vendor/gravityforms/gravity-tools/src/Providers/class-config-collection-service-provider.php#L103", "https://plugins.trac.wordpress.org/browser/gravitysmtp/tags/2.1.4/vendor/gravityforms/gravity-tools/src/Providers/class-config-collection-service-provider.php#L86" ], "lastUpdated": "2026-06-17T10:55:52.033" }, { "id": "CVE-2026-41089", "product": "Microsoft Windows Server 2012", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-41089.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.72253, "percentile": 0.99374, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089" ], "lastUpdated": "2026-06-17T10:46:09.190" }, { "id": "CVE-2026-41091", "product": "Microsoft Defender", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-41091.html", "kevDateAdded": "2026-05-20", "kevDueDate": "2026-06-03", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.08371, "percentile": 0.94356, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-41091" ], "lastUpdated": "2026-06-17T10:46:09.427" }, { "id": "CVE-2026-41205", "product": "Sqlalchemy Mako", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-41205.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.00361, "percentile": 0.28461, "date": "2026-07-21" }, "references": [ "https://github.com/sqlalchemy/mako/security/advisories/GHSA-v92g-xgxw-vvmm", "https://github.com/sqlalchemy/mako/commit/e05ac61989a7fb9dd7dcde6cfd72dc48328719a3", "https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_11" ], "lastUpdated": "2026-06-17T10:46:19.317" }, { "id": "CVE-2026-41940", "product": "WebPros CPanel & WHM And WP2 (WordPress Squared)", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-41940.html", "kevDateAdded": "2026-04-30", "kevDueDate": "2026-05-03", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.981, "percentile": 0.99907, "date": "2026-07-21" }, "references": [ "https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026", "https://www.namecheap.com/status-updates/ongoing-critical-security-vulnerability-in-cpanel-april-28-2026", "https://www.vulncheck.com/advisories/cpanel-and-whm-authentication-bypass-via-login-flow" ], "lastUpdated": "2026-06-17T10:47:13.957" }, { "id": "CVE-2026-42138", "product": "Langgenius Dify", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42138.html", "cvss": { "score": 6.1, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "epss": { "score": 0.00235, "percentile": 0.14416, "date": "2026-07-21" }, "references": [ "https://github.com/langgenius/dify/security/advisories/GHSA-cg94-8v83-7hjj", "https://github.com/langgenius/dify/releases/tag/1.13.1" ], "lastUpdated": "2026-06-17T10:47:26.300" }, { "id": "CVE-2026-42140", "product": "Siemens Ruggedcom Rox (before v2.17.1)", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42140.html", "cvss": { "score": 4.4, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N" }, "epss": { "score": 0.00151, "percentile": 0.0475, "date": "2026-07-21" }, "references": [ "https://github.com/xwiki-contrib/macro-plantuml/commit/c8b19bda93058794e04c8862fc7ca85c59b5fe5c", "https://github.com/xwiki-contrib/macro-plantuml/security/advisories/GHSA-42fc-7w97-8vrc", "https://jira.xwiki.org/browse/PLANTUML-25" ], "lastUpdated": "2026-06-17T10:47:26.413" }, { "id": "CVE-2026-42141", "product": "TanStack npm Package (supply chain)", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42141.html", "cvss": { "score": 7.7, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" }, "epss": { "score": 0.00369, "percentile": 0.29304, "date": "2026-07-21" }, "references": [ "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-fwq8-c4gw-pxmh" ], "lastUpdated": "2026-06-17T10:47:26.510" }, { "id": "CVE-2026-42156", "product": "Funnel Builder WordPress Plugin", "exploitation": "none", "status": "review", "verification": "partial", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42156.html", "epss": { "score": 0.00285, "percentile": 0.2058, "date": "2026-07-21" }, "references": [ "https://github.com/reconurge/flowsint/security/advisories/GHSA-h5m2-c2c5-968p" ], "lastUpdated": "2026-06-17T10:47:27.240" }, { "id": "CVE-2026-42157", "product": "Avada Builder WordPress Plugin", "exploitation": "none", "status": "review", "verification": "partial", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42157.html", "epss": { "score": 0.0028, "percentile": 0.20117, "date": "2026-07-21" }, "references": [ "https://github.com/reconurge/flowsint/security/advisories/GHSA-gj93-2vcq-729w" ], "lastUpdated": "2026-06-17T10:47:27.347" }, { "id": "CVE-2026-42208", "product": "BerriAI LiteLLM", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-42208.html", "kevDateAdded": "2026-05-08", "kevDueDate": "2026-05-11", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.86607, "percentile": 0.99721, "date": "2026-07-21" }, "references": [ "https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc", "https://access.redhat.com/security/cve/CVE-2026-42208", "https://bugzilla.redhat.com/show_bug.cgi?id=2463965" ], "lastUpdated": "2026-07-15T02:21:28.627" }, { "id": "CVE-2026-42271", "product": "BerriAI LiteLLM", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-42271.html", "kevDateAdded": "2026-06-08", "kevDueDate": "2026-06-22", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.80188, "percentile": 0.99576, "date": "2026-07-21" }, "references": [ "https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g", "https://access.redhat.com/errata/RHSA-2026:27784", "https://access.redhat.com/errata/RHSA-2026:28960" ], "lastUpdated": "2026-07-15T02:21:30.727" }, { "id": "CVE-2026-42530", "product": "F5 Nginx Gateway Fabric", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42530.html", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.03225, "percentile": 0.8686, "date": "2026-07-21" }, "references": [ "https://my.f5.com/manage/s/article/K000161616", "https://access.redhat.com/security/cve/CVE-2026-42530", "https://bugzilla.redhat.com/show_bug.cgi?id=2489872" ], "lastUpdated": "2026-07-16T12:17:51.630" }, { "id": "CVE-2026-42533", "product": "NGINX / F5", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42533.html", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0083, "percentile": 0.53564, "date": "2026-07-21" }, "references": [ "https://my.f5.com/manage/s/article/K000162097" ], "lastUpdated": "2026-07-16T05:16:19.247" }, { "id": "CVE-2026-42897", "product": "Microsoft Exchange Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-42897.html", "kevDateAdded": "2026-05-15", "kevDueDate": "2026-05-29", "cvss": { "score": 6.1, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, "epss": { "score": 0.0564, "percentile": 0.92096, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42897" ], "lastUpdated": "2026-06-17T10:48:34.893" }, { "id": "CVE-2026-42945", "product": "F5 Dos", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-42945.html", "cvss": { "score": 8.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.61469, "percentile": 0.99074, "date": "2026-07-21" }, "references": [ "https://my.f5.com/manage/s/article/K000161019", "https://depthfirst.com/nginx-rift", "https://github.com/DepthFirstDisclosures/Nginx-Rift" ], "lastUpdated": "2026-07-15T02:21:38.583" }, { "id": "CVE-2026-43503", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-43503.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.00135, "percentile": 0.03353, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/12401fcfb01f53ccc63ab0a3246570fe8f3105ee", "https://git.kernel.org/stable/c/179f1852bdedc300e373e807cc102cd81feff196", "https://git.kernel.org/stable/c/48f6a5356a33dd78e7144ae1faef95ffc990aae0" ], "lastUpdated": "2026-07-15T02:21:44.977" }, { "id": "CVE-2026-44338", "product": "Praison Praisonai", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-44338.html", "cvss": { "score": 7.3, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, "epss": { "score": 0.26799, "percentile": 0.97816, "date": "2026-07-21" }, "references": [ "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6rmh-7xcm-cpxj" ], "lastUpdated": "2026-06-17T10:50:31.593" }, { "id": "CVE-2026-44747", "product": "SAP NetWeaver Application Server ABAP", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-44747.html", "cvss": { "score": 9.9, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.00439, "percentile": 0.3565, "date": "2026-07-21" }, "references": [ "https://me.sap.com/notes/3747367", "https://url.sap/sapsecuritypatchday" ], "lastUpdated": "2026-07-15T05:16:39.023" }, { "id": "CVE-2026-44963", "product": "Veeam Backup & Replication", "exploitation": "none", "status": "review", "verification": "partial", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-44963.html", "epss": { "score": 0.02042, "percentile": 0.79049, "date": "2026-07-21" }, "references": [ "https://www.veeam.com/kb4869" ], "lastUpdated": "2026-06-17T10:51:32.620" }, { "id": "CVE-2026-45205", "product": "Apache Commons Configuration", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-45205.html", "cvss": { "score": 5.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, "epss": { "score": 0.00487, "percentile": 0.38858, "date": "2026-07-21" }, "references": [ "https://github.com/apache/commons-configuration/pull/634", "https://lists.apache.org/thread/q3q3j10ohcqhs6o0rg1v7kz6kk27vtkk", "http://www.openwall.com/lists/oss-security/2026/05/14/5" ], "lastUpdated": "2026-06-17T10:51:46.187" }, { "id": "CVE-2026-45247", "product": "Mirasvit Full Page Cache Warmer", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-45247.html", "kevDateAdded": "2026-06-03", "kevDueDate": "2026-06-06", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.27546, "percentile": 0.97865, "date": "2026-07-21" }, "references": [ "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "https://www.vulncheck.com/advisories/mirasvit-cache-warmer-for-magento-php-object-injection", "https://www.imperva.com/blog/imperva-customers-protected-against-cve-2026-45247-in-mirasvit-full-page-cache-warmer-for-magento/" ], "lastUpdated": "2026-06-17T10:51:49.520" }, { "id": "CVE-2026-45659", "product": "Microsoft SharePoint Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-45659.html", "kevDateAdded": "2026-07-01", "kevDueDate": "2026-07-04", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.03219, "percentile": 0.86834, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45659" ], "lastUpdated": "2026-07-02T12:16:47.143" }, { "id": "CVE-2026-46242", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-46242.html", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00125, "percentile": 0.02588, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/a6dc643c69311677c574a0f17a3f4d66a5f3744b", "https://git.kernel.org/stable/c/ced39b6a8062bac5c18a1c3df85634107eb8664a", "https://git.kernel.org/stable/c/ef4ca02e95363e78977ca04340d44fe3b4b2b81f" ], "lastUpdated": "2026-07-22T06:10:00.170" }, { "id": "CVE-2026-46331", "product": "Linux Kernel", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-46331.html", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00321, "percentile": 0.24257, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b", "https://git.kernel.org/stable/c/3dee9d0c198faeb95d052c1b94c2958751a28512", "https://git.kernel.org/stable/c/544d857b42a1734b923040e13aa61a6fd4746cf2" ], "lastUpdated": "2026-07-15T02:22:15.200" }, { "id": "CVE-2026-46333", "product": "Linux Kernel (also: Debian)", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-46333.html", "cvss": { "score": 7.1, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "epss": { "score": 0.0138, "percentile": 0.69112, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730", "https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205", "https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d" ], "lastUpdated": "2026-07-15T02:22:15.687" }, { "id": "CVE-2026-46817", "product": "Oracle E-Business Suite", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-46817.html", "kevDateAdded": "2026-07-15", "kevDueDate": "2026-07-18", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01045, "percentile": 0.60378, "date": "2026-07-21" }, "references": [ "https://www.oracle.com/security-alerts/cspumay2026.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-46817" ], "lastUpdated": "2026-07-21T10:10:00.103" }, { "id": "CVE-2026-48172", "product": "LiteSpeed CPanel Plugin", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48172.html", "kevDateAdded": "2026-05-26", "kevDueDate": "2026-05-29", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.18914, "percentile": 0.96987, "date": "2026-07-21" }, "references": [ "https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/release-log" ], "lastUpdated": "2026-06-17T10:54:54.777" }, { "id": "CVE-2026-48282", "product": "Adobe ColdFusion", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48282.html", "kevDateAdded": "2026-07-07", "kevDueDate": "2026-07-10", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.28583, "percentile": 0.97927, "date": "2026-07-21" }, "references": [ "https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48282" ], "lastUpdated": "2026-07-08T14:58:28.690" }, { "id": "CVE-2026-48558", "product": "Simple-Help Simplehelp", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48558.html", "kevDateAdded": "2026-06-29", "kevDueDate": "2026-07-02", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.0116, "percentile": 0.63645, "date": "2026-07-21" }, "references": [ "https://simple-help.com/security/simplehelp-security-update-2026-05", "https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/", "https://blackpointcyber.com/blog/a-djinn-in-the-machine-taskweavers-node-js-intrusion-chain/" ], "lastUpdated": "2026-06-30T13:03:11.437" }, { "id": "CVE-2026-48901", "product": "Joomla Joomla\\!", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-48901.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.00245, "percentile": 0.15741, "date": "2026-07-21" }, "references": [ "https://developer.joomla.org/security-centre/1049-20260517-core-incorrect-cache-key-construction-for-inputfilter-objects.html" ], "lastUpdated": "2026-06-17T10:55:22.243" }, { "id": "CVE-2026-48907", "product": "Widget Factory Joomla Content Editor", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48907.html", "kevDateAdded": "2026-06-16", "kevDueDate": "2026-06-19", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.80425, "percentile": 0.9958, "date": "2026-07-21" }, "references": [ "https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites", "https://www.joomlacontenteditor.net/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48907" ], "lastUpdated": "2026-06-17T14:06:35.153" }, { "id": "CVE-2026-48908", "product": "JoomShaper SP Page Builder", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48908.html", "kevDateAdded": "2026-07-07", "kevDueDate": "2026-07-10", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01569, "percentile": 0.72649, "date": "2026-07-21" }, "references": [ "https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/", "https://www.joomshaper.com/page-builder", "https://extensions.joomla.org/extension/sp-page-builder/" ], "lastUpdated": "2026-07-08T13:57:42.590" }, { "id": "CVE-2026-48939", "product": "Joomlic Icagenda", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-48939.html", "kevDateAdded": "2026-07-10", "kevDueDate": "2026-07-13", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01505, "percentile": 0.71553, "date": "2026-07-21" }, "references": [ "https://github.com/Polosss/By-Poloss..-..CVE-2026-48939", "https://mysites.guru/blog/icagenda-zero-day-file-upload-rce/", "https://www.icagenda.com/" ], "lastUpdated": "2026-07-11T05:16:34.140" }, { "id": "CVE-2026-5027", "product": "Langflow", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-5027.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.31405, "percentile": 0.98091, "date": "2026-07-21" }, "references": [ "https://www.tenable.com/security/research/tra-2026-26" ], "lastUpdated": "2026-06-17T10:58:17.977" }, { "id": "CVE-2026-50522", "product": "Microsoft Sharepoint Server", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-50522.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.20346, "percentile": 0.97203, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522" ], "lastUpdated": "2026-07-15T15:12:34.507" }, { "id": "CVE-2026-50548", "product": "Anysphere Cursor", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-50548.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00637, "percentile": 0.46539, "date": "2026-07-21" }, "references": [ "https://github.com/cursor/cursor/security/advisories/GHSA-3p48-7v9f-v5cw" ], "lastUpdated": "2026-06-26T16:51:25.290" }, { "id": "CVE-2026-50549", "product": "Anysphere Cursor", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-50549.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00638, "percentile": 0.46621, "date": "2026-07-21" }, "references": [ "https://github.com/cursor/cursor/security/advisories/GHSA-3v8f-48vw-3mjx" ], "lastUpdated": "2026-06-26T16:51:39.467" }, { "id": "CVE-2026-50656", "product": "Microsoft Malware Protection Engine", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-50656.html", "cvss": { "score": 7, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.03391, "percentile": 0.87509, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656", "https://github.com/MSNightmare/RoguePlanet" ], "lastUpdated": "2026-07-09T00:17:26.607" }, { "id": "CVE-2026-50746", "product": "Ui Unifi Connect Application", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-50746.html", "cvss": { "score": 10, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.00922, "percentile": 0.56422, "date": "2026-07-21" }, "references": [ "https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc" ], "lastUpdated": "2026-07-09T13:22:07.417" }, { "id": "CVE-2026-50751", "product": "Check Point Security Gateway", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-50751.html", "kevDateAdded": "2026-06-08", "kevDueDate": "2026-06-11", "cvss": { "score": 9.3, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N" }, "epss": { "score": 0.70099, "percentile": 0.99307, "date": "2026-07-21" }, "references": [ "https://support.checkpoint.com/results/sk/sk185033", "https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-50751" ], "lastUpdated": "2026-06-17T10:57:46.373" }, { "id": "CVE-2026-5281", "product": "Google Dawn", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-5281.html", "kevDateAdded": "2026-04-01", "kevDueDate": "2026-04-15", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.05036, "percentile": 0.91341, "date": "2026-07-21" }, "references": [ "https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "https://issues.chromium.org/issues/491518608", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5281" ], "lastUpdated": "2026-06-17T10:58:44.490" }, { "id": "CVE-2026-53359", "product": "Linux KVM hypervisor", "exploitation": "poc-published", "status": "poc", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-53359.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.0012, "percentile": 0.02153, "date": "2026-07-21" }, "references": [ "https://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462", "https://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35", "https://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa" ], "lastUpdated": "2026-07-18T08:16:36.620" }, { "id": "CVE-2026-54420", "product": "LiteSpeed CPanel Plugin", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-54420.html", "kevDateAdded": "2026-06-15", "kevDueDate": "2026-06-18", "cvss": { "score": 8.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" }, "epss": { "score": 0.01261, "percentile": 0.6641, "date": "2026-07-21" }, "references": [ "https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/", "https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-54420" ], "lastUpdated": "2026-06-17T10:58:13.830" }, { "id": "CVE-2026-55255", "product": "Langflow", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-55255.html", "kevDateAdded": "2026-07-07", "kevDueDate": "2026-07-10", "cvss": { "score": 8.4, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L" }, "epss": { "score": 0.0056, "percentile": 0.42931, "date": "2026-07-21" }, "references": [ "https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2", "https://github.com/langflow-ai/langflow/commit/2c9f498d664a3c32698b57d7c5e752625291060e" ], "lastUpdated": "2026-07-08T13:39:12.593" }, { "id": "CVE-2026-5587", "product": "Apache HTTP Server 2.4", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-5587.html", "cvss": { "score": 6.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, "epss": { "score": 0.00196, "percentile": 0.0961, "date": "2026-07-21" }, "references": [ "https://github.com/Ka7arotto/cve/blob/main/MAC-SQL/issue.md", "https://vuldb.com/submit/784459", "https://vuldb.com/vuln/355386" ], "lastUpdated": "2026-06-17T10:59:19.303" }, { "id": "CVE-2026-56155", "product": "Microsoft Active Directory Federation Services", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-56155.html", "kevDateAdded": "2026-07-14", "kevDueDate": "2026-07-28", "cvss": { "score": 7.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00379, "percentile": 0.30287, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56155" ], "lastUpdated": "2026-07-15T14:18:24.010" }, { "id": "CVE-2026-56164", "product": "Microsoft SharePoint Server", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-56164.html", "kevDateAdded": "2026-07-14", "kevDueDate": "2026-07-17", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.05601, "percentile": 0.92056, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56164" ], "lastUpdated": "2026-07-14T21:10:41.693" }, { "id": "CVE-2026-56290", "product": "Joomlack Page Builder", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-56290.html", "kevDateAdded": "2026-07-07", "kevDueDate": "2026-07-10", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.02912, "percentile": 0.85485, "date": "2026-07-21" }, "references": [ "https://forum.joomlack.fr/index.php/page-builder-ck/21627-nouvelle-version-de-pbck-et-joomla-3", "https://mysites.guru/blog/pagebuilderck-unauthenticated-file-upload-rce/", "https://www.joomlack.fr/" ], "lastUpdated": "2026-07-08T13:37:08.977" }, { "id": "CVE-2026-56291", "product": "Balbooa Forms", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-56291.html", "kevDateAdded": "2026-07-10", "kevDueDate": "2026-07-13", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.08635, "percentile": 0.94515, "date": "2026-07-21" }, "references": [ "https://mysites.guru/blog/balbooa-forms-unauthenticated-file-upload-flaw/", "https://www.balbooa.com/joomla-forms", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-56291" ], "lastUpdated": "2026-07-11T05:16:34.310" }, { "id": "CVE-2026-5760", "product": "Lmsys Sglang", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-5760.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.00852, "percentile": 0.54213, "date": "2026-07-21" }, "references": [ "https://github.com/sgl-project/sglang/pull/23660", "https://github.com/Stuub/SGLang-0.5.9-RCE", "https://www.kb.cert.org/vuls/id/915947" ], "lastUpdated": "2026-06-17T10:59:36.640" }, { "id": "CVE-2026-58644", "product": "Microsoft SharePoint", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-58644.html", "kevDateAdded": "2026-07-16", "kevDueDate": "2026-07-19", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.01465, "percentile": 0.70792, "date": "2026-07-21" }, "references": [ "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58644" ], "lastUpdated": "2026-07-17T05:16:40.470" }, { "id": "CVE-2026-60137", "product": "WordPress Core", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-60137.html", "kevDateAdded": "2026-07-21", "kevDueDate": "2026-08-04", "cvss": { "score": 5.9, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.04026, "percentile": 0.89474, "date": "2026-07-21" }, "references": [ "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-fpp7-x2x2-2mjf", "https://wordpress.org/news/2026/07/wordpress-7-0-2-release/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60137" ], "lastUpdated": "2026-07-22T05:17:11.750" }, { "id": "CVE-2026-63030", "product": "WordPress Core", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-63030.html", "kevDateAdded": "2026-07-21", "kevDueDate": "2026-07-24", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.08946, "percentile": 0.94679, "date": "2026-07-21" }, "references": [ "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q", "https://wordpress.org/news/2026/07/wordpress-7-0-2-release/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030" ], "lastUpdated": "2026-07-22T05:17:11.910" }, { "id": "CVE-2026-6973", "product": "Ivanti Endpoint Manager Mobile (EPMM)", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-6973.html", "kevDateAdded": "2026-05-07", "kevDueDate": "2026-05-10", "cvss": { "score": 7.2, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.34454, "percentile": 0.9824, "date": "2026-07-21" }, "references": [ "https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-6973" ], "lastUpdated": "2026-06-17T11:01:34.360" }, { "id": "CVE-2026-7114", "product": "Ivanti Connect Secure", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-7114.html", "cvss": { "score": 6.3, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, "epss": { "score": 0.00192, "percentile": 0.09144, "date": "2026-07-21" }, "references": [ "https://code-projects.org/", "https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul3.md", "https://vuldb.com/submit/800833" ], "lastUpdated": "2026-06-17T11:01:51.477" }, { "id": "CVE-2026-7473", "product": "Arista Extensible Operating System", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-7473.html", "kevDateAdded": "2026-06-09", "kevDueDate": "2026-06-23", "cvss": { "score": 5.8, "severity": "MEDIUM", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" }, "epss": { "score": 0.00836, "percentile": 0.5373, "date": "2026-07-21" }, "references": [ "https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137", "https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-7473" ], "lastUpdated": "2026-06-17T11:02:29.070" }, { "id": "CVE-2026-7482", "product": "Ollama", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-7482.html", "cvss": { "score": 9.1, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, "epss": { "score": 0.01001, "percentile": 0.59039, "date": "2026-07-21" }, "references": [ "https://github.com/ollama/ollama/commit/88d57d0483cca907e0b23a968c83627a20b21047", "https://github.com/ollama/ollama/pull/14406", "https://github.com/ollama/ollama/releases/tag/v0.17.1" ], "lastUpdated": "2026-06-17T11:02:30.040" }, { "id": "CVE-2026-8037", "product": "Progress Connection Manager For Objectscale", "exploitation": "source-reported", "status": "active", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8037.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.4343, "percentile": 0.98601, "date": "2026-07-21" }, "references": [ "https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/", "https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691" ], "lastUpdated": "2026-07-13T19:02:39.860" }, { "id": "CVE-2026-8043", "product": "Ivanti Xtraction", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8043.html", "cvss": { "score": 9.6, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" }, "epss": { "score": 0.00869, "percentile": 0.54818, "date": "2026-07-21" }, "references": [ "https://hub.ivanti.com/s/article/Security-Advisory---Ivanti-Xtraction-CVE-2026-8043?language=en_US" ], "lastUpdated": "2026-06-17T11:03:25.320" }, { "id": "CVE-2026-8206", "product": "WordPress Kirki Plugin", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8206.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0126, "percentile": 0.66378, "date": "2026-07-21" }, "references": [ "https://plugins.trac.wordpress.org/browser/kirki/tags/6.0.4/ComponentLibrary/controller/CompLibFormHandler.php#L330", "https://plugins.trac.wordpress.org/browser/kirki/tags/6.0.4/ComponentLibrary/controller/CompLibFormHandler.php#L48", "https://plugins.trac.wordpress.org/browser/kirki/tags/6.0.4/ComponentLibrary/controller/ElementGenerator.php#L227" ], "lastUpdated": "2026-06-17T11:03:38.207" }, { "id": "CVE-2026-8412", "product": "Concretecms Concrete Cms", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8412.html", "cvss": { "score": 8.8, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.0013, "percentile": 0.0301, "date": "2026-07-21" }, "references": [ "https://documentation.concretecms.org/9-x/developers/introduction/version-history/951-release-notes" ], "lastUpdated": "2026-06-17T11:03:54.133" }, { "id": "CVE-2026-8451", "product": "Citrix Netscaler Application Delivery Controller", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8451.html", "cvss": { "score": 7.5, "severity": "HIGH", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, "epss": { "score": 0.00502, "percentile": 0.39704, "date": "2026-07-21" }, "references": [ "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604" ], "lastUpdated": "2026-07-01T15:52:58.800" }, { "id": "CVE-2026-8732", "product": "WP Maps Pro (WordPress plugin)", "exploitation": "none", "status": "none", "verification": "verified", "kev": false, "permalink": "https://defend.network/cve/CVE-2026-8732.html", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.19272, "percentile": 0.97039, "date": "2026-07-21" }, "references": [ "https://codecanyon.net/item/advanced-google-maps-plugin-for-wordpress/5211638", "https://www.wordfence.com/threat-intel/vulnerabilities/id/65988550-d39d-40be-8d25-647e7237062d?source=cve" ], "lastUpdated": "2026-07-21T12:10:00.090" }, { "id": "CVE-2026-9082", "product": "Drupal Core", "exploitation": "kev-confirmed", "status": "active", "verification": "verified", "kev": true, "permalink": "https://defend.network/cve/CVE-2026-9082.html", "kevDateAdded": "2026-05-22", "kevDueDate": "2026-05-27", "cvss": { "score": 9.8, "severity": "CRITICAL", "source": "NVD CVSS 3.1", "version": "3.1", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, "epss": { "score": 0.84631, "percentile": 0.9968, "date": "2026-07-21" }, "references": [ "https://www.drupal.org/sa-core-2026-004", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9082" ], "lastUpdated": "2026-06-17T11:04:48.250" } ] }