{"sample":false,"generatedAt":"2026-10-30T10:56:34.029Z","date":"2026-10-30T10:39:32.971Z","newCount":55,"ranked":[{"id":"CVE-2026-97229","vendor":"GitLab","product":"GitLab","title":"Integer Overflow or Wraparound in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially…","cvss":10,"kev":{"dateAdded":"2026-10-29","dueDate":"2026-11-01","ransomware":false},"kevToday":true,"epss":0.18427,"epssWas":null,"epssPercentile":0.97229,"publicExploit":false,"ssvc":"active","tldr":null,"priority":99,"breakdown":{"cvss":30,"kev":30,"epss":19.4,"exploit":10,"ssvc":10},"watch":false,"chips":[{"label":"KEV · added today · due 1 Nov","tone":"red","tip":"CISA Known Exploited Vulnerabilities: confirmed exploited in the wild. US federal agencies must fix by the due date.","term":"kev"},{"label":"EPSS 18%","tone":"yellow","tip":"Exploit Prediction Scoring System (FIRST): probability of exploitation in the next 30 days.","term":"epss"},{"label":"public exploit","tone":"fg","tip":"A working exploit or proof-of-concept is publicly available.","term":"exploit"},{"label":"SSVC act","tone":"fg","tip":"CISA’s Stakeholder-Specific Vulnerability Categorization: “Act” means exploitation is active.","term":"ssvc"},{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[{"label":"KEV","kind":"kev"},{"label":"EXP","kind":"exp"}],"segs":[{"w":30,"tone":"fg"},{"w":30,"tone":"red"},{"w":19.4,"tone":"yellow"},{"w":20,"tone":"muted"}],"epssPct":"18%","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-107327","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-107328","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-107329","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119145","vendor":"frappe","product":"frappe","title":"Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload","description":"Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage…","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61991","vendor":"Ajax Load More","product":"AjaxLoadMore Cache","title":"WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability","description":"Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.","cvss":10,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":30,"breakdown":{"cvss":30,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[],"segs":[{"w":30,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-84295","vendor":"Progress Software","product":"WS_FTP Server","title":"Improper Authentication in Progress WS_FTP Server","description":"Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.","cvss":10,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":30,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[],"segs":[{"w":30,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90868","vendor":"Progress Software","product":"WS_FTP Server","title":"OS Command Injection in Progress WS_FTP Server","description":"An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2025-31704","vendor":"Dahua","product":"Intelligent Connection Center","title":"Dahua Intelligent Connection Center command injection","description":"A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-103039","vendor":"Gravity Forms","product":"Gravity Forms","title":"Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field","description":"The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unrestricted global…","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-104339","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-110186","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54856","vendor":"ThemeREX","product":"RexCoin","title":"WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54857","vendor":"ThemeREX","product":"Quirky","title":"WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54858","vendor":"ThemeREX","product":"Printy","title":"WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54859","vendor":"ThemeREX","product":"Preservation","title":"WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54860","vendor":"ThemeREX","product":"Ozisti","title":"WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61992","vendor":"Von Eyal Fitoussi","product":"GEO my WordPress","title":"WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61997","vendor":"ThemeREX","product":"Legal Stone","title":"WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61998","vendor":"ThemeREX","product":"Le Truffe","title":"WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62001","vendor":"ThemeREX","product":"Marcell","title":"WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62002","vendor":"ThemeREX","product":"Meals & Wheels","title":"WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62003","vendor":"ThemeREX","product":"Mission","title":"WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Mission <= 1.22 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62004","vendor":"ThemeREX","product":"Motorix","title":"WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62005","vendor":"ThemeREX","product":"Muzicon","title":"WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62006","vendor":"ThemeREX","product":"Nuts","title":"WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62008","vendor":"ThemeREX","product":"Orpheus","title":"WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62009","vendor":"ThemeREX","product":"Filmax","title":"WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62010","vendor":"ThemeREX","product":"Avventure","title":"WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62011","vendor":"ThemeREX","product":"Bonbon","title":"WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62012","vendor":"ThemeREX","product":"Coinpress","title":"WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62013","vendor":"ThemeREX","product":"Edge Decor","title":"WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62014","vendor":"ThemeREX","product":"EmojiNation","title":"WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62015","vendor":"ThemeREX","product":"Gamezone","title":"WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62016","vendor":"ThemeREX","product":"Gamic","title":"WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62017","vendor":"ThemeREX","product":"Good Homes","title":"WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62018","vendor":"ThemeREX","product":"Gunslinger","title":"WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62131","vendor":"Zoho Flow","product":"Zoho Flow","title":"WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-93680","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-97854","vendor":"Yamaha Corporation","product":"NWR100","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability.","description":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2023-22793","vendor":"Veeam","product":"Management Pack for Microsoft System Center","title":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization E…","description":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-103093","vendor":"ServiceNow","product":"ServiceNow AI Platform","title":"Sandbox Escape via Table Rotation in ServiceNow AI Platform","description":"ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating…","cvss":9.4,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":28.2,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.4","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.4}],"tags":[],"segs":[{"w":28.2,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-111732","vendor":"RT-Labs","product":"P-Net","title":"Out-of-bounds write when parsing AR Vendor Block requests","description":"P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the…","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-112256","vendor":"OpenText","product":"Advanced Authentication Server","title":"Logon bypass (trust of attacker-controlled completed-methods list)","description":"Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-115964","vendor":"StylemixThemes","product":"Motors","title":"WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.126.","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-118762","vendor":"monkeytypegame","product":"monkeytype","title":"Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN","description":"Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and…","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-118769","vendor":"randombit","product":"botan","title":"Botan: Integer overflow when reporting block size in FFI can cause memory corruption","description":"Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119050","vendor":"agno-agi","product":"agno","title":"Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection","description":"Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-82104","vendor":"Teltonika Networks","product":"RUT","title":"API permission bypass via logic bug","description":"In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API…","cvss":9.4,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":28.2,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.4","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.4}],"tags":[],"segs":[{"w":28.2,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119128","vendor":"zitadel","product":"zitadel","title":"ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie","description":"ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61645","vendor":"docat-org","product":"docat","title":"Docat has Arbitrary File Upload exists in Upload API","description":"Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensitive configuration…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61707","vendor":"socfortress","product":"CoPilot","title":"SOCFortress CoPilot: Stored case-report template injection permits backend code execution","description":"SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2…","cvss":9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9}],"tags":[],"segs":[{"w":27,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90863","vendor":"Progress Software","product":"WS_FTP Server","title":"Privilege Escalation via Missing Authorization in WS_FTP Manager","description":"Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90864","vendor":"Progress Software","product":"WS_FTP Server","title":"Host Administrator Path Containment Bypass in Progress WS_FTP Server","description":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90865","vendor":"Progress Software","product":"WS_FTP Server","title":"Command Injection via FTP Notification Variables in Progress WS_FTP Server","description":"An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.","cvss":9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9}],"tags":[],"segs":[{"w":27,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90866","vendor":"Progress Software","product":"WS_FTP Server","title":"Virtual Folder Path Confinement Bypass in Progress WS_FTP Server","description":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"}],"patch":[{"id":"CVE-2026-97229","vendor":"GitLab","product":"GitLab","title":"Integer Overflow or Wraparound in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially…","cvss":10,"kev":{"dateAdded":"2026-10-29","dueDate":"2026-11-01","ransomware":false},"kevToday":true,"epss":0.18427,"epssWas":null,"epssPercentile":0.97229,"publicExploit":false,"ssvc":"active","tldr":null,"priority":99,"breakdown":{"cvss":30,"kev":30,"epss":19.4,"exploit":10,"ssvc":10},"watch":false,"chips":[{"label":"KEV · added today · due 1 Nov","tone":"red","tip":"CISA Known Exploited Vulnerabilities: confirmed exploited in the wild. US federal agencies must fix by the due date.","term":"kev"},{"label":"EPSS 18%","tone":"yellow","tip":"Exploit Prediction Scoring System (FIRST): probability of exploitation in the next 30 days.","term":"epss"},{"label":"public exploit","tone":"fg","tip":"A working exploit or proof-of-concept is publicly available.","term":"exploit"},{"label":"SSVC act","tone":"fg","tip":"CISA’s Stakeholder-Specific Vulnerability Categorization: “Act” means exploitation is active.","term":"ssvc"},{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[{"label":"KEV","kind":"kev"},{"label":"EXP","kind":"exp"}],"segs":[{"w":30,"tone":"fg"},{"w":30,"tone":"red"},{"w":19.4,"tone":"yellow"},{"w":20,"tone":"muted"}],"epssPct":"18%","epssWasPct":"–","delta":"+0 pts"}],"rest":[{"id":"CVE-2026-107327","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to missing authorization.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-107328","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-107329","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119145","vendor":"frappe","product":"frappe","title":"Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload","description":"Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage…","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61991","vendor":"Ajax Load More","product":"AjaxLoadMore Cache","title":"WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability","description":"Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.","cvss":10,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":30,"breakdown":{"cvss":30,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[],"segs":[{"w":30,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-84295","vendor":"Progress Software","product":"WS_FTP Server","title":"Improper Authentication in Progress WS_FTP Server","description":"Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.","cvss":10,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":30,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[],"segs":[{"w":30,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90868","vendor":"Progress Software","product":"WS_FTP Server","title":"OS Command Injection in Progress WS_FTP Server","description":"An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.","cvss":9.9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":30,"breakdown":{"cvss":29.7,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.9","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.9}],"tags":[],"segs":[{"w":29.7,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2025-31704","vendor":"Dahua","product":"Intelligent Connection Center","title":"Dahua Intelligent Connection Center command injection","description":"A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the affected system, allowing the attacker to execute arbitrary commands, resulting in remote code execution.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-103039","vendor":"Gravity Forms","product":"Gravity Forms","title":"Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field","description":"The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.2 via a Post Custom Field whose input type is List. This is due to GFFormsModel::create_post() passing the submitted value to WordPress' unrestricted global…","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-104339","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-110186","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54856","vendor":"ThemeREX","product":"RexCoin","title":"WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54857","vendor":"ThemeREX","product":"Quirky","title":"WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54858","vendor":"ThemeREX","product":"Printy","title":"WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54859","vendor":"ThemeREX","product":"Preservation","title":"WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-54860","vendor":"ThemeREX","product":"Ozisti","title":"WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61992","vendor":"Von Eyal Fitoussi","product":"GEO my WordPress","title":"WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61997","vendor":"ThemeREX","product":"Legal Stone","title":"WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61998","vendor":"ThemeREX","product":"Le Truffe","title":"WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62001","vendor":"ThemeREX","product":"Marcell","title":"WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62002","vendor":"ThemeREX","product":"Meals & Wheels","title":"WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62003","vendor":"ThemeREX","product":"Mission","title":"WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Mission <= 1.22 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62004","vendor":"ThemeREX","product":"Motorix","title":"WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62005","vendor":"ThemeREX","product":"Muzicon","title":"WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62006","vendor":"ThemeREX","product":"Nuts","title":"WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62008","vendor":"ThemeREX","product":"Orpheus","title":"WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62009","vendor":"ThemeREX","product":"Filmax","title":"WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62010","vendor":"ThemeREX","product":"Avventure","title":"WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62011","vendor":"ThemeREX","product":"Bonbon","title":"WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62012","vendor":"ThemeREX","product":"Coinpress","title":"WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62013","vendor":"ThemeREX","product":"Edge Decor","title":"WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62014","vendor":"ThemeREX","product":"EmojiNation","title":"WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62015","vendor":"ThemeREX","product":"Gamezone","title":"WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62016","vendor":"ThemeREX","product":"Gamic","title":"WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62017","vendor":"ThemeREX","product":"Good Homes","title":"WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62018","vendor":"ThemeREX","product":"Gunslinger","title":"WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-62131","vendor":"Zoho Flow","product":"Zoho Flow","title":"WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability","description":"Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-93680","vendor":"IBM","product":"Langflow OSS","title":"Langflow OSS is affected by multiple vulnerabilities","description":"IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-97854","vendor":"Yamaha Corporation","product":"NWR100","title":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability.","description":"Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.","cvss":9.8,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":29,"breakdown":{"cvss":29.4,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.8","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.8}],"tags":[],"segs":[{"w":29.4,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2023-22793","vendor":"Veeam","product":"Management Pack for Microsoft System Center","title":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization E…","description":"A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-103093","vendor":"ServiceNow","product":"ServiceNow AI Platform","title":"Sandbox Escape via Table Rotation in ServiceNow AI Platform","description":"ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying host operating…","cvss":9.4,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":28.2,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.4","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.4}],"tags":[],"segs":[{"w":28.2,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-111732","vendor":"RT-Labs","product":"P-Net","title":"Out-of-bounds write when parsing AR Vendor Block requests","description":"P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the…","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-112256","vendor":"OpenText","product":"Advanced Authentication Server","title":"Logon bypass (trust of attacker-controlled completed-methods list)","description":"Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-115964","vendor":"StylemixThemes","product":"Motors","title":"WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.126.","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-118762","vendor":"monkeytypegame","product":"monkeytype","title":"Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN","description":"Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's package.json, and…","cvss":9.3,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.9,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.3","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.3}],"tags":[],"segs":[{"w":27.9,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-118769","vendor":"randombit","product":"botan","title":"Botan: Integer overflow when reporting block size in FFI can cause memory corruption","description":"Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119050","vendor":"agno-agi","product":"agno","title":"Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection","description":"Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr(). Attackers can use prompt injection to make the agent call pandas.read_pickle on…","cvss":9.2,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":27.6,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.2","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.2}],"tags":[],"segs":[{"w":27.6,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-82104","vendor":"Teltonika Networks","product":"RUT","title":"API permission bypass via logic bug","description":"In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API…","cvss":9.4,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":28,"breakdown":{"cvss":28.2,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.4","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.4}],"tags":[],"segs":[{"w":28.2,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-119128","vendor":"zitadel","product":"zitadel","title":"ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie","description":"ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61645","vendor":"docat-org","product":"docat","title":"Docat has Arbitrary File Upload exists in Upload API","description":"Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensitive configuration…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-61707","vendor":"socfortress","product":"CoPilot","title":"SOCFortress CoPilot: Stored case-report template injection permits backend code execution","description":"SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2…","cvss":9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":null,"tldr":null,"priority":27,"breakdown":{"cvss":27,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9}],"tags":[],"segs":[{"w":27,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90863","vendor":"Progress Software","product":"WS_FTP Server","title":"Privilege Escalation via Missing Authorization in WS_FTP Manager","description":"Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated…","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90864","vendor":"Progress Software","product":"WS_FTP Server","title":"Host Administrator Path Containment Bypass in Progress WS_FTP Server","description":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90865","vendor":"Progress Software","product":"WS_FTP Server","title":"Command Injection via FTP Notification Variables in Progress WS_FTP Server","description":"An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.","cvss":9,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9}],"tags":[],"segs":[{"w":27,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"},{"id":"CVE-2026-90866","vendor":"Progress Software","product":"WS_FTP Server","title":"Virtual Folder Path Confinement Bypass in Progress WS_FTP Server","description":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.","cvss":9.1,"kev":null,"kevToday":false,"epss":null,"epssWas":null,"epssPercentile":null,"publicExploit":false,"ssvc":"none","tldr":null,"priority":27,"breakdown":{"cvss":27.3,"kev":0,"epss":0,"exploit":0,"ssvc":0},"watch":false,"chips":[{"label":"CVSS 9.1","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":9.1}],"tags":[],"segs":[{"w":27.3,"tone":"fg"}],"epssPct":"–","epssWasPct":"–","delta":"+0 pts"}],"kevToday":[{"id":"CVE-2026-97229","vendor":"GitLab","product":"GitLab","title":"Integer Overflow or Wraparound in GitLab","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially…","cvss":10,"kev":{"dateAdded":"2026-10-29","dueDate":"2026-11-01","ransomware":false},"kevToday":true,"epss":0.18427,"epssWas":null,"epssPercentile":0.97229,"publicExploit":false,"ssvc":"active","tldr":null,"priority":99,"breakdown":{"cvss":30,"kev":30,"epss":19.4,"exploit":10,"ssvc":10},"watch":false,"chips":[{"label":"KEV · added today · due 1 Nov","tone":"red","tip":"CISA Known Exploited Vulnerabilities: confirmed exploited in the wild. US federal agencies must fix by the due date.","term":"kev"},{"label":"EPSS 18%","tone":"yellow","tip":"Exploit Prediction Scoring System (FIRST): probability of exploitation in the next 30 days.","term":"epss"},{"label":"public exploit","tone":"fg","tip":"A working exploit or proof-of-concept is publicly available.","term":"exploit"},{"label":"SSVC act","tone":"fg","tip":"CISA’s Stakeholder-Specific Vulnerability Categorization: “Act” means exploitation is active.","term":"ssvc"},{"label":"CVSS 10.0","tone":"muted","tip":"Common Vulnerability Scoring System base score, 0–10. ≥ 9.0 is critical.","term":"cvss","cvss":10}],"tags":[{"label":"KEV","kind":"kev"},{"label":"EXP","kind":"exp"}],"segs":[{"w":30,"tone":"fg"},{"w":30,"tone":"red"},{"w":19.4,"tone":"yellow"},{"w":20,"tone":"muted"}],"epssPct":"18%","epssWasPct":"–","delta":"+0 pts"}],"movers":[],"clusters":[{"vendor":"ThemeREX","count":24,"products":"Printy, Ozisti, Legal Stone, Le Truffe, Marcell, Meals & Wheels, Mission, Motorix, Muzicon, Nuts, Orpheus, Filmax, Avventure, Bonbon, Coinpress, Edge Decor, EmojiNation, Gamezone, Gamic, Good Homes, Gunslinger, Preservation, RexCoin, Quirky"},{"vendor":"IBM","count":6,"products":"Langflow OSS"},{"vendor":"Progress Software","count":6,"products":"WS_FTP Server"}],"vendorCounts":[{"vendor":"ThemeREX","count":24},{"vendor":"IBM","count":6},{"vendor":"Progress Software","count":6},{"vendor":"agno-agi","count":1},{"vendor":"Ajax Load More","count":1},{"vendor":"Dahua","count":1},{"vendor":"docat-org","count":1},{"vendor":"frappe","count":1},{"vendor":"Gravity Forms","count":1},{"vendor":"monkeytypegame","count":1},{"vendor":"OpenText","count":1},{"vendor":"randombit","count":1},{"vendor":"RT-Labs","count":1},{"vendor":"ServiceNow","count":1},{"vendor":"socfortress","count":1},{"vendor":"StylemixThemes","count":1},{"vendor":"Teltonika Networks","count":1},{"vendor":"Veeam","count":1},{"vendor":"Von Eyal Fitoussi","count":1},{"vendor":"Yamaha Corporation","count":1},{"vendor":"zitadel","count":1},{"vendor":"Zoho Flow","count":1}],"singlesCount":19,"hiddenCount":0,"upstreams":[{"name":"cvelistV5","when":"10:56Z","state":"fresh"},{"name":"CISA KEV","when":"14:16Z","state":"fresh"},{"name":"Vulnrichment","when":"10:56Z","state":"fresh"},{"name":"NVD","when":"10:56Z","state":"fresh"},{"name":"EPSS","when":"14:16Z","state":"fresh"}],"allFresh":true,"headline":null,"lede":"One vulnerability entered CISA KEV overnight, a GitLab GitLab bug. ThemeREX shipped 24 criticals.","watchlist":[],"watchCount":0,"kevCount":1,"exploitCount":1}