UpstreamscvelistV5 18:04ZCISA KEV 19:16ZVulnrichment 18:04ZNVD 18:04ZEPSS 19:16Zdaily run 06:06 UTC · next hourly 20:15

Sat 31 Oct 2026

Today

83 new ≥ 9.0 · 13 actionable · cakephp clear

PriorityVulnerabilityCVSSEPSSSignals

cakephp2 vulnerabilitiesMax CVSS 9.2Priority 36KEV 0

36

CVE-2026-119418

cakephp cakephp · CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()

9.20.5%

34

CVE-2026-119419

cakephp cakephp · CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation

9.20.4%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works