UpstreamscvelistV5 00:11ZCISA KEV 00:16ZVulnrichment 00:11ZNVD 00:11ZEPSS 00:16Zdaily run 06:05 UTC · next hourly 01:15

Thu 5 Nov 2026

Today

120 new ≥ 9.0 · 11 actionable · tinyhumansai clear

PriorityVulnerabilityCVSSEPSSSignals

tinyhumansai2 vulnerabilitiesMax CVSS 9.8Priority 29KEV 0

29

CVE-2026-54143

tinyhumansai openhuman · OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution

9.8–

27

CVE-2026-54141

tinyhumansai openhuman · OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`

9.0–

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works