BlackTreeCVE Intelligence
Transparent operational contextNo replacement for CVSSEvidence changes automatically
Operational reassessment

Technical severity, tested against real-world signals

Compare published severity with exploitation, reachability, prerequisites and EPSS. Every result shows its evidence and limitations.

Reassess a record

Enter a CVE identifier or search term.

Last 30 days17,224assessed
Raised1,779higher operational concern
Lowered1,587deeper prerequisites
Unchanged12,617published severity retained
Unscored1,241no severity baseline
30-day operating picture

The action queues at a glance

3,366 changed classification. 1,241 still need a manual severity baseline.

Assessment feed

Newest reassessments

Method v1. CISA KEV, public exploit evidence, network reachability, authentication, EPSS and prerequisite depth are evaluated against the published technical severity.

CVE-2026-109903X.Org · xwayland
Loweredsince 13 Nov 2026

X.Org Server XvQueryImageAttributes Negative Size Reply

Published severityHigh · 7.8Operational priority:Medium, lowered one band.
  • No CISA KEV confirmation is currently recorded.
  • Exploitation requires an existing local or physical foothold with privileges.
CVE-2026-123274Apache Software Foundation · Apache DataSketches C++
Unscored

Apache DataSketches C++: Out-of-bounds write in KLL sketch deserialization allows memory corruption via a crafted sketch

Published severityUnscoredOperational priority:Needs assessment, manual assessment needed.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-123338Apache Software Foundation · Apache DataSketches C++
Unscored

Apache DataSketches C++: Out-of-bounds write in REQ sketch deserialization allows memory corruption via a crafted sketch

Published severityUnscoredOperational priority:Needs assessment, manual assessment needed.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-109904X.Org · xorg-x11-server
Loweredsince 13 Nov 2026

X.Org Server XRes QueryClientIds Request Size Overflow

Published severityMedium · 6.9Operational priority:Low, lowered one band.
  • No CISA KEV confirmation is currently recorded.
  • Exploitation requires an existing local or physical foothold with privileges.
CVE-2026-125659eMudhra · emBridge
Unchanged

Information Disclosure Vulnerability in eMudhra emBridge

Published severityLow · 2.1Operational priority:Low, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-112182OpenKM · OpenKM Community Edition
Unchanged

Multiple Vulnerabilities in OpenKM Community Edition

Published severityHigh · 8.7Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-112181OpenKM · OpenKM Community Edition
Unchanged

Multiple Vulnerabilities in OpenKM Community Edition

Published severityHigh · 8.3Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2023-54423OpenMage · magento-lts
Unchanged

OpenMage magento-lts before 20.2.0 Stored XSS via TinyMCE WYSIWYG Editor

Published severityHigh · 8.3Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2024-58404diced · zipline
Unchanged

Zipline 3.4.5 before 3.7.10 Path Traversal via user export endpoint

Published severityHigh · 8.3Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2024-58405diced · zipline
Unchanged

Zipline through 3.7.9 Invite Bypass via /api/auth/register Endpoint

Published severityHigh · 8.8Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
CVE-2025-71459diced · zipline
Unchanged

Zipline through 4.3.2 Path Traversal via x-zipline-filename Header

Published severityHigh · 7.2Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2025-71460diced · zipline
Unchanged

Zipline before 4.2.1 Missing Ownership Check via /api/user/files/transaction

Published severityLow · 2.3Operational priority:Low, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2025-71461diced · zipline
Unchanged

Zipline before 4.0.2 Predictable Filenames via Math.random State Recovery

Published severityMedium · 6.9Operational priority:Medium, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
CVE-2025-71462diced · zipline
Unchanged

Zipline before 3.7.12 XSS via url parameter on login page

Published severityMedium · 5.1Operational priority:Medium, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2025-71463secdev · scapy
Loweredsince 13 Nov 2026

Scapy before 2.7.0 Insecure Deserialization RCE via Session Files

Published severityMedium · 5.4Operational priority:Low, lowered one band.
  • No CISA KEV confirmation is currently recorded.
  • Exploitation requires an existing local or physical foothold with privileges.
CVE-2026-75487Shenzhen Cudy Technology Co., Ltd. · TR3000 1.0
Unchanged

Cudy TR3000 before 2.5.42 Command Injection via WireGuard private_key Export

Published severityHigh · 8.6Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-75488Shenzhen Cudy Technology Co., Ltd. · TR3000 1.0
Unchanged

Cudy TR3000 before 2.5.42 Stack Buffer Overflow via CWMP Basic Authorization Builder

Published severityHigh · 8.2Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
CVE-2026-75489Shenzhen Cudy Technology Co., Ltd. · TR3000 1.0
Unchanged

Cudy TR3000 before 2.5.42 SMT Message Forgery via Probe Request Vendor IE

Published severityMedium · 6.1Operational priority:Medium, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-75490Shenzhen Cudy Technology Co., Ltd. · TR3000 1.0
Unchanged

Cudy TR3000 before 2.5.42 Unauthenticated RCE via mDNS Automesh Broker Adoption

Published severityHigh · 7.7Operational priority:High, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
CVE-2026-75491Shenzhen Cudy Technology Co., Ltd. · TR3000 1.0
Unchanged

Cudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none Tokens

Published severityCritical · 9.2Operational priority:Critical, unchanged from published severity.
  • No CISA KEV confirmation is currently recorded.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.

What this result means

This automated reassessment organises public evidence. It does not know asset exposure, business impact or control effectiveness and does not replace CVSS or a human risk decision.