The week in one view25 CVEs qualified. 8 have CISA-confirmed exploitation and 21 have a verified patch reference or fixed release in BlackTree’s retained evidence.
How records qualifyNewly published this week, or newly actionable because exploitation was confirmed, public exploit evidence appeared, verified remediation became available, or severity increased.How they are rankedConfirmed exploitation, ransomware linkage, unauthenticated network reachability, public exploit evidence, operational urgency, remediation, EPSS, CVSS, then recency.What is excludedOrdinary source refreshes, replaced links and affected-version churn do not qualify by themselves. An older CVE appears only when it gains a new action trigger this week.
1CVE-2026-123158OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityOpenBSD · OpenSSHSelected for: New verified remediation · New public exploit evidence · CISA KEV · Public exploit evidenceCritical⌄
Published High 8.1 · EPSS 18.90%
- What changed
- Remediation status changed from Awaiting fix to Patch available. Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-12 as the remediation due date.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →2CVE-2026-20320Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCisco · BroadWorksSelected for: New public exploit evidence · CISA KEV · Public exploit evidence · Unauthenticated network pathCritical⌄
Published High 7.5 · EPSS 0.82%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-24 as the remediation due date.
- Patch action
- Patch available. Cisco has released software updates that address this vulnerability.
- Fixed version
- No fixed version is explicitly recorded in the structured CVE data.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →3CVE-2026-116779SignalWire FreeSwitch Code Injection Vulnerabilitysignalwire · freeswitchSelected for: New verified remediation · CISA KEV · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 2.47%
- What changed
- Remediation status changed from Awaiting fix to Patch available.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-12 as the remediation due date.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →4CVE-2026-123218IBM Aspera Faspex Incorrect Authorization VulnerabilityIBM · Aspera FaspexSelected for: Published this week · CISA KEV · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.53%
- What changed
- Published during this week's reporting window.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-12 as the remediation due date.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- IBM strongly recommends addressing the vulnerability now by upgrading:; ProductVersionPlatformFix InstructionsIBM Aspera Faspex5.0.19 PL1Linux; Please follow the instructions here https://www.ibm.com/docs/en/aspera-faspex/5.0.x .; Validate that the faspex-core container image is 5.0.19 (1ce4b13, Fix Pack: 1)
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →5CVE-2026-102895GPUStack Improper Authentication Vulnerabilitygpustack · gpustackSelected for: New verified remediation · CISA KEV · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.52%
- What changed
- Remediation status changed from Awaiting fix to Patch available.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-12 as the remediation due date.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →6CVE-2026-19868SonicWall SonicOS SSLVPN Use of Single-factor Authentication VulnerabilitySonicWall · SonicOS SSLVPNSelected for: Published this week · CISA KEV · Unauthenticated network pathCritical⌄
Published High 7.5 · EPSS 0.53%
- What changed
- Published during this week's reporting window.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-20 as the remediation due date.
- Patch action
- Awaiting fix. No verified patch reference is present in the current structured sources. Check the vendor advisory before making a change.
- Fixed version
- No fixed version is explicitly recorded in the structured CVE data.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →7CVE-2026-124194Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityMicrosoft · OfficeSelected for: Published this week · CISA KEV · Verified patchCritical⌄
Published Medium 6.5 · EPSS 1.62%
- What changed
- Published during this week's reporting window.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-24 as the remediation due date.
- Patch action
- Patch available. 16.0.14334.21048:Security Update:https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- Fixed version
- Microsoft 365 Apps for Enterprise for 32-bit Systems https://aka.ms/OfficeSecurityReleases; Microsoft 365 Apps for Enterprise for 64-bit Systems https://aka.ms/OfficeSecurityReleases; Microsoft Office LTSC 2021 for 64-bit editions 16.0.14334.21048; Microsoft Office LTSC 2021 for 32-bit editions 16.0.14334.21048; Microsoft Office LTSC 2024 for 32-bit editions 16.0.17932.21140; Microsoft Office LTSC 2024 for 64-bit editions 16.0.17932.21140
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →8CVE-2026-125350Google Chromium Use-After-Free VulnerabilityGoogle · ChromiumSelected for: Published this week · CISA KEVCritical⌄
Published High 8.8 · EPSS 0.96%
- What changed
- Published during this week's reporting window.
- Why it matters
- CISA confirms exploitation in the wild and lists 2026-11-24 as the remediation due date.
- Patch action
- Awaiting fix. No verified patch reference is present in the current structured sources. Check the vendor advisory before making a change.
- Fixed version
- No fixed version is explicitly recorded in the structured CVE data.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →9CVE-2026-54143OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executiontinyhumansai · openhumanSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 1.18%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 0.57.13.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →10CVE-2026-44267Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitterenspirit · eloSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.83%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 1.0.1.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →11CVE-2026-54141OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`tinyhumansai · openhumanSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.0 · EPSS 0.76%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 0.57.13.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →12CVE-2026-95860node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissionsnode-opcua · node-opcuaSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.1 · EPSS 0.60%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 2.180.0.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →13CVE-2026-121953FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel CloseFreeRDP · FreeRDPSelected for: New verified remediation · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.3 · EPSS 0.56%
- What changed
- Remediation status changed from Mitigation available to Patch available.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
- Fixed version
- freerdp-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 100 more
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →14CVE-2026-634382FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header ValueBubka · 2FAuthSelected for: Published this week · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.51%
- What changed
- Published during this week's reporting window.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 8.0.0.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →15CVE-2026-121952FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 CapabilityFreeRDP · FreeRDPSelected for: New verified remediation · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.3 · EPSS 0.50%
- What changed
- Remediation status changed from Mitigation available to Patch available.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
- Fixed version
- freerdp-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-debugsource-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-libs-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); freerdp-server-debuginfo-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-2:3.32.2-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); libwinpr-debuginfo-2:3.32.2-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 100 more
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →16CVE-2026-86005Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrewchartbrew · chartbrewSelected for: Published this week · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.3 · EPSS 0.47%
- What changed
- Published during this week's reporting window.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 5.2.3.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →17CVE-2026-54349Chartbrew SQL injection in dashboard filter substitutionchartbrew · chartbrewSelected for: Published this week · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.43%
- What changed
- Published during this week's reporting window.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 5.2.1.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →18CVE-2026-634392FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy VerificationBubka · 2FAuthSelected for: Published this week · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.8 · EPSS 0.41%
- What changed
- Published during this week's reporting window.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 8.0.0.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →19CVE-2026-124438Scriban before 7.5.2 Delegate Target Exposure via array.map Member Accessscriban · scribanSelected for: Published this week · New public exploit evidence · Public exploit evidence · Unauthenticated network pathCritical⌄
Published Critical 9.1 · EPSS 0.36%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- scriban: 7.5.2
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →20CVE-2026-71495Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Accessopen-wanderer · wandererSelected for: Published this week · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 10.0 · EPSS 0.34%
- What changed
- Published during this week's reporting window.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 0.20.0.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →21CVE-2026-63469fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dictkoxudaxi · fastapi-code-generatorSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.3 · EPSS 0.31%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 0.8.1.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →22CVE-2026-63471fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decoratorkoxudaxi · fastapi-code-generatorSelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network path · Verified patchCritical⌄
Published Critical 9.3 · EPSS 0.31%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- 0.8.1.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →23CVE-2026-123870[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when GITHUB_WEBHOOK_SECRET is unsetEclipse Foundation · otterdogSelected for: Published this week · New public exploit evidence · Public exploit evidence · Unauthenticated network pathCritical⌄
Published Critical 9.5 · EPSS 0.30%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Patch available. Review the linked authoritative reference and apply the recorded fixed release appropriate to the affected product branch.
- Fixed version
- otterdog: 1.3.2
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →24CVE-2026-124580Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injectionChengdu Feiyuxing Technology · VW2100Selected for: Published this week · New public exploit evidence · Public exploit evidence · Unauthenticated network pathCritical⌄
Published Critical 10.0 · EPSS 2.79%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Awaiting fix. No verified patch reference is present in the current structured sources. Check the vendor advisory before making a change.
- Fixed version
- No fixed version is explicitly recorded in the structured CVE data.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →25CVE-2026-120277WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injectionWAVLINK · WN536AX6-ASelected for: New public exploit evidence · Public exploit evidence · Unauthenticated network pathCritical⌄
Published Critical 10.0 · EPSS 2.45%
- What changed
- Public exploit evidence changed from No public exploit to Public exploit reference.
- Why it matters
- Critical technical impact with a remotely reachable, unauthenticated path and a public exploit reference; no CISA KEV confirmation is currently recorded.
- Patch action
- Awaiting fix. No verified patch reference is present in the current structured sources. Check the vendor advisory before making a change.
- Fixed version
- No fixed version is explicitly recorded in the structured CVE data.
Mitigate: Within 3 days · Remediate: Within 90 days
Open the complete evidence →
