Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1085 in cacheBrowse CVEs
NVD checked Nov 7, 10:04 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 745–768 of 1,769

CISA KEV

CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Apache · ActiveMQ

Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class…

Federal remediation due Nov 23, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability

F5 · BIG-IP Configuration Utility

F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.

Federal remediation due Nov 21, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

F5 · BIG-IP Configuration Utility

F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute…

Federal remediation due Nov 21, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmail

Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.

Federal remediation due Nov 16, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-20273: Cisco IOS XE Web UI Command Injection Vulnerability

Cisco · Cisco IOS XE Web UI

Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as…

Federal remediation due Oct 27, 2023Ransomware use: Not confirmed by CISA

Required action: Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to…

View in the CISA KEV catalog →

CISA KEV

CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway

Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

Federal remediation due Nov 8, 2023Ransomware use: Known

Required action: Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-20198: Cisco IOS XE Web UI Privilege Escalation Vulnerability

Cisco · IOS XE Web UI

Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated attacker to create an account with privilege level 15 access. The attacker can then use that account to gain control of…

Federal remediation due Oct 20, 2023Ransomware use: Not confirmed by CISA

Required action: Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to…

View in the CISA KEV catalog →

CISA KEV

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability

IETF · HTTP/2

HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).

Federal remediation due Oct 31, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-20109: Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

Cisco · IOS and IOS XE

Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious…

Federal remediation due Oct 31, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

Progress · WS_FTP Server

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

Federal remediation due Oct 26, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Atlassian · Confluence Data Center and Server

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

Federal remediation due Oct 13, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-28229: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft · Windows CNG Key Isolation Service

Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.

Federal remediation due Oct 25, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali GPU Kernel Driver

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

Federal remediation due Oct 24, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-5217: Google Chromium libvpx Heap Buffer Overflow Vulnerability

Google · Chromium libvpx

Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.

Federal remediation due Oct 23, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2018-14667: Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

Red Hat · JBoss RichFaces Framework

Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

Federal remediation due Oct 19, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which…

Federal remediation due Oct 16, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-41991: Apple Multiple Products Improper Certificate Validation Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.

Federal remediation due Oct 16, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEV

CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

Trend Micro · Apex One and Worry-Free Business Security

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target…

Federal remediation due Oct 12, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 1,033–1,056 of 1,331

NVD CVE

CVE-2023-47083

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-47082

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-47045

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44370

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44369

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44368

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44364

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44363

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44354

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-44349

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-38202

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-29493

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-26399

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-26365

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-26363

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-26362

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-26357

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-22270

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-22267

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-22255

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-22245

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-21623

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-21617

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

NVD CVE

CVE-2023-21602

Rejected reason: Reserved ID never published and not linked to any VULN ticket – quota reclaim 2026-11-05

CVSS not yet assignedStatus: Rejected

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 5, 2026 10:04–Nov 7, 2026 10:04API response: Site snapshot: Showing 24 of 1,331Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours