Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1015 in cacheBrowse CVEs
NVD checked Nov 8, 06:27 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 889–912 of 1,769

CISA KEV

CVE-2023-23529: Apple Multiple Products WebKit Type Confusion Vulnerability

Apple · Multiple Products

Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products…

Federal remediation due Mar 7, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Citrix · Application Delivery Controller (ADC) and Gateway

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Federal remediation due Jan 3, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2022-26501: Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replication

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

Federal remediation due Jan 3, 2023Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2022-26500: Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replication

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

Federal remediation due Jan 3, 2023Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2022-4262: Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft…

Federal remediation due Dec 26, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 913–936 of 1,041

NVD CVE

CVE-2026-107622

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to the public frontend submission handler `buddyforms_form_response_no_ajax()` authorizing logged-out submissions based solely on the target form's…

CVSS 9.8 CRITICALStatus: DeferredCWE-269

Review the NVD record →

NVD CVE

CVE-2026-104010

The WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.8.0 via the 'any non-system CF7 field (e.g., your-message)' parameter parameter. This is due to…

CVSS 7.5 HIGHStatus: DeferredCWE-502

Review the NVD record →

NVD CVE

CVE-2026-103908

The The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.18. This is due to the software allowing users to execute an action that does not properly validate a value before…

CVSS 5.4 MEDIUMStatus: DeferredCWE-94

Review the NVD record →

NVD CVE

CVE-2026-103479

The Pubjet | پاب‌جت plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.4.8. This is due to the `checkToken()` AJAX handler — registered under `wp_ajax_pubjet-check-token` — performing no capability check and no nonce verification before unconditionally writing the attacker-supplied…

CVSS 7.6 HIGHStatus: DeferredCWE-269

Review the NVD record →

NVD CVE

CVE-2025-66621

Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate correctly AUD claim of JWT payloads when introspection is not configured. This allows an attacker with valid credentials to access the mail server even if they are not authorized to do so. We recommend users to…

CVSS not yet assignedStatus: DeferredCWE-345

Review the NVD record →

NVD CVE

CVE-2026-84164

The HTML report that plist-to-html, CodeChecker parse –export html and CodeChecker cmd diff –output html generate puts the report message, the checker name and the source file path into a script block through json.dumps. json.dumps does not escape the less-than character, so a closing script tag…

CVSS 0.0 NONEStatus: ReceivedCWE-79

Review the NVD record →

NVD CVE

CVE-2026-84161

When an operator enables store.analysis_statistics_dir, a network client with PRODUCT_STORE permission for a product can call that product's storeAnalysisStatistics Thrift-over-HTTP method. CodeChecker 6.29.0 decodes the attacker-controlled Base64 string and passes the complete compressed input to one-shot zlib.decompress(). No maximum decompressed size is enforced. This gives a…

CVSS 4.9 MEDIUMStatus: ReceivedCWE-409CWE-770

Review the NVD record →

NVD CVE

CVE-2026-84155

CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one API worker process (the default). Each worker process maintains its own in-memory session cache; logout only clears the cache of the single worker that handles the…

CVSS 5.3 MEDIUMStatus: ReceivedCWE-613

Review the NVD record →

NVD CVE

CVE-2026-66295

Saxy's XML encoder writes the target and the content of a processing instruction into the output document verbatim, without validation or escaping. The encoder builds the construct by concatenating both fields between , so neither field is checked against the constraints the XML specification places on…

CVSS 2.1 LOWStatus: ReceivedCWE-91

Review the NVD record →

NVD CVE

CVE-2026-66294

XML injection in the Saxy XML encoder. Saxy.Encoder.cdata/1 serializes a {:cdata, characters} node by wrapping the supplied characters between and passing the payload through byte for byte. The encoder's character-data and attribute-value paths escape the XML metacharacters , &, ", and ', but the CDATA path…

CVSS 2.1 LOWStatus: ReceivedCWE-91

Review the NVD record →

NVD CVE

CVE-2026-66293

XML injection in the encoder of Saxy. Saxy.Encoder does not neutralize the — sequence in XML comment content: escape_comment/2 returns the comment binary unchanged in every clause and only appends a space when the comment ends in a single -, so neither an interior — nor…

CVSS 2.1 LOWStatus: ReceivedCWE-91

Review the NVD record →

NVD CVE

CVE-2026-123337

In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility

CVSS 3.1 LOWStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123336

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion

CVSS 3.1 LOWStatus: Awaiting AnalysisCWE-770

Review the NVD record →

NVD CVE

CVE-2026-123335

In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection

CVSS 3.5 LOWStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123334

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

CVSS 3.8 LOWStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123333

In JetBrains YouTrack before 2026.2.19562 sprint creation allowed moving issues from inaccessible projects between sprints

CVSS 3.8 LOWStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123332

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

CVSS 4.7 MEDIUMStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123331

In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

CVSS 5.4 MEDIUMStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123330

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings

CVSS 5.4 MEDIUMStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123329

In JetBrains YouTrack before 2026.2.19562 missing authorization in TeamCity integration allowed disclosure of other projects' actions

CVSS 5.4 MEDIUMStatus: Awaiting AnalysisCWE-639

Review the NVD record →

NVD CVE

CVE-2026-123328

In JetBrains YouTrack before 2026.2.19656 app permission bypass allowed privilege escalation via project tab

CVSS 6.4 MEDIUMStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123327

In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions

CVSS 7.5 HIGHStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123326

In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension

CVSS 7.1 HIGHStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123325

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page

CVSS 7.1 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 6, 2026 06:27–Nov 8, 2026 06:27API response: Site snapshot: Showing 24 of 1,041Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours