Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,201–1,224 of 1,768
CVE-2022-21999: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
Required action: Apply updates per vendor instructions.
CVE-2021-42237: Sitecore XP Remote Command Execution Vulnerability
Sitecore · XP
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability
Citrix · ShareFile
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Required action: Apply updates per vendor instructions.
CVE-2020-9377: D-Link DIR-610 Devices Remote Command Execution
D-Link · DIR-610 Devices
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability
Zyxel · Multiple Network-Attached Storage (NAS) Devices
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code.
Required action: Apply updates per vendor instructions.
CVE-2020-7247: OpenSMTPD Remote Code Execution Vulnerability
OpenBSD · OpenSMTPD
smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session.
Required action: Apply updates per vendor instructions.
CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
VMware Tanzu · Spring Cloud Configuration (Config) Server
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
Required action: Apply updates per vendor instructions.
CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability
Sophos · SG UTM
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.
Required action: Apply updates per vendor instructions.
CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability
QNAP Systems · Helpdesk
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.
Required action: Apply updates per vendor instructions.
CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · PAN-OS
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
Required action: Apply updates per vendor instructions.
CVE-2020-1956: Apache Kylin OS Command Injection Vulnerability
Apache · Kylin
Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability
Juniper · Junos OS
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability
Drupal · Core
In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.
Required action: Apply updates per vendor instructions.
CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability
Oracle · BI Publisher (Formerly XML Publisher)
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
Required action: Apply updates per vendor instructions.
CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability
D-Link · Multiple Routers
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2019-15107: Webmin Command Injection Vulnerability
Webmin · Webmin
An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.
Required action: Apply updates per vendor instructions.
CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability
Citrix · SD-WAN and NetScaler
Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.
Required action: Apply updates per vendor instructions.
CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability
Citrix · SD-WAN and NetScaler
Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.
Required action: Apply updates per vendor instructions.
CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
PHP · FastCGI Process Manager (FPM)
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability
Kentico · Xperience
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-1003030: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
Jenkins · Matrix Project Plugin
Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2019-0903: Microsoft GDI Remote Code Execution Vulnerability
Microsoft · Graphics Device Interface (GDI)
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.
Required action: Apply updates per vendor instructions.
CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability
Microsoft · Windows
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.
Required action: Apply updates per vendor instructions.
CVE-2018-8373: Microsoft Scripting Engine Memory Corruption Vulnerability
Microsoft · Internet Explorer Scripting Engine
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 625–648 of 1,040
CVE-2026-109928
Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an attacker who has obtained a user's password-reset token (via email interception, log exposure, or a man-in-the-middle on the mail transport) to authenticate as…
CVE-2026-109856
Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with any valid low-privilege account to create, modify, and cancel financial account transactions and balances without appropriate permission via direct requests to the createFinAccount, updateFinAccount,…
CVE-2026-109837
Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with low-privileged Order Manager access to associate another party's OrderItem with a ReturnItem on a ReturnHeader they control, via the createReturnItem service. Users are recommended…
CVE-2026-109129
Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all platforms allows an authenticated user with only view-level order permissions to modify or create OrderPaymentPreference records belonging to orders outside their authorized scope via the updateOrderPaymentPreference service, by supplying an…
CVE-2026-107912
A flaw was found in the management interface of the Quarkus framework, specifically within the quarkus-vertx-http component. The issue occurs when the framework incorrectly combines the management root path with specific permission rules, leading to a situation where security policies are applied to the wrong internal…
CVE-2026-105461
Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update orders. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.
CVE-2026-105330
Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms allows an unauthenticated, network-reachable attacker to obtain full administrative access via a forged JWT signed with the factory-default security.token.key value that CVE-2026-31986 removed from newly generated configurations, on…
CVE-2026-105325
Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW permission to update/create PaymentApplication. Affected versions before : 24.09.08 Users are recommended to upgrade to version 24.09.08 which fixes this issue.
CVE-2026-105321
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows SQL Injection. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
CVE-2026-104720
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
CVE-2026-100228
Improper Input Validation in Order Returns in Apache OFBiz 24.09.07 on all platforms allows an authenticated user without the ORDERMGR_CREATE permission to persist an arbitrary price on a return item via the createReturnItem service, bypassing the intended server-computed price ceiling. Users are recommended to upgrade to…
CVE-2026-100168
Direct Request ('Forced Browsing') in the Content Manager component in Apache OFBiz 24.09.07 on all platforms allows an authenticated user holding only view-only content permissions (OFBTOOLS_VIEW and CONTENTMGR_VIEW) to re-parent content associations they do not own or manage via a direct POST request to the moveContentJson…
CVE-2026-95652
Execution with unnecessary privileges vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-usb-formatter allows Privilege Abuse. This issue affects pardus-usb-formatter: from 0.7.0 before 0.7.2.
CVE-2026-123119
The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23,…
CVE-2026-123047
In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak enabled store the passwords of the Keycloak users that the chart creates in cleartext in a Kubernetes ConfigMap. The template `keycloak-init-config.yaml` rendered `keycloak.initialization.users`, including each user's `credentials[].value`, as…
CVE-2026-123020
A security vulnerability has been detected in eosphoros-ai DB-GPT up to 0.8.1. The affected element is the function FileBasedSkill.get_prompt of the file packages/dbgpt-core/src/dbgpt/agent/skill/claude_skill/__init__.py of the component Jinja2 Template Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack may…
CVE-2026-103866
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before 3.0.4. Users are recommended to upgrade to version 3.0.4, which…
CVE-2026-103864
Improper output neutralization for logs in Apache Sling Engine. This issue affects Apache Sling Engine: before 3.0.4. Users are recommended to upgrade to version 3.0.4, which fixes the issue.
CVE-2026-103863
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine. Content-Type, charset, and redirect changes from an included component evade the protectheaders / checkcontenttype enforcement through setHeader(), repeated calls to setContentType(), the charset APIs, Servlet 6.1 redirect overloads, and stale config…
CVE-2026-96677
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Juneau. HTML document serialization does not HTML-encode variable substitutions in the page chrome (header, nav, aside, footer and similar fields). Applications whose chrome includes request-derived variables, such as request headers, form data or…
CVE-2026-73117
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau. The Apache Juneau REST server passed response header values and redirect targets to the servlet container unchecked. An application that sets a response header or redirect target from request data could…
CVE-2026-73116
Insufficiently Protected Credentials vulnerability in Apache Juneau. The Apache Juneau RestClient followed HTTP redirects while keeping credential headers from the original request, so a server that redirected the client to a different host or port, or from HTTPS to HTTP, could receive headers such as Authorization,…
CVE-2026-73101
Generation of Error Message Containing Sensitive Information vulnerability in Apache Juneau. The REST server sends the internal exception class and message to clients in a "Thrown" response header on every error response, and can include internal exception messages in the error body, even when stack-trace rendering…
CVE-2026-73100
Insertion of Sensitive Information into Log File vulnerability in Apache Juneau. The default REST server call logger records request headers for requests that end in a server error, without redacting them. Any client able to cause a server error gets headers such as Authorization, Cookie, Proxy-Authorization…