Kythos AI

CVE watch Past 48 hours+

Latest 48 of 896 in cacheBrowse CVEs
NVD checked Nov 6, 15:23 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,369–1,392 of 1,768

CISA KEV

CVE-2012-1856: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft · Office

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2011-1889: Microsoft Forefront TMG Remote Code Execution Vulnerability

Microsoft · Forefront Threat Management Gateway (TMG)

A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.

Federal remediation due Mar 24, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 4, 2026, 8:00 PM GMT+0000Site snapshot: Showing 24 of 1,768Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 841–864 of 1,125

NVD CVE

CVE-2026-107787

The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders WordPress plugin before 2.5.7's user restriction setting.

CVSS 3.1 LOWStatus: DeferredCWE-862

Review the NVD record →

NVD CVE

CVE-2026-107786

The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL query, allowing authenticated users with upload capability (Author and above) to perform SQL injection attacks.

CVSS 6.8 MEDIUMStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-107775

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that the acting administrator is authorized to manage each selected user before enabling that user's marketplace seller status, allowing a subsite Administrator on WordPress Multisite to enable selling for users outside…

CVSS 2.7 LOWStatus: DeferredCWE-863

Review the NVD record →

NVD CVE

CVE-2026-107774

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not use a trusted site-owned sender address when relaying its store contact form, instead placing the unauthenticated submitter's supplied address directly in the message's From header rather than a Reply-To, allowing unauthenticated attackers…

CVSS 5.3 MEDIUMStatus: DeferredCWE-290

Review the NVD record →

NVD CVE

CVE-2026-107773

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for a subset of…

CVSS 6.5 MEDIUMStatus: DeferredCWE-863

Review the NVD record →

NVD CVE

CVE-2026-105971

The Car Dealer (Dealership) and Vehicle sales WordPress plugin through 4.73 does not restrict its unauthenticated single-listing AJAX action to published content, allowing an unauthenticated attacker to read the title, content and metadata of any private, draft, pending, future or trashed post by supplying its numeric…

CVSS 5.3 MEDIUMStatus: DeferredCWE-200

Review the NVD record →

NVD CVE

CVE-2026-105259

The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file types that may be uploaded site-wide, allowing users with the Author role and above to upload a malicious SVG containing XSS payloads. Where another installed…

CVSS 6.8 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-100144

The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, allowing unauthenticated attackers to read arbitrary data from the…

CVSS 9.3 CRITICALStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2025-15702

The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisation when storing block asset URLs, allowing unauthenticated users to store malicious scripts that are executed in the browser of any privileged user, such as an administrator, who opens the block editor.

CVSS 8.8 HIGHStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2025-15701

The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting them on front-end pages, which could allow high-privilege users such as Administrators to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed, for example on…

CVSS 3.5 LOWStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-93389

The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled (the shipped default cache-rest=1), LiteSpeed stores WooCommerce Store API GET responses (/wc/store/v1/cart and /wc/store/v1/checkout) as PUBLIC cache objects…

CVSS 8.2 HIGHStatus: DeferredCWE-200

Review the NVD record →

NVD CVE

CVE-2026-123012

In Gogs 0.14.3, the Git Smart HTTP authorization layer in internal/route/repo/http.go allows a push when only read access was intended, a different vulnerability than CVE-2026-52810. This occurs because of inconsistency about whether a verb is checked in a case-sensitive manner.

CVSS 7.1 HIGHStatus: ReceivedCWE-178

Review the NVD record →

NVD CVE

CVE-2026-123011

STMicroelectronics st-mems-android-linux-sensors-hal before 7bdf334 does not check whether the allowed number of channels is exceeded.

CVSS 4.2 MEDIUMStatus: ReceivedCWE-1284

Review the NVD record →

NVD CVE

CVE-2026-123010

@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set.

CVSS 7.2 HIGHStatus: ReceivedCWE-669

Review the NVD record →

NVD CVE

CVE-2026-120553

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slides_to_show' parameter in all versions up to, and including, 5.126.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-120533

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via theme_opts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above,…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-118193

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the `donor_default_user_role` parameter. This is due to the `sanitize_option_donor_default_user_role()` function applying only a narrow literal check against the string `'administrator'` rather…

CVSS 8.8 HIGHStatus: DeferredCWE-269

Review the NVD record →

NVD CVE

CVE-2026-116617

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_options_update`, writes the attacker-controlled `stm_dealer_logo_path` parameter directly to user meta without an ownership check…

CVSS 8.1 HIGHStatus: DeferredCWE-22

Review the NVD record →

NVD CVE

CVE-2026-104812

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multi_media' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in…

CVSS 6.4 MEDIUMStatus: DeferredCWE-79

Review the NVD record →

NVD CVE

CVE-2026-122236

A vulnerability has been found in OpenHands up to 1.24.0. This impacts an unknown function of the component Landing Page. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and…

CVSS 2.1 LOWStatus: DeferredCWE-287CWE-306

Review the NVD record →

NVD CVE

CVE-2026-122191

A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be…

CVSS 2.1 LOWStatus: DeferredCWE-74CWE-89

Review the NVD record →

NVD CVE

CVE-2026-122190

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file admin/add_category.php of the component Category Management. Performing a manipulation of the argument category_title results in cross site scripting. The attack may be initiated remotely. The…

CVSS 1.9 LOWStatus: DeferredCWE-79CWE-94

Review the NVD record →

NVD CVE

CVE-2026-69068

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

CVSS not yet assignedStatus: ReceivedCWE-787

Review the NVD record →

NVD CVE

CVE-2026-69066

Memory corruption in GPU driver due to improper validation of VMID reservation.

CVSS not yet assignedStatus: ReceivedCWE-754

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 4, 2026 15:23–Nov 6, 2026 15:23API response: Site snapshot: Showing 24 of 1,125Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours