Kythos AI

CVE watch Past 48 hours+

Latest 48 of 858 in cacheBrowse CVEs
NVD checked Nov 6, 13:22 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,393–1,416 of 1,768

CISA KEV

CVE-2022-0609: Google Chromium Animation Use-After-Free Vulnerability

Google · Chromium Animation

Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and…

Federal remediation due Mar 1, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2022-22620: Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Apple · iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely…

Federal remediation due Feb 25, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability

Microsoft · SMBv3

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

Federal remediation due Aug 10, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 4, 2026, 8:00 PM GMT+0000Site snapshot: Showing 24 of 1,768Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 889–912 of 1,091

NVD CVE

CVE-2026-54383

VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to query the GET /front/relation/search/ endpoint and retrieve PII and health-related profile information for user records. Attackers can enumerate the user directory using overlapping alphanumeric search terms to harvest identifiers,…

CVSS 7.1 HIGHStatus: DeferredCWE-862

Review the NVD record →

NVD CVE

CVE-2026-54382

VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being restricted to their own folder. Attackers can overwrite other users' objects in the shared…

CVSS 6.3 MEDIUMStatus: DeferredCWE-266

Review the NVD record →

NVD CVE

CVE-2026-54381

VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. Attackers can enumerate the publicly accessible bucket containing 129,947 objects, including 126,881 user-uploaded profile images, to access sensitive personal data without credentials.

CVSS 8.7 HIGHStatus: DeferredCWE-732

Review the NVD record →

NVD CVE

CVE-2026-53631

GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authenticated user could submit a crafted request to change the visibility of knowledge base items, reminders, or RSS feeds and then access content that should remain…

CVSS 5.3 MEDIUMStatus: DeferredCWE-862

Review the NVD record →

NVD CVE

CVE-2026-52848

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to skip one-time-password verification, defeating two-factor authentication. This issue is fixed in version 11.0.8.

CVSS 9.2 CRITICALStatus: DeferredCWE-288

Review the NVD record →

NVD CVE

CVE-2026-47678

GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticated user can submit crafted values to the dropdown values fetching endpoint that are incorporated into a database query. This permits SQL injection through the dropdown endpoint. This issue…

CVSS 8.7 HIGHStatus: DeferredCWE-89

Review the NVD record →

NVD CVE

CVE-2026-122299

Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Poetry 2.5.1 ships this version and uses dulwich by default for…

CVSS 8.6 HIGHStatus: DeferredCWE-115CWE-1250

Review the NVD record →

NVD CVE

CVE-2026-122048

A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1. This affects an unknown function of the file /dipam/check-user.php. Such manipulation of the argument abbr leads to sql injection. It is possible to launch the attack remotely. The exploit…

CVSS 5.5 MEDIUMStatus: DeferredCWE-74CWE-89

Review the NVD record →

NVD CVE

CVE-2026-122047

A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. This affects the function move_uploaded_file of the file /loan/application/banner.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and…

CVSS 5.5 MEDIUMStatus: DeferredCWE-284CWE-434

Review the NVD record →

NVD CVE

CVE-2026-122038

A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql_query of the file source/reqformprocessing.php of the component Requirement Board Update Handler. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available…

CVSS 5.5 MEDIUMStatus: DeferredCWE-74CWE-89

Review the NVD record →

NVD CVE

CVE-2026-122028

A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has…

CVSS 2.1 LOWStatus: DeferredCWE-200CWE-284

Review the NVD record →

NVD CVE

CVE-2026-115770

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0, SendEmailVerification uses the token model in backend/internal/model/email_verification_token.go to bind an email-verification token only to the user's identifier, while UpdateUser can change the account email without invalidating…

CVSS 9.6 CRITICALStatus: ReceivedCWE-345

Review the NVD record →

NVD CVE

CVE-2026-108387

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo->bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radare2 to reopen the…

CVSS 8.5 HIGHStatus: ReceivedCWE-78

Review the NVD record →

NVD CVE

CVE-2026-102337

Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network addresses because download destinations are not restricted by resolved IP…

CVSS 4.9 MEDIUMStatus: DeferredCWE-918

Review the NVD record →

NVD CVE

CVE-2026-97693

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged authenticated user who can execute commands in their own sandbox can reach other tenants' sandbox…

CVSS 9.9 CRITICALStatus: ReceivedCWE-77CWE-284CWE-522

Review the NVD record →

NVD CVE

CVE-2026-76893

tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode of @tsparticles/mcp-server reuses one stateful StreamableHTTPServerTransport for every client. An unauthenticated client that sends the first initialize request without an mcp-session-id claims the shared transport state, causing later independent…

CVSS 6.9 MEDIUMStatus: ReceivedCWE-400

Review the NVD record →

NVD CVE

CVE-2026-63655

tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-body chunk in a Buffer[] without a cumulative size limit before Buffer.concat and JSON.parse. A remote attacker…

CVSS 7.5 HIGHStatus: ReceivedCWE-400

Review the NVD record →

NVD CVE

CVE-2026-58128

Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized _display_name value from a shared content URI to construct the destination file…

CVSS 6.9 MEDIUMStatus: ReceivedCWE-22

Review the NVD record →

NVD CVE

CVE-2026-57567

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected desktop Tauri builds prior to 0.11.10, the apps/readest-app/src-tauri/src/transfer_file.rs commands download_file and upload_file accepted a webview-controlled file_path and passed it to Fil[network address omitted]reate or Fil[network address omitted]open…

CVSS 8.6 HIGHStatus: ReceivedCWE-22

Review the NVD record →

NVD CVE

CVE-2026-57566

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/opds/proxy/route.ts accepted an attacker-controlled URL and fetched it server-side without restricting the scheme, blocking private, loopback, link-local, or metadata hosts, or…

CVSS 9.3 CRITICALStatus: ReceivedCWE-918

Review the NVD record →

NVD CVE

CVE-2026-57565

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled fileName without rejecting path separators or parent-directory traversal. In the R2…

CVSS 6.5 MEDIUMStatus: ReceivedCWE-22

Review the NVD record →

NVD CVE

CVE-2026-57562

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, POST /api/stripe/check in apps/readest-app/src/app/api/stripe/check/route.ts accepted a client-controlled sessionId, retrieved the corresponding Stripe Checkout Session, and granted the paid plan to the authenticated caller without verifying session.metadata.userId.…

CVSS 6.5 MEDIUMStatus: ReceivedCWE-639

Review the NVD record →

NVD CVE

CVE-2026-55368

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an affected custom access-log format was configured. The allocation errors affected %{error}x, %q when the query string was empty, and…

CVSS 8.1 HIGHStatus: ReceivedCWE-787

Review the NVD record →

NVD CVE

CVE-2026-55367

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could send an incomplete CONNECT-UDP Capsule with an excessively large declared length, causing H2O to keep buffering received bytes without a per-Capsule limit while waiting for the remainder.…

CVSS 7.5 HIGHStatus: ReceivedCWE-770

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 4, 2026 13:22–Nov 6, 2026 13:22API response: Site snapshot: Showing 24 of 1,091Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours