Kythos AI vulnerability intelligence
Zero-Day Exploits / Vulnerabilities
A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.
Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.
Confirmed exploitation intelligence
Zero-Day Exploits / Vulnerabilities
Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.
Entries 1,393–1,416 of 1,769
CVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
Adobe · Commerce and Magento Open Source
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
Required action: Apply updates per vendor instructions.
CVE-2022-0609: Google Chromium Animation Use-After-Free Vulnerability
Google · Chromium Animation
Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and…
Required action: Apply updates per vendor instructions.
CVE-2019-0752: Microsoft Internet Explorer Type Confusion Vulnerability
Microsoft · Internet Explorer
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
Required action: Apply updates per vendor instructions.
CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
Microsoft · Windows
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
Required action: Apply updates per vendor instructions.
CVE-2018-20250: WinRAR Absolute Path Traversal Vulnerability
RARLAB · WinRAR
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
Required action: Apply updates per vendor instructions.
CVE-2018-15982: Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2017-9841: PHPUnit Command Injection Vulnerability
PHPUnit · PHPUnit
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "
Required action: Apply updates per vendor instructions.
CVE-2014-1761: Microsoft Word Memory Corruption Vulnerability
Microsoft · Word
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2013-3906: Microsoft Graphics Component Memory Corruption Vulnerability
Microsoft · Graphics Component
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2022-22620: Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Apple · iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely…
Required action: Apply updates per vendor instructions.
CVE-2021-36934: Microsoft Windows SAM Local Privilege Escalation Vulnerability
Microsoft · Windows
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.
Required action: Apply updates per vendor instructions.
CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft · SMBv3
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.
Required action: Apply updates per vendor instructions.
CVE-2018-1000861: Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Jenkins · Jenkins Stapler Web Framework
A code execution vulnerability exists in the Stapler web framework used by Jenkins
Required action: Apply updates per vendor instructions.
CVE-2017-9791: Apache Struts 1 Improper Input Validation Vulnerability
Apache · Struts 1
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Required action: Apply updates per vendor instructions.
CVE-2017-8464: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Microsoft · Windows
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
Required action: Apply updates per vendor instructions.
CVE-2017-10271: Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle · WebLogic Server
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
Required action: Apply updates per vendor instructions.
CVE-2017-0262: Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office
A remote code execution vulnerability exists in Microsoft Office.
Required action: Apply updates per vendor instructions.
CVE-2017-0145: Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
Required action: Apply updates per vendor instructions.
CVE-2017-0144: Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft · SMBv1
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
Required action: Apply updates per vendor instructions.
CVE-2016-3088: Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQ
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
Required action: Apply updates per vendor instructions.
CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability
D-Link · DIR-645 Router
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
Required action: The impacted product is end-of-life and should be disconnected if still in use.
CVE-2015-1635: Microsoft HTTP.sys Remote Code Execution Vulnerability
Microsoft · HTTP.sys
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
Required action: Apply updates per vendor instructions.
CVE-2015-1130: Apple OS X Authentication Bypass Vulnerability
Apple · OS X
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.
Required action: Apply updates per vendor instructions.
Complete fixed-window snapshot
CVEs — Past 48 Hours
All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.
Entries 193–216 of 1,041
CVE-2026-123963
A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The impacted element is the function register of the file im_server/app.py of the component Agent Registry. Such manipulation of the argument desc/name leads to missing authentication. The attack can be launched remotely.…
CVE-2026-123861
Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-select allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder – Hierarchical Select: from n/a through 1.0.10.
CVE-2026-123860
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.8.
CVE-2026-123483
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.8.
CVE-2026-123477
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through [network address omitted].
CVE-2026-123474
Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Blocks – Gutenberg Blocks for WordPress: from n/a through 2.3.18.
CVE-2026-123467
Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128.
CVE-2026-123462
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
CVE-2026-123183
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Code Injection.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.6.
CVE-2026-122669
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This issue affects Everest Forms: from n/a through 3.6.3.
CVE-2026-122663
Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20.
CVE-2026-122660
Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5.
CVE-2026-122659
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0.
CVE-2026-122041
The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajax_remove_uploaded() function in versions up to, and including, 3.8.0. The handler is registered for both wp_ajax and wp_ajax_nopriv and is…
CVE-2026-121784
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. WpBookingly service-booking-manager allows Stored XSS.This issue affects WpBookingly: from n/a through 1.4.3.
CVE-2026-121777
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10.
CVE-2026-121775
Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CURCY: from n/a through 2.2.20.
CVE-2026-121579
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Stored XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.26.
CVE-2026-121575
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.10.4.
CVE-2026-120841
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.
CVE-2026-120839
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through 2.3.8.
CVE-2026-120579
The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'help_title' parameter in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
CVE-2026-119156
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_reg[first_name], wpdm_reg[last_name], wpdm_reg[user_login]' parameter in all versions up to, and including, 7.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
CVE-2026-109973
The Image Hover Effects Ultimate Visual Composer (Flipbox – Awesomes Flip Boxes Image Overlay) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'flip-box-image-upload-url-01-alt' parameter in versions up to, and including, 3.1.1. This is due to the plugin saving the image-alt field through sanitize_text_field()…