Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1034 in cacheBrowse CVEs
NVD checked Nov 8, 04:27 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,633–1,656 of 1,769

CISA KEV

CVE-2020-2555: Oracle Multiple Products Remote Code Execution Vulnerability

Oracle · Multiple Products

Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-24557: Trend Micro Multiple Products Improper Access Control Vulnerability

Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security

Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-17496: vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin · vBulletin

The PHP module within vBulletin contains an unspecified vulnerability that allows for remote code execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. This CVE ID resolves an incomplete patch for CVE-2019-16759.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-16846: SaltStack Salt Shell Injection Vulnerability

SaltStack · Salt

SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-16013: Google Chromium V8 Incorrect Implementation Vulnerabililty

Google · Chromium V8

Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-16010: Google Chrome for Android UI Heap Buffer Overflow Vulnerability

Google · Chrome for Android UI

Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-16009: Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-15999: Google Chrome FreeType Heap Buffer Overflow Vulnerability

Google · Chrome FreeType

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and…

Federal remediation due Nov 17, 2021Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability

Microsoft · Netlogon

Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the…

Federal remediation due May 3, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1464: Microsoft Windows Spoofing Vulnerability

Microsoft · Windows

Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 913–936 of 1,057

NVD CVE

CVE-2026-123326

In JetBrains YouTrack before 2026.2.19197 incorrect authorisation in the scripts debugger allowed workflow script disclosure and suspension

CVSS 7.1 HIGHStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123325

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page

CVSS 7.1 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123324

In JetBrains YouTrack before 2026.2.19562 information disclosure via shared mailbox message history was possible

CVSS 7.7 HIGHStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123323

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 improper URL validation in the app widget host allowed apps to send REST requests without user confirmation

CVSS 8.4 HIGHStatus: Awaiting AnalysisCWE-862

Review the NVD record →

NVD CVE

CVE-2026-123322

In JetBrains WebStorm before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader

CVSS 6.3 MEDIUMStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123321

In JetBrains WebStorm before 2026.3, 2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server

CVSS 3.1 LOWStatus: Awaiting AnalysisCWE-357

Review the NVD record →

NVD CVE

CVE-2026-123319

In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection

CVSS 3.7 LOWStatus: Awaiting AnalysisCWE-565

Review the NVD record →

NVD CVE

CVE-2026-123318

In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine

CVSS 4.8 MEDIUMStatus: Awaiting AnalysisCWE-444

Review the NVD record →

NVD CVE

CVE-2026-123317

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

CVSS 8.1 HIGHStatus: Awaiting AnalysisCWE-354

Review the NVD record →

NVD CVE

CVE-2026-123316

In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

CVSS 5.5 MEDIUMStatus: Awaiting AnalysisCWE-532

Review the NVD record →

NVD CVE

CVE-2026-123315

In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option

CVSS 7.0 HIGHStatus: Awaiting AnalysisCWE-625

Review the NVD record →

NVD CVE

CVE-2026-123314

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 xXE attack was possible via an XML response to an HTTP Client request

CVSS 3.1 LOWStatus: Awaiting AnalysisCWE-611

Review the NVD record →

NVD CVE

CVE-2026-123313

In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings

CVSS 3.3 LOWStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123312

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 sSRF was possible via annotations.xml files during indexing

CVSS 3.3 LOWStatus: Awaiting AnalysisCWE-827

Review the NVD record →

NVD CVE

CVE-2026-123311

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible

CVSS 5.3 MEDIUMStatus: Awaiting AnalysisCWE-1021

Review the NVD record →

NVD CVE

CVE-2026-123310

In JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from arbitrary repositories in untrusted projects

CVSS 5.4 MEDIUMStatus: Awaiting AnalysisCWE-918

Review the NVD record →

NVD CVE

CVE-2026-123309

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview

CVSS 6.1 MEDIUMStatus: Awaiting AnalysisCWE-79

Review the NVD record →

NVD CVE

CVE-2026-123308

In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects

CVSS 6.3 MEDIUMStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123307

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible

CVSS 6.8 MEDIUMStatus: Awaiting AnalysisCWE-918

Review the NVD record →

NVD CVE

CVE-2026-123306

In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs

CVSS 7.4 HIGHStatus: Awaiting AnalysisCWE-295

Review the NVD record →

NVD CVE

CVE-2026-123305

In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host

CVSS 7.5 HIGHStatus: Awaiting AnalysisCWE-23

Review the NVD record →

NVD CVE

CVE-2026-123304

In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123302

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 6, 2026 04:27–Nov 8, 2026 04:27API response: Site snapshot: Showing 24 of 1,057Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours