Kythos AI

CVE watch Past 48 hours+

Latest 48 of 1034 in cacheBrowse CVEs
NVD checked Nov 8, 04:27 UTCSource: NVD · Refreshed every 2 hours · Publication may lag

Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalogNVD 48-hour CVEsKythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,657–1,680 of 1,769

CISA KEV

CVE-2020-12812: Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

Fortinet · FortiOS

Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.

Federal remediation due May 3, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-12271: Sophos SFOS SQL Injection Vulnerability

Sophos · SFOS

Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords…

Federal remediation due May 3, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-11738: WordPress Snap Creek Duplicator Plugin File Download Vulnerability

WordPress · Snap Creek Duplicator Plugin

WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-11652: SaltStack Salt Path Traversal Vulnerability

SaltStack · Salt

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-11651: SaltStack Salt Authentication Bypass Vulnerability

SaltStack · Salt

SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1147: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

Microsoft · .NET Framework, SharePoint, Visual Studio

Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1040: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Microsoft · Hyper-V RemoteFX

Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-10221: rConfig OS Command Injection Vulnerability

rConfig · rConfig

rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-1020: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-0938: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-0674: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft · Internet Explorer

Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user.

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEV

CVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerability

Microsoft · Windows

Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from…

Federal remediation due May 3, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 745–768 of 1,057

NVD CVE

CVE-2026-123857

In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection

CVSS 4.3 MEDIUMStatus: Awaiting AnalysisCWE-611

Review the NVD record →

NVD CVE

CVE-2026-123856

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

CVSS 6.5 MEDIUMStatus: Awaiting AnalysisCWE-522

Review the NVD record →

NVD CVE

CVE-2026-123855

In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs

CVSS 7.5 HIGHStatus: Awaiting AnalysisCWE-78

Review the NVD record →

NVD CVE

CVE-2026-123854

In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module

CVSS 5.5 MEDIUMStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123853

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123852

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

CVSS 7.4 HIGHStatus: Awaiting AnalysisCWE-863

Review the NVD record →

NVD CVE

CVE-2026-123851

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

CVSS 5.4 MEDIUMStatus: Awaiting AnalysisCWE-180

Review the NVD record →

NVD CVE

CVE-2026-123850

In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives

CVSS 3.5 LOWStatus: Awaiting AnalysisCWE-1021

Review the NVD record →

NVD CVE

CVE-2026-123849

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

CVSS 7.0 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123848

In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

CVSS 7.4 HIGHStatus: Awaiting AnalysisCWE-297

Review the NVD record →

NVD CVE

CVE-2026-123847

In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion

CVSS 5.3 MEDIUMStatus: Awaiting AnalysisCWE-150

Review the NVD record →

NVD CVE

CVE-2026-123846

In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation

CVSS 4.3 MEDIUMStatus: Awaiting AnalysisCWE-918

Review the NVD record →

NVD CVE

CVE-2026-123845

In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects

CVSS 3.3 LOWStatus: Awaiting AnalysisCWE-23

Review the NVD record →

NVD CVE

CVE-2026-123844

In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

CVSS 5.3 MEDIUMStatus: Awaiting AnalysisCWE-918

Review the NVD record →

NVD CVE

CVE-2026-123843

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration

CVSS 3.3 LOWStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123842

In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

CVSS 7.1 HIGHStatus: Awaiting AnalysisCWE-59

Review the NVD record →

NVD CVE

CVE-2026-123841

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-59

Review the NVD record →

NVD CVE

CVE-2026-123840

In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs

CVSS 4.7 MEDIUMStatus: Awaiting AnalysisCWE-80

Review the NVD record →

NVD CVE

CVE-2026-123839

In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model

CVSS 4.7 MEDIUMStatus: Awaiting AnalysisCWE-357

Review the NVD record →

NVD CVE

CVE-2026-123838

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-829

Review the NVD record →

NVD CVE

CVE-2026-123837

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL

CVSS 7.8 HIGHStatus: Awaiting AnalysisCWE-78

Review the NVD record →

NVD CVE

CVE-2026-123836

In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup

CVSS 8.8 HIGHStatus: Awaiting AnalysisCWE-59

Review the NVD record →

NVD CVE

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition

CVSS 5.9 MEDIUMStatus: Awaiting AnalysisCWE-367

Review the NVD record →

NVD CVE

CVE-2026-123834

In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

CVSS 7.5 HIGHStatus: Awaiting AnalysisCWE-639

Review the NVD record →

Source: Official NVD CVE API 2.0UTC window Nov 6, 2026 04:27–Nov 8, 2026 04:27API response: Site snapshot: Showing 24 of 1,057Source text normalized: network addresses and restricted context omittedRefresh interval: 2 hours