100
CVEs
7
Critical
36
High
0
KEV
18
PoC
6
Unpatched C/H
80.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
7
HIGH
36
MEDIUM
46
LOW
10
Monthly CVE Trend
Affected Products (30)
Yocto
112
Android
110
Openwrt
47
Rdk B
36
Iot Yocto
34
Kubernetes
32
Pytorch
28
Fedora
27
Magma
22
Nats Server
22
AI / ML
21
Debian Linux
21
Containerd
20
Linux Kernel
19
Ubuntu Linux
14
Cups Filters
14
Runc
14
Everest
13
Docker
13
Dragonfly
12
Backstage
11
Harbor
10
Ceph
8
Kubeedge
8
Software Development Kit
7
Python
7
Java
7
Cubefs
6
Ceph Storage
6
Edge Virtualization Engine
5
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-24124 | Dragonfly P2P file distribution system versions 2.4.1-rc.0 and below have a missing authentication vulnerability allowing unauthenticated access to the management API. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
|
| CVE-2026-25996 | String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
|
| CVE-2026-24747 | PyTorch is a Python package that provides tensor computation. [CVSS 8.8 HIGH] | HIGH | 8.8 | 0.0% | 64 |
PoC
|
| CVE-2025-52565 | runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. Public exploit code available. | HIGH | 8.4 | 0.0% | 62 |
PoC
|
| CVE-2025-68137 | EVerest is an EV charging software stack. Prior to version 2025.10.0, an integer overflow occurring in `SdpPacket::parse_header()` allows the current buffer length to be set to 7 after a complete header of size 8 has been read. [CVSS 8.3 HIGH] | HIGH | 8.3 | 0.0% | 62 |
PoC
No patch
|
| CVE-2025-59353 | Dragonfly is an open source P2P-based file distribution and image acceleration system. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.7 | 0.1% | 59 |
PoC
|
| CVE-2025-68141 | EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a `DC_ChargeLoopRes` message that includes Receipt as well as TaxCosts, the vector `<DetailedTax>tax_costs` in the target `Receipt` structure is accessed out of bounds. [CVSS 7.4 HIGH] | HIGH | 7.4 | 0.1% | 57 |
PoC
No patch
|
| CVE-2025-68136 | EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like `Session`, `IConnection` which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, without closing and destroying the previous ones. Previous `Session` is not saved and the usage of an `unique_ptr` is lost, destroying connection data. Latter, if the used socket and therefore file des... | HIGH | 7.4 | 0.1% | 57 |
PoC
No patch
|
| CVE-2025-68133 | EVerest is an EV charging software stack. In versions 2025.9.0 and below, an attacker can exhaust the operating system's memory and cause the module to terminate by initiating an unlimited number of TCP connections that never proceed to ISO 15118-2 communication. [CVSS 7.4 HIGH] | HIGH | 7.4 | 0.0% | 57 |
PoC
|
| CVE-2025-52881 | runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. Public exploit code available. | HIGH | 7.3 | 0.0% | 57 |
PoC
|
| CVE-2025-31133 | runc is a CLI tool for spawning and running containers according to the OCI specification. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. | HIGH | 7.3 | 0.0% | 57 |
PoC
|
| CVE-2026-24835 | Podman Desktop versions prior to 1.25.1 contain an authentication bypass in the extension permission framework where the `isAccessAllowed()` function always returns true, allowing malicious extensions to hijack authentication sessions and access sensitive resources without authorization. Public exploit code exists for this vulnerability, affecting all current deployments of the affected product. Administrators should upgrade to version 1.25.1 or later immediately. | HIGH | 7.1 | 0.1% | 56 |
PoC
|
| CVE-2026-24905 | Inspektor Gadget versions prior to 0.48.1 allow local attackers with limited privileges to execute arbitrary commands during custom gadget image builds due to insufficient input sanitization in Makefile generation. An attacker who can control buildOptions parameters can inject shell commands that execute with the privileges of the build process. Public exploit code exists for this vulnerability. | MEDIUM | 6.6 | 0.1% | 53 |
PoC
|
| CVE-2025-68135 | EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the `TbdController` loop, leading to its caller and itself to silently terminates. [CVSS 6.5 MEDIUM] | MEDIUM | 6.5 | 0.0% | 53 |
PoC
No patch
|
| CVE-2026-27965 | Command injection in Vitess MySQL clustering system before 23.0.3/22.0.4. Users with read/write access to the backup store can achieve code execution. Patch available. | CRITICAL | 9.9 | 0.1% | 50 |
|