{
  "results": [
    {
      "id": "CVE-2026-87902",
      "vendor": "WordPress",
      "product": "Core",
      "name": "WordPress Core Remote File Inclusion Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.18166,
        "percentile": 0.97112,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-87902",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-87902",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87902"
      }
    },
    {
      "id": "CVE-2026-67279",
      "vendor": "MikroTik",
      "product": "RouterOS",
      "name": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.01027,
        "percentile": 0.62194,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-67279",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-67279",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-67279"
      }
    },
    {
      "id": "CVE-2026-65660",
      "vendor": "Microsoft",
      "product": "SharePoint",
      "name": "Microsoft SharePoint Code Injection Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.02101,
        "percentile": 0.80969,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-65660",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-65660",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65660"
      }
    },
    {
      "id": "CVE-2026-71362",
      "vendor": "Adobe",
      "product": "Commerce and Magento ",
      "name": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ",
      "dateAdded": "2026-09-24",
      "dueDate": "2026-09-27",
      "ransomware": false,
      "epss": {
        "score": 0.87507,
        "percentile": 0.99754,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-71362",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-71362",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-71362"
      }
    },
    {
      "id": "CVE-2026-5430",
      "vendor": "WSO2",
      "product": "Multiple Products",
      "name": "WSO2 Multiple Products Path Traversal Vulnerability ",
      "dateAdded": "2026-09-24",
      "dueDate": "2026-09-27",
      "ransomware": false,
      "epss": {
        "score": 0.00588,
        "percentile": 0.45981,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-5430",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-5430",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430"
      }
    },
    {
      "id": "CVE-2026-94127",
      "vendor": "F5",
      "product": "BIG-IP APM",
      "name": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.02226,
        "percentile": 0.82035,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-94127",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-94127",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127"
      }
    },
    {
      "id": "CVE-2026-93952",
      "vendor": "Arista",
      "product": "VeloCloud Orchestrator",
      "name": "Arista VeloCloud Orchestrator Improper Input Validation Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.01062,
        "percentile": 0.63214,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-93952",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-93952",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93952"
      }
    },
    {
      "id": "CVE-2026-93616",
      "vendor": "Check Point",
      "product": "Multiple Products",
      "name": "Check Point Multiple Products Path Traversal Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.19654,
        "percentile": 0.97309,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-93616",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-93616",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
      }
    },
    {
      "id": "CVE-2026-85102",
      "vendor": "Check Point",
      "product": "Multiple Products",
      "name": "Check Point Multiple Products Improper Certificate Validation Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.00988,
        "percentile": 0.60982,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-85102",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-85102",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102"
      }
    },
    {
      "id": "CVE-2026-7273",
      "vendor": "Zyxel",
      "product": "GS1900 Series Switches",
      "name": "Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability",
      "dateAdded": "2026-09-21",
      "dueDate": "2026-09-24",
      "ransomware": false,
      "epss": {
        "score": 0.02501,
        "percentile": 0.84081,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-7273",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-7273",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-7273"
      }
    },
    {
      "id": "CVE-2026-53266",
      "vendor": "Linux",
      "product": "Kernel",
      "name": "Linux Kernel Out-of-Bounds Write Vulnerability",
      "dateAdded": "2026-09-18",
      "dueDate": "2026-09-21",
      "ransomware": false,
      "epss": {
        "score": 0.00645,
        "percentile": 0.48874,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-53266",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-53266",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-53266"
      }
    },
    {
      "id": "CVE-2025-39964",
      "vendor": "Linux",
      "product": "Kernel",
      "name": "Linux Kernel Race Condition Vulnerability",
      "dateAdded": "2026-09-18",
      "dueDate": "2026-09-21",
      "ransomware": false,
      "epss": {
        "score": 0.00996,
        "percentile": 0.61197,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2025-39964",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2025-39964",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39964"
      }
    },
    {
      "id": "CVE-2025-39682",
      "vendor": "Linux",
      "product": "Kernel",
      "name": "Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability",
      "dateAdded": "2026-09-18",
      "dueDate": "2026-09-21",
      "ransomware": false,
      "epss": {
        "score": 0.0288,
        "percentile": 0.86316,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2025-39682",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2025-39682",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-39682"
      }
    },
    {
      "id": "CVE-2026-87886",
      "vendor": "Acronis",
      "product": "Backup",
      "name": "Acronis Backup Incorrect Default Permissions Vulnerability",
      "dateAdded": "2026-09-16",
      "dueDate": "2026-09-19",
      "ransomware": false,
      "epss": {
        "score": 0.00233,
        "percentile": 0.12771,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-87886",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-87886",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87886"
      }
    },
    {
      "id": "CVE-2026-76460",
      "vendor": "Cisco",
      "product": "Identity Services Engine",
      "name": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability",
      "dateAdded": "2026-09-16",
      "dueDate": "2026-09-19",
      "ransomware": false,
      "epss": {
        "score": 0.14026,
        "percentile": 0.96436,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-76460",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-76460",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76460"
      }
    },
    {
      "id": "CVE-2026-58704",
      "vendor": "Google",
      "product": "Pixel",
      "name": "Google Pixel Improper Authorization Vulnerability",
      "dateAdded": "2026-09-16",
      "dueDate": "2026-09-19",
      "ransomware": false,
      "epss": {
        "score": 0.00591,
        "percentile": 0.4612,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-58704",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-58704",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704"
      }
    },
    {
      "id": "CVE-2026-76461",
      "vendor": "Cisco",
      "product": "Secure Email Gateway",
      "name": "Cisco Secure Email Gateway SQL Injection Vulnerability",
      "dateAdded": "2026-09-14",
      "dueDate": "2026-09-17",
      "ransomware": false,
      "epss": {
        "score": 0.28269,
        "percentile": 0.98058,
        "date": "2026-09-27"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-76461",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-76461",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76461"
      }
    }
  ],
  "count": 17,
  "total": 17,
  "days": 14,
  "filters": {
    "vendor": null,
    "ransomware": false
  },
  "summary": {
    "added": 17,
    "ransomware": 0,
    "dueWithin14Days": 5
  },
  "sources": {
    "kevCatalog": "2026.09.25",
    "kevReleased": "2026-09-25",
    "kevTotal": 1726
  },
  "checkedAt": "2026-09-27T20:47:42.286Z",
  "limits": {
    "requestsPerMinutePerIp": 10,
    "cvesPerCall": 20,
    "timeoutSeconds": 20
  }
}