Vulnerabilities
Summary — last 7 days
New vulnerabilities4,628▼ 722 vs. last week
Critical / high1,829▼ 1,253 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)739▲ 636 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Critical (9.3) | 0.50% | — | CordyscrmAI | 9/18/2026 | 9/23/2026 | CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, SseController exposes the anonymous /sse/subscribe, /sse/broadcast, and /sse/close endpoints because ShiroFilter.addPublicPathFilters permits the SSE paths, and the endpoints trust the… |