Trends

1. 1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2. 2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3. 3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1274
4. 4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…863
5. 5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6. 6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266

Rising exploit probability

Biggest EPSS jumps in the last 14 days — where exploitation risk is climbing fastest.

• CVE-2026-21589Critical· 9.3This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center3% → 99%+97 pts
• CVE-2026-109618Critical· 9.2RCE via OOM corruption5% → 100%+95 pts
• CVE-2026-31431High· 7.8In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…3% → 98%+95 pts
• CVE-2026-109619Critical· 9.2RCE via stale global state6% → 100%+94 pts
• CVE-2026-34486High· 7.5Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to …7% → 99%+92 pts
• CVE-2026-43284High· 8.8In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb2% → 94%+92 pts
• CVE-2026-42208Critical· 9.8LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format6% → 89%+84 pts
• CVE-2026-34197High· 8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web conso…15% → 98%+83 pts

New CVEs per month

Last 12 months (by publish date)

Severity distribution

Most-affected vendors

Most-affected ecosystems

From GitHub Advisory package data