EI
Product
Exploit Intelligence
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 4High 10Medium 7Low 1
Watch
Add Exploit Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47102 | 8.8 | May 21 | LiteLLM < 1.83.10 Privilege Escalation via User Update Affected: All versions, or not specified |
| CVE-2026-47101 | 8.8 | May 21 | LiteLLM < 1.83.14 Privilege Escalation via API Key Generation Affected: All versions, or not specified |
| CVE-2026-94449 | 7.5 | Sep 21 | Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service Affected: All versions, or not specified |
| CVE-2026-87743 | 7.5 | Sep 18 | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security Affected: All versions, or not specified |
| CVE-2026-87742 | 7.5 | Sep 17 | Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering Affected: All versions, or not specified |
| CVE-2026-54293 | 7.5 | Jun 22 | NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read Affected: All versions, or not specified |
| CVE-2026-44209 | 7.5 | May 26 | Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI Affected: All versions, or not specified |
| CVE-2026-42561 | 7.5 | May 13 | Python-Multipart: Denial of Service via unbounded multipart part headers Affected: All versions, or not specified |
| CVE-2026-34993 | 7.3 | Jun 2 | AIOHTTP Vulnerable to Deserialization of Untrusted Data Affected: All versions, or not specified |
| CVE-2026-41567 | 7.2 | Jun 5 | Docker: `PUT /containers/{id}/archive` executes container binary on the host Affected: All versions, or not specified |
Showing 10
