By publication date

Exploited and new serious CVEs: November 2026

2,053 records · 6 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 9 of 21

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-113370No exploit	Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Tasksonatype · nexus repository 3 · CWE-89 SQL injection	High7.7	—	0.2%	5 days ago
28Monitor	CVE-2026-113371No exploit	Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrasesonatype · nexus repository 3 · CWE-522 Info leak	High7.1	—	0.2%	5 days ago
28Monitor	CVE-2026-113372No exploit	Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Keysonatype · nexus repository 3 · CWE-522 Info leak	High7.1	—	0.2%	5 days ago
36Monitor	CVE-2026-113373No exploit	Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Againsonatype · nexus repository 3 · CWE-1390 Pre-auth Auth bypass	Critical9.1	—	0.2%	5 days ago
34Monitor	CVE-2026-113374No exploit	Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creationsonatype · nexus repository 3 · CWE-862 Broken access control (IDOR)	High8.6	—	0.2%	5 days ago
21Monitor	CVE-2026-115574Proof of concept	Zulip: Custom profile fields can be read by logged-out visitors in organization with web-public channelszulip · zulip · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.7%	5 days ago
37Monitor	CVE-2026-121933No exploit	Linksys E5350 Setup Wizard apply.cgi save_settings missing authenticationlinksys · e5350 · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.9%	5 days ago
28Monitor	CVE-2026-122192No exploit	Guest access to Firecracker process memory after a failed memory discardaws · firecracker · CWE-390 Local privilege escalation	High7.1	—	0.1%	5 days ago
36Monitor	CVE-2026-122220No exploit	WPO365 LOGIN before 45.2 SAML Replay Protection Bypasswpo365 · wpo365 \| seamless wordpress + microsoft integration (wpo365 \| login) · CWE-294 Pre-auth Auth bypass	Critical9.1	—	0.3%	5 days ago
30Monitor	CVE-2026-97705No exploit	Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parsermoleculerjs · moleculer · CWE-835 Pre-auth Denial of service	High7.5	—	0.3%	5 days ago
34Monitor	CVE-2025-71456No exploit	vtenext before 25.02.2 SQL Injection via fieldname in Fax EditViewvtenext · vtenext · CWE-89 SQL injection	High8.6	—	0.2%	5 days ago
37Monitor	CVE-2025-71457No exploit	vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.phpvtenext · vtenext · CWE-620 Pre-auth Auth bypass	Critical9.3	—	0.4%	5 days ago
32Monitor	CVE-2026-102339No exploit	Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackabletelepresenceio · telepresence · CWE-639 Broken access control (IDOR)	High8.2	—	0.2%	5 days ago
34Monitor	CVE-2026-102340No exploit	Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secretstelepresenceio · telepresence · CWE-306 Auth bypass	High8.5	—	0.2%	5 days ago
28Monitor	CVE-2026-102664No exploit	ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib pathsysown · proxysql · CWE-908 Memory safety	High7.1	—	0.3%	5 days ago
30Monitor	CVE-2026-104203No exploit	Traccar: Authentication bypass via path parameters exposes protected device mediatraccar · traccar · CWE-200 Pre-auth Auth bypass Info leak	High7.5	—	0.7%	5 days ago
30Monitor	CVE-2026-10859No exploit	IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerabilityibm · mq · CWE-502 RCE Deserialization	High7.5	—	0.3%	5 days ago
32Monitor	CVE-2026-115758No exploit	SumatraPDF: TLS hostname validation disabled in `HttpGet()`sumatrapdfreader · sumatrapdf · CWE-297 Pre-auth Weak crypto	High8.2	—	0.1%	5 days ago
35Monitor	CVE-2026-11376No exploit	IBM MQ is affected by a denial of service vulnerabilityibm · mq · CWE-190 RCE Memory safety	High8.8	—	0.3%	5 days ago
34Monitor	CVE-2026-11724No exploit	IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityibm · mq · CWE-20 RCE	High8.5	—	0.2%	5 days ago
28Monitor	CVE-2026-121968No exploit	Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packetsquozl · netrek-client-cow · CWE-129 Pre-auth	High7.1	—	0.3%	5 days ago
28Monitor	CVE-2026-121969No exploit	netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessagequozl · netrek-client-cow · CWE-121 Pre-auth Memory safety	High7.1	—	0.3%	5 days ago
37Monitor	CVE-2026-122013No exploit	Comfast CF-WR632AX Multipart webmgnt path traversalcomfast · cf-wr632ax · CWE-22 Pre-auth Path traversal	Critical9.3	—	0.8%	5 days ago
32Monitor	CVE-2026-122126No exploit	reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocketresiprocate · resiprocate · CWE-122 Pre-auth Memory safety	High8.2	—	0.3%	5 days ago
34Monitor	CVE-2026-122127No exploit	CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decodercesnet · ipfixcol2 · CWE-787 Pre-auth Memory safety	High8.7	—	0.3%	5 days ago
33Monitor	CVE-2026-122130No exploit	CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugincesnet · ipfixcol2 · CWE-190 Pre-auth Memory safety	High8.3	—	0.3%	5 days ago
34Monitor	CVE-2026-122133No exploit	Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exemistralai · mistral-vibe · CWE-427 pre-auth RCE	High8.6	—	0.3%	5 days ago
34Monitor	CVE-2026-122134No exploit	Mistral Vibe before 2.25.7 Code Execution via Git Filter Driversmistralai · mistral-vibe · CWE-829 pre-auth RCE	High8.6	—	0.4%	5 days ago
34Monitor	CVE-2026-122135No exploit	Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.programmistralai · mistral-vibe · CWE-829 pre-auth RCE	High8.6	—	0.4%	5 days ago
28Monitor	CVE-2026-122224No exploit	WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpointsretspen · webvirtcloud · CWE-862 Broken access control (IDOR)	High7.2	—	0.3%	5 days ago
30Monitor	CVE-2026-12356No exploit	IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityibm · mq · CWE-74 RCE	High7.5	—	0.3%	5 days ago
32Monitor	CVE-2026-13271No exploit	IBM MQ Managed File Transfer is affected by a denial of service vulnerabilityibm · mq · CWE-611 XXE	High8.1	—	0.2%	5 days ago
28Monitor	CVE-2026-13284No exploit	IBM MQ Managed File Transfer is vulnerable to XML external entity injectionibm · mq · CWE-611 XXE	High7.1	—	0.3%	5 days ago
28Monitor	CVE-2026-13289No exploit	IBM MQ Managed File Transfer is vulnerable to XML external entity injectionibm · mq · CWE-611 XXE	High7.1	—	0.3%	5 days ago
35Monitor	CVE-2026-13292No exploit	IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityibm · mq · CWE-15 RCE	High8.8	—	0.3%	5 days ago
30Monitor	CVE-2026-17493No exploit	IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.ibm · watson speech services cartridge · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	5 days ago
28Monitor	CVE-2026-18142No exploit	IBM MQ is affected by a denial of service vulnerabilityibm · mq · CWE-190 Memory safety	High7.1	—	0.4%	5 days ago
39Monitor	CVE-2026-82418No exploit	IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLibm · watson speech services cartridge · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	0.4%	5 days ago
36Monitor	CVE-2026-102894No exploit	GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeovergpustack · gpustack · CWE-294 Pre-auth Auth bypass	Critical9.1	—	0.2%	5 days ago
69This week	CVE-2026-102895Weaponized	GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admingpustack · gpustack · CWE-287 Pre-auth Auth bypass	Critical9.8	KEV	0.3%	5 days ago
35Monitor	CVE-2026-103002No exploit	GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeovergpustack · gpustack · CWE-639 Broken access control (IDOR)	High8.8	—	0.3%	5 days ago
34Monitor	CVE-2026-54372No exploit	VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validationshenzhen shine industrial co., ltd. · vitafit · CWE-295 Pre-auth Weak crypto	High8.7	—	0.1%	5 days ago
34Monitor	CVE-2026-54374No exploit	VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosureshenzhen shine industrial co., ltd. · vitafit · CWE-798 Pre-auth Hard-coded credentials	High8.7	—	0.2%	5 days ago
34Monitor	CVE-2026-54375No exploit	VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposureshenzhen shine industrial co., ltd. · vitafit · CWE-613	High8.6	—	0.1%	5 days ago
32Monitor	CVE-2026-54376No exploit	VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijackingshenzhen shine industrial co., ltd. · vitafit · CWE-926	High8.2	—	0.1%	5 days ago
37Monitor	CVE-2026-54378No exploit	VitaFit Cloud API Broken Access Control via S3 Token Endpointshenzhen shine industrial co., ltd. · vitafit · CWE-522 Broken access control (IDOR) Info leak	Critical9.3	—	0.2%	5 days ago
30Monitor	CVE-2026-55367No exploit	h2o: heap exhaustion using capsulesh2o · h2o · CWE-770 Pre-auth Denial of service	High7.5	—	0.3%	5 days ago
32Monitor	CVE-2026-55368No exploit	h2o: buffer overflow when using the %{error}x log directiveh2o · h2o · CWE-787 Pre-auth Memory safety	High8.1	—	0.3%	5 days ago
37Monitor	CVE-2026-57566No exploit	Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxyreadest · readest · CWE-918 Pre-auth SSRF	Critical9.3	—	0.5%	5 days ago
34Monitor	CVE-2026-57567No exploit	Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webviewreadest · readest · CWE-22 Path traversal Local privilege escalation	High8.6	—	0.6%	5 days ago
30Monitor	CVE-2026-63655No exploit	tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoStsparticles · tsparticles · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	5 days ago
39Monitor	CVE-2026-97693No exploit	Yuxi sandbox isolation failure allows cross-tenant access and internal service compromisexerrors · yuxi · CWE-77 RCE Command injection	Critical9.9	—	0.8%	5 days ago
34Monitor	CVE-2026-108387No exploit	radare2: Remote code execution when loading Pebble/SMD binaryradareorg · radare2 · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.1%	5 days ago
38Monitor	CVE-2026-115770No exploit	Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofingpocket-id · pocket-id · CWE-345	Critical9.6	—	0.1%	5 days ago
34Monitor	CVE-2026-122299No exploit	Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretationjelmer · dulwich · CWE-115 Pre-auth	High8.6	—	0.3%	5 days ago
34Monitor	CVE-2026-47678No exploit	GLPI: Blind Time based SQLI in dropdownsglpi-project · glpi · CWE-89 SQL injection	High8.7	—	0.2%	5 days ago
36Monitor	CVE-2026-52848No exploit	GLPI is a free asset and IT management software package.glpi-project · glpi · CWE-288 Pre-auth Auth bypass	Critical9.2	—	0.3%	5 days ago
34Monitor	CVE-2026-54381No exploit	VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosureshenzhen shine industrial co., ltd. · vitafit · CWE-732 Pre-auth Auth bypass	High8.7	—	0.4%	5 days ago
28Monitor	CVE-2026-54383No exploit	VitaFit Cloud API Excessive Data Exposure via relation/search Endpointshenzhen shine industrial co., ltd. · vitafit · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	5 days ago
37Monitor	CVE-2026-54384No exploit	VitaFit Cloud API Authentication Bypass via POST /front/login/sns/shenzhen shine industrial co., ltd. · vitafit · CWE-290 Pre-auth Auth bypass	Critical9.3	—	0.6%	5 days ago
28Monitor	CVE-2026-57152No exploit	GLPI: Unallowed notifications sendingglpi-project · glpi · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	5 days ago
30Monitor	CVE-2026-62662No exploit	Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiencespocket-id · pocket-id · CWE-20	High7.7	—	0.2%	5 days ago
30Monitor	CVE-2026-76826No exploit	tsParticles: Generated release notes can execute shell commands in the stable publish workflowtsparticles · tsparticles · CWE-78 pre-auth RCE Command injection	High7.5	—	0.3%	5 days ago
34Monitor	CVE-2026-76892No exploit	tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processtsparticles · tsparticles · CWE-248 Pre-auth	High8.7	—	0.2%	5 days ago
35Monitor	CVE-2026-77372No exploit	VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)veracrypt · veracrypt · CWE-125 Deserialization Local privilege escalation Memory safety	High8.8	—	0.0%	5 days ago
38Monitor	CVE-2026-122051Proof of concept	Edimax BR-6208AC mp command injectionedimax · br-6208ac · CWE-74 pre-auth RCE Command injection	Critical9.3	—	2.5%	5 days ago
28Monitor	CVE-2026-109849No exploit	Incorrect privilege assignment issue exists in Hinemos.ntt data intellilink corporation · hinemos · CWE-266	High7.1	—	0.1%	5 days ago
30Monitor	CVE-2025-66364No exploit	Continuously sending control‑plane messages causes the baseband to crashes.samsung semiconductor · exynos 850 · CWE-754 Pre-auth Denial of service	High7.5	—	0.1%	5 days ago
8Monitor	CVE-2026-122158Proof of concept	InvoiceShelf MemberService.php create access controlCWE-266	Low2.0	—	0.2%	5 days ago
30Monitor	CVE-2025-66366No exploit	Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crashsamsung semiconductor · exynos 1280 · CWE-129 Pre-auth Denial of service	High7.5	—	0.1%	5 days ago
30Monitor	CVE-2025-66367No exploit	Improper handling of NAS DLTransport messages may lead to a baseband crash.samsung semiconductor · exynos 850 · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.1%	5 days ago
30Monitor	CVE-2025-66368No exploit	Incorrect handling of SDP payload leads to a Denial of Servicesamsung semiconductor · exynos 1080 · CWE-754 Pre-auth Denial of service	High7.5	—	0.1%	5 days ago
37Monitor	CVE-2026-122302No exploit	Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Checkkyverno · kyverno · CWE-269 Pre-auth	Critical9.3	—	0.2%	5 days ago
37Monitor	CVE-2026-122303No exploit	Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicykyverno · kyverno · CWE-862 Broken access control (IDOR)	Critical9.4	—	0.3%	5 days ago
37Monitor	CVE-2026-122304No exploit	Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loaderkyverno · kyverno · CWE-863 Broken access control (IDOR)	Critical9.4	—	0.3%	5 days ago
33Monitor	CVE-2026-122305No exploit	Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loopkyverno · kyverno · CWE-835 Denial of service	High8.3	—	0.3%	5 days ago
33Monitor	CVE-2026-122306No exploit	Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matchingkyverno · kyverno · CWE-407	High8.3	—	0.3%	5 days ago
33Monitor	CVE-2026-122307No exploit	Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handlingkyverno · kyverno · CWE-863 Broken access control (IDOR)	High8.3	—	0.2%	5 days ago
33Monitor	CVE-2026-122308No exploit	Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequestkyverno · kyverno · CWE-639 Broken access control (IDOR)	High8.4	—	0.2%	5 days ago
32Monitor	CVE-2026-122309No exploit	Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Costkyverno · kyverno · CWE-400 Denial of service	High8.2	—	0.1%	5 days ago
37Monitor	CVE-2026-122310No exploit	Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPathkyverno · kyverno · CWE-436	Critical9.4	—	0.3%	5 days ago
37Monitor	CVE-2026-122311No exploit	Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argumentkyverno · kyverno · CWE-22 Path traversal	Critical9.4	—	0.4%	5 days ago
33Monitor	CVE-2026-122312No exploit	Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query Stringkyverno · kyverno · CWE-269	High8.3	—	0.3%	5 days ago
37Monitor	CVE-2026-122313No exploit	Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicykyverno · kyverno · CWE-269	Critical9.4	—	0.3%	5 days ago
34Monitor	CVE-2026-122314No exploit	Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panickyverno · kyverno · CWE-248 Pre-auth	High8.7	—	0.3%	5 days ago
34Monitor	CVE-2026-122315No exploit	Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panickyverno · kyverno · CWE-248 Pre-auth	High8.7	—	0.4%	5 days ago
33Monitor	CVE-2026-122316No exploit	Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExistingkyverno · kyverno · CWE-862 Broken access control (IDOR)	High8.4	—	0.1%	5 days ago
28Monitor	CVE-2026-122318No exploit	Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificateskyverno · kyverno · CWE-295 Auth bypass Weak crypto	High7.2	—	0.1%	5 days ago
34Monitor	CVE-2026-122319No exploit	Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panickyverno · kyverno · CWE-704 Pre-auth	High8.7	—	0.2%	5 days ago
33Monitor	CVE-2026-122320No exploit	Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clonekyverno · kyverno · CWE-862 Broken access control (IDOR)	High8.3	—	0.2%	5 days ago
34Monitor	CVE-2026-122321No exploit	Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypasskyverno · kyverno · CWE-367 Race condition	High8.5	—	0.2%	5 days ago
34Monitor	CVE-2026-122322No exploit	Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompressionkyverno · kyverno · CWE-409 Pre-auth	High8.7	—	0.3%	5 days ago
34Monitor	CVE-2026-122323No exploit	Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompressionkyverno · kyverno · CWE-409 Pre-auth	High8.7	—	0.3%	5 days ago
36Monitor	CVE-2026-122992No exploit	In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-Mg4klx · dstargateway · CWE-191 Pre-auth Memory safety	Critical9.2	—	0.3%	5 days ago
30Monitor	CVE-2026-33958No exploit	Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.samsung semiconductor · exynos 1080 · CWE-1286 Pre-auth Denial of service	High7.5	—	0.1%	5 days ago
30Monitor	CVE-2026-33969No exploit	In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Servsamsung semiconductor · exynos 850 · CWE-835 Pre-auth Denial of service	High7.5	—	0.1%	5 days ago
39Monitor	CVE-2026-33971No exploit	In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condsamsung semiconductor · exynos 850 · CWE-400 Pre-auth Denial of service	Critical9.8	—	0.1%	5 days ago
39Monitor	CVE-2026-33972No exploit	In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.samsung semiconductor · exynos 1080 · CWE-1284 Pre-auth	Critical9.8	—	0.1%	5 days ago
30Monitor	CVE-2026-35494No exploit	In the baseband, memory corruption during NAS packet processing can cause a denial of service.samsung semiconductor · exynos 1280 · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	0.1%	5 days ago
39Monitor	CVE-2026-48173No exploit	In the NAS message handler, improper validation of the length field in NAS message causes memory corruptionsamsung semiconductor · exynos 850 · CWE-120 Pre-auth Memory safety	Critical9.8	—	0.1%	5 days ago

CVE-2026-113370
30Monitor
Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task
HighCVSS 7.7No exploitEPSS 0%
- SQL injection
sonatype · nexus repository 35 days ago
CVE-2026-113371
28Monitor
Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase
HighCVSS 7.1No exploitEPSS 0%
- Info leak
sonatype · nexus repository 35 days ago
CVE-2026-113372
28Monitor
Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key
HighCVSS 7.1No exploitEPSS 0%
- Info leak
sonatype · nexus repository 35 days ago
CVE-2026-113373
36Monitor
Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
sonatype · nexus repository 35 days ago
CVE-2026-113374
34Monitor
Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
sonatype · nexus repository 35 days ago
CVE-2026-115574
21Monitor
Zulip: Custom profile fields can be read by logged-out visitors in organization with web-public channels
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
zulip · zulip5 days ago
CVE-2026-121933
37Monitor
Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
linksys · e53505 days ago
CVE-2026-122192
28Monitor
Guest access to Firecracker process memory after a failed memory discard
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
aws · firecracker5 days ago
CVE-2026-122220
36Monitor
WPO365 LOGIN before 45.2 SAML Replay Protection Bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
wpo365 · wpo365 | seamless wordpress + microsoft integration (wpo365 | login)5 days ago
CVE-2026-97705
30Monitor
Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
moleculerjs · moleculer5 days ago
CVE-2025-71456
34Monitor
vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
vtenext · vtenext5 days ago
CVE-2025-71457
37Monitor
vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
vtenext · vtenext5 days ago
CVE-2026-102339
32Monitor
Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable
HighCVSS 8.2No exploitEPSS 0%
- Broken access control (IDOR)
telepresenceio · telepresence5 days ago
CVE-2026-102340
34Monitor
Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets
HighCVSS 8.5No exploitEPSS 0%
- Auth bypass
telepresenceio · telepresence5 days ago
CVE-2026-102664
28Monitor
ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib path
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
sysown · proxysql5 days ago
CVE-2026-104203
30Monitor
Traccar: Authentication bypass via path parameters exposes protected device media
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
traccar · traccar5 days ago
CVE-2026-10859
30Monitor
IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Deserialization
ibm · mq5 days ago
CVE-2026-115758
32Monitor
SumatraPDF: TLS hostname validation disabled in `HttpGet()`
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
sumatrapdfreader · sumatrapdf5 days ago
CVE-2026-11376
35Monitor
IBM MQ is affected by a denial of service vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mq5 days ago
CVE-2026-11724
34Monitor
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
HighCVSS 8.5No exploitEPSS 0%
- RCE
ibm · mq5 days ago
CVE-2026-121968
28Monitor
Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packets
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
quozl · netrek-client-cow5 days ago
CVE-2026-121969
28Monitor
netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessage
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
quozl · netrek-client-cow5 days ago
CVE-2026-122013
37Monitor
Comfast CF-WR632AX Multipart webmgnt path traversal
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
comfast · cf-wr632ax5 days ago
CVE-2026-122126
32Monitor
reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
resiprocate · resiprocate5 days ago
CVE-2026-122127
34Monitor
CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 Decoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
cesnet · ipfixcol25 days ago
CVE-2026-122130
33Monitor
CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
cesnet · ipfixcol25 days ago
CVE-2026-122133
34Monitor
Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibe5 days ago
CVE-2026-122134
34Monitor
Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibe5 days ago
CVE-2026-122135
34Monitor
Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibe5 days ago
CVE-2026-122224
28Monitor
WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
retspen · webvirtcloud5 days ago
CVE-2026-12356
30Monitor
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
HighCVSS 7.5No exploitEPSS 0%
- RCE
ibm · mq5 days ago
CVE-2026-13271
32Monitor
IBM MQ Managed File Transfer is affected by a denial of service vulnerability
HighCVSS 8.1No exploitEPSS 0%
- XXE
ibm · mq5 days ago
CVE-2026-13284
28Monitor
IBM MQ Managed File Transfer is vulnerable to XML external entity injection
HighCVSS 7.1No exploitEPSS 0%
- XXE
ibm · mq5 days ago
CVE-2026-13289
28Monitor
IBM MQ Managed File Transfer is vulnerable to XML external entity injection
HighCVSS 7.1No exploitEPSS 0%
- XXE
ibm · mq5 days ago
CVE-2026-13292
35Monitor
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · mq5 days ago
CVE-2026-17493
30Monitor
IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
ibm · watson speech services cartridge5 days ago
CVE-2026-18142
28Monitor
IBM MQ is affected by a denial of service vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
ibm · mq5 days ago
CVE-2026-82418
39Monitor
IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · watson speech services cartridge5 days ago
CVE-2026-102894
36Monitor
GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
gpustack · gpustack5 days ago
CVE-2026-102895
69This week
GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin
CriticalCVSS 9.8KEVWeaponizedEPSS 0%
- Pre-auth
- Auth bypass
gpustack · gpustack5 days ago
CVE-2026-103002
35Monitor
GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
gpustack · gpustack5 days ago
CVE-2026-54372
34Monitor
VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54374
34Monitor
VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54375
34Monitor
VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure
HighCVSS 8.6No exploitEPSS 0%
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54376
32Monitor
VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking
HighCVSS 8.2No exploitEPSS 0%
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54378
37Monitor
VitaFit Cloud API Broken Access Control via S3 Token Endpoint
CriticalCVSS 9.3No exploitEPSS 0%
- Broken access control (IDOR)
- Info leak
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-55367
30Monitor
h2o: heap exhaustion using capsules
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
h2o · h2o5 days ago
CVE-2026-55368
32Monitor
h2o: buffer overflow when using the %{error}x log directive
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
h2o · h2o5 days ago
CVE-2026-57566
37Monitor
Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSRF
readest · readest5 days ago
CVE-2026-57567
34Monitor
Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
- Local privilege escalation
readest · readest5 days ago
CVE-2026-63655
30Monitor
tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
tsparticles · tsparticles5 days ago
CVE-2026-97693
39Monitor
Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
xerrors · yuxi5 days ago
CVE-2026-108387
34Monitor
radare2: Remote code execution when loading Pebble/SMD binary
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
radareorg · radare25 days ago
CVE-2026-115770
38Monitor
Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing
CriticalCVSS 9.6No exploitEPSS 0%
pocket-id · pocket-id5 days ago
CVE-2026-122299
34Monitor
Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
jelmer · dulwich5 days ago
CVE-2026-47678
34Monitor
GLPI: Blind Time based SQLI in dropdowns
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
glpi-project · glpi5 days ago
CVE-2026-52848
36Monitor
GLPI is a free asset and IT management software package.
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
glpi-project · glpi5 days ago
CVE-2026-54381
34Monitor
VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54383
28Monitor
VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-54384
37Monitor
VitaFit Cloud API Authentication Bypass via POST /front/login/sns/
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
shenzhen shine industrial co., ltd. · vitafit5 days ago
CVE-2026-57152
28Monitor
GLPI: Unallowed notifications sending
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
glpi-project · glpi5 days ago
CVE-2026-62662
30Monitor
Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences
HighCVSS 7.7No exploitEPSS 0%
pocket-id · pocket-id5 days ago
CVE-2026-76826
30Monitor
tsParticles: Generated release notes can execute shell commands in the stable publish workflow
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Command injection
tsparticles · tsparticles5 days ago
CVE-2026-76892
34Monitor
tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
tsparticles · tsparticles5 days ago
CVE-2026-77372
35Monitor
VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
- Local privilege escalation
- Memory safety
veracrypt · veracrypt5 days ago
CVE-2026-122051
38Monitor
Edimax BR-6208AC mp command injection
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
edimax · br-6208ac5 days ago
CVE-2026-109849
28Monitor
Incorrect privilege assignment issue exists in Hinemos.
HighCVSS 7.1No exploitEPSS 0%
ntt data intellilink corporation · hinemos5 days ago
CVE-2025-66364
30Monitor
Continuously sending control‑plane messages causes the baseband to crashes.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 8505 days ago
CVE-2026-122158
8Monitor
InvoiceShelf MemberService.php create access control
LowCVSS 2.0Proof of conceptEPSS 0%
5 days ago
CVE-2025-66366
30Monitor
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 12805 days ago
CVE-2025-66367
30Monitor
Improper handling of NAS DLTransport messages may lead to a baseband crash.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
samsung semiconductor · exynos 8505 days ago
CVE-2025-66368
30Monitor
Incorrect handling of SDP payload leads to a Denial of Service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 10805 days ago
CVE-2026-122302
37Monitor
Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122303
37Monitor
Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy
CriticalCVSS 9.4No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122304
37Monitor
Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader
CriticalCVSS 9.4No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122305
33Monitor
Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop
HighCVSS 8.3No exploitEPSS 0%
- Denial of service
kyverno · kyverno5 days ago
CVE-2026-122306
33Monitor
Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching
HighCVSS 8.3No exploitEPSS 0%
kyverno · kyverno5 days ago
CVE-2026-122307
33Monitor
Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handling
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122308
33Monitor
Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequest
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122309
32Monitor
Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost
HighCVSS 8.2No exploitEPSS 0%
- Denial of service
kyverno · kyverno5 days ago
CVE-2026-122310
37Monitor
Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath
CriticalCVSS 9.4No exploitEPSS 0%
kyverno · kyverno5 days ago
CVE-2026-122311
37Monitor
Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument
CriticalCVSS 9.4No exploitEPSS 0%
- Path traversal
kyverno · kyverno5 days ago
CVE-2026-122312
33Monitor
Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query String
HighCVSS 8.3No exploitEPSS 0%
kyverno · kyverno5 days ago
CVE-2026-122313
37Monitor
Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy
CriticalCVSS 9.4No exploitEPSS 0%
kyverno · kyverno5 days ago
CVE-2026-122314
34Monitor
Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122315
34Monitor
Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122316
33Monitor
Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122318
28Monitor
Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates
HighCVSS 7.2No exploitEPSS 0%
- Auth bypass
- Weak crypto
kyverno · kyverno5 days ago
CVE-2026-122319
34Monitor
Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122320
33Monitor
Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyverno5 days ago
CVE-2026-122321
34Monitor
Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass
HighCVSS 8.5No exploitEPSS 0%
- Race condition
kyverno · kyverno5 days ago
CVE-2026-122322
34Monitor
Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122323
34Monitor
Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kyverno · kyverno5 days ago
CVE-2026-122992
36Monitor
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-M
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
g4klx · dstargateway5 days ago
CVE-2026-33958
30Monitor
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 10805 days ago
CVE-2026-33969
30Monitor
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Serv
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 8505 days ago
CVE-2026-33971
39Monitor
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service cond
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Denial of service
samsung semiconductor · exynos 8505 days ago
CVE-2026-33972
39Monitor
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
samsung semiconductor · exynos 10805 days ago
CVE-2026-35494
30Monitor
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
samsung semiconductor · exynos 12805 days ago
CVE-2026-48173
39Monitor
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
samsung semiconductor · exynos 8505 days ago