https://cverdict-psi.vercel.app/feeds/woke.xml CVEs published before the last 30 days that gained exploitation evidence in that time. Up to 100: every KEV listing and Exploit-DB entry, and a PoC repo alone only when rated Likely next or Exploited. 2026-11-04T04:47:25.064Z CVErdicthttps://github.com/markusweldon/cverdict cverdict-pipeline tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-54419 2026-11-04T04:47:25.064Z 2026-11-04T04:47:25.064Z

Published Jun 18. Nov 4: first Nuclei template (the day we first saw it). Likely next · score 66/100.

PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-88804 2026-11-03T12:26:12.089Z 2026-10-29T13:50:03.000Z

Published Sep 28. Oct 29: first PoC repo on GitHub (unverified). Nov 3: first Nuclei template (the day we first saw it). Likely next · score 58/100.

Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2021-27460 2026-11-01T00:29:40.000Z 2026-11-01T00:29:40.000Z

Published Mar 23, 2022. Nov 1: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-61515 2026-10-30T22:20:53.000Z 2026-10-30T22:20:53.000Z

Published Aug 4. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-9644 2026-10-30T22:18:31.000Z 2026-10-30T22:18:31.000Z

Published Feb 4, 2025. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Four-Faith F3x36 bapply.cgi Auth Bypass tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-6516 2026-10-30T18:19:11.000Z 2026-10-30T18:19:11.000Z

Published Jul 23. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 70/100.

Remote Code Execution tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-28137 2026-10-30T17:15:23.000Z 2026-10-30T17:15:23.000Z

Published Apr 15, 2025. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 69/100.

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2023-41348 2026-10-30T17:06:57.000Z 2026-10-30T17:06:57.000Z

Published Nov 3, 2023. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 50/100.

ASUS RT-AX55 - command injection - 4 tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2023-41346 2026-10-30T17:06:25.000Z 2026-10-30T17:06:25.000Z

Published Nov 3, 2023. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 50/100.

ASUS RT-AX55 - command injection - 2 tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2023-42495 2026-10-30T17:02:57.000Z 2026-10-30T17:02:57.000Z

Published Dec 13, 2023. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-13684 2026-10-30T09:39:29.000Z 2026-10-30T09:39:29.000Z

Published Sep 18. Oct 30: first PoC repo on GitHub (unverified). Likely next · score 56/100.

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-12118 2026-10-29T11:21:36.000Z 2026-10-29T11:21:36.000Z

Published Jul 30. Oct 29: first PoC repo on GitHub (unverified). Likely next · score 70/100.

IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-56190 2026-10-29T10:30:36.000Z 2026-10-29T10:30:36.000Z

Published Jul 14. Oct 29: first PoC repo on GitHub (unverified). Likely next · score 70/100.

Remote Desktop Protocol Remote Code Execution Vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-35223 2026-10-28T16:00:07.000Z 2026-10-28T16:00:07.000Z

Published May 26. Oct 28: first PoC repo on GitHub (unverified). Likely next · score 57/100.

Joomla! Core - [20260508] - Improper access check in com_config webservice endpoints tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-36779 2026-10-28T10:18:35.000Z 2026-10-28T10:18:35.000Z

Published Jun 6, 2024. Oct 28: first PoC repo on GitHub (unverified). Likely next · score 62/100.

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php. tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-46300 2026-10-28T00:00:00.000Z 2026-10-28T00:00:00.000Z

Published May 23. Oct 28: added to CISA KEV. Exploited · score 100/100.

net: skbuff: preserve shared-frag marker during coalescing tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-41709 2026-10-28T00:00:00.000Z 2026-10-28T00:00:00.000Z

Published Jul 30. Oct 28: added to CISA KEV. Exploited · score 90/100.

ESX insufficient logging vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-80097 2026-10-27T14:28:35.000Z 2026-10-27T14:28:35.000Z

Published Sep 8. Oct 27: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Microsoft Authenticator Elevation of Privilege Vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-55944 2026-10-27T02:34:06.000Z 2026-10-27T02:34:06.000Z

Published Jul 14. Oct 27: first PoC repo on GitHub (unverified). Likely next · score 70/100.

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-27740 2026-10-27T02:14:29.000Z 2026-10-27T02:14:29.000Z

Published Apr 8, 2025. Oct 27: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Active Directory Certificate Services Elevation of Privilege Vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-48356 2026-10-27T00:00:00.000Z 2026-10-27T00:00:00.000Z

Published Jul 14. Oct 27: added to CISA KEV. Exploited · score 100/100.

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-10441 2026-10-25T01:51:37.000Z 2026-10-25T01:51:37.000Z

Published Mar 19, 2025. Oct 25: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-85168 2026-10-24T23:56:25.000Z 2026-10-24T23:56:25.000Z

Published Sep 3. Oct 24: first PoC repo on GitHub (unverified). Likely next · score 52/100.

n8n before 1.123.73 Remote Code Execution via Git Node tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-86076 2026-10-24T23:56:17.000Z 2026-10-24T23:56:17.000Z

Published Sep 8. Oct 24: first PoC repo on GitHub (unverified). Likely next · score 52/100.

n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-45490 2026-10-24T14:36:40.000Z 2026-10-24T14:36:40.000Z

Published Aug 30, 2024. Oct 24: first PoC repo on GitHub (unverified). Likely next · score 62/100.

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-32440 2026-10-23T23:17:38.000Z 2026-10-23T23:17:38.000Z

Published May 27, 2025. Oct 23: first PoC repo on GitHub (unverified). Likely next · score 56/100.

NetAlertX Vulnerable to Authentication Bypass tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-76183 2026-10-23T16:30:46.000Z 2026-10-23T16:30:46.000Z

Published Sep 23. Oct 23: first PoC repo on GitHub (unverified). Likely next · score 72/100.

Apache Tomcat: Bypass of security constraints for WebSocket endpoints tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-10263 2026-10-23T04:42:54.000Z 2026-10-23T04:42:54.000Z

Published Jun 9. Oct 23: first PoC repo on GitHub (unverified). Likely next · score 70/100.

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-12080 2026-10-22T18:09:38.000Z 2026-10-22T18:09:38.000Z

Published Jul 20. Oct 22: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-30084 2026-10-22T17:48:09.000Z 2026-10-22T17:48:09.000Z

Published Jun 11, 2024. Oct 22: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-86478 2026-10-21T23:29:52.000Z 2026-10-21T23:29:52.000Z

Published Sep 7. Oct 21: first PoC repo on GitHub (unverified). Likely next · score 70/100.

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-27509 2026-10-21T10:23:47.000Z 2026-10-21T10:23:47.000Z

Published Mar 6, 2025. Oct 21: first PoC repo on GitHub (unverified). Likely next · score 56/100.

SAML authentication vulnerability due to improper SAML response validation tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-10961 2026-10-20T19:16:47.000Z 2026-10-20T19:16:47.000Z

Published Jun 4. Oct 20: first PoC repo on GitHub (unverified). Likely next · score 52/100.

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-5243 2026-10-20T17:20:00.000Z 2026-10-20T17:20:00.000Z

Published Jul 24, 2025. Oct 20: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Arbitrary File Upload in SMG Software's Information Portal tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-75045 2026-10-19T20:32:55.000Z 2026-10-19T20:32:55.000Z

Published Aug 17. Oct 19: first PoC repo on GitHub (unverified). Likely next · score 70/100.

In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-58299 2026-10-19T15:53:31.000Z 2026-10-19T15:53:31.000Z

Published Dec 12, 2025. Oct 19: first PoC repo on GitHub (unverified). Likely next · score 56/100.

PCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' Command tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-12603 2026-10-19T12:31:50.000Z 2026-10-19T12:31:50.000Z

Published Dec 13, 2024. Oct 19: first PoC repo on GitHub (unverified). Likely next · score 56/100.

A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-49812 2026-10-18T15:19:40.000Z 2026-10-18T15:19:40.000Z

Published Jul 10, 2025. Oct 18: first PoC repo on GitHub (unverified). Likely next · score 52/100.

Apache HTTP Server: mod_ssl TLS upgrade attack tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-51366 2026-10-16T10:46:53.000Z 2026-10-16T10:46:53.000Z

Published Aug 19. Oct 16: first PoC repo on GitHub (unverified). Likely next · score 54/100.

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the api_vedo/chat endpoint and… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-61624 2026-10-16T00:00:00.000Z 2026-10-16T00:00:00.000Z

Published Apr 14. Oct 16: added to CISA KEV. Exploited · score 100/100.

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-24090 2026-10-15T11:03:10.000Z 2026-10-15T11:03:10.000Z

Published Jun 1. Oct 15: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Missing Authentication for Critical Function in HLOS tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-36057 2026-10-14T15:58:32.000Z 2026-10-14T15:58:32.000Z

Published Apr 7. Oct 14: first PoC repo on GitHub (unverified). Likely next · score 62/100.

Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution. The line "qx/unzip $filename… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-36058 2026-10-14T15:58:21.000Z 2026-10-14T15:58:21.000Z

Published Apr 7. Oct 14: first PoC repo on GitHub (unverified). Likely next · score 62/100.

The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-74580 2026-10-14T13:27:43.000Z 2026-10-14T13:27:43.000Z

Published Aug 21. Oct 14: first PoC repo on GitHub (unverified). Likely next · score 50/100.

vhost: reset the vring metadata cache on vring reconfiguration tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-13224 2026-10-14T10:51:07.000Z 2026-10-14T10:51:07.000Z

Published Nov 17, 2025. Oct 14: first PoC repo on GitHub (unverified). Likely next · score 52/100.

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-58222 2026-10-13T07:30:52.000Z 2026-10-13T07:30:52.000Z

Published Jul 30. Oct 13: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-79987 2026-10-12T11:23:39.000Z 2026-10-12T11:23:39.000Z

Published Sep 10. Oct 12: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Low-privilege RCE through element-search eager loading tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2015-3306 2026-10-08T00:00:00.000Z 2026-10-08T00:00:00.000Z

Published May 18, 2015. Oct 8: added to CISA KEV. Exploited · score 100/100.

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2015-5477 2026-10-08T00:00:00.000Z 2026-10-08T00:00:00.000Z

Published Jul 29, 2015. Oct 8: added to CISA KEV. Exploited · score 100/100.

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2016-3081 2026-10-08T00:00:00.000Z 2026-10-08T00:00:00.000Z

Published Apr 26, 2016. Oct 8: added to CISA KEV. Exploited · score 100/100.

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2021-3199 2026-10-08T00:00:00.000Z 2026-10-08T00:00:00.000Z

Published Jan 22, 2021. Oct 8: added to CISA KEV. Exploited · score 100/100.

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2023-22894 2026-10-08T00:00:00.000Z 2026-10-08T00:00:00.000Z

Published Apr 19, 2023. Oct 8: added to CISA KEV. Exploited · score 100/100.

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2024-22203 2026-10-07T15:40:41.000Z 2026-10-07T15:40:41.000Z

Published Jan 23, 2024. Oct 7: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Whoogle Search Server Side Request Forgery vulnerability tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-43805 2026-10-06T14:45:26.000Z 2026-10-06T14:45:26.000Z

Published Jul 27. Oct 6: first PoC repo on GitHub (unverified). Likely next · score 72/100.

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS… tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-10196 2026-10-06T10:44:32.000Z 2026-10-06T10:44:32.000Z

Published Sep 5. Oct 6: first PoC repo on GitHub (unverified). Likely next · score 56/100.

Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-74727 2026-10-06T04:36:35.000Z 2026-10-06T04:36:35.000Z

Published Aug 22. Oct 6: first PoC repo on GitHub (unverified). Likely next · score 56/100.

ovpn: skip rehash for peers already removed from by_id tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-14659 2026-10-05T19:50:36.000Z 2026-10-05T19:50:36.000Z

Published Dec 14, 2025. Oct 5: first PoC repo on GitHub (unverified). Likely next · score 58/100.

D-Link DIR-860LB1/DIR-868LB1 DHCP command injection tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2026-16444 2026-10-05T18:46:05.000Z 2026-10-05T18:46:05.000Z

Published Aug 26. Oct 5: first PoC repo on GitHub (unverified). Likely next · score 50/100.

Improper Validation of File Paths in TeamViewer Desktop Clients tag:cverdict-psi.vercel.app,2026:cverdict/woke/CVE-2025-48617 2026-10-05T07:12:55.000Z 2026-10-05T07:12:55.000Z

Published Jun 17. Oct 5: first PoC repo on GitHub (unverified). Likely next · score 50/100.

In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of…