public radar

Prioritized Vulnerability Signals for Defenders

Track CVE, KEV, EPSS, and vendor-advisory changes in one read-only radar—so teams can see what changed, why it matters, and what to verify next.

LIVE SIGNAL MAPDEFENSIVE PRIORITY CIRCUITLATEST STATIC SNAPSHOT

PRIORITY ORDER · NOT AN ATTACK PATH

indexable public surfaceread-only datasetpublic-safe sourcesexternal execution disabledauto remediation disabled

Tracked CVEs2020 new in 7d

Critical5canonical CVSS

Known Exploited0KEV observed

High EPSS percentile (≥70)0EPSS percentile observed

Monitored Vendors1from current data

VULNERABILITY TREEMAP

DEFENSIVE PRIORITY SURFACE

Stable CVE grouping for defensive triage. Area changes by display mode; severity remains encoded by color.

LATEST STATIC SNAPSHOT2026-08-05 11:35 UTC / 2026-08-05 20:35 JST

DISPLAY MODEDEFENSIVE PRIORITY

Live Vulnerability Feed READ-ONLY

20 signalsView all signals →

2026-08-05

defensive priority signal

CRITICALEPSS 0.0025 (16)NEW-NVD: Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup ID… Handoff

2026-08-05

defensive priority signal

CRITICALEPSS 0.0025 (17)NEW-NVD: Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated at… Handoff

2026-08-05

defensive priority signal

CRITICALEPSS 0.0037 (30)NEW-NVD: CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of servi… Handoff

2026-08-05

defensive priority signal

CRITICALEPSS 0.0032 (25)NEW-NVD: Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to re… Handoff

2026-08-05

defensive priority signal

CRITICALEPSS 0.0024 (15)NEW-NVD: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actor… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0055 (43)NEW-NVD: The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0013 (3)NEW-NVD: Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0 Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0025 (17)NEW-NVD: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. NVD: This issue affects open-iscsi: fr… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0012 (2)NEW-NVD: CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential m… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0009 (1)NEW-NVD: An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. NVD: This… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0020 (10)NEW-NVD: CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a mal… Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0023 (14)NEW-NVD: Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0 Handoff

2026-08-05

defensive priority signal

HIGHEPSS 0.0016 (6)NEW-NVD: Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0033 (26)NEW-NVD: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attac… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0029 (22)NEW-NVD: Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated atta… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0019 (9)NEW-NVD: Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Cont… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0015 (5)NEW-NVD: Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStorage.php where the findTr… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0015 (5)NEW-NVD: Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0 Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0019 (9)NEW-NVD: @fastify/forwarded resolves client addresses from the X-Forwarded-For header. NVD: In versions before 3.0.2, when the header contains… Handoff

2026-08-05

defensive priority signal

MEDIUMEPSS 0.0024 (15)NEW-NVD: A Blind SQL injection vulnerability has been identified in Quick.CMS. NVD: Improper neutralization of input provided by a high-privile… Handoff

Public-safe defensive signals

CVE-2026-65884 CRITICAL CVSS 10.0 -
NVD: Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions.
An attacker may cross a privilege boundary and gain more access than intended; CVSS 10.0 (CRITICAL); EPSS percentile 16; sources: NVD.
CVE-2026-65885 CRITICAL CVSS 9.4 -
NVD: Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. NVD: Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.
An attacker may be able to run code or commands on affected systems; CVSS 9.4 (CRITICAL); EPSS percentile 17; sources: NVD.
CVE-2026-0667 CRITICAL CVSS 9.3 -
NVD: CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
An attacker may be able to run code or commands on affected systems; CVSS 9.3 (CRITICAL); EPSS percentile 30; sources: NVD.
CVE-2026-65889 CRITICAL CVSS 9.2 -
NVD: Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories.
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for critical severity review; CVSS 9.2 (CRITICAL); EPSS percentile 25; sources: NVD.
CVE-2026-65890 CRITICAL CVSS 9.2 -
NVD: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.
An attacker may be able to read or change database-backed application data; CVSS 9.2 (CRITICAL); EPSS percentile 15; sources: NVD.
CVE-2026-14270 HIGH CVSS 8.8 -
NVD: The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. NVD: This is due to missing authorization and nonce validation in the eco_save_settings() function, which allows low-privileged authenticated users to modify the tc_eco_custom_file_types upload allowlist setting, combined with insufficient authorization on the... NVD: This makes it possible for authenticated attackers, with Subscriber-level access and above, to allow PHP uploads, upload a PHP file using the frontend upload nonce exposed on cart and checkout pages, and achieve remote code execution.
An attacker may be able to run code or commands on affected systems; CVSS 8.8 (HIGH); EPSS percentile 43; sources: NVD.
CVE-2026-65944 HIGH CVSS 8.8 -
NVD: Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for high severity review; CVSS 8.8 (HIGH); EPSS percentile 3; sources: NVD.
CVE-2026-55995 HIGH CVSS 8.7 -
NVD: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. NVD: This issue affects open-iscsi: from ? NVD: through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
The affected service may become unavailable or unreliable; CVSS 8.7 (HIGH); EPSS percentile 17; sources: NVD, OSV.
CVE-2026-14354 HIGH CVSS 8.7 -
NVD: CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in...
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authentication boundary review; CVSS 8.7 (HIGH); EPSS percentile 2; sources: NVD.
CVE-2026-44944 HIGH CVSS 8.5 -
NVD: An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. NVD: This issue affects open-iscsi: from ? NVD: through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authentication boundary review · local exposure; CVSS 8.5 (HIGH); EPSS percentile 1; sources: NVD, OSV.
CVE-2026-12927 HIGH CVSS 8.4 -
NVD: CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition.
An attacker may be able to run code or commands on affected systems; CVSS 8.4 (HIGH); EPSS percentile 10; sources: NVD.
CVE-2026-65943 HIGH CVSS 7.5 -
NVD: Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for high severity review; CVSS 7.5 (HIGH); EPSS percentile 14; sources: NVD.
CVE-2026-50641 HIGH CVSS 7.1 -
NVD: Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for high severity review; CVSS 7.1 (HIGH); EPSS percentile 6; sources: NVD.
CVE-2026-44943 MEDIUM CVSS 6.9 -
NVD: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. NVD: This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e. OSV: remote limited file-write as root via discovery in open-iscsi
An attacker may gain root or administrative-level privileges on affected systems; CVSS 6.9 (MEDIUM); EPSS percentile 26; sources: NVD, OSV.
CVE-2026-16751 MEDIUM CVSS 6.5 -
NVD: Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's...
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authenticated boundary; CVSS 6.5 (MEDIUM); EPSS percentile 22; sources: NVD.
CVE-2026-65891 MEDIUM CVSS 6.5 -
NVD: Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with... NVD: The issue also allowed existing files at the destination path to be unintentionally replaced.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authenticated boundary; CVSS 6.5 (MEDIUM); EPSS percentile 9; sources: NVD.
CVE-2026-66400 MEDIUM CVSS 6.3 -
NVD: Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStorage.php where the findTriplet() method fails to properly validate Remember Me token timestamps. NVD: Attackers with a captured Remember Me cookie can authenticate indefinitely instead of the configured timeout period, as the expiry check compares an array to a scalar value which always evaluates incorrectly in PHP.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 6.3 (MEDIUM); EPSS percentile 5; sources: NVD.
CVE-2026-65946 MEDIUM CVSS 6.1 -
NVD: Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 6.1 (MEDIUM); EPSS percentile 5; sources: NVD.
CVE-2026-18174 MEDIUM CVSS 5.3 -
NVD: @fastify/forwarded resolves client addresses from the X-Forwarded-For header. NVD: In versions before 3.0.2, when the header contains two or more comma separated entries, the parser trims only space characters and does not strip horizontal tabs, even though RFC 7230 defines optional whitespace as both space and tab. NVD: As a result, an entry padded with a tab keeps the literal tab in the resolved address string.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.3 (MEDIUM); EPSS percentile 9; sources: NVD, OSV.
CVE-2026-33385 MEDIUM CVSS 5.1 -
NVD: A Blind SQL injection vulnerability has been identified in Quick.CMS. NVD: Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks. NVD: The vendor states that this administration panel already allows for significant modification capabilities.
An attacker may be able to read or change database-backed application data; CVSS 5.1 (MEDIUM); EPSS percentile 15; sources: NVD.

Critical High Medium Low KEVKnown Exploited NEWNewly ObservedJ / K Move · ↑ / ↓ Move · Enter Open · Esc Close

Agent Access Agent Data Surface

Read-only static JSON for humans and AI agents. This is a data contract, not an execution surface.

Human Archive Priority Queue JSON Latest Diff Feed Knowledge Graph Trust Layer Proof Metadata Canonical Policy Canonical Envelope Envelope Index EAS Typed Payload Attestation Ledger Signal Item JSON Remediation Handoff Agent Manifest Static Manifest Schema

Knowledge Graph / JSON-LDlinks CVE signals, sources, affected products, and provenanceLocal-first Vaultbrowser-only personal review context; import/export/clear supportedRirastaFab Trust Layerhash-only integrity metadata, canonical envelopes, and proof endpointsCanonical Envelopeattestation-ready preflight metadata without onchain submission

Agents should start with /agent.json, validate the signal item schema, use the JSON-LD graph for provenance, and treat the Local Vault as private browser state that is never uploaded.

WebMCP read-only toolsEnabledRuntime server endpointsNoneStatic agent JSONEnabled

Allowedsearch / list / get / summarize / prioritize

Disabledscan / patch / exploit / external execution / auto remediation

Last generated: 2026-08-05 11:35 UTC / 2026-08-05 20:35 JST. Observed dates are per-source signal timestamps.

Latest Changes Diff Feed

previous successful latestpublic snapshot comparison

40 public-safe changes since the previous successful snapshot.

Added20

Changed0

Removed20

What changed

CVE-2026-0667: newly added to the public-safe set.
CVE-2026-12927: newly added to the public-safe set.
CVE-2026-14270: newly added to the public-safe set.
37 more public-safe changes in the JSON feed.

Previous snapshot2026-08-05 06:12 UTC / 2026-08-05 15:12 JST

Items compared20 -> 20

Feed generated2026-08-05 11:35 UTC / 2026-08-05 20:35 JST

Open latest diff feed

Enrichment Coverage partial

Coverage is shown from the current public dataset. CPE, PURL, and canonical vendor/product are partial and may be unknown.

NVD20

Vendor Advisory20

OSV4

CISA KEV0

Affected products0partial

CPE0partial

PURL0partial

Canonical vendor/product0partial

Observed Buckets (current snapshot)

Current snapshot only. Historical trend appears after multiple generated runs.

2026-08-0520

Severity Distribution

CRITICAL 5
HIGH 8
MEDIUM 7
LOW 0
NONE 0
UNKNOWN 0

Source Distribution (current snapshot)

NVD20

Vendor Advisory20

OSV4

Monitored Vendors

View all vendors →

Vendor distribution from the current public snapshot. Neutral badges are not official vendor logos.

Local-first Personal Data Vault

A browser-only vault for human review context. It stores vendor / product / package / CPE prefix / saved signals / muted signals / preferences in localStorage, supports import/export/clear, validates shape on import, and never uploads data.

Import Vault JSON

No watched signals yet. Use the heart control on a signal row to add one.

Saved Views

Save and reapply local filter sets. Nothing is uploaded.

No saved views. Enter a name and save the current filters.

Read-only Triage Report Preview

Generated from the current filters. Defensive checklist only; no exploit or scanning detail.

Filtered signals20

Top priority candidateCVE-2026-65884

Critical / High5 / 8

Safety moderead-only, public indexable, public-safe

Raw JSON details

{
  "count": 20,
  "defensive_checklist": [
    "Confirm affected products",
    "Review official source references",
    "Prioritize KEV, critical CVSS, and high EPSS percentile items",
    "Record human confirmation"
  ],
  "mode": "read_only_public_beta_dashboard",
  "safety": {
    "procedural_detail": false,
    "public_launch": true,
    "scanner_execution": false
  },
  "severity_distribution": {
    "CRITICAL": 5,
    "HIGH": 8,
    "LOW": 0,
    "MEDIUM": 7,
    "NONE": 0,
    "UNKNOWN": 0
  },
  "top_risk": "CVE-2026-65884"
}

Source Status

NVD20 signalsLast observed: 2026-08-05Status: healthy

EPSS20 signalsLast observed: 2026-08-05Status: healthy

OSV4 signalsLast observed: 2026-08-05Status: healthy

CISA KEV0 signalsLast observed: 2026-08-05Status: not observed

Vendor Advisory20 signalsLast observed: 2026-08-05Status: observed

Safety Guardrails

Public indexingEnabled

Read-only surfaceEnabled

Deploy controlsCodex managed deploy only

External notificationDisabled

Auto remediationDisabled

Runtime server endpointsNone

WebMCP read-only toolsEnabled

Static agent JSONEnabled