public radar

Prioritized Vulnerability Signals for Defenders

Track CVE, KEV, EPSS, and vendor-advisory changes in one read-only radar—so teams can see what changed, why it matters, and what to verify next.

LIVE SIGNAL MAPDEFENSIVE PRIORITY CIRCUITLATEST STATIC SNAPSHOT

PRIORITY ORDER · NOT AN ATTACK PATH

indexable public surfaceread-only datasetpublic-safe sourcesexternal execution disabledauto remediation disabled

Tracked CVEs2020 new in 7d

Critical3canonical CVSS

Known Exploited0KEV observed

High EPSS percentile (≥70)0EPSS percentile observed

Monitored Vendors1from current data

VULNERABILITY TREEMAP

DEFENSIVE PRIORITY SURFACE

Stable CVE grouping for defensive triage. Area changes by display mode; severity remains encoded by color.

LATEST STATIC SNAPSHOT2026-10-04 18:41 UTC / 2026-10-05 03:41 JST

DISPLAY MODEDEFENSIVE PRIORITY

Live Vulnerability Feed READ-ONLY

20 signalsView all signals →

2026-10-04

defensive priority signal

CRITICALEPSS 0.0044 (36)NEW-NVD: Obot is an open-source AI agent/MCP platform. NVD: In all versions up to and including commit d7e6970, the Docker quickstart command d… Handoff

2026-10-04

defensive priority signal

CRITICALEPSS 0.0036 (27)NEW-NVD: Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. NVD: When the new optional dashboard_host set… Handoff

2026-10-04

defensive priority signal

CRITICALEPSS 0.0028 (18)NEW-NVD: obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to con… Handoff

2026-10-04

defensive priority signal

HIGHEPSS 0.0034 (25)NEW-NVD: Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client re… Handoff

2026-10-04

defensive priority signal

HIGHEPSS 0.0024 (14)NEW-NVD: Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged user… Handoff

2026-10-04

defensive priority signal

HIGHEPSS 0.0032 (23)NEW-NVD: Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated use… Handoff

2026-10-04

defensive priority signal

HIGHEPSS 0.0025 (15)NEW-NVD: Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create mal… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0024 (14)NEW-NVD: Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is en… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0063 (48)NEW-NVD: A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak app… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0018 (7)NEW-NVD: Nezha is a server and website monitoring tool. NVD: In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/singleton/… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0025 (15)NEW-NVD: A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This im… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0025 (15)NEW-NVD: A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This affects an… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0026 (16)NEW-NVD: Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0015 (4)NEW-NVD: Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0028 (18)NEW-NVD: A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: Affected is… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0026 (17)NEW-NVD: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: Affecte… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0021 (10)NEW-NVD: A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: The impac… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0021 (10)NEW-NVD: A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. NVD: Affected by this issue is the function SysUser.isAdmin of… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0020 (9)NEW-NVD: A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. NVD: This affects the function checkRoleAllowed of the fil… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0019 (8)NEW-NVD: A weakness has been identified in zhistaredu StarTraining up to 3.8.1. NVD: This vulnerability affects unknown code of the file du-com… Handoff

Public-safe defensive signals

CVE-2026-101065 CRITICAL CVSS 9.3 -
NVD: Obot is an open-source AI agent/MCP platform. NVD: In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. NVD: When authentication is disabled, every request is mapped to a synthetic "nobody" user that holds the Owner and Admin roles, so any unauthenticated party who can reach the exposed port obtains full administrative access to the Obot API and UI, including the...
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for critical severity review; CVSS 9.3 (CRITICAL); EPSS percentile 36; sources: NVD.
CVE-2026-101090 CRITICAL CVSS 9.3 -
NVD: Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. NVD: When the new optional dashboard_host setting is empty, /api/v1/oauth2/{provider} (cmd/dashboard/controller/oauth2.go) reflects the attacker-supplied HTTP Host header into the redirect_uri sent to the identity provider instead of falling back to the configured... NVD: An attacker who induces a victim to begin OAuth2 login via a request that reaches Nezha with a forged Host header can cause an attacker-controlled callback URL to be used as the redirect_uri; if the OAuth2 provider accepts it, the victim's authorization code...
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for critical severity review; CVSS 9.3 (CRITICAL); EPSS percentile 27; sources: NVD, OSV.
CVE-2026-101084 CRITICAL CVSS 9.3 -
NVD: obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. NVD: Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials. OSV: obot before v0.21.1 Authorization Bypass via /mcp-connect
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authenticated boundary; CVSS 9.3 (CRITICAL); EPSS percentile 18; sources: NVD, OSV.
CVE-2026-101062 HIGH CVSS 8.7 -
NVD: Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. NVD: Because the authorization flow auto-completes for an already logged-in user with no consent screen, an attacker who registers a client pointing at their own domain and induces a logged-in victim to visit a single crafted authorization URL receives an... NVD: The token minted by the MCP OAuth flow carries the victim's full group set in the JWT, and Obot validated only the issuer and not the audience, so the token is accepted as a bearer token against any Obot API endpoint the victim can access rather than being...
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authentication boundary review; CVSS 8.7 (HIGH); EPSS percentile 25; sources: NVD, OSV.
CVE-2026-101064 HIGH CVSS 8.3 -
NVD: Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. NVD: Attackers with Power User or higher roles can coerce Obot to make requests to internal services and cloud metadata endpoints, reading responses in error messages to disclose sensitive credentials. OSV: Obot before v0.23.0 Server-Side Request Forgery via MCP
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for high severity review; CVSS 8.3 (HIGH); EPSS percentile 14; sources: NVD, OSV.
CVE-2026-101086 HIGH CVSS 7.1 -
NVD: Nezha Dashboard versions before 2.3.5 fail to restrict service monitor task types to supported probe types, allowing authenticated users with nezha:service:write scope to submit privileged task types through the service API. NVD: Attackers can deliver command execution or Agent configuration tasks to Agents within their authorization scope by exploiting the shared protobuf Task.Type namespace between service monitors and privileged operations. OSV: Nezha Dashboard before 2.3.5 Task Type Validation Bypass
An attacker may be able to run code or commands on affected systems; CVSS 7.1 (HIGH); EPSS percentile 23; sources: NVD, OSV.
CVE-2026-101085 HIGH CVSS 7.1 -
NVD: Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. NVD: Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint to crash the dashboard process, which persists the rule and causes repeated crashes on restart, disabling all monitoring and control plane functionality. OSV: Nezha before 2.3.8 Denial of Service via Alert Rule
The affected service may become unavailable or unreliable; CVSS 7.1 (HIGH); EPSS percentile 15; sources: NVD, OSV.
CVE-2026-101063 MEDIUM CVSS 6.9 -
NVD: Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/* when registry authentication is enabled. NVD: Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to /v0.1/servers. OSV: Obot before v0.23.0 Authentication Bypass via Registry API
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authentication boundary review · remote exposure · authenticated boundary; CVSS 6.9 (MEDIUM); EPSS percentile 14; sources: NVD, OSV.
CVE-2026-96279 MEDIUM CVSS 6.5 -
NVD: A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. NVD: For system-wide installs running as root, this includes sensitive files such as /etc/shadow.
An attacker may gain root or administrative-level privileges on affected systems; CVSS 6.5 (MEDIUM); EPSS percentile 48; sources: NVD.
CVE-2026-101088 MEDIUM CVSS 6.0 -
NVD: Nezha is a server and website monitoring tool. NVD: In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/singleton/servicesentinel.go) contains an incomplete fix for a previously reported nil dereference denial of service (GHSA-qjpp-gffx-2wm9). NVD: The 2026-07-21 fix re-validated the service lifecycle under serviceResponseDataStoreLock but reused an already-captured, now stale reporter pointer and never re-validated the server, and that lock does not guard ServerShared.
The affected service may become unavailable or unreliable; CVSS 6.0 (MEDIUM); EPSS percentile 7; sources: NVD, OSV.
CVE-2026-100875 MEDIUM CVSS 5.5 -
NVD: A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This impacts an unknown function of the file updatedetailsfromfaculty.php. NVD: Such manipulation of the argument myfid leads to sql injection.
An attacker may be able to read or change database-backed application data; CVSS 5.5 (MEDIUM); EPSS percentile 15; sources: NVD.
CVE-2026-100874 MEDIUM CVSS 5.5 -
NVD: A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This affects an unknown function of the file addnewstudent.php. NVD: This manipulation causes sql injection.
An attacker may be able to read or change database-backed application data; CVSS 5.5 (MEDIUM); EPSS percentile 15; sources: NVD.
CVE-2026-101087 MEDIUM CVSS 5.3 -
NVD: Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cover IPv6 transition ranges — specifically the 6to4 prefix 2002::/16 and the local-use IPv4/IPv6... NVD: Because such addresses satisfy Go's netip.Addr.IsGlobalUnicast check, the URL validator accepted them. NVD: An authenticated user able to configure a webhook may be able to cause the dashboard to issue requests to an otherwise restricted IPv6 endpoint, but only where the dashboard's network provides unusual or non-standards-compliant routing for these transition...
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for authenticated boundary; CVSS 5.3 (MEDIUM); EPSS percentile 16; sources: NVD, OSV.
CVE-2026-101089 LOW CVSS 2.3 -
NVD: Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. NVD: Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints. OSV: Nezha before 2.2.7 Information Disclosure via /api/v1/profile
An attacker may be able to access information that should not be exposed; CVSS 2.3 (LOW); EPSS percentile 4; sources: NVD, OSV.
CVE-2026-100876 LOW CVSS 2.1 -
NVD: A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: Affected is an unknown function of the file loginlinkstudent.php. NVD: Performing a manipulation of the argument umail results in missing authentication.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.1 (LOW); EPSS percentile 18; sources: NVD.
CVE-2026-100877 LOW CVSS 2.1 -
NVD: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: Affected by this vulnerability is an unknown functionality of the file registrationform.php. NVD: Executing a manipulation of the argument FName/LName/Addrs can lead to cross site scripting.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 2.1 (LOW); EPSS percentile 17; sources: NVD.
CVE-2026-100873 LOW CVSS 2.1 -
NVD: A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: The impacted element is an unknown function. NVD: The manipulation results in cross-site request forgery.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.1 (LOW); EPSS percentile 10; sources: NVD.
CVE-2026-100878 LOW CVSS 2.1 -
NVD: A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. NVD: Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. NVD: The manipulation of the argument userId/roleIds leads to authorization bypass.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.1 (LOW); EPSS percentile 10; sources: NVD.
CVE-2026-100879 LOW CVSS 2.1 -
NVD: A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. NVD: This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. NVD: The manipulation results in missing authorization.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.1 (LOW); EPSS percentile 9; sources: NVD.
CVE-2026-100880 LOW CVSS 2.0 -
NVD: A weakness has been identified in zhistaredu StarTraining up to 3.8.1. NVD: This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. NVD: This manipulation of the argument File causes cross site scripting.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 2.0 (LOW); EPSS percentile 8; sources: NVD.

Critical High Medium Low KEVKnown Exploited NEWNewly ObservedJ / K Move · ↑ / ↓ Move · Enter Open · Esc Close

Agent Access Agent Data Surface

Read-only static JSON for humans and AI agents. This is a data contract, not an execution surface.

Human Archive Priority Queue JSON Latest Diff Feed Knowledge Graph Trust Layer Proof Metadata Canonical Policy Canonical Envelope Envelope Index EAS Typed Payload Attestation Ledger Signal Item JSON Remediation Handoff Agent Manifest Static Manifest Schema

Knowledge Graph / JSON-LDlinks CVE signals, sources, affected products, and provenanceLocal-first Vaultbrowser-only personal review context; import/export/clear supportedRirastaFab Trust Layerhash-only integrity metadata, canonical envelopes, and proof endpointsCanonical Envelopeattestation-ready preflight metadata without onchain submission

Agents should start with /agent.json, validate the signal item schema, use the JSON-LD graph for provenance, and treat the Local Vault as private browser state that is never uploaded.

WebMCP read-only toolsEnabledRuntime server endpointsNoneStatic agent JSONEnabled

Allowedsearch / list / get / summarize / prioritize

Disabledscan / patch / exploit / external execution / auto remediation

Last generated: 2026-10-04 18:41 UTC / 2026-10-05 03:41 JST. Observed dates are per-source signal timestamps.

Latest Changes Diff Feed

previous successful latestpublic snapshot comparison

40 public-safe changes since the previous successful snapshot.

Added20

Changed0

Removed20

What changed

CVE-2026-100873: newly added to the public-safe set.
CVE-2026-100874: newly added to the public-safe set.
CVE-2026-100875: newly added to the public-safe set.
37 more public-safe changes in the JSON feed.

Previous snapshot2026-10-04 14:53 UTC / 2026-10-04 23:53 JST

Items compared20 -> 20

Feed generated2026-10-04 18:41 UTC / 2026-10-05 03:41 JST

Open latest diff feed

Enrichment Coverage partial

Coverage is shown from the current public dataset. CPE, PURL, and canonical vendor/product are partial and may be unknown.

NVD20

Vendor Advisory20

OSV10

Affected products0partial

CPE0partial

PURL0partial

Canonical vendor/product0partial

Observed Buckets (current snapshot)

Current snapshot only. Historical trend appears after multiple generated runs.

2026-10-0420

Severity Distribution

CRITICAL 3
HIGH 4
MEDIUM 6
LOW 7
NONE 0
UNKNOWN 0

Source Distribution (current snapshot)

NVD20

Vendor Advisory20

OSV10

Monitored Vendors

View all vendors →

Vendor distribution from the current public snapshot. Neutral badges are not official vendor logos.

Local-first Personal Data Vault

A browser-only vault for human review context. It stores vendor / product / package / CPE prefix / saved signals / muted signals / preferences in localStorage, supports import/export/clear, validates shape on import, and never uploads data.

Import Vault JSON

No watched signals yet. Use the heart control on a signal row to add one.

Saved Views

Save and reapply local filter sets. Nothing is uploaded.

No saved views. Enter a name and save the current filters.

Read-only Triage Report Preview

Generated from the current filters. Defensive checklist only; no exploit or scanning detail.

Filtered signals20

Top priority candidateCVE-2026-101065

Critical / High3 / 4

Safety moderead-only, public indexable, public-safe

Raw JSON details

{
  "count": 20,
  "defensive_checklist": [
    "Confirm affected products",
    "Review official source references",
    "Prioritize KEV, critical CVSS, and high EPSS percentile items",
    "Record human confirmation"
  ],
  "mode": "read_only_public_beta_dashboard",
  "safety": {
    "procedural_detail": false,
    "public_launch": true,
    "scanner_execution": false
  },
  "severity_distribution": {
    "CRITICAL": 3,
    "HIGH": 4,
    "LOW": 7,
    "MEDIUM": 6,
    "NONE": 0,
    "UNKNOWN": 0
  },
  "top_risk": "CVE-2026-101065"
}

Source Status

NVD20 signalsLast observed: 2026-10-04Status: healthy

EPSS20 signalsLast observed: 2026-10-04Status: healthy

OSV10 signalsLast observed: 2026-10-04Status: healthy

Vendor Advisory20 signalsLast observed: 2026-10-04Status: observed

Safety Guardrails

Public indexingEnabled

Read-only surfaceEnabled

Deploy controlsCodex managed deploy only

External notificationDisabled

Auto remediationDisabled

Runtime server endpointsNone

WebMCP read-only toolsEnabled

Static agent JSONEnabled