public radar

Prioritized Vulnerability Signals for Defenders

Track CVE, KEV, EPSS, and vendor-advisory changes in one read-only radar—so teams can see what changed, why it matters, and what to verify next.

LIVE SIGNAL MAPDEFENSIVE PRIORITY CIRCUITLATEST STATIC SNAPSHOT

PRIORITY ORDER · NOT AN ATTACK PATH

indexable public surfaceread-only datasetpublic-safe sourcesexternal execution disabledauto remediation disabled

Tracked CVEs2020 new in 7d

Critical0canonical CVSS

Known Exploited0KEV observed

High EPSS percentile (≥70)1EPSS percentile observed

Monitored Vendors1from current data

VULNERABILITY TREEMAP

DEFENSIVE PRIORITY SURFACE

Stable CVE grouping for defensive triage. Area changes by display mode; severity remains encoded by color.

LATEST STATIC SNAPSHOT2026-10-05 00:00 UTC / 2026-10-05 09:00 JST

DISPLAY MODEDEFENSIVE PRIORITY

Live Vulnerability Feed READ-ONLY

20 signalsView all signals →

2026-10-04

defensive priority signal

HIGHEPSS 0.0186 (79)NEW-NVD: A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. NVD: The affected element is the function system of the file /boafr… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0033 (25)NEW-NVD: A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. NVD: Affected by this issue is some unknown functio… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0067 (50)NEW-NVD: A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. NVD: Impacted is the function arc_parse_canon… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0061 (47)NEW-NVD: A vulnerability was found in aligungr UERANSIM up to 3.3.0. NVD: This affects the function ULInformationTransfer of the file src/gnb/r… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0046 (37)NEW-NVD: A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. NVD: This affects an unknown part of the file /restapi/objects/ob… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0045 (37)NEW-NVD: A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. NVD: This vulnerability affects the function open_graph::fetch… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0037 (29)NEW-NVD: A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. NVD: Affected by this vulnerability is the function opendmarc_s… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0030 (21)NEW-NVD: A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. NVD: Affected is the function dkim_qp_decode of the file… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0029 (20)NEW-NVD: A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. NVD: This affects the function dkim_canon_selecthdrs o… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0029 (20)NEW-NVD: A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. NVD: Affected by this issue is the function opendmarc_… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0029 (19)NEW-NVD: A vulnerability was detected in Eyeplus 57.0.0.0308. NVD: The affected element is the function GetUsers of the file /onvif/Device of t… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0029 (19)NEW-NVD: A flaw has been found in Eyeplus 57.0.0.0308. NVD: The impacted element is an unknown function of the file /snapshot of the component… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0028 (18)NEW-NVD: A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. NVD: Affected by this vulnerability is the function stream of… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0019 (8)NEW-NVD: A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a6… Handoff

2026-10-04

defensive priority signal

MEDIUMEPSS 0.0016 (5)NEW-NVD: A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. NVD: The impacted elem… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0030 (21)NEW-NVD: A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This is… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0019 (8)NEW-NVD: A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e0660… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0019 (8)NEW-NVD: A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. NVD: This affects the function whe… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0019 (8)NEW-NVD: A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. NVD: This impacts the function whereRaw… Handoff

2026-10-04

defensive priority signal

LOWEPSS 0.0015 (4)NEW-NVD: A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. NVD: Affected is the function u… Handoff

Public-safe defensive signals

CVE-2026-100896 HIGH CVSS 8.6 -
NVD: A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. NVD: The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. NVD: This manipulation of the argument wlanif causes os command injection.
An attacker may be able to run unintended system commands through the affected component; CVSS 8.6 (HIGH); EPSS percentile 79; sources: NVD.
CVE-2026-100902 MEDIUM CVSS 5.7 -
NVD: A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02.26.00.0007. NVD: Affected by this issue is some unknown functionality of the file /wallpaper of the component Wallpaper Upload. NVD: This manipulation of the argument wallpaper causes improper validation of syntactic correctness of input.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.7 (MEDIUM); EPSS percentile 25; sources: NVD.
CVE-2026-100895 MEDIUM CVSS 5.5 -
NVD: A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. NVD: Impacted is the function arc_parse_canon_t in the library libopenarc/arc-canon.c of the component libopenarc. NVD: The manipulation results in null pointer dereference.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 50; sources: NVD, OSV.
CVE-2026-100892 MEDIUM CVSS 5.5 -
NVD: A vulnerability was found in aligungr UERANSIM up to 3.3.0. NVD: This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. NVD: Performing a manipulation of the argument dedicatedNASMessage results in memory corruption.
The affected component has memory-safety risk that may lead to crash, privilege, or code-execution impact depending on exposure; CVSS 5.5 (MEDIUM); EPSS percentile 47; sources: NVD.
CVE-2026-100903 MEDIUM CVSS 5.5 -
NVD: A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. NVD: This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. NVD: Such manipulation of the argument objectId leads to missing authentication.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 37; sources: NVD.
CVE-2026-100893 MEDIUM CVSS 5.5 -
NVD: A vulnerability was determined in Privoce VoceChat Server up to 0.5.36. NVD: This vulnerability affects the function open_graph::fetch of the file src/api/resource.rs of the component open_graphic_parse Endpoint. NVD: Executing a manipulation of the argument url can lead to server-side request forgery.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 37; sources: NVD.
CVE-2026-100890 MEDIUM CVSS 5.5 -
NVD: A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. NVD: Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library libopendmarc/opendmarc_spf.c of the component SPF Parser. NVD: This manipulation of the argument cp causes null pointer dereference.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 29; sources: NVD.
CVE-2026-100889 MEDIUM CVSS 5.5 -
NVD: A vulnerability was detected in Trusted Domain Project OpenDKIM up to 2.11.0. NVD: Affected is the function dkim_qp_decode of the file util.c of the component Decoder. NVD: The manipulation results in off-by-one.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 21; sources: NVD.
CVE-2026-100888 MEDIUM CVSS 5.5 -
NVD: A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. NVD: This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. NVD: Executing a manipulation of the argument h can lead to out-of-bounds write.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 20; sources: NVD.
CVE-2026-100891 MEDIUM CVSS 5.5 -
NVD: A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. NVD: Affected by this issue is the function opendmarc_policy_query_dmarc in the library libopendmarc/opendmarc_policy.c of the component Internationalized Domain Name Handler. NVD: Such manipulation leads to encoding error.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 20; sources: NVD.
CVE-2026-100906 MEDIUM CVSS 5.5 -
NVD: A vulnerability was detected in Eyeplus 57.0.0.0308. NVD: The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. NVD: The manipulation results in information disclosure.
An attacker may be able to access information that should not be exposed; CVSS 5.5 (MEDIUM); EPSS percentile 19; sources: NVD.
CVE-2026-100907 MEDIUM CVSS 5.5 -
NVD: A flaw has been found in Eyeplus 57.0.0.0308. NVD: The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. NVD: This manipulation causes information disclosure.
An attacker may be able to access information that should not be exposed; CVSS 5.5 (MEDIUM); EPSS percentile 19; sources: NVD.
CVE-2026-100901 MEDIUM CVSS 5.5 -
NVD: A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1. NVD: Affected by this vulnerability is the function stream of the file public/stream.php. NVD: The manipulation of the argument url results in server-side request forgery.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.5 (MEDIUM); EPSS percentile 18; sources: NVD.
CVE-2026-100904 MEDIUM CVSS 5.1 -
NVD: A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. NVD: Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. NVD: The manipulation of the argument itemName leads to cross site scripting.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 5.1 (MEDIUM); EPSS percentile 8; sources: NVD.
CVE-2026-100897 MEDIUM CVSS 5.1 -
NVD: A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. NVD: The impacted element is an unknown function of the file /StudentInfo/StudentHandler/moditypasswordstu of the component Password Change Endpoint. NVD: Such manipulation of the argument sid/tid leads to authorization bypass.
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 5.1 (MEDIUM); EPSS percentile 5; sources: NVD.
CVE-2026-100894 LOW CVSS 2.1 -
NVD: A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. NVD: This issue affects some unknown processing of the file updateguest.php. NVD: The manipulation of the argument gname leads to sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.1 (LOW); EPSS percentile 21; sources: NVD.
CVE-2026-100887 LOW CVSS 2.1 -
NVD: A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. NVD: The impacted element is the function order_by of the file DB_query_builder.php of the component Database Query Builder. NVD: Performing a manipulation of the argument orderBy results in sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.1 (LOW); EPSS percentile 8; sources: NVD.
CVE-2026-100898 LOW CVSS 2.1 -
NVD: A vulnerability was detected in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/2.0.0-beta1. NVD: This affects the function whereRaw of the file app/Filament/Widgets/Timesheet/ActivitiesReport.php of the component Timesheet Dashboard. NVD: Performing a manipulation of the argument filter results in sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.1 (LOW); EPSS percentile 8; sources: NVD.
CVE-2026-100899 LOW CVSS 2.1 -
NVD: A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. NVD: This impacts the function whereRaw of the file app/Filament/Widgets/Timesheet/MonthlyReport.php of the component Timesheet Dashboard. NVD: Executing a manipulation of the argument filter can lead to sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.1 (LOW); EPSS percentile 8; sources: NVD.
CVE-2026-100900 LOW CVSS 2.0 -
NVD: A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. NVD: Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. NVD: The manipulation of the argument host/username/token leads to server-side request forgery.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.0 (LOW); EPSS percentile 4; sources: NVD.

Critical High Medium Low KEVKnown Exploited NEWNewly ObservedJ / K Move · ↑ / ↓ Move · Enter Open · Esc Close

Agent Access Agent Data Surface

Read-only static JSON for humans and AI agents. This is a data contract, not an execution surface.

Human Archive Priority Queue JSON Latest Diff Feed Knowledge Graph Trust Layer Proof Metadata Canonical Policy Canonical Envelope Envelope Index EAS Typed Payload Attestation Ledger Signal Item JSON Remediation Handoff Agent Manifest Static Manifest Schema

Knowledge Graph / JSON-LDlinks CVE signals, sources, affected products, and provenanceLocal-first Vaultbrowser-only personal review context; import/export/clear supportedRirastaFab Trust Layerhash-only integrity metadata, canonical envelopes, and proof endpointsCanonical Envelopeattestation-ready preflight metadata without onchain submission

Agents should start with /agent.json, validate the signal item schema, use the JSON-LD graph for provenance, and treat the Local Vault as private browser state that is never uploaded.

WebMCP read-only toolsEnabledRuntime server endpointsNoneStatic agent JSONEnabled

Allowedsearch / list / get / summarize / prioritize

Disabledscan / patch / exploit / external execution / auto remediation

Last generated: 2026-10-05 00:00 UTC / 2026-10-05 09:00 JST. Observed dates are per-source signal timestamps.

Latest Changes Diff Feed

previous successful latestpublic snapshot comparison

40 public-safe changes since the previous successful snapshot.

Added20

Changed0

Removed20

What changed

CVE-2026-100887: newly added to the public-safe set.
CVE-2026-100888: newly added to the public-safe set.
CVE-2026-100889: newly added to the public-safe set.
37 more public-safe changes in the JSON feed.

Previous snapshot2026-10-04 18:41 UTC / 2026-10-05 03:41 JST

Items compared20 -> 20

Feed generated2026-10-05 00:00 UTC / 2026-10-05 09:00 JST

Open latest diff feed

Enrichment Coverage partial

Coverage is shown from the current public dataset. CPE, PURL, and canonical vendor/product are partial and may be unknown.

NVD20

Vendor Advisory20

OSV1

Affected products0partial

CPE0partial

PURL0partial

Canonical vendor/product0partial

Observed Buckets (current snapshot)

Current snapshot only. Historical trend appears after multiple generated runs.

2026-10-0420

Severity Distribution

CRITICAL 0
HIGH 1
MEDIUM 14
LOW 5
NONE 0
UNKNOWN 0

Source Distribution (current snapshot)

NVD20

Vendor Advisory20

OSV1

Monitored Vendors

View all vendors →

Vendor distribution from the current public snapshot. Neutral badges are not official vendor logos.

Local-first Personal Data Vault

A browser-only vault for human review context. It stores vendor / product / package / CPE prefix / saved signals / muted signals / preferences in localStorage, supports import/export/clear, validates shape on import, and never uploads data.

Import Vault JSON

No watched signals yet. Use the heart control on a signal row to add one.

Saved Views

Save and reapply local filter sets. Nothing is uploaded.

No saved views. Enter a name and save the current filters.

Read-only Triage Report Preview

Generated from the current filters. Defensive checklist only; no exploit or scanning detail.

Filtered signals20

Top priority candidateCVE-2026-100896

Critical / High0 / 1

Safety moderead-only, public indexable, public-safe

Raw JSON details

{
  "count": 20,
  "defensive_checklist": [
    "Confirm affected products",
    "Review official source references",
    "Prioritize KEV, critical CVSS, and high EPSS percentile items",
    "Record human confirmation"
  ],
  "mode": "read_only_public_beta_dashboard",
  "safety": {
    "procedural_detail": false,
    "public_launch": true,
    "scanner_execution": false
  },
  "severity_distribution": {
    "CRITICAL": 0,
    "HIGH": 1,
    "LOW": 5,
    "MEDIUM": 14,
    "NONE": 0,
    "UNKNOWN": 0
  },
  "top_risk": "CVE-2026-100896"
}

Source Status

NVD20 signalsLast observed: 2026-10-04Status: healthy

EPSS20 signalsLast observed: 2026-10-04Status: healthy

OSV1 signalsLast observed: 2026-10-04Status: healthy

Vendor Advisory20 signalsLast observed: 2026-10-04Status: observed

Safety Guardrails

Public indexingEnabled

Read-only surfaceEnabled

Deploy controlsCodex managed deploy only

External notificationDisabled

Auto remediationDisabled

Runtime server endpointsNone

WebMCP read-only toolsEnabled

Static agent JSONEnabled