public radar

Prioritized Vulnerability Signals for Defenders

Track CVE, KEV, EPSS, and vendor-advisory changes in one read-only radar—so teams can see what changed, why it matters, and what to verify next.

LIVE SIGNAL MAPDEFENSIVE PRIORITY CIRCUITLATEST STATIC SNAPSHOT

PRIORITY ORDER · NOT AN ATTACK PATH

indexable public surfaceread-only datasetpublic-safe sourcesexternal execution disabledauto remediation disabled

Tracked CVEs2020 new in 7d

Critical3canonical CVSS

Known Exploited0KEV observed

High EPSS percentile (≥70)0EPSS percentile observed

Monitored Vendors2from current data

VULNERABILITY TREEMAP

DEFENSIVE PRIORITY SURFACE

Stable CVE grouping for defensive triage. Area changes by display mode; severity remains encoded by color.

LATEST STATIC SNAPSHOT2026-10-12 00:38 UTC / 2026-10-12 09:38 JST

DISPLAY MODEDEFENSIVE PRIORITY

Live Vulnerability Feed READ-ONLY

20 signalsView all signals →

2026-10-12

defensive priority signal

CRITICALEPSS 0.0037 (29)NEW-NVD: Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to es… Handoff

2026-10-12

defensive priority signal

CRITICALEPSS 0.0020 (9)NEW-NVD: maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() whe… Handoff

2026-10-12

defensive priority signal

CRITICALEPSS 0.0019 (8)NEW-NVD: Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any confi… Handoff

2026-10-12

defensive priority signal

HIGHEPSS 0.0013 (3)NEWmediatek / mt6881_firmwareNVD: In neuropilot, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to local escalation of priv… Handoff

2026-10-12

defensive priority signal

HIGHEPSS 0.0013 (3)NEWmediatek / mt6899_firmwareNVD: In apu, there is a possible memory corruption due to improper input validation. NVD: This could lead to local escalation of privilege… Handoff

2026-10-12

defensive priority signal

HIGHEPSS 0.0013 (3)NEWmediatek / mt8910_firmwareNVD: In Video HAL, there is a possible escalation of privilege due to a missing bounds check. NVD: This could lead to local escalation of p… Handoff

2026-10-12

defensive priority signal

2026-10-12

defensive priority signal

HIGHEPSS 0.0013 (2)NEW-NVD: GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature ver… Handoff

2026-10-12

defensive priority signal

HIGHEPSS 0.0023 (13)NEWmediatek / mt6833_firmwareNVD: In Modem, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to remote escalation of privileg… Handoff

2026-10-12

defensive priority signal

HIGHEPSS 0.0023 (13)NEWmediatek / mt2716_firmwareNVD: In Modem, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to remote escalation of privileg… Handoff

2026-10-12

defensive priority signal

MEDIUMEPSS 0.0016 (4)NEW-NVD: Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by… Handoff

2026-10-12

defensive priority signal

MEDIUMEPSS 0.0026 (17)NEW-NVD: A vulnerability was detected in itsourcecode Online Admission System 1.0. NVD: Affected by this issue is some unknown functionality of… Handoff

2026-10-12

defensive priority signal

MEDIUMEPSS 0.0025 (16)NEW-NVD: A vulnerability was found in SourceCodester Drug Recommendation System 1.0. NVD: This issue affects some unknown processing of the fil… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0033 (24)NEW-NVD: A vulnerability has been found in Gerapy up to 0.9.13. NVD: This vulnerability affects the function project_create of the file gerapy/… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0030 (21)NEW-NVD: A vulnerability was determined in Jeebase 0.0.1. NVD: This vulnerability affects the function updateUser of the file /user/update/info… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0032 (23)NEW-NVD: A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. NVD: The impacted element is the function mysqli… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0032 (23)NEW-NVD: A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. NVD: Impacted is an unknown function of the file /Adm… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0032 (23)NEW-NVD: A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. NVD: The affected element is an unknown function of t… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0020 (9)NEW-NVD: A flaw has been found in code-projects Human Resource Management 1.0. NVD: This affects an unknown part of the file /humanresourcemana… Handoff

2026-10-12

defensive priority signal

LOWEPSS 0.0015 (4)NEW-NVD: A weakness has been identified in SourceCodester Drug Recommendation System 1.0. NVD: This affects an unknown function of the file Adm… Handoff

Public-safe defensive signals

CVE-2026-105293 CRITICAL CVSS 9.2 -
NVD: Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. NVD: Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall, and themes.install to launch local executables, recursively delete directories, and write files outside the themes directory. OSV: Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers
An attacker may be able to reach files outside the intended application path; CVSS 9.2 (CRITICAL); EPSS percentile 29; sources: NVD, OSV.
CVE-2026-105223 CRITICAL CVSS 9.1 -
NVD: maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. NVD: On-path attackers can impersonate the Kubernetes API server to capture Bearer tokens or Basic credentials and tamper with WebSocket or REST API traffic. OSV: maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for critical severity review; CVSS 9.1 (CRITICAL); EPSS percentile 9; sources: NVD, OSV.
CVE-2026-105294 CRITICAL CVSS 9.1 -
NVD: Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. NVD: Attackers exploiting a Discord XSS can set additionalArguments to persistently add --proxy-server and --ignore-certificate-errors switches, routing all client traffic through an interception proxy. OSV: Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig
This critical severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 9.1 (CRITICAL); EPSS percentile 8; sources: NVD, OSV.
CVE-2026-20523 HIGH CVSS 8.4 mediatek / mt6881_firmware
NVD: In neuropilot, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to local escalation of privilege with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for user interaction required; CVSS 8.4 (HIGH); EPSS percentile 3; affected product context: mediatek / mt6881_firmware; sources: NVD, Vendor Advisory.
CVE-2026-20524 HIGH CVSS 8.4 mediatek / mt6899_firmware
NVD: In apu, there is a possible memory corruption due to improper input validation. NVD: This could lead to local escalation of privilege with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
The affected component has memory-safety risk that may lead to crash, privilege, or code-execution impact depending on exposure; CVSS 8.4 (HIGH); EPSS percentile 3; affected product context: mediatek / mt6899_firmware; sources: NVD, Vendor Advisory.
CVE-2026-20521 HIGH CVSS 8.4 mediatek / mt8910_firmware
NVD: In Video HAL, there is a possible escalation of privilege due to a missing bounds check. NVD: This could lead to local escalation of privilege with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for user interaction required; CVSS 8.4 (HIGH); EPSS percentile 3; affected product context: mediatek / mt8910_firmware; sources: NVD, Vendor Advisory.
CVE-2026-20522 HIGH CVSS 8.4 mediatek / mt6881_firmware
NVD: In neuropilot, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to local escalation of privilege with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for user interaction required; CVSS 8.4 (HIGH); EPSS percentile 3; affected product context: mediatek / mt6881_firmware; sources: NVD, Vendor Advisory.
CVE-2026-105295 HIGH CVSS 7.7 -
NVD: GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. NVD: Network attackers presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation. OSV: GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for remote exposure; CVSS 7.7 (HIGH); EPSS percentile 2; sources: NVD, OSV.
CVE-2026-20519 HIGH CVSS 7.5 mediatek / mt6833_firmware
NVD: In Modem, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for user interaction required; CVSS 7.5 (HIGH); EPSS percentile 13; affected product context: mediatek / mt6833_firmware; sources: NVD, Vendor Advisory.
CVE-2026-20520 HIGH CVSS 7.5 mediatek / mt2716_firmware
NVD: In Modem, there is a possible out of bounds write due to a missing bounds check. NVD: This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. NVD: User interaction is not needed for exploitation.
This high severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for user interaction required; CVSS 7.5 (HIGH); EPSS percentile 13; affected product context: mediatek / mt2716_firmware; sources: NVD, Vendor Advisory.
CVE-2026-105292 MEDIUM CVSS 6.0 -
NVD: Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. NVD: Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing the victim into the attacker's account so default data sync uploads saved hosts, passwords, and private keys. OSV: Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback
This medium severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for remote exposure; CVSS 6.0 (MEDIUM); EPSS percentile 4; sources: NVD, OSV.
CVE-2026-105172 MEDIUM CVSS 5.5 -
NVD: A vulnerability was detected in itsourcecode Online Admission System 1.0. NVD: Affected by this issue is some unknown functionality of the file /login1.php. NVD: Performing a manipulation of the argument User results in sql injection.
An attacker may be able to read or change database-backed application data; CVSS 5.5 (MEDIUM); EPSS percentile 17; sources: NVD.
CVE-2026-105175 MEDIUM CVSS 5.5 -
NVD: A vulnerability was found in SourceCodester Drug Recommendation System 1.0. NVD: This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. NVD: The manipulation of the argument cmdschool results in sql injection.
An attacker may be able to read or change database-backed application data; CVSS 5.5 (MEDIUM); EPSS percentile 16; sources: NVD.
CVE-2026-105174 LOW CVSS 2.1 -
NVD: A vulnerability has been found in Gerapy up to 0.9.13. NVD: This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. NVD: The manipulation of the argument project_name leads to path traversal.
An attacker may be able to reach files outside the intended application path; CVSS 2.1 (LOW); EPSS percentile 24; sources: NVD, OSV.
CVE-2026-105180 LOW CVSS 2.1 -
NVD: A vulnerability was determined in Jeebase 0.0.1. NVD: This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. NVD: Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.1 (LOW); EPSS percentile 21; sources: NVD.
CVE-2026-105178 LOW CVSS 2.0 -
NVD: A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. NVD: The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. NVD: Performing a manipulation of the argument txtname results in sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.0 (LOW); EPSS percentile 23; sources: NVD.
CVE-2026-105176 LOW CVSS 2.0 -
NVD: A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. NVD: Impacted is an unknown function of the file /Admin/edit_class.php. NVD: This manipulation of the argument ID causes sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.0 (LOW); EPSS percentile 23; sources: NVD.
CVE-2026-105177 LOW CVSS 2.0 -
NVD: A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. NVD: The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. NVD: Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffect/cmdcontraindication leads to sql injection.
An attacker may be able to read or change database-backed application data; CVSS 2.0 (LOW); EPSS percentile 23; sources: NVD.
CVE-2026-105173 LOW CVSS 2.0 -
NVD: A flaw has been found in code-projects Human Resource Management 1.0. NVD: This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. NVD: Executing a manipulation of the argument eventSubject can lead to cross site scripting.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for XSS risk; CVSS 2.0 (LOW); EPSS percentile 9; sources: NVD.
CVE-2026-105179 LOW CVSS 2.0 -
NVD: A weakness has been identified in SourceCodester Drug Recommendation System 1.0. NVD: This affects an unknown function of the file Admin/add_user.php of the component Password Handler. NVD: Executing a manipulation of the argument Password can lead to missing encryption of sensitive data.
This low severity issue needs human triage to confirm exposure, affected versions, and vendor guidance for defensive exposure review; CVSS 2.0 (LOW); EPSS percentile 4; sources: NVD.

Critical High Medium Low KEVKnown Exploited NEWNewly ObservedJ / K Move · ↑ / ↓ Move · Enter Open · Esc Close

Agent Access Agent Data Surface

Read-only static JSON for humans and AI agents. This is a data contract, not an execution surface.

Human Archive Priority Queue JSON Latest Diff Feed Knowledge Graph Trust Layer Proof Metadata Canonical Policy Canonical Envelope Envelope Index EAS Typed Payload Attestation Ledger Signal Item JSON Remediation Handoff Agent Manifest Static Manifest Schema

Knowledge Graph / JSON-LDlinks CVE signals, sources, affected products, and provenanceLocal-first Vaultbrowser-only personal review context; import/export/clear supportedRirastaFab Trust Layerhash-only integrity metadata, canonical envelopes, and proof endpointsCanonical Envelopeattestation-ready preflight metadata without onchain submission

Agents should start with /agent.json, validate the signal item schema, use the JSON-LD graph for provenance, and treat the Local Vault as private browser state that is never uploaded.

WebMCP read-only toolsEnabledRuntime server endpointsNoneStatic agent JSONEnabled

Allowedsearch / list / get / summarize / prioritize

Disabledscan / patch / exploit / external execution / auto remediation

Last generated: 2026-10-12 00:38 UTC / 2026-10-12 09:38 JST. Observed dates are per-source signal timestamps.

Latest Changes Diff Feed

previous successful latestpublic snapshot comparison

24 public-safe changes since the previous successful snapshot.

Added12

Changed0

Removed12

What changed

CVE-2026-105176: newly added to the public-safe set.
CVE-2026-105177: newly added to the public-safe set.
CVE-2026-105178: newly added to the public-safe set.
21 more public-safe changes in the JSON feed.

Previous snapshot2026-10-11 19:36 UTC / 2026-10-12 04:36 JST

Items compared20 -> 20

Feed generated2026-10-12 00:38 UTC / 2026-10-12 09:38 JST

Open latest diff feed

Enrichment Coverage partial

Coverage is shown from the current public dataset. CPE, PURL, and canonical vendor/product are partial and may be unknown.

NVD20

Vendor Advisory20

OSV6

Affected products106partial

CPE106partial

PURL0partial

Canonical vendor/product106partial

Observed Buckets (current snapshot)

Current snapshot only. Historical trend appears after multiple generated runs.

2026-10-1220

Severity Distribution

CRITICAL 3
HIGH 7
MEDIUM 3
LOW 7
NONE 0
UNKNOWN 0

Source Distribution (current snapshot)

NVD20

Vendor Advisory20

OSV6

Monitored Vendors

View all vendors →

Vendor distribution from the current public snapshot. Neutral badges are not official vendor logos.

Local-first Personal Data Vault

A browser-only vault for human review context. It stores vendor / product / package / CPE prefix / saved signals / muted signals / preferences in localStorage, supports import/export/clear, validates shape on import, and never uploads data.

Import Vault JSON

No watched signals yet. Use the heart control on a signal row to add one.

Saved Views

Save and reapply local filter sets. Nothing is uploaded.

No saved views. Enter a name and save the current filters.

Read-only Triage Report Preview

Generated from the current filters. Defensive checklist only; no exploit or scanning detail.

Filtered signals20

Top priority candidateCVE-2026-105293

Critical / High3 / 7

Safety moderead-only, public indexable, public-safe

Raw JSON details

{
  "count": 20,
  "defensive_checklist": [
    "Confirm affected products",
    "Review official source references",
    "Prioritize KEV, critical CVSS, and high EPSS percentile items",
    "Record human confirmation"
  ],
  "mode": "read_only_public_beta_dashboard",
  "safety": {
    "procedural_detail": false,
    "public_launch": true,
    "scanner_execution": false
  },
  "severity_distribution": {
    "CRITICAL": 3,
    "HIGH": 7,
    "LOW": 7,
    "MEDIUM": 3,
    "NONE": 0,
    "UNKNOWN": 0
  },
  "top_risk": "CVE-2026-105293"
}

Source Status

NVD20 signalsLast observed: 2026-10-12Status: healthy

EPSS20 signalsLast observed: 2026-10-12Status: healthy

OSV6 signalsLast observed: 2026-10-12Status: healthy

Vendor Advisory20 signalsLast observed: 2026-10-12Status: observed

Safety Guardrails

Public indexingEnabled

Read-only surfaceEnabled

Deploy controlsCodex managed deploy only

External notificationDisabled

Auto remediationDisabled

Runtime server endpointsNone

WebMCP read-only toolsEnabled

Static agent JSONEnabled