Incomplete Comparison with Missing Factors

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassCVE-2026-7473Arista Networks · CVSS 5.8 · 1.1% likelycovered by CyberSIXT

   Arista Networks

2. Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-81376Microsoft · CVSS 9.6 · 0.9% likely

   Microsoft

3. An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre…CVE-2021-23146Gallagher · CVSS 7.1 · 0.9% likely

   Gallagher

4. Windows BitLocker Security Feature Bypass VulnerabilityCVE-2025-55333Microsoft · CVSS 6.1 · 0.8% likely

   Microsoft

5. NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an attacker could cause a hash collision by submitting images that share an identical pix…CVE-2026-24255NVIDIA · CVSS 7.5 · 0.5% likely

   NVIDIA

6. Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIn…CVE-2026-4599Kjur · CVSS 9.1 · 0.5% likely

   Kjur

7. CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionsCVE-2026-54713cakephp · CVSS 3.7 · 0.5% likely

   Cakephp

8. Incomplete Comparison with Missing Factors in GitLabCVE-2024-5528GitLab · CVSS 3.5 · 0.4% likely

   GitLab

9. IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)CVE-2026-91768PHP Group · CVSS 6.5 · 0.4% likely

   PHP

10. Potential exposure of private data via whitespace padding in Vary headerCVE-2026-48587djangoproject · CVSS 3.1 · 0.4% likely

    Djangoproject

11. Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alo…CVE-2026-85491CVSS 8.8 · 0.4% likely
12. Silent loss of messages when merging overlapping chat exports in whatstkCVE-2026-121564lucasrodes · CVSS 1.8 · 0.3% likely
13. OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factorsCVE-2026-91836OpenClaw · CVSS 2.8 · 0.3% likely

    OpenClaw

14. OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint ValidationCVE-2026-53839OpenClaw · CVSS 6.5 · 0.3% likely

    OpenClaw

15. Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchorsCVE-2026-123593hickory-dns · CVSS 4.8 · 0.2% likely

    Hickory-Dns

16. OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot InconsistencyCVE-2026-53859OpenClaw · CVSS 6.5 · 0.2% likely

    OpenClaw

17. BullWall Ransomware Containment incomplete file inspectionCVE-2025-62000BullWall · CVSS 7.1 · 0.2% likely

    BullWall

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.