Comparison Using Wrong Factors

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. HSTS subdomain overwrites parent cache entryCVE-2024-9681curl · CVSS 5.9 · 2.0% likely

   The Curl Project4 bounty reports

2. HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patt…CVE-2025-32464HAProxy · CVSS 6.8 · 0.8% likely

   Haproxy

3. stoatchat before 20250210-1 Unrestricted Message History FetchCVE-2025-71377stoatchat · CVSS 8.7 · 0.7% likely

   Stoatchat

4. Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonCVE-2026-9800Red Hat · CVSS 8.1 · 0.7% likely

   Red Hat

5. PocketMine-MP before 5.3.1 Denial of Service via LoginPacketCVE-2023-54390pmmp · CVSS 7.5 · 0.6% likely

   Pmmp

6. Cisco Firepower Threat Defense Software Rate Filter Bypass VulnerabilityCVE-2024-20342Cisco · CVSS 5.8 · 0.5% likely

   Cisco

7. ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped RegexCVE-2026-75840ArcadeData · CVSS 7.5 · 0.4% likely

   ArcadeData

8. In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/lease…CVE-2026-93854OpenStack · CVSS 7.2 · 0.4% likely

   Openstack

9. The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of current_admin.CVE-2026-100248Rattadan · CVSS 8.4 · 0.4% likely
10. AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationCVE-2026-125271AWS · CVSS 7.8 · 0.4% likely

    AWS

11. operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification r…CVE-2025-27839Tangem · CVSS 3.2 · 0.4% likely
12. Logic flaw in SANnav Java cache key handling object comparison handlingCVE-2026-14441Brocade · CVSS 6.9 · 0.4% likely

    Brocade

13. CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normally spelled "alias") via an ORM query fi…CVE-2026-29811CyberPanel · CVSS 7.7 · 0.3% likely

    Cyberpanel

14. Improper timestamp caching during snapshot rollback in toughCVE-2025-2888AWS · CVSS 5.7 · 0.3% likely

    AWS

15. Failure to detect delegated target rollback in toughCVE-2025-2887AWS · CVSS 5.7 · 0.3% likely

    AWS

16. Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluationCVE-2026-104048Red Hat · CVSS 6.8 · 0.3% likely

    Red Hat

17. Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash CollisionCVE-2026-123592hickory-dns · CVSS 5.9 · 0.3% likely

    Hickory-Dns

18. Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip BlocksCVE-2026-40880ZcashFoundation · CVSS 7.2 · 0.3% likely

    ZcashFoundation

19. Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distCVE-2026-48860Erlang · CVSS 7.5 · 0.2% likely

    Erlang

20. In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.CVE-2026-40227systemd · CVSS 6.2 · 0.2% likely

    Systemd Project

21. Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cacheCVE-2026-114649MongoDB · CVSS 6.8 · 0.2% likely

    MongoDB

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.