Permissive List of Allowed Inputs

Every one of the 48 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactiv…CVE-2020-25696PostgreSQL · 2.7% likely
2. JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to rootCVE-2026-21915Juniper Networks · CVSS 6.7 · 2.3% likely

   Juniper Networks

3. A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to se…CVE-2020-1694keycloak · 1.6% likely
4. Unauthorized write operations in PaperCut NG/MFCVE-2024-1654PaperCut · CVSS 7.2 · 1.3% likely

   PaperCut

5. Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so tha…CVE-2023-4399Grafana · CVSS 6.6 · 1.3% likely

   Grafana

6. Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass VulnerabilityCVE-2021-34787Cisco · CVSS 5.3 · 1.0% likely

   Cisco

7. Cisco Webex Meetings Email Content Injection VulnerabilityCVE-2021-40128Cisco · CVSS 5.3 · 1.0% likely

   Cisco

8. .NET Information Disclosure VulnerabilityCVE-2026-96229Microsoft · CVSS 6.5 · 0.9% likely

   Microsoft

9. Iperf3: possible denial of serviceCVE-2023-7250Red Hat · CVSS 5.3 · 0.9% likely

   Red Hat

10. Microsoft Purview Elevation of Privilege VulnerabilityCVE-2025-53762Microsoft · CVSS 8.7 · 0.9% likely

    Microsoft

11. In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on WindowsCVE-2025-59457JetBrains · CVSS 7.7 · 0.8% likely

    JetBrains

12. picklescan - Universal Blocklist Bypass via pkgutil.resolve_nameCVE-2026-3490picklescan · CVSS 10 · 0.8% likely

    Picklescan

13. NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixinCVE-2026-29514netbox-community · CVSS 8.8 · 0.8% likely

    Netbox-Community

14. Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A local authenticated user with standard privilege could potentially exploit this vul…CVE-2022-23158Dell · CVSS 6 · 0.7% likely

    Dell

15. Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0CVE-2026-42043axios · CVSS 7.2 · 0.7% likely

    Axios

16. vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCECVE-2026-115915vllm-project · CVSS 8.1 · 0.7% likely

    Vllm

17. A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of…CVE-2025-24349Bosch Rexroth AG · CVSS 7.1 · 0.7% likely

    Bosch Rexroth AG

18. MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code TheftCVE-2026-67345dromara · CVSS 8.1 · 0.6% likely

    Dromara

19. Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetchCVE-2026-54316anthropics · CVSS 6 · 0.5% likely

    Anthropics

20. Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy RouteCVE-2026-50189appsmithorg · CVSS 8.9 · 0.5% likely

    Appsmithorg

21. Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.ymlCVE-2026-106510backstage · CVSS 7.7 · 0.5% likely

    Backstage

22. Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressionsCVE-2026-107360Red Hat · CVSS 9.6 · 0.5% likelycovered by CyberSIXT

    Red Hat1 article1 article this week: Red Hat fixes critical sandbox bypass in Satellite

23. HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apisCVE-2026-46391haxtheweb · CVSS 8.7 · 0.5% likely

    Haxtheweb

24. axios 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 NO_PROXY Bypass via 0.0.0.0CVE-2026-67315axios · CVSS 6.9 · 0.5% likely

    Axios

25. A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN…CVE-2022-42469Fortinet · CVSS 4.1 · 0.4% likely

    Fortinet

26. PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted…CVE-2022-34450Dell · CVSS 6.7 · 0.4% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.