Expected Behavior Violation

Every one of the 49 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP locatio…CVE-2019-5108Linux kernel · CVSS 7.4 · 10% likely
2. POLY1305 MAC implementation corrupts vector registers on PowerPCCVE-2023-6129OpenSSL · CVSS 6.5 · 2.3% likely

   OpenSSL

3. POLY1305 MAC implementation corrupts XMM registers on WindowsCVE-2023-4807OpenSSL · CVSS 7.8 · 1.6% likely

   OpenSSL

4. When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, then Mosquitto will…CVE-2018-12550The Eclipse Foundation · 1.4% likely

   Eclipse Foundation

5. The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to…CVE-2019-6569Siemens · 1.3% likely

   Siemens

6. A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exp…CVE-2023-2088Redhat · CVSS 6.5 · 1.2% likely

   Red Hat

7. An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authen…CVE-2019-5061W1.f1 · CVSS 7.4 · 0.9% likely
8. Apache Traffic Server: Expect header field can unreasonably retain resourceCVE-2024-56202Apache Software Foundation · CVSS 4.3 · 0.9% likely

   Apache

9. WAGO: multiple products - Loss of MAC-Address-Filtering after rebootCVE-2022-3281WAGO · CVSS 7.5 · 0.8% likely

   WAGO

10. QUIC Unvalidated Amplification Credit may be Over AccountedCVE-2026-35191OpenSSL · CVSS 3.7 · 0.7% likely

    OpenSSL

11. Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet moduleCVE-2026-8806Mitsubishi Electric Corporation · CVSS 8.7 · 0.6% likely

    Mitsubishi Electric

12. Langflow OSS is affected by multiple vulnerabilitiesCVE-2026-93675IBM · CVSS 8.8 · 0.6% likelycovered by CyberSIXT

    IBM1 article

13. Tuleap deleting or moving an artifact can delete values from unrelated artifactsCVE-2024-30246Enalean · CVSS 7.6 · 0.6% likely

    Enalean

14. Jostle logic bypass degrades resolution performanceCVE-2026-42534NLnet Labs · CVSS 7.5 · 0.6% likely

    NLnet Labs

15. An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomp…CVE-2019-5062W1.f1 · CVSS 7.4 · 0.6% likely
16. Erlang/OTP SSH Has Strict KEX ViolationsCVE-2025-46712erlang · CVSS 3.7 · 0.6% likely

    Erlang

17. Denial-of-Service in gRPCCVE-2023-32732Google · CVSS 5.3 · 0.5% likely

    Google

18. Information leak in gRPCCVE-2023-32731Google · CVSS 7.4 · 0.5% likely

    Google

19. A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protec…CVE-2020-10766Linux Kernel · CVSS 5.5 · 0.5% likely

    Linux Kernel

20. Unexpected visibility of environment variable configurations in @backstage/plugin-app-backendCVE-2024-47762backstage · CVSS 5.8 · 0.4% likely

    Backstage

21. Insecure API Design in danny-avila/librechatCVE-2025-8850danny-avila · CVSS 3.1 · 0.4% likely

    Danny-Avila

22. fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)CVE-2026-35040nearform · CVSS 5.3 · 0.4% likely

    Nearform

23. A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incor…CVE-2020-10768Linux Kernel · CVSS 5.5 · 0.4% likely

    Linux Kernel

24. A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIB…CVE-2020-10767Linux Kernel · CVSS 5.5 · 0.4% likely

    Linux Kernel

25. Tuleap allows default values to be cleared from field configurationCVE-2025-27094Enalean · CVSS 5.4 · 0.4% likely

    Enalean

26. MD5 Hash Collision in run-llama/llama_indexCVE-2025-6211run-llama · CVSS 6.5 · 0.4% likely

    Run-Llama

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.