CVEs in the news
Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
| CVE | Vulnerability | CVSS | Exploitation | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourcemlflow | 7.5High | Not in KEV | EPSS 0.6% | 2 articles | |
| CVE-2026-116692 | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesmlflow | 9.8Critical | Not in KEV | EPSS 0.7% | 1 article |
No CVE on this page matches. Clear the filter, or search every CVE.
All 2 CVEs in the news this week · 387 exploited CVEs in the CISA KEV catalogue.