Every change, newest first

Compare earlier and later source statements, with the dates and evidence behind each measured change.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Fri 4 Sep 2026· 16 changes
2026-09-04	Added to CISA KEV	CVE-2026-85046	GoogleChromium V8 CISA KEV	fix due 2026-09-18	Duration unknown
2026-09-04	Ransomware use confirmed	CVE-2022-37969	MicrosoftWindows CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2026-09-04	Ransomware use confirmed	CVE-2016-4117	AdobeFlash Player CISA KEV	stated at publication Unknown, now states Known	Duration unknown
2026-09-04	Product added	CVE-2025-9784	red hat	not named as affected at publication, now names red hat jboss enterprise application platform 8.1.6	Time to revision 367 days
2026-09-04	Product added	Show all 3 CVE records in this change: Product added: gfi clearview named as affected from gfi softwareHide the 3 CVE records in this change: Product added: gfi clearview named as affected from gfi software	gfi software VulnCheck	not named as affected at publication, now names gfi clearview	Time to revision 0 days
2026-09-04	same kind of change as the line above	CVE-2026-74235	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-09-04	same kind of change as the line above	CVE-2026-74236	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-09-04	same kind of change as the line above	CVE-2026-74237	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-09-04	Product added	CVE-2026-56152	elastic	not named as affected at publication, now names kibana	Time to revision 65 days
2026-09-04	Product added	CVE-2026-12894	quarkus redhat	not named as affected at publication, now names quarkus-qute	Time to revision 4 days
2026-09-04	Product added	CVE-2026-49509	samsung opensource samsung.tv_appliance	not named as affected at publication, now names rlottie	Time to revision 0 days
2026-09-04	Product added	CVE-2026-11332Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-11332Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-11332	red hat	not named as affected at publication, now names red hat satellite 6.18 for rhel 9 and 1 more	Time to revision 91 days
2026-09-04	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.18 for rhel 9	Time to revision 91 days
2026-09-04	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Time to revision 91 days
2026-09-04	CVSS base score changed	CVE-2026-13732	whole record redhat	stated at publication 7.8, now states 7.0CVSS v3.1 · base scoreHighHigh	Time to revision 4 days
2026-09-04	Record state changed	CVE-2026-18745	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 0 days
2026-09-04	Record state changed	CVE-2026-61485	whole record apache	stated at publication PUBLISHED, now states REJECTED	Time to revision 30 days
2026-09-04	Record state changed	CVE-2026-19582	whole record redhat	stated at publication PUBLISHED, now states REJECTED	Time to revision 15 days
Thu 3 Sep 2026· 42 changes
2026-09-037 commits	Product added	Show all 25 CVE records in this change: Product added: 6 products named as affected from red hatHide the 25 CVE records in this change: Product added: 6 products named as affected from red hat40 rows, one per record and product	red hat	not named as affected at publication, now names red hat satellite 6.17 for rhel 9 and 5 moreBranches and original-value intervals are stated on each row.	Time to revision 1 to 464 days
2026-09-03	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.17 for rhel 9	Time to revision 91 days
2026-09-03	same kind of change as the line above	CVE-2026-15563	same vendor as the line above	not named as affected at publication, now names red hat single sign-on 7	Time to revision 24 days
2026-09-03	same kind of change as the line above	CVE-2026-18255	same vendor as the line above	not named as affected at publication, now names red hat quay 3.15	Time to revision 36 days
2026-09-03	same kind of change as the line above	CVE-2025-5222	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 464 days
2026-09-03	same kind of change as the line above	CVE-2026-14476	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 58 days
2026-09-03	same kind of change as the line above	CVE-2026-2340	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 99 days
2026-09-03	same kind of change as the line above	CVE-2026-3833	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 126 days
2026-09-03	same kind of change as the line above	CVE-2026-42011	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 119 days
32 more rows in this change are not listed here. Open all 40 rows →
2026-09-03	Product added	CVE-2026-58641	microsoft	not named as affected at publication, now names skiasharp	Time to revision 23 days
2026-09-03	Record state changed	CVE-2026-76848	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 10 days
Wed 2 Sep 2026· 59 changes
2026-09-02	Added to CISA KEV	CVE-2026-59822	BerriAILiteLLM CISA KEV	fix due 2026-09-16	Duration unknown
2026-09-02	Added to CISA KEV	CVE-2026-48710	KludexStarlette CISA KEV	fix due 2026-09-16	Duration unknown
2026-09-02	Added to CISA KEV	CVE-2026-49869	KestraKestra OSS CISA KEV	fix due 2026-09-05	Duration unknown
2026-09-02	Added to CISA KEV	CVE-2026-82329	JFrogArtifactory CISA KEV	fix due 2026-09-05	Duration unknown
2026-09-02	Added to CISA KEV	CVE-2026-9586	SangomaSwitchvox CISA KEV	fix due 2026-09-05	Duration unknown
2026-09-02	Added to CISA KEV	Show all 2 CVE records in this change: Added to CISA KEV: SMA1000 Appliances from SonicWallHide the 2 CVE records in this change: Added to CISA KEV: SMA1000 Appliances from SonicWall	SonicWallSMA1000 Appliances	fix due 2026-09-05	Duration unknown
2026-09-02	same kind of change as the line above	CVE-2026-83548	same vendor as the line above	same change as the line above	Duration unknown
2026-09-02	same kind of change as the line above	CVE-2026-83549	same vendor as the line above	same change as the line above	Duration unknown
2026-09-02	Fix version moved	CVE-2026-65675	microsoftmicrosoft visual studio code copilot chat extension	stated at publication 1.132.1, now states 1.135Release branch starts at 0.27.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	Fix version moved	Show all 8 CVE records in this change: Fix version moved: 1.132.1 → 1.135 from microsoftHide the 8 CVE records in this change: Fix version moved: 1.132.1 → 1.135 from microsoft	microsoftvisual studio code	stated at publication 1.132.1, now states 1.135Release branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-58650	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-59113	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-47285	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-69320	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-69278	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-69306	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-70335	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	same kind of change as the line above	CVE-2026-70336	same vendor as the line above	same change as the line aboveRelease branch starts at 1.0.0.Original value first replaced 2026-08-28; this value first seen 2026-09-02.	Time to revision 17 days
2026-09-02	Product added	CVE-2026-15809	red hat	not named as affected at publication, now names red hat openshift container platform 4.19	Time to revision 49 days
2026-09-02	Product added	CVE-2023-50224Show all 21 products in this change: Product added: 21 products named as affected in CVE-2023-50224Hide the 21 products in this change: Product added: 21 products named as affected in CVE-2023-50224	tp-link zdi	not named as affected at publication, now names archer c5 and 20 more	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names archer c5	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names archer c7	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-mr3420	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-mr6400	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-wa801nd	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-wa901nd	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-wdr3500	Time to revision 853 days
2026-09-02	same kind of change as the line above	CVE-2023-50224	same vendor as the line above	not named as affected at publication, now names tl-wdr3600	Time to revision 853 days
13 more rows in this change are not listed here. Open all 21 rows →
2026-09-022 commits	Product added	Show all 4 CVE records in this change: Product added: gvfs named as affected from gnomeHide the 4 CVE records in this change: Product added: gvfs named as affected from gnome	gnome redhat	not named as affected at publication, now names gvfsBranches and original-value intervals are stated on each row.	Time to revision 1 days
2026-09-02	same kind of change as the line above	CVE-2026-84268	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-09-02	same kind of change as the line above	CVE-2026-84269	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-09-02	same kind of change as the line above	CVE-2026-84270	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-09-02	same kind of change as the line above	CVE-2026-84267	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-09-02	Product added	CVE-2026-17527	red hat	not named as affected at publication, now names red hat container native virtualization 4.14	Time to revision 37 days
2026-09-02	Product added	CVE-2026-84218	red hat	not named as affected at publication, now names red hat amq broker 7	Time to revision 1 days
2026-09-022 commits	Product added	Show all 2 CVE records in this change: Product added: red hat openshift container platform 4.22 named as affected from red hatHide the 2 CVE records in this change: Product added: red hat openshift container platform 4.22 named as affected from red hat	red hat	not named as affected at publication, now names red hat openshift container platform 4.22Branches and original-value intervals are stated on each row.	Time to revision 22 to 26 days
2026-09-02	same kind of change as the line above	CVE-2026-72693	same vendor as the line above	same change as the line above	Time to revision 22 days
2026-09-02	same kind of change as the line above	CVE-2026-15816	same vendor as the line above	same change as the line above	Time to revision 26 days
2026-09-02	Product added	CVE-2026-15816	red hat	not named as affected at publication, now names red hat openshift container platform 4.20	Time to revision 26 days
2026-09-02	CVSS base score changed	CVE-2026-71474	whole record redhat	stated at publication 6.3, now states 7.1CVSS v3.1 · base scoreMediumHigh	Time to revision 22 days
2026-09-02	CVSS base score changed	CVE-2026-71475	whole record redhat	stated at publication 5.0, now states 6.8CVSS v3.1 · base scoreMediumMedium	Time to revision 22 days
2026-09-02	Record state changed	CVE-2026-39909	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 12 days
2026-09-023 commits	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record zdi	stated at publication PUBLISHED, now states REJECTEDBranches and original-value intervals are stated on each row.	Time to revision 223 days
2026-09-02	same kind of change as the line above	CVE-2026-0766	same vendor as the line above	same change as the line above	Time to revision 223 days
2026-09-02	same kind of change as the line above	CVE-2026-0765	same vendor as the line above	same change as the line above	Time to revision 223 days
2026-09-02	same kind of change as the line above	CVE-2026-0767	same vendor as the line above	same change as the line above	Time to revision 223 days
2026-09-02published 2026-05-06	Advisory fix version moved	GHSA-248h-974q-xrc2	mavencom.getaxonflow:axonflow-sdk moderate	stated at publication 6.0.0, now states 7.0.0	Time to revision 119 days
2026-09-02published 2024-10-09 to 2025-03-20	Advisory withdrawn	Show all 5 advisories in this change: Advisory withdrawn: withdrawn 2026-09-02Hide the 5 advisories in this change: Advisory withdrawn: withdrawn 2026-09-02	whole advisory3 bands	withdrawn 2026-09-02	Time to revision 531 to 693 days
2026-09-02published 2025-03-20	same kind of change as the line above	GHSA-x757-hv69-jr45CVE-2024-7959	same package and registry as the line abovehigh	withdrawn 2026-09-02	Time to revision 531 days
2026-09-02published 2025-03-20	same kind of change as the line above	GHSA-pqwr-phvv-v49fCVE-2024-7039	same package and registry as the line abovehigh	withdrawn 2026-09-02	Time to revision 531 days
2026-09-02published 2025-03-20	same kind of change as the line above	GHSA-crh6-pj8c-xrhcCVE-2024-7034	same package and registry as the line abovemoderate	withdrawn 2026-09-02	Time to revision 531 days
2026-09-02published 2025-03-20	same kind of change as the line above	GHSA-3p9q-7w63-3f8qCVE-2024-7033	same package and registry as the line abovemoderate	withdrawn 2026-09-02	Time to revision 531 days
2026-09-02published 2024-10-09	same kind of change as the line above	GHSA-mq92-jr35-ffpcCVE-2024-7038	same package and registry as the line abovelow	withdrawn 2026-09-02	Time to revision 693 days
Tue 1 Sep 2026· 40 changes
2026-09-012 commits	Product added	CVE-2026-15809Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-15809Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-15809	red hat	not named as affected at publication, now names red hat openshift container platform 4.21 and 1 moreBranches and original-value intervals are stated on each row.	Time to revision 48 days
2026-09-01	same kind of change as the line above	CVE-2026-15809	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.21	Time to revision 48 days
2026-09-01	same kind of change as the line above	CVE-2026-15809	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.20	Time to revision 48 days
2026-09-01	Product added	CVE-2026-83596	webkit redhat	not named as affected at publication, now names webkit	Time to revision 1 days
2026-09-01	Product added	CVE-2026-83596	webkitgtk redhat	not named as affected at publication, now names webkitgtk	Time to revision 1 days
2026-09-01	Product added	CVE-2026-11873	red hat	not named as affected at publication, now names red hat certificate system 9	Time to revision 0 days
2026-09-01	Product added	Show all 10 CVE records in this change: Product added: red hat discovery 2 named as affected from red hatHide the 10 CVE records in this change: Product added: red hat discovery 2 named as affected from red hat	red hat	not named as affected at publication, now names red hat discovery 2	Time to revision 29 to 148 days
2026-09-01	same kind of change as the line above	CVE-2026-15588	same vendor as the line above	same change as the line above	Time to revision 43 days
2026-09-01	same kind of change as the line above	CVE-2026-18477	same vendor as the line above	same change as the line above	Time to revision 29 days
2026-09-01	same kind of change as the line above	CVE-2026-18508	same vendor as the line above	same change as the line above	Time to revision 29 days
2026-09-01	same kind of change as the line above	CVE-2026-58010	same vendor as the line above	same change as the line above	Time to revision 63 days
2026-09-01	same kind of change as the line above	CVE-2026-58011	same vendor as the line above	same change as the line above	Time to revision 63 days
2026-09-01	same kind of change as the line above	CVE-2026-58012	same vendor as the line above	same change as the line above	Time to revision 63 days
2026-09-01	same kind of change as the line above	CVE-2026-58013	same vendor as the line above	same change as the line above	Time to revision 63 days
2026-09-01	same kind of change as the line above	CVE-2026-58014	same vendor as the line above	same change as the line above	Time to revision 63 days
2 more rows in this change are not listed here. Open all 10 rows →
2026-09-01	CVSS base score changed	CVE-2026-66795	whole record redhat	stated at publication 9.1, now states 9.9CVSS v3.1 · base scoreCriticalCritical	Time to revision 15 days
2026-09-01	CVSS base score changed	CVE-2026-66783	whole record redhat	stated at publication 8.2, now states 4.4CVSS v3.1 · base scoreHighMedium	Time to revision 14 days
2026-09-01	CVSS base score changed	CVE-2026-66785	whole record redhat	stated at publication 9.9, now states 2.5CVSS v3.1 · base scoreCriticalLow	Time to revision 12 days
2026-09-01	CVSS base score changed	CVE-2026-66787	whole record redhat	stated at publication 8.7, now states 5.4CVSS v3.1 · base scoreHighMedium	Time to revision 12 days
2026-09-01	CVSS base score changed	CVE-2026-66788	whole record redhat	stated at publication 9.9, now states 3.7CVSS v3.1 · base scoreCriticalLow	Time to revision 12 days
2026-09-01	CVSS base score changed	CVE-2026-66781	whole record redhat	stated at publication 6.5, now states 5.4CVSS v3.1 · base scoreMediumMedium	Time to revision 14 days
2026-09-01	CVSS base score changed	CVE-2026-66782	whole record redhat	stated at publication 7.8, now states 5.8CVSS v3.1 · base scoreHighMedium	Time to revision 14 days
2026-09-01	CVSS base score changed	CVE-2026-66780	whole record redhat	stated at publication 9.9, now states 6.5CVSS v3.1 · base scoreCriticalMedium	Time to revision 14 days
2026-09-01	CVSS base score changed	CVE-2026-6876	whole record SN	stated at publication 8.7, now states 10.0CVSS v4.0 · base scoreHighCritical	Time to revision 5 days
2026-09-01	Record state changed	Show all 5 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 5 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2024-58377	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2024-58378	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2025-71346	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2025-71406	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2025-71407	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	Record state changed	Show all 8 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 8 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record Wordfence	stated at publication PUBLISHED, now states REJECTED	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78477	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78562	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78563	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78566	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78568	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78570	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78572	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01	same kind of change as the line above	CVE-2026-78576	same vendor as the line above	same change as the line above	Time to revision 7 days
2026-09-01published 2026-06-16	Package added to advisory	GHSA-5r4w-85f3-pw66Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-5r4w-85f3-pw66Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-5r4w-85f3-pw66	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2 and 1 more	Time to revision 77 days
2026-09-01published 2026-06-16	same kind of change as the line above	GHSA-5r4w-85f3-pw66CVE-2026-48491	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/traefik/traefik/v2	Time to revision 77 days
2026-09-01published 2026-06-16	same kind of change as the line above	GHSA-5r4w-85f3-pw66CVE-2026-48491	same package registry as the line abovehigh	not named as affected when the advisory was published, now names github.com/traefik/traefik/v3	Time to revision 77 days
2026-09-01published 2025-12-01	Advisory severity changed	GHSA-569q-mpph-wgwwCVE-2025-71401	whole advisoryhigh	stated at publication LOW, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 274 days
Mon 31 Aug 2026· 135 changes
2026-08-31	Added to CISA KEV	Show all 2 CVE records in this change: Added to CISA KEV: NG/MF from PaperCutHide the 2 CVE records in this change: Added to CISA KEV: NG/MF from PaperCut	PaperCutNG/MF	fix due 2026-09-14	Duration unknown
2026-08-31	same kind of change as the line above	CVE-2026-82078	same vendor as the line above	same change as the line above	Duration unknown
2026-08-31	same kind of change as the line above	CVE-2026-81578	same vendor as the line above	same change as the line above	Duration unknown
2026-08-31	Affected range extended	CVE-2026-12965	unknownsuper store finder wordpress WPScan	stated at publication 7.8, now states 7.11Release branch starts at 0.	Time to revision 28 days
2026-08-31	Affected range extended	CVE-2026-16739	unknownepeken all kurir for woocommerce WPScan	stated at publication 2.1.2, now states 2.1.4Release branch starts at 0.	Time to revision 17 days
2026-08-31	Product added	CVE-2026-81934	redis cisa-cg	not named as affected at publication, now names redis software (enterprise)	Time to revision 4 days
2026-08-31	Product added	CVE-2026-71960	shenzhen cudy technology co., ltd. VulnCheck	not named as affected at publication, now names p5 v1.1	Time to revision 12 days
2026-08-31	Product added	CVE-2026-13753Show all 55 products in this change: Product added: 55 products named as affected in CVE-2026-13753Hide the 55 products in this change: Product added: 55 products named as affected in CVE-2026-13753	hp inc certcc	not named as affected at publication, now names hp deskjet 2810 printer and 54 more	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2810 printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2810e aio printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2820 aio printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2820 all-in-one printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2820e aio printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2821 aio printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2821e aio printer	Time to revision 56 days
2026-08-31	same kind of change as the line above	CVE-2026-13753	same vendor as the line above	not named as affected at publication, now names hp deskjet 2821e all-in-one	Time to revision 56 days
47 more rows in this change are not listed here. Open all 55 rows →
2026-08-313 commits	Product added	Show all 11 CVE records in this change: Product added: ebyte na111-m firmware named as affected from ebyteHide the 11 CVE records in this change: Product added: ebyte na111-m firmware named as affected from ebyte	ebyte icscert	not named as affected at publication, now names ebyte na111-m firmwareBranches and original-value intervals are stated on each row.	Time to revision 0 to 4 days
2026-08-31	same kind of change as the line above	CVE-2026-73125	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-75814	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-76179	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-76940	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-69658	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-71187	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-73809	same vendor as the line above	same change as the line above	Time to revision 4 days
2026-08-31	same kind of change as the line above	CVE-2026-75548	same vendor as the line above	same change as the line above	Time to revision 4 days
3 more rows in this change are not listed here. Open all 11 rows →
2026-08-317 commits	Product added	Show all 25 CVE records in this change: Product added: 11 products named as affected from red hatHide the 25 CVE records in this change: Product added: 11 products named as affected from red hat49 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle support and 10 moreBranches and original-value intervals are stated on each row.	Time to revision 33 to 460 days
2026-08-31	same kind of change as the line above	CVE-2026-12912	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle support	Time to revision 63 days
2026-08-31	same kind of change as the line above	CVE-2026-58014	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4	Time to revision 62 days
2026-08-31	same kind of change as the line above	CVE-2026-58015	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4	Time to revision 62 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 88 days
2026-08-31	same kind of change as the line above	CVE-2026-17527	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.16	Time to revision 35 days
2026-08-31	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Time to revision 73 days
2026-08-31	same kind of change as the line above	CVE-2026-56209	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Time to revision 73 days
2026-08-31	same kind of change as the line above	CVE-2026-56210	same vendor as the line above	not named as affected at publication, now names red hat ai inference server 3.2	Time to revision 73 days
41 more rows in this change are not listed here. Open all 49 rows →
2026-08-31	Product added	CVE-2026-6876	servicenow SN	not named as affected at publication, now names servicenow ai platform	Time to revision 4 days
2026-08-31	Product added	CVE-2026-0826	hp inc. hp	not named as affected at publication, now names poly_vvx	Time to revision 91 days
2026-08-31	Product added	CVE-2026-15044	trustyai redhat	not named as affected at publication, now names trustyai-service-operator	Time to revision 54 days
2026-08-31	Product added	CVE-2026-15063	trustyai-explainability redhat	not named as affected at publication, now names trustyai-service-operator	Time to revision 54 days
2026-08-31	Product added	Show all 4 CVE records in this change: Product added: gimp named as affected from gnomeHide the 4 CVE records in this change: Product added: gimp named as affected from gnome	gnome redhat	not named as affected at publication, now names gimp	Time to revision 3 days
2026-08-31	same kind of change as the line above	CVE-2026-82324	same vendor as the line above	same change as the line above	Time to revision 3 days
2026-08-31	same kind of change as the line above	CVE-2026-82328	same vendor as the line above	same change as the line above	Time to revision 3 days
2026-08-31	same kind of change as the line above	CVE-2026-82330	same vendor as the line above	same change as the line above	Time to revision 3 days
2026-08-31	same kind of change as the line above	CVE-2026-82343	same vendor as the line above	same change as the line above	Time to revision 3 days
2026-08-312 commits	Product added	Show all 2 CVE records in this change: Product added: multiple mfps which implement ricoh web image monitor named as affected from konica minolta japan, inc.Hide the 2 CVE records in this change: Product added: multiple mfps which implement ricoh web image monitor named as affected from konica minolta japan, inc.	konica minolta japan, inc. jpcert	not named as affected at publication, now names multiple mfps which implement ricoh web image monitorBranches and original-value intervals are stated on each row.	Time to revision 62 to 123 days
2026-08-31	same kind of change as the line above	CVE-2026-41226	same vendor as the line above	same change as the line above	Time to revision 123 days
2026-08-31	same kind of change as the line above	CVE-2026-56809	same vendor as the line above	same change as the line above	Time to revision 62 days
2026-08-31	CVSS base score changed	CVE-2026-77956	whole record EEF	stated at publication 10.0, now states 8.9CVSS v4.0 · base scoreCriticalHigh	Time to revision 1 days
2026-08-31	CVSS base score changed	CVE-2026-73055	whole record VulnCheck	stated at publication 9.3, now states 6.3CVSS v4.0 · base scoreCriticalMedium	Time to revision 16 days
2026-08-31	Record state changed	CVE-2024-7806	whole record @huntr_ai	stated at publication PUBLISHED, now states REJECTED	Time to revision 529 days
2026-08-31published 2026-05-12	Package added to advisory	GHSA-r29c-68gh-xp6xCVE-2026-41293	maven critical	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	Time to revision 111 days
Fri 28 Aug 2026· 10 changes
2026-08-28	Added to CISA KEV	CVE-2023-49105	ownCloudownCloud CISA KEV	fix due 2026-08-30 · listed 2026-08-27	Duration unknown
2026-08-28	Added to CISA KEV	CVE-2026-53362	LinuxKernel CISA KEV	fix due 2026-08-30 · listed 2026-08-27	Duration unknown
2026-08-28	Added to CISA KEV	CVE-2026-66384	JFrogArtifactory CISA KEV	fix due 2026-09-10 · listed 2026-08-27	Duration unknown
2026-08-28	Product added	CVE-2026-59133	microsoft	not named as affected at publication, now names microsoft hpc pack 2019	Time to revision 17 days
2026-08-28	CVSS base score changed	CVE-2026-74887	whole record VulnCheck	stated at publication 9.3, now states 6.3CVSS v4.0 · base scoreCriticalMedium	Time to revision 11 days
2026-08-28	CVSS base score changed	CVE-2026-73626	whole record VulnCheck	stated at publication 0.0, now states 7.7CVSS v4.0 · base scoreNoneHigh	Time to revision 15 days
2026-08-28	CVSS base score changed	CVE-2026-80200	whole record VulnCheck	stated at publication 0.0, now states 5.3CVSS v4.0 · base scoreNoneMedium	Time to revision 3 days
2026-08-28	Record state changed	CVE-2026-78195	whole record WatchGuard	stated at publication PUBLISHED, now states REJECTED	Time to revision 1 days
2026-08-28published 2026-06-12	Advisory severity changed	GHSA-9r4w-jg96-92mvCVE-2026-12681	whole advisoryhigh	stated at publication MODERATE, now states HIGHA CVSS version was added; the existing vectors stayed the same.	Time to revision 77 days
2026-08-28published 2026-07-02	Advisory severity changed	GHSA-77pv-3w4q-vrj5CVE-2026-53834	whole advisoryhigh	stated at publication MODERATE, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 57 days
Thu 27 Aug 2026· 172 changes
2026-08-27	Affected range extended	CVE-2026-17613	penpotpenpot certcc	stated at publication 2.17.0, now states 2.17.1Release branch starts at 0.Original value first replaced 2026-08-13; this value first seen 2026-08-27.	Time to revision 8 days
2026-08-27	Product added	CVE-2026-15315	tp-link systems inc TPLink	not named as affected at publication, now names tapo c120 v1	Time to revision 9 days
2026-08-27	Product added	CVE-2026-81525Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-81525Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-81525	mongodb	not named as affected at publication, now names php extension and 1 more	Time to revision 0 days
2026-08-27	same kind of change as the line above	CVE-2026-81525	same vendor as the line above	not named as affected at publication, now names php extension	Time to revision 0 days
2026-08-27	same kind of change as the line above	CVE-2026-81525	same vendor as the line above	not named as affected at publication, now names php library	Time to revision 0 days
2026-08-272 commits	Product added	Show all 85 CVE records in this change: Product added: 9 products named as affected from adobeHide the 85 CVE records in this change: Product added: 9 products named as affected from adobe139 rows, one per record and product	adobe	not named as affected at publication, now names adobe commerce b2b and 8 moreBranches and original-value intervals are stated on each row.	Time to revision 44 to 198 days
2026-08-27	same kind of change as the line above	CVE-2026-21282	same vendor as the line above	not named as affected at publication, now names adobe commerce b2b	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21282	same vendor as the line above	not named as affected at publication, now names magento open source	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21284	same vendor as the line above	not named as affected at publication, now names adobe commerce b2b	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21284	same vendor as the line above	not named as affected at publication, now names magento open source	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21285	same vendor as the line above	not named as affected at publication, now names adobe commerce b2b	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21285	same vendor as the line above	not named as affected at publication, now names magento open source	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21286	same vendor as the line above	not named as affected at publication, now names adobe commerce b2b	Time to revision 170 days
2026-08-27	same kind of change as the line above	CVE-2026-21286	same vendor as the line above	not named as affected at publication, now names magento open source	Time to revision 170 days
131 more rows in this change are not listed here. Open all 139 rows →
2026-08-27	Product added	CVE-2026-59323	spring vmware	not named as affected at publication, now names micrometer tracing	Time to revision 6 days
2026-08-272 commits	Product added	Show all 10 CVE records in this change: Product added: 4 products named as affected from red hatHide the 10 CVE records in this change: Product added: 4 products named as affected from red hat18 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift ai 3.4 and 3 moreBranches and original-value intervals are stated on each row.	Time to revision 7 to 69 days
2026-08-27	same kind of change as the line above	CVE-2026-15218	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 10 days
2026-08-27	same kind of change as the line above	CVE-2026-15378	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 48 days
2026-08-27	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 69 days
2026-08-27	same kind of change as the line above	CVE-2026-56209	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 69 days
2026-08-27	same kind of change as the line above	CVE-2026-56210	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 69 days
2026-08-27	same kind of change as the line above	CVE-2026-56211	same vendor as the line above	not named as affected at publication, now names red hat openshift ai 3.4	Time to revision 69 days
2026-08-27	same kind of change as the line above	CVE-2026-66781	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.11	Time to revision 9 days
2026-08-27	same kind of change as the line above	CVE-2026-66781	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.14	Time to revision 9 days
10 more rows in this change are not listed here. Open all 18 rows →
2026-08-27	Product added	CVE-2025-3511Show all 5 products in this change: Product added: 5 products named as affected in CVE-2025-3511Hide the 5 products in this change: Product added: 5 products named as affected in CVE-2025-3511	mitsubishi electric corporation Mitsubishi	not named as affected at publication, now names melsec iq-r series cpu module r04encpu (network part) and 4 more	Time to revision 489 days
2026-08-27	same kind of change as the line above	CVE-2025-3511	same vendor as the line above	not named as affected at publication, now names melsec iq-r series cpu module r04encpu (network part)	Time to revision 489 days
2026-08-27	same kind of change as the line above	CVE-2025-3511	same vendor as the line above	not named as affected at publication, now names melsec iq-r series cpu module r08encpu (network part)	Time to revision 489 days
2026-08-27	same kind of change as the line above	CVE-2025-3511	same vendor as the line above	not named as affected at publication, now names melsec iq-r series cpu module r120encpu (network part)	Time to revision 489 days
2026-08-27	same kind of change as the line above	CVE-2025-3511	same vendor as the line above	not named as affected at publication, now names melsec iq-r series cpu module r16encpu (network part)	Time to revision 489 days
2026-08-27	same kind of change as the line above	CVE-2025-3511	same vendor as the line above	not named as affected at publication, now names melsec iq-r series cpu module r32encpu (network part)	Time to revision 489 days
2026-08-27	CVSS base score changed	CVE-2026-13097	whole record redhat	stated at publication 9.1, now states 8.7CVSS v3.1 · base scoreCriticalHigh	Time to revision 7 days
2026-08-27	CVSS base score changed	CVE-2026-65660	whole record microsoft	stated at publication 6.5, now states 8.8CVSS v3.1 · base scoreMediumHigh	Time to revision 16 days
2026-08-27	CVSS base score changed	CVE-2026-10573	whole record Rockwell	stated at publication 8.7, now states 6.3CVSS v4.0 · base scoreHighMedium	Time to revision 44 days
2026-08-27	CVSS base score changed	CVE-2026-59354	whole record vmware	stated at publication 6.1, now states 9.6CVSS v3.1 · base scoreMediumCritical	Time to revision 0 days
2026-08-27	Record state changed	CVE-2026-4398	whole record GitLab	stated at publication REJECTED, now states PUBLISHED	Time to revision 0 days
Wed 26 Aug 2026· 5 changes
2026-08-26	Added to CISA KEV	CVE-2021-23758	Ajax.NET ProfessionalAjax.NET Professional CISA KEV	fix due 2026-09-09	Duration unknown
2026-08-26	Added to CISA KEV	CVE-2015-3246	Red HatLibuser CISA KEV	fix due 2026-09-09	Duration unknown
2026-08-26	Added to CISA KEV	CVE-2015-5287	Red HatAutomatic Bug Reporting Tool CISA KEV	fix due 2026-09-09	Duration unknown
2026-08-26	Added to CISA KEV	CVE-2022-0995	LinuxKernel CISA KEV	fix due 2026-09-09	Duration unknown
2026-08-26	Added to CISA KEV	CVE-2026-8452	CitrixNetScaler ADC and NetScaler Gateway CISA KEV	fix due 2026-08-29	Duration unknown

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →