Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

842 record edits refused · 1 advisory changes · newest first · grouped by dayCSV JSON RSS

PublisherPublishedChangedSourceRows

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere from the last 30 days, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Sun 6 Sep 2026· 1 change
2026-09-06	Product added	CVE-2026-75569	red hat	not named as affected at publication, now names multicluster engine for kubernetes 2.1Not counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 18 days
Sat 5 Sep 2026· 11 changes
2026-09-05	Product added	Show all 8 CVE records in this change: Product added: multicluster engine for kubernetes 2.1 named as affected from red hatHide the 8 CVE records in this change: Product added: multicluster engine for kubernetes 2.1 named as affected from red hat	red hat	not named as affected at publication, now names multicluster engine for kubernetes 2.1not counted: Product relabelled	Time to revision 16 to 31 days
2026-09-05	same kind of change as the line above	CVE-2026-10059	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 31 days
2026-09-05	same kind of change as the line above	CVE-2026-19130	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 24 days
2026-09-05	same kind of change as the line above	CVE-2026-66794	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 17 days
2026-09-05	same kind of change as the line above	CVE-2026-66795	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 19 days
2026-09-05	same kind of change as the line above	CVE-2026-73266	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 23 days
2026-09-05	same kind of change as the line above	CVE-2026-73267	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 16 days
2026-09-05	same kind of change as the line above	CVE-2026-73268	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 24 days
2026-09-05	same kind of change as the line above	CVE-2026-73269	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/multicluster engine for kubernetes, not a newly affected product	Time to revision 24 days
2026-09-05	Product added	CVE-2026-85599	getgrav VulnCheck	not named as affected at publication, now names grav-plugin-shortcode-coreNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected product	Time to revision 1 days
2026-09-05	Product added	CVE-2026-85600	getgrav VulnCheck	not named as affected at publication, now names grav-plugin-admin2Not counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected product	Time to revision 1 days
2026-09-05	Product added	CVE-2026-85602	getgrav VulnCheck	not named as affected at publication, now names grav-plugin-formNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected product	Time to revision 1 days
Fri 4 Sep 2026· 25 changes
2026-09-04	Affected range extended	CVE-2026-14466	stormshieldstormshield network security airbus	stated at publication 5.0.6, now states 5.1.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 5.0.6 still holds	Duration unknown
2026-09-045 commits	Product added	Show all 8 CVE records in this change: Product added: 6 products named as affected from lantronixHide the 8 CVE records in this change: Product added: 6 products named as affected from lantronix18 rows, one per record and product	lantronix mitre	not named as affected at publication, now names eds3000ps series and 5 moreBranches and original-value intervals are stated on each row.not counted: No products named at publication	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67041	same vendor as the line above	not named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-70082	same vendor as the line above	not named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67038	same vendor as the line above	not named as affected at publication, now names e210 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67038	same vendor as the line above	not named as affected at publication, now names e220 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67038	same vendor as the line above	not named as affected at publication, now names eds5000 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67038	same vendor as the line above	not named as affected at publication, now names g520 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67038	same vendor as the line above	not named as affected at publication, now names x300 seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
2026-09-04	same kind of change as the line above	CVE-2025-67039	same vendor as the line above	not named as affected at publication, now names eds3000ps seriesNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 178 days
10 more rows in this change are not listed here. Open all 18 rows →
2026-09-042 commits	Product added	Show all 2 CVE records in this change: Product added: red hat jboss enterprise application platform 8.1.6 named as affected from red hatHide the 2 CVE records in this change: Product added: red hat jboss enterprise application platform 8.1.6 named as affected from red hat	red hat	not named as affected at publication, now names red hat jboss enterprise application platform 8.1.6Branches and original-value intervals are stated on each row.not counted: Product relabelled	Time to revision 240 to 275 days
2026-09-04	same kind of change as the line above	CVE-2024-3884	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/red hat jboss enterprise application platform 8, not a newly affected product	Time to revision 275 days
2026-09-04	same kind of change as the line above	CVE-2025-12543	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of red hat/red hat jboss enterprise application platform 8, not a newly affected product	Time to revision 240 days
2026-09-04	Product added	CVE-2024-5971	red hat	not named as affected at publication, now names red hat jboss enterprise application platformNot counted: Already named at publication. already named at publication inside red hat/red hat jboss enterprise application platform 7 — the record spelled this product out all along	Time to revision 788 days
2026-09-04	Product added	CVE-2026-77995	miniorange.com Joomla	not named as affected at publication, now names miniorange oauth client (free) extension for joomlaNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed miniorange.com/miniorange oauth client extension for joomla; a new product identity is not established	Time to revision 11 days
2026-09-04	Product added	CVE-2026-16493Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-16493Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-16493	red hat	not named as affected at publication, now names red hat satellite 6.18 for rhel 9 and 1 morenot counted: Product relabelled	Time to revision 44 days
2026-09-04	same kind of change as the line above	CVE-2026-16493	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.18 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected product	Time to revision 44 days
2026-09-04	same kind of change as the line above	CVE-2026-16493	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.19 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected product	Time to revision 44 days
Thu 3 Sep 2026· 21 changes
2026-09-03	Fix version moved	Show all 7 CVE records in this change: Fix version moved: 2026.2.2 → 2026.3.1 from watchguardHide the 7 CVE records in this change: Fix version moved: 2026.2.2 → 2026.3.1 from watchguard	watchguardfireware os	stated at publication 2026.2.2, now states 2026.3.1Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-13086	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19313	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19314	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19315	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19316	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19317	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-03	same kind of change as the line above	CVE-2026-19318	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2026.2.2 still holds	Duration unknown
2026-09-036 commits	Product added	Show all 10 CVE records in this change: Product added: 6 products named as affected from red hatHide the 10 CVE records in this change: Product added: 6 products named as affected from red hat	red hat	not named as affected at publication, now names red hat satellite 6.17 for rhel 9 and 5 moreBranches and original-value intervals are stated on each row.not counted: 2 classes	Time to revision 3 to 45 days
2026-09-03	same kind of change as the line above	CVE-2026-16493	same vendor as the line above	not named as affected at publication, now names red hat satellite 6.17 for rhel 9Not counted: Product relabelled. probable relabelling of red hat/red hat satellite 6, not a newly affected product	Time to revision 44 days
2026-09-03	same kind of change as the line above	CVE-2026-15563	same vendor as the line above	not named as affected at publication, now names red hat fuse 7Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 24 days
2026-09-03	same kind of change as the line above	CVE-2026-15927	same vendor as the line above	not named as affected at publication, now names red hat quay 3.15Not counted: Product relabelled. probable relabelling of red hat/red hat quay 3, not a newly affected product	Time to revision 45 days
2026-09-03	same kind of change as the line above	CVE-2026-12894	same vendor as the line above	not named as affected at publication, now names red hat build of apache camel 3.33 for quarkus 3.33.3.sp1Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 3 days
2026-09-03	same kind of change as the line above	CVE-2026-17615	same vendor as the line above	not named as affected at publication, now names red hat build of apache camel 3.33 for quarkus 3.33.3.sp1Not counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 3 days
2026-09-03	same kind of change as the line above	CVE-2026-49332	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected product	Time to revision 37 days
2026-09-03	same kind of change as the line above	CVE-2026-50236	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected product	Time to revision 23 days
2026-09-03	same kind of change as the line above	CVE-2026-50237	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.17Not counted: Product relabelled. probable relabelling of red hat/red hat openshift container platform 4, not a newly affected product	Time to revision 23 days
2 more rows in this change are not listed here. Open all 10 rows →
2026-09-03	Product added	CVE-2025-9189	measx NI	not named as affected at publication, now names dasylabNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 366 days
2026-09-03	Product added	CVE-2026-0872	thalesgroup THA-PSIRT	not named as affected at publication, now names safenet agent for windows logonNot counted: Product relabelled. probable relabelling of thales/safenet agent for windows logon, not a newly affected product	Time to revision 202 days
2026-09-03	Product added	CVE-2026-3457	thalesgroup THA-PSIRT	not named as affected at publication, now names sentinel ldk runtimeNot counted: Product relabelled. probable relabelling of thales/sentinel ldk runtime, not a newly affected product	Time to revision 160 days
2026-09-03	Product added	CVE-2025-12107	wso2	not named as affected at publication, now names identity serverNot counted: Product relabelled. probable relabelling of wso2/wso2 identity server, not a newly affected product	Time to revision 196 days
Wed 2 Sep 2026· 2 changes
2026-09-02	Affected range extended	CVE-2026-82641	keploykeploy VulnCheck	stated at publication 3.6.25, now states 3.6.26Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.6.25 still holds	Duration unknown
2026-09-02published 2026-06-16	Package added to advisory	GHSA-9cr8-q42q-g8m7CVE-2026-53622	go high	not named as affected when the advisory was published, now names github.com/traefik/traefik/v3	Time to revision 78 days
Tue 1 Sep 2026· 84 changes
2026-09-01	Forensic triage now required	CVE-2023-49105	ownCloudownCloud CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 5 days
2026-09-01	Forensic triage now required	CVE-2026-53362	LinuxKernel CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 5 days
2026-09-01	Forensic triage now required	CVE-2019-1068	MicrosoftSQL Server CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 6 days
2026-09-01	Forensic triage now required	CVE-2026-60004	GiteaGitea CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 7 days
2026-09-01	Forensic triage now required	CVE-2026-21962	OracleHTTP Server and Oracle Weblogic Server Proxy Plug-in CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 8 days
2026-09-01	Forensic triage now required	CVE-2026-73570	SynacorZimbra Collaboration Suite (ZCS) CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 11 days
2026-09-01	Forensic triage now required	CVE-2026-72529	TrueConfServer CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 12 days
2026-09-01	Forensic triage now required	CVE-2026-59310	BroadcomVMware vCenter CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 14 days
2026-09-01	Forensic triage now required	Show all 3 CVE records in this change: Forensic triage now required: SharePoint from MicrosoftHide the 3 CVE records in this change: Forensic triage now required: SharePoint from Microsoft	MicrosoftSharePoint	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 14 to 47 days
2026-09-01	same kind of change as the line above	CVE-2026-55040	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 14 days
2026-09-01	same kind of change as the line above	CVE-2026-50522	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 41 days
2026-09-01	same kind of change as the line above	CVE-2026-58644	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 47 days
2026-09-01	Forensic triage now required	CVE-2026-65400	ApplemacOS CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 14 days
2026-09-01	Forensic triage now required	CVE-2025-62593	Ray-ProjectRay CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 15 days
2026-09-01	Forensic triage now required	CVE-2026-72898	MetabaseMetabase CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 21 days
2026-09-01	Forensic triage now required	CVE-2026-8037	ProgressLoadMaster CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 25 days
2026-09-01	Forensic triage now required	CVE-2026-63077	JetBrainsTeamCity CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 27 days
2026-09-01	Forensic triage now required	Show all 2 CVE records in this change: Forensic triage now required: N-central from N-ableHide the 2 CVE records in this change: Forensic triage now required: N-central from N-able	N-ableN-central	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 28 to 29 days
2026-09-01	same kind of change as the line above	CVE-2026-18556	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 28 days
2026-09-01	same kind of change as the line above	CVE-2026-18577	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 29 days
2026-09-01	Forensic triage now required	CVE-2026-9198	IBMLangflow CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 28 days
2026-09-01	Forensic triage now required	CVE-2026-16812	AristaVeloCloud Orchestrator CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 36 days
2026-09-01	Forensic triage now required	CVE-2026-16232	Check PointSmartConsole CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 41 days
2026-09-01	Forensic triage now required	CVE-2026-63030	WordPressCore CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 42 days
2026-09-01	Forensic triage now required	Show all 2 CVE records in this change: Forensic triage now required: Langflow from LangflowHide the 2 CVE records in this change: Forensic triage now required: Langflow from Langflow	LangflowLangflow	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 42 to 56 days
2026-09-01	same kind of change as the line above	CVE-2026-0770	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 42 days
2026-09-01	same kind of change as the line above	CVE-2026-55255	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 56 days
2026-09-01	Forensic triage now required	CVE-2021-27137	DD-WRTDD-WRT CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 42 days
2026-09-01	Forensic triage now required	Show all 2 CVE records in this change: Forensic triage now required: FortiSandbox from FortinetHide the 2 CVE records in this change: Forensic triage now required: FortiSandbox from Fortinet	FortinetFortiSandbox	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 47 days
2026-09-01	same kind of change as the line above	CVE-2026-25089	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 47 days
2026-09-01	same kind of change as the line above	CVE-2026-39808	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 47 days
2026-09-01	Forensic triage now required	CVE-2026-46817	OracleE-Business Suite CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 48 days
2026-09-01	Forensic triage now required	Show all 2 CVE records in this change: Forensic triage now required: SharePoint Server from MicrosoftHide the 2 CVE records in this change: Forensic triage now required: SharePoint Server from Microsoft	MicrosoftSharePoint Server	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 49 to 62 days
2026-09-01	same kind of change as the line above	CVE-2026-56164	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 49 days
2026-09-01	same kind of change as the line above	CVE-2026-45659	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 62 days
2026-09-01	Forensic triage now required	Show all 2 CVE records in this change: Forensic triage now required: SMA1000 Appliances from SonicWallHide the 2 CVE records in this change: Forensic triage now required: SMA1000 Appliances from SonicWall	SonicWallSMA1000 Appliances	stated at publication not stated, now states Yesnot counted: The prior instruction already required triage	Time to revision 49 days
2026-09-01	same kind of change as the line above	CVE-2026-15409	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 49 days
2026-09-01	same kind of change as the line above	CVE-2026-15410	same vendor as the line above	same change as the line aboveNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 49 days
2026-09-01	Forensic triage now required	CVE-2008-4128	CiscoIOS CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 50 days
2026-09-01	Forensic triage now required	CVE-2026-56291	BalbooaForms CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 53 days
2026-09-01	Forensic triage now required	CVE-2026-48939	iCagendaiCagenda CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 53 days
2026-09-01	Forensic triage now required	CVE-2026-48908	JoomShaperSP Page Builder CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 56 days
2026-09-01	Forensic triage now required	CVE-2026-56290	JoomlackPage Builder CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 56 days
2026-09-01	Forensic triage now required	CVE-2026-48282	AdobeColdFusion CISA KEV	stated at publication not stated, now states YesNot counted: The prior instruction already required triage. requiredAction already named CISA's Forensics Triage Requirements; the structured field changed, not the first stated requirement	Time to revision 56 days
2026-09-012 commits	Product added	Show all 4 CVE records in this change: Product added: the grid named as affected from themeoneHide the 4 CVE records in this change: Product added: the grid named as affected from themeone	themeone Patchstack	not named as affected at publication, now names the gridBranches and original-value intervals are stated on each row.not counted: Product relabelled	Time to revision 14 to 222 days
2026-09-01	same kind of change as the line above	CVE-2026-24370	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected product	Time to revision 160 days
2026-09-01	same kind of change as the line above	CVE-2026-24368	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected product	Time to revision 222 days
2026-09-01	same kind of change as the line above	CVE-2026-24369	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of theme-one/the grid, not a newly affected product	Time to revision 160 days
2026-09-01	same kind of change as the line above	CVE-2026-28191	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of theme-one inc./the grid, not a newly affected product	Time to revision 14 days
2026-09-01	Product added	Show all 26 CVE records in this change: Product added: thunderbird named as affected from mozillaHide the 26 CVE records in this change: Product added: thunderbird named as affected from mozilla	mozilla	not named as affected at publication, now names thunderbirdnot counted: Added entry does not state affected status	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84118	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84119	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84120	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84121	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84122	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84123	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84124	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
2026-09-01	same kind of change as the line above	CVE-2026-84125	same vendor as the line above	same change as the line aboveNot counted: Added entry does not state affected status. the added entry states no affected version or affected default — membership in affected[] alone does not establish exposure	Time to revision 0 days
18 more rows in this change are not listed here. Open all 26 rows →
2026-09-01	Product added	Show all 8 CVE records in this change: Product added: planet gs-4210-16p2s v3 named as affected from planet technology corp.Hide the 8 CVE records in this change: Product added: planet gs-4210-16p2s v3 named as affected from planet technology corp.	planet technology corp. VulnCheck	not named as affected at publication, now names planet gs-4210-16p2s v3not counted: Product relabelled	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75121	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75122	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75123	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75124	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75125	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-75126	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-77217	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-01	same kind of change as the line above	CVE-2026-77218	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of planet technology corp./planet gs-4210-16p2s, not a newly affected product	Time to revision 4 days
2026-09-015 commits	Product added	Show all 7 CVE records in this change: Product added: 6 products named as affected from red hatHide the 7 CVE records in this change: Product added: 6 products named as affected from red hat8 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle support and 5 moreBranches and original-value intervals are stated on each row.not counted: 2 classes	Time to revision 25 to 83 days
2026-09-01	same kind of change as the line above	CVE-2026-15816	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected product	Time to revision 25 days
2026-09-01	same kind of change as the line above	CVE-2026-6893	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle supportNot counted: Product relabelled. probable relabelling of red hat/red hat enterprise linux 7, not a newly affected product	Time to revision 83 days
2026-09-01	same kind of change as the line above	CVE-2026-16615	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 10.0 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 10; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 41 days
2026-09-01	same kind of change as the line above	CVE-2026-18649	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.6 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 26 days
2026-09-01	same kind of change as the line above	CVE-2026-17523	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 36 days
2026-09-01	same kind of change as the line above	CVE-2026-17523	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 36 days
2026-09-01	same kind of change as the line above	CVE-2026-54099	same vendor as the line above	not named as affected at publication, now names red hat openshift for windows containers 10.21Not counted: Product relabelled. probable relabelling of red hat/red hat openshift for windows containers, not a newly affected product	Time to revision 71 days
2026-09-01	same kind of change as the line above	CVE-2026-54100	same vendor as the line above	not named as affected at publication, now names red hat openshift for windows containers 10.21Not counted: Product relabelled. probable relabelling of red hat/red hat openshift for windows containers, not a newly affected product	Time to revision 71 days
Mon 31 Aug 2026· 23 changes
2026-08-31	Affected range extended	Show all 3 CVE records in this change: Affected range extended: 4.4.1 → 4.4.2 from zephyrprojectHide the 3 CVE records in this change: Affected range extended: 4.4.1 → 4.4.2 from zephyrproject	zephyrprojectzephyr zephyr	stated at publication 4.4.1, now states 4.4.23 release branches. Branches and original-value intervals are stated on each row.not counted: Same claim, other operator	Time to revision 21 to 33 days
2026-08-31	same kind of change as the line above	CVE-2026-10684	same vendor as the line above	same change as the line aboveRelease branch starts at 4.4.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operator	Time to revision 33 days
2026-08-31	same kind of change as the line above	CVE-2026-11812	same vendor as the line above	same change as the line aboveRelease branch starts at 2.0.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operator	Time to revision 21 days
2026-08-31	same kind of change as the line above	CVE-2026-11985	same vendor as the line above	same change as the line aboveRelease branch starts at 1.13.0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operator	Time to revision 21 days
2026-08-317 commits	Product added	Show all 9 CVE records in this change: Product added: 8 products named as affected from red hatHide the 9 CVE records in this change: Product added: 8 products named as affected from red hat18 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update service and 7 moreBranches and original-value intervals are stated on each row.not counted: 2 classes	Time to revision 24 to 644 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 telecommunications update serviceNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 89 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.8 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 89 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.6 extended update supportNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 89 days
2026-08-31	same kind of change as the line above	CVE-2026-18649	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.4 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 26 days
2026-08-31	same kind of change as the line above	CVE-2026-5674	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.2 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 46 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 extended update support long-life add-onNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 88 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 extended update support long-life add-onNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 8; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 88 days
2026-08-31	same kind of change as the line above	CVE-2026-10805	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.4 update services for sap solutionsNot counted: A variant beneath an already affected parent. support or installation label under already affected red hat/red hat enterprise linux 9; the record does not establish whether this newly names affected scope or refines the existing product listing	Time to revision 88 days
10 more rows in this change are not listed here. Open all 18 rows →
2026-08-31	Product added	CVE-2026-59111	ministry of the interior (mvčr) ENISA	not named as affected at publication, now names eobčanka-identifikaceNot counted: Product relabelled. probable relabelling of digitální a informační agentura (dia)/eobčanka-identifikace, not a newly affected product	Time to revision 0 days
2026-08-31	CVSS base score changed	CVE-2026-81934	whole record cisa-cg	stated at publication 9.8, now states 7.5Assessments not comparable · base scoreCriticalHighNot counted: CVSS assessments are not comparable. the displayed maximum pair is not established on the same CVSS v3/v4 version, CNA and assessment context; changed scenarios, competing metrics and v2 bands are not comparable	Time to revision 4 days
Sat 29 Aug 2026· 29 changes
2026-08-29	Fix version moved	Show all 28 CVE records in this change: Fix version moved: 18.5 → 18.6Hide the 28 CVE records in this change: Fix version moved: 18.5 → 18.6	vendor not namedpostgresql PostgreSQL	stated at publication 18.5, now states 18.6Release branch starts at 18.not counted: The earlier release did not ship	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14662	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14663	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14664	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14666	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14668	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14669	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14670	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
2026-08-29	same kind of change as the line above	CVE-2026-14671	same vendor as the line above	same change as the line aboveRelease branch starts at 18.Not counted: The earlier release did not ship. the publisher states 18.5 was not shipped; this is a catalog correction to 18.6, not a superseded installed fix — https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/	Time to revision 16 days
20 more rows in this change are not listed here. Open all 28 rows →
2026-08-29	Product added	CVE-2026-72699	getgrav VulnCheck	not named as affected at publication, now names grav-plugin-loginNot counted: Product relabelled. probable relabelling of getgrav/grav, not a newly affected product	Time to revision 4 days
Thu 27 Aug 2026· 336 changes
2026-08-27	Affected range extended	Show all 5 CVE records in this change: Affected range extended: 19.5.5 → 21.1 from adobeHide the 5 CVE records in this change: Affected range extended: 19.5.5 → 21.1 from adobe	adobeindesign desktop	stated at publication 19.5.5, now states 21.1Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21275	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21276	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21277	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21278	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21304	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21281	adobeincopy	stated at publication 19.5.5, now states 21.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 19.5.5 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21283	adobebridge	stated at publication 16.0, now states 16.0.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 16.0 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21287	adobesubstance3d - stager	stated at publication 3.1.5, now states 3.1.6Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.5 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 6 CVE records in this change: Affected range extended: 1.22.4 → 1.22.5 from adobeHide the 6 CVE records in this change: Affected range extended: 1.22.4 → 1.22.5 from adobe	adobesubstance3d - modeler	stated at publication 1.22.4, now states 1.22.5Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21298	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21299	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21300	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21301	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21302	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21303	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.4 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21305	adobesubstance3d - painter	stated at publication 11.0.3, now states 11.1.2Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.0.3 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 6 CVE records in this change: Affected range extended: 25.3 → 26.0 from adobeHide the 6 CVE records in this change: Affected range extended: 25.3 → 26.0 from adobe	adobeaudition	stated at publication 25.3, now states 26.0Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21312	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21313	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21314	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21315	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21316	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21317	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.3 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 15 CVE records in this change: Affected range extended: 25.6 → 26.0 from adobeHide the 15 CVE records in this change: Affected range extended: 25.6 → 26.0 from adobe	adobeafter effects	stated at publication 25.6, now states 26.0Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21318	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21319	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21320	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21321	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21322	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21323	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21324	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21325	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6 still holds	Duration unknown
7 more rows in this change are not listed here. Open all 15 rows →
2026-08-27	Affected range extended	Show all 8 CVE records in this change: Affected range extended: 12.10 → 12.11 from adobeHide the 8 CVE records in this change: Affected range extended: 12.10 → 12.11 from adobe	adobeadobe connect	stated at publication 12.10, now states 12.11Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21331	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27243	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27245	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27246	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27303	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34614	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34615	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34617	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.10 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 3 CVE records in this change: Affected range extended: 20.5.1 → 21.2 from adobeHide the 3 CVE records in this change: Affected range extended: 20.5.1 → 21.2 from adobe	adobeindesign desktop	stated at publication 20.5.1, now states 21.2Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21332	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.1 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21357	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.1 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21358	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.1 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 5 CVE records in this change: Affected range extended: 3.1.6 → 3.1.7 from adobeHide the 5 CVE records in this change: Affected range extended: 3.1.6 → 3.1.7 from adobe	adobesubstance3d - stager	stated at publication 3.1.6, now states 3.1.7Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21341	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21342	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21343	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21344	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.6 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21345	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.6 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 16.0.1 → 16.0.2 from adobeHide the 2 CVE records in this change: Affected range extended: 16.0.1 → 16.0.2 from adobe	adobebridge	stated at publication 16.0.1, now states 16.0.2Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21346	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 16.0.1 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21347	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 16.0.1 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21348	adobesubstance3d - modeler	stated at publication 1.22.5, now states 1.22.6Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.22.5 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-21349	adobelightroom desktop	stated at publication 15.1, now states 15.1.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 9 CVE records in this change: Affected range extended: 11.1.2 → 11.1.3 from adobeHide the 9 CVE records in this change: Affected range extended: 11.1.2 → 11.1.3 from adobe	adobesubstance3d - painter	stated at publication 11.1.2, now states 11.1.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21363	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21364	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-21365	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27214	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27215	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27216	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27217	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27218	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.1.2 still holds	Duration unknown
1 more row in this change is not listed here. Open all 9 rows →
2026-08-27	Affected range extended	Show all 6 CVE records in this change: Affected range extended: 15.1.4 → 16.0.3 from adobeHide the 6 CVE records in this change: Affected range extended: 15.1.4 → 16.0.3 from adobe	adobebridge	stated at publication 15.1.4, now states 16.0.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27222	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27310	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27311	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27312	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27313	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34630	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.1.4 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 9 CVE records in this change: Affected range extended: 21.2 → 21.3 from adobeHide the 9 CVE records in this change: Affected range extended: 21.2 → 21.3 from adobe	adobeindesign desktop	stated at publication 21.2, now states 21.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27238	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27283	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27284	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27285	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27286	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27291	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34627	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34628	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
1 more row in this change is not listed here. Open all 9 rows →
2026-08-27	Affected range extended	CVE-2026-27269	adobepremiere pro	stated at publication 25.5, now states 25.6Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.5 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 7 CVE records in this change: Affected range extended: 3.1.7 → 3.1.8 from adobeHide the 7 CVE records in this change: Affected range extended: 3.1.7 → 3.1.8 from adobe	adobesubstance3d - stager	stated at publication 3.1.7, now states 3.1.8Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27273	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27274	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27275	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27276	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27277	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27279	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27309	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.7 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 21.2 → 21.3 from adobeHide the 2 CVE records in this change: Affected range extended: 21.2 → 21.3 from adobe	adobeincopy	stated at publication 21.2, now states 21.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27287	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34631	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.2 still holds	Duration unknown
2026-08-27	Affected range extended	CVE-2026-27289	adobephotoshop desktop	stated at publication 27.4, now states 27.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 27.4 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 11 CVE records in this change: Affected range extended: 2022.8 → 2022.9 from adobeHide the 11 CVE records in this change: Affected range extended: 2022.8 → 2022.9 from adobe	adobeadobe framemaker	stated at publication 2022.8, now states 2022.9Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27290	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27292	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27293	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27294	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27295	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27296	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27297	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-27298	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2022.8 still holds	Duration unknown
3 more rows in this change are not listed here. Open all 11 rows →
2026-08-27	Affected range extended	Show all 3 CVE records in this change: Affected range extended: 25.6.4 → 25.6.5 from adobeHide the 3 CVE records in this change: Affected range extended: 25.6.4 → 25.6.5 from adobe	adobepremiere pro	stated at publication 25.6.4, now states 25.6.5Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34636	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34637	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34638	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 3 CVE records in this change: Affected range extended: 25.6.4 → 26.2 from adobeHide the 3 CVE records in this change: Affected range extended: 25.6.4 → 26.2 from adobe	adobeafter effects	stated at publication 25.6.4, now states 26.2Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34642	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34643	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34644	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 25.6.4 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 12.0.2 → 12.0.3 from adobeHide the 2 CVE records in this change: Affected range extended: 12.0.2 → 12.0.3 from adobe	adobesubstance3d - painter	stated at publication 12.0.2, now states 12.0.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34675	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.0.2 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34676	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 12.0.2 still holds	Duration unknown
2026-08-27	Affected range extended	Show all 12 CVE records in this change: Affected range extended: 20.5.3 → 21.4 from adobeHide the 12 CVE records in this change: Affected range extended: 20.5.3 → 21.4 from adobe	adobeindesign desktop	stated at publication 20.5.3, now states 21.4Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34695	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34696	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34697	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34698	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34699	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34700	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34701	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34702	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
4 more rows in this change are not listed here. Open all 12 rows →
2026-08-27	Affected range extended	Show all 3 CVE records in this change: Affected range extended: 20.5.3 → 21.4 from adobeHide the 3 CVE records in this change: Affected range extended: 20.5.3 → 21.4 from adobe	adobeincopy	stated at publication 20.5.3, now states 21.4Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34706	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34707	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-27	same kind of change as the line above	CVE-2026-34708	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 20.5.3 still holds	Duration unknown
2026-08-273 commits	Product added	Show all 94 CVE records in this change: Product added: 14 products named as affected from adobeHide the 94 CVE records in this change: Product added: 14 products named as affected from adobe181 rows, one per record and product	adobe	not named as affected at publication, now names substance3d - painter and 13 moreBranches and original-value intervals are stated on each row.not counted: 2 classes	Time to revision 2 to 226 days
2026-08-27	same kind of change as the line above	CVE-2026-75749	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75750	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75752	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75766	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75767	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75768	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75769	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
2026-08-27	same kind of change as the line above	CVE-2026-75770	same vendor as the line above	not named as affected at publication, now names substance3d - painterNot counted: Product relabelled. probable relabelling of adobe/adobe substance 3d painter, not a newly affected product	Time to revision 2 days
173 more rows in this change are not listed here. Open all 181 rows →
2026-08-27	Product added	CVE-2026-4398	gitlab	not named as affected at publication, now names gitlabNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' from	Time to revision 0 days
2026-08-27	Product added	Show all 2 CVE records in this change: Product added: micrometer named as affected from springHide the 2 CVE records in this change: Product added: micrometer named as affected from spring	spring vmware	not named as affected at publication, now names micrometernot counted: Product relabelled	Time to revision 3 to 6 days
2026-08-27	same kind of change as the line above	CVE-2026-59295	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of vmware (broadcom)/io.micrometer:micrometer-core, not a newly affected product	Time to revision 3 days
2026-08-27	same kind of change as the line above	CVE-2026-59296	same vendor as the line above	same change as the line aboveNot counted: Product relabelled. probable relabelling of vmware/spring micrometer, not a newly affected product	Time to revision 6 days
2026-08-27	Product added	Show all 9 CVE records in this change: Product added: 3 products named as affected from red hatHide the 9 CVE records in this change: Product added: 3 products named as affected from red hat27 rows, one per record and product	red hat	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.11 and 2 morenot counted: Product relabelled	Time to revision 6 to 22 days
2026-08-27	same kind of change as the line above	CVE-2026-10090	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.11Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 22 days
2026-08-27	same kind of change as the line above	CVE-2026-10090	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.14Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 22 days
2026-08-27	same kind of change as the line above	CVE-2026-10090	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.16Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 22 days
2026-08-27	same kind of change as the line above	CVE-2026-18874	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.11Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 7 days
2026-08-27	same kind of change as the line above	CVE-2026-18874	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.14Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 7 days
2026-08-27	same kind of change as the line above	CVE-2026-18874	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.16Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 7 days
2026-08-27	same kind of change as the line above	CVE-2026-64927	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.11Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 15 days
2026-08-27	same kind of change as the line above	CVE-2026-64927	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster management for kubernetes 2.14Not counted: Product relabelled. probable relabelling of red hat/red hat advanced cluster management for kubernetes 2, not a newly affected product	Time to revision 15 days
19 more rows in this change are not listed here. Open all 27 rows →
Wed 26 Aug 2026· 10 changes
2026-08-26	Affected range extended	Show all 5 CVE records in this change: Affected range extended: 21.7 → 21.8 from adobeHide the 5 CVE records in this change: Affected range extended: 21.7 → 21.8 from adobe	adobedreamweaver desktop	stated at publication 21.7, now states 21.8Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-47906	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.7 still holds	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-47907	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.7 still holds	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-47908	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.7 still holds	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-47909	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.7 still holds	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-47910	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 21.7 still holds	Duration unknown
2026-08-26	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 1.1.2 → 1.1.3 from adobeHide the 2 CVE records in this change: Affected range extended: 1.1.2 → 1.1.3 from adobe	adobeformat plugins	stated at publication 1.1.2, now states 1.1.3Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-48291	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.2 still holds	Duration unknown
2026-08-26	same kind of change as the line above	CVE-2026-48292	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.2 still holds	Duration unknown
2026-08-26	Affected range extended	CVE-2026-5917	libgit2libgit2 VulnCheck	stated at publication 1.9.0, now states 1.9.7Release branch starts at *.Not counted: Release branches rewritten. the range layout was rewritten: a branch stated at publication is gone and another appeared, so no branch can be matched	Duration unknown
2026-08-26	Product added	CVE-2026-77998	miniorange.com Joomla	not named as affected at publication, now names saml sso free for joomla extension for joomlaNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed miniorange.com/saml sso for joomla extension for joomla; a new product identity is not established	Time to revision 1 days
2026-08-26	CVSS base score changed	CVE-2025-12945	whole record NETGEAR	stated at publication 1.1, now states 2.4Assessments not comparable · base scoreLowLowNot counted: CVSS version set changed. no CVSS version was rescored — the maximum moved because a different CVSS version was added or removed	Time to revision 260 days
Tue 25 Aug 2026· 6 changes
2026-08-25	Fix version moved	Show all 3 CVE records in this change: Fix version moved: 15.7.8 → 26.5 from appleHide the 3 CVE records in this change: Fix version moved: 15.7.8 → 26.5 from apple	applemacos	stated at publication 15.7.8, now states 26.5Release branch starts at *.not counted: Another branch advanced	Duration unknown
2026-08-25	same kind of change as the line above	CVE-2026-28849	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7.8 still holds	Duration unknown
2026-08-25	same kind of change as the line above	CVE-2026-28900	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7.8 still holds	Duration unknown
2026-08-25	same kind of change as the line above	CVE-2026-39877	same vendor as the line above	same change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7.8 still holds	Duration unknown
2026-08-25	Fix version moved	CVE-2026-28984	appleios and ipados	stated at publication 18.7.10, now states 26.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 18.7.10 still holds	Duration unknown
2026-08-25	Affected range extended	CVE-2026-73325	fujitsu researchonecompression VulnCheck	stated at publication 1.2.0, now states 1.2.1Release branch starts at 0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operator	Time to revision 12 days
2026-08-25	Product added	CVE-2024-5647	badhonrocks Wordfence	not named as affected at publication, now names divi torque liteNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed badhonrocks/divi torque – plugin for divi theme and builder; a new product identity is not established	Time to revision 418 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

4,561 record edits in the 52 weeks to 2026-09-07. Scroll for earlier dates.fewermore

Every kind of change

Each bar filters the ledger to that kind, and counts what it would show under the filters already on. Two units, one length scale, never a total.

To a CVE record or a KEV entry

To a GitHub advisory

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →