Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

1,056 record changes · 21 advisory changes · newest first · grouped by dayCSV JSON RSS

Counted changes from the last 30 days, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Fri 14 Aug 2026· 22 changes
2026-08-14	Product added	CVE-2025-14300	tp link systems inc. TPLink	not named as affected at publication, now names tapo c425 v1.2	Time to revision 238 days
2026-08-14	Product added	CVE-2026-73039	streamaserver VulnCheck	not named as affected at publication, now names streama	Time to revision 1 days
2026-08-142 commits	Product added	CVE-2026-13622Show all 11 products in this change: Product added: 11 products named as affected in CVE-2026-13622Hide the 11 products in this change: Product added: 11 products named as affected in CVE-2026-13622	red hat	not named as affected at publication, now names red hat container native virtualization 4.12 and 10 moreBranches and original-value intervals are stated on each row.	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.12	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.15	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.16	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.19	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.21	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.13	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.14	Time to revision 2 days
2026-08-14	same kind of change as the line above	CVE-2026-13622	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.17	Time to revision 2 days
3 more rows in this change are not listed here. Open all 11 rows →
2026-08-14	Product added	CVE-2026-59692	red hat	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle support	Time to revision 36 days
2026-08-14	CVSS base score changed	CVE-2026-65796	whole record microsoft	stated at publication 5.9, now states 8.1CVSS v3.1 · base scoreMediumHigh	Time to revision 3 days
2026-08-14	CVSS base score changed	CVE-2026-44962	whole record hackerone	stated at publication 10.0, now states 9.9CVSS v3.1 · base scoreCriticalCritical	Time to revision 77 days
2026-08-14	CVSS base score changed	CVE-2026-19617	whole record redhat	stated at publication 5.7, now states 5.5CVSS v3.1 · base scoreMediumMedium	Time to revision 0 days
2026-08-142 commits	Record state changed	Show all 2 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 2 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record Patchstack	stated at publication PUBLISHED, now states REJECTEDBranches and original-value intervals are stated on each row.	Time to revision 1 days
2026-08-14	same kind of change as the line above	CVE-2026-73188	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-08-14	same kind of change as the line above	CVE-2026-28184	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-08-14published 2026-04-14	Advisory fix version moved	GHSA-355h-qmc2-wpwfCVE-2026-2332	mavenorg.eclipse.jetty:jetty-http high	stated at publication 11.0.28, now states 11.0.29	Time to revision 35 days
2026-08-14published 2026-02-19	Package added to advisory	GHSA-p6jf-79j3-33f3CVE-2025-13590	maven critical	not named as affected when the advisory was published, now names org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.admin.v1	Time to revision 176 days
2026-08-14published 2026-04-29	Package added to advisory	GHSA-w22p-4x9f-486vCVE-2026-42523	maven critical	not named as affected when the advisory was published, now names com.coravy.hudson.plugins.github:github	Time to revision 107 days
Thu 13 Aug 2026· 63 changes
2026-08-13	Affected range extended	CVE-2026-70556	hubzillahubzilla VulnCheck	stated at publication 11.2.1, now states 11.4Release branch starts at 0.	Time to revision 7 days
2026-08-13	Affected range extended	CVE-2025-7708	atlas educational software industry ltd. co.k12net TR-CERT	stated at publication 09022026, now states 26072025Release branch starts at 0.	Time to revision 185 days
2026-08-13	Affected range extended	CVE-2026-17020	unknownsalon booking system WPScan	stated at publication 10.30.33, now states 10.31.0Release branch starts at 0.	Time to revision 3 days
2026-08-136 commits	Product added	Show all 6 CVE records in this change: Product added: 10 products named as affected from red hatHide the 6 CVE records in this change: Product added: 10 products named as affected from red hat15 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 9 moreBranches and original-value intervals are stated on each row.	Time to revision 36 to 46 days
2026-08-13	same kind of change as the line above	CVE-2026-12912	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 45 days
2026-08-13	same kind of change as the line above	CVE-2026-12912	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 45 days
2026-08-13	same kind of change as the line above	CVE-2026-13601	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 46 days
2026-08-13	same kind of change as the line above	CVE-2026-13601	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 extended update support long-life add-on	Time to revision 46 days
2026-08-13	same kind of change as the line above	CVE-2026-13601	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 46 days
2026-08-13	same kind of change as the line above	CVE-2026-13601	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 extended update support long-life add-on	Time to revision 46 days
2026-08-13	same kind of change as the line above	CVE-2026-59691	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 36 days
2026-08-13	same kind of change as the line above	CVE-2026-59692	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 36 days
7 more rows in this change are not listed here. Open all 15 rows →
2026-08-13	Product added	CVE-2026-39821Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-39821Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-39821	go standard library Go	not named as affected at publication, now names net/http and 1 more	Time to revision 83 days
2026-08-13	same kind of change as the line above	CVE-2026-39821	same vendor as the line above	not named as affected at publication, now names net/http	Time to revision 83 days
2026-08-13	same kind of change as the line above	CVE-2026-39821	same vendor as the line above	not named as affected at publication, now names net/http/internal/http2	Time to revision 83 days
2026-08-13	Product added	CVE-2026-46600	go standard library Go	not named as affected at publication, now names net	Time to revision 23 days
2026-08-13	Product added	CVE-2026-73666	openchoreo GitHub_M	not named as affected at publication, now names backstage-plugins	Time to revision 0 days
2026-08-13	Product added	Show all 25 CVE records in this change: Product added: office online server named as affected from microsoftHide the 25 CVE records in this change: Product added: office online server named as affected from microsoft	microsoft	not named as affected at publication, now names office online server	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-65807	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68793	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68794	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68795	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68796	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68797	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68799	same vendor as the line above	same change as the line above	Time to revision 2 days
2026-08-13	same kind of change as the line above	CVE-2026-68800	same vendor as the line above	same change as the line above	Time to revision 2 days
17 more rows in this change are not listed here. Open all 25 rows →
2026-08-13	Product added	Show all 3 CVE records in this change: Product added: alanweb scada named as affected from control systemHide the 3 CVE records in this change: Product added: alanweb scada named as affected from control system	control system CERT-PL	not named as affected at publication, now names alanweb scada	Time to revision 126 days
2026-08-13	same kind of change as the line above	CVE-2026-34184	same vendor as the line above	same change as the line above	Time to revision 126 days
2026-08-13	same kind of change as the line above	CVE-2026-34185	same vendor as the line above	same change as the line above	Time to revision 126 days
2026-08-13	same kind of change as the line above	CVE-2026-4901	same vendor as the line above	same change as the line above	Time to revision 126 days
2026-08-13	Product added	CVE-2026-59086	siemens	not named as affected at publication, now names simcenter femap	Time to revision 2 days
2026-08-13	Record state changed	Show all 10 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 10 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record @huntr_ai	stated at publication PUBLISHED, now states REJECTED	Time to revision 55 to 673 days
2026-08-13	same kind of change as the line above	CVE-2024-12534	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-12537	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-7036	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-7037	same vendor as the line above	same change as the line above	Time to revision 673 days
2026-08-13	same kind of change as the line above	CVE-2024-7045	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-7046	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-7053	same vendor as the line above	same change as the line above	Time to revision 511 days
2026-08-13	same kind of change as the line above	CVE-2024-7990	same vendor as the line above	same change as the line above	Time to revision 511 days
2 more rows in this change are not listed here. Open all 10 rows →
2026-08-13	Record state changed	CVE-2026-19429	whole record TuranSec	stated at publication PUBLISHED, now states REJECTED	Time to revision 3 days
2026-08-13published 2026-07-29	Advisory fix version moved	GHSA-2v37-7h3g-55p8CVE-2026-67213	npmnanoid high	stated at publication 3.3.17, now states 3.3.18	Time to revision 15 days
Wed 12 Aug 2026· 31 changes
2026-08-12	Affected range extended	CVE-2023-42787Show all 2 products in this change: Affected range extended: 6.2.12 → 6.2.13 in CVE-2023-42787Hide the 2 products in this change: Affected range extended: 6.2.12 → 6.2.13 in CVE-2023-42787	fortinet2 products	stated at publication 6.2.12, now states 6.2.13Release branch starts at 6.2.0.	Time to revision 1,037 days
2026-08-12	same kind of change as the line above	CVE-2023-42787	same vendor as the line above	same change as the line aboveRelease branch starts at 6.2.0.	Time to revision 1,037 days
2026-08-12	same kind of change as the line above	CVE-2023-42787	same vendor as the line above	same change as the line aboveRelease branch starts at 6.2.0.	Time to revision 1,037 days
2026-08-12	Affected range extended	CVE-2023-42787Show all 2 products in this change: Affected range extended: 6.4.13 → 6.4.15 in CVE-2023-42787Hide the 2 products in this change: Affected range extended: 6.4.13 → 6.4.15 in CVE-2023-42787	fortinet2 products	stated at publication 6.4.13, now states 6.4.15Release branch starts at 6.4.0.	Time to revision 1,037 days
2026-08-12	same kind of change as the line above	CVE-2023-42787	same vendor as the line above	same change as the line aboveRelease branch starts at 6.4.0.	Time to revision 1,037 days
2026-08-12	same kind of change as the line above	CVE-2023-42787	same vendor as the line above	same change as the line aboveRelease branch starts at 6.4.0.	Time to revision 1,037 days
2026-08-12	Affected range extended	CVE-2026-15229	unknownpinpoint booking system WPScan	stated at publication 2.9.9.6.9, now states 2.9.9.7.1Release branch starts at 0.	Time to revision 2 days
2026-08-12	Product added	Show all 2 CVE records in this change: Product added: gst-plugins-good named as affected from gstreamerHide the 2 CVE records in this change: Product added: gst-plugins-good named as affected from gstreamer	gstreamer redhat	not named as affected at publication, now names gst-plugins-good	Time to revision 0 days
2026-08-12	same kind of change as the line above	CVE-2026-73433	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-08-12	same kind of change as the line above	CVE-2026-73434	same vendor as the line above	same change as the line above	Time to revision 0 days
2026-08-125 commits	Product added	Show all 8 CVE records in this change: Product added: 11 products named as affected from red hatHide the 8 CVE records in this change: Product added: 11 products named as affected from red hat15 rows, one per record and product	red hat	not named as affected at publication, now names red hat openshift container platform 4.16 and 10 moreBranches and original-value intervals are stated on each row.	Time to revision 24 to 127 days
2026-08-12	same kind of change as the line above	CVE-2026-16242	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.16	Time to revision 24 days
2026-08-12	same kind of change as the line above	CVE-2026-13757	same vendor as the line above	not named as affected at publication, now names red hat update infrastructure 5	Time to revision 44 days
2026-08-12	same kind of change as the line above	CVE-2026-14164	same vendor as the line above	not named as affected at publication, now names red hat update infrastructure 5	Time to revision 43 days
2026-08-12	same kind of change as the line above	CVE-2026-55653	same vendor as the line above	not named as affected at publication, now names red hat update infrastructure 5	Time to revision 51 days
2026-08-12	same kind of change as the line above	CVE-2026-55654	same vendor as the line above	not named as affected at publication, now names red hat update infrastructure 5	Time to revision 51 days
2026-08-12	same kind of change as the line above	CVE-2026-55655	same vendor as the line above	not named as affected at publication, now names red hat update infrastructure 5	Time to revision 51 days
2026-08-12	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 7 extended lifecycle support	Time to revision 54 days
2026-08-12	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 54 days
7 more rows in this change are not listed here. Open all 15 rows →
2026-08-122 commits	Product added	Show all 2 CVE records in this change: Product added: fortianalyzer-bigdata named as affected from fortinetHide the 2 CVE records in this change: Product added: fortianalyzer-bigdata named as affected from fortinet	fortinet	not named as affected at publication, now names fortianalyzer-bigdataBranches and original-value intervals are stated on each row.	Time to revision 120 to 1,037 days
2026-08-12	same kind of change as the line above	CVE-2025-61848	same vendor as the line above	same change as the line above	Time to revision 120 days
2026-08-12	same kind of change as the line above	CVE-2023-42787	same vendor as the line above	same change as the line above	Time to revision 1,037 days
2026-08-12	Product added	CVE-2023-42787	fortinet	not named as affected at publication, now names fortianalyzer cloud	Time to revision 1,037 days
2026-08-12	CVSS base score changed	CVE-2026-10090	whole record redhat	stated at publication 9.9, now states 9.0CVSS v3.1 · base scoreCriticalCritical	Time to revision 7 days
2026-08-12	CVSS base score changed	CVE-2026-73434	whole record redhat	stated at publication 7.1, now states 6.1CVSS v3.1 · base scoreHighMedium	Time to revision 0 days
2026-08-12	CVSS base score changed	CVE-2026-73433	whole record redhat	stated at publication 7.6, now states 6.6CVSS v3.1 · base scoreHighMedium	Time to revision 0 days
2026-08-12	Record state changed	CVE-2025-63994	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Time to revision 268 days
2026-08-12	Record state changed	Show all 2 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 2 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 1 days
2026-08-12	same kind of change as the line above	CVE-2026-72745	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-08-12	same kind of change as the line above	CVE-2026-72746	same vendor as the line above	same change as the line above	Time to revision 1 days
Tue 11 Aug 2026· 101 changes
2026-08-11	Added to CISA KEV	CVE-2026-20349	CiscoSecure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) CISA KEV	fix due 2026-08-14	Duration unknown
2026-08-11	Added to CISA KEV	CVE-2026-68820	MicrosoftWindows Ancillary Function Driver for WinSock CISA KEV	fix due 2026-08-25	Duration unknown
2026-08-11	Added to CISA KEV	CVE-2026-72898	MetabaseMetabase CISA KEV	fix due 2026-08-14	Duration unknown
2026-08-11	Fix version moved	Show all 2 CVE records in this change: Fix version moved: 2.4.4 → 2.4.5 from usmannasirHide the 2 CVE records in this change: Fix version moved: 2.4.4 → 2.4.5 from usmannasir	usmannasircyberpanel VulnCheck	stated at publication 2.4.4, now states 2.4.5Release branch starts at 0.	Time to revision 109 days
2026-08-11	same kind of change as the line above	CVE-2026-41472	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-08-11	same kind of change as the line above	CVE-2026-41473	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 109 days
2026-08-11	Affected range extended	CVE-2026-57802	select-themesstruktur Patchstack	stated at publication 2.5.1, now states 2.7Release branch starts at 0.	Time to revision 29 days
2026-08-11	Affected range extended	CVE-2026-57803	select-themesstruktur core Patchstack	stated at publication 2.5.1, now states 2.7Release branch starts at 0.	Time to revision 29 days
2026-08-11	Product added	CVE-2026-12001	tp link systems inc. TPLink	not named as affected at publication, now names tl-wr902ac v4	Time to revision 15 days
2026-08-1112 commits	Product added	Show all 39 CVE records in this change: Product added: 19 products named as affected from red hatHide the 39 CVE records in this change: Product added: 19 products named as affected from red hat84 rows, one per record and product	red hat	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7 and 18 moreBranches and original-value intervals are stated on each row.	Time to revision 0 to 679 days
2026-08-11	same kind of change as the line above	CVE-2026-10579	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15554	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15555	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15556	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15560	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15561	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15562	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
2026-08-11	same kind of change as the line above	CVE-2026-15563	same vendor as the line above	not named as affected at publication, now names red hat jboss enterprise application platform 7.4 els on rhel 7	Time to revision 1 days
76 more rows in this change are not listed here. Open all 84 rows →
2026-08-11	Product added	CVE-2026-59118	microsoft	not named as affected at publication, now names copilot cowork	Time to revision 5 days
2026-08-11	CVSS base score changed	CVE-2025-61848	whole record fortinet	stated at publication 6.8, now states 6.5CVSS v3.1 · base scoreMediumMedium	Time to revision 119 days
2026-08-11	CVSS base score changed	CVE-2026-18635	whole record rapid7	stated at publication 6.2, now states 7.2CVSS v3.1 · base scoreMediumHigh	Time to revision 0 days
2026-08-11	CVSS base score changed	CVE-2026-18772	whole record samsung.tv_appliance	stated at publication 5.5, now states 6.5CVSS v3.1 · base scoreMediumMedium	Time to revision 7 days
2026-08-11	Record state changed	Show all 4 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 4 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record Linux	stated at publication PUBLISHED, now states REJECTED	Time to revision 1 to 130 days
2026-08-11	same kind of change as the line above	CVE-2026-31404	same vendor as the line above	same change as the line above	Time to revision 130 days
2026-08-11	same kind of change as the line above	CVE-2026-46194	same vendor as the line above	same change as the line above	Time to revision 75 days
2026-08-11	same kind of change as the line above	CVE-2026-63872	same vendor as the line above	same change as the line above	Time to revision 23 days
2026-08-11	same kind of change as the line above	CVE-2026-68171	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-08-11published 2026-06-26	Advisory severity changed	GHSA-4c3c-r6p8-c863CVE-2026-48813	whole advisoryhigh	stated at publication LOW, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Time to revision 46 days
Mon 10 Aug 2026· 19 changes
2026-08-10	Ransomware use confirmed	CVE-2026-45659	MicrosoftSharePoint Server CISA KEV	stated at publication Unknown, now states Known	Time to revision 40 days
2026-08-10	Affected range extended	CVE-2025-12026	watchguardfireware os	stated at publication 12.11.4, now states 12.11.5Release branch starts at 12.0.	Time to revision 249 days
2026-08-10	Affected range extended	CVE-2025-11838	watchguardfireware os	stated at publication 2025.1.2, now states 2025.1.3Release branch starts at 2025.1.	Time to revision 249 days
2026-08-10	Affected range extended	CVE-2025-1547	watchguardfireware os	stated at publication 12.5.12+701324, now states 12.11.3Release branch starts at 12.0.	Time to revision 249 days
2026-08-103 commits	Affected range extended	Show all 6 CVE records in this change: Affected range extended: 3.12.26 → 3.12.28 from unknownHide the 6 CVE records in this change: Affected range extended: 3.12.26 → 3.12.28 from unknown	unknowneasy appointments WPScan	stated at publication 3.12.26, now states 3.12.28Branches and original-value intervals are stated on each row.	Time to revision 4 to 12 days
2026-08-10	same kind of change as the line above	CVE-2026-14224	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 12 days
2026-08-10	same kind of change as the line above	CVE-2026-14188	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 11 days
2026-08-10	same kind of change as the line above	CVE-2026-14223	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 11 days
2026-08-10	same kind of change as the line above	CVE-2026-14222	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 11 days
2026-08-10	same kind of change as the line above	CVE-2026-14225	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 4 days
2026-08-10	same kind of change as the line above	CVE-2026-14226	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 11 days
2026-08-10	Affected range extended	CVE-2026-14221	unknowneasy appointments WPScan	stated at publication 3.12.26, now states 4.0Release branch starts at 0.	Time to revision 11 days
2026-08-10	Product added	CVE-2026-13079	watchguard	not named as affected at publication, now names mobile vpn with ssl client	Time to revision 39 days
2026-08-10	Product added	CVE-2023-2008Show all 2 products in this change: Product added: 2 products named as affected in CVE-2023-2008Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2023-2008	red hat	not named as affected at publication, now names red hat enterprise linux 9 and 1 more	Time to revision 1,215 days
2026-08-10	same kind of change as the line above	CVE-2023-2008	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9	Time to revision 1,215 days
2026-08-10	same kind of change as the line above	CVE-2023-2008	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9.0 extended update support	Time to revision 1,215 days
2026-08-10	Product added	CVE-2024-21489	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:uplot	Time to revision 678 days
2026-08-102 commits	Product added	Show all 3 CVE records in this change: Product added: libkcapi named as affected from stephan muelleHide the 3 CVE records in this change: Product added: libkcapi named as affected from stephan muelle	stephan muelle redhat	not named as affected at publication, now names libkcapiBranches and original-value intervals are stated on each row.	Time to revision 5 days
2026-08-10	same kind of change as the line above	CVE-2026-71227	same vendor as the line above	same change as the line above	Time to revision 5 days
2026-08-10	same kind of change as the line above	CVE-2026-71225	same vendor as the line above	same change as the line above	Time to revision 5 days
2026-08-10	same kind of change as the line above	CVE-2026-71226	same vendor as the line above	same change as the line above	Time to revision 5 days
2026-08-10	CVSS base score changed	CVE-2026-66738	whole record VulnCheck	stated at publication 9.8, now states 8.8CVSS v3.1 · base scoreCriticalHigh	Time to revision 0 days
Sun 9 Aug 2026· 1 change
2026-08-09	Product added	CVE-2026-16242	red hat	not named as affected at publication, now names red hat openshift container platform 4.2	Time to revision 20 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Every kind of change

Each bar filters the ledger to that kind, and counts what it would show under the filters already on. Two units, one length scale, never a total.

To a CVE record or a KEV entry

To a GitHub advisory

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →