Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 22 Jul 2026· 22 changes
2026-07-22	Product added	CVE-2026-47304Show all 3 products in this change: Product added: 3 products named as affected in CVE-2026-47304Hide the 3 products in this change: Product added: 3 products named as affected in CVE-2026-47304	microsoft	not named as affected at publication, now names .net 10.0 and 2 more	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names .net 10.0	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names .net 8.0	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names .net 9.0	Time to revision 8 days
2026-07-22	Product added	Show all 12 CVE records in this change: Product added: microsoft .net framework 4.8.1 named as affected from microsoftHide the 12 CVE records in this change: Product added: microsoft .net framework 4.8.1 named as affected from microsoft	microsoft	not named as affected at publication, now names microsoft .net framework 4.8.1	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50324	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50355	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50368	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50411	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50525	same vendor as the line above	same change as the line above	Time to revision 8 days
2026-07-22	same kind of change as the line above	CVE-2026-50647	same vendor as the line above	same change as the line above	Time to revision 8 days
4 more rows in this change are not listed here. Open all 12 rows →
2026-07-222 commits	Product added	Show all 5 CVE records in this change: Product added: red hat openshift container platform 4.19 named as affected from red hatHide the 5 CVE records in this change: Product added: red hat openshift container platform 4.19 named as affected from red hat	red hat	not named as affected at publication, now names red hat openshift container platform 4.19Branches and original-value intervals are stated on each row.	Time to revision 57 to 76 days
2026-07-22	same kind of change as the line above	CVE-2026-42011	same vendor as the line above	same change as the line above	Time to revision 76 days
2026-07-22	same kind of change as the line above	CVE-2026-42013	same vendor as the line above	same change as the line above	Time to revision 57 days
2026-07-22	same kind of change as the line above	CVE-2026-5260	same vendor as the line above	same change as the line above	Time to revision 57 days
2026-07-22	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	same change as the line above	Time to revision 65 days
2026-07-22	same kind of change as the line above	CVE-2026-42010	same vendor as the line above	same change as the line above	Time to revision 76 days
2026-07-22	Product added	CVE-2026-56208	red hat	not named as affected at publication, now names red hat enterprise linux 8	Time to revision 33 days
2026-07-22	CVSS base score changed	CVE-2026-7253	whole record ibm	stated at publication 5.3, now states 6.0CVSS v3.1 · base scoreMediumMedium	Time to revision 30 days
Tue 21 Jul 2026· 30 changes
2026-07-21	Added to CISA KEV	Show all 2 CVE records in this change: Added to CISA KEV: Core from WordPressHide the 2 CVE records in this change: Added to CISA KEV: Core from WordPress	WordPressCore	fix due 2026-08-04	Duration unknown
2026-07-21	same kind of change as the line above	CVE-2026-60137	same vendor as the line above	same change as the line above	Duration unknown
2026-07-21	same kind of change as the line above	CVE-2026-63030	same vendor as the line above	same change as the line above	Duration unknown
2026-07-21	Added to CISA KEV	CVE-2026-0770	LangflowLangflow CISA KEV	fix due 2026-07-24	Duration unknown
2026-07-21	Added to CISA KEV	CVE-2021-27137	DD-WRTDD-WRT CISA KEV	fix due 2026-07-24	Duration unknown
2026-07-21	Ransomware use confirmed	CVE-2026-0257	Palo Alto NetworksPAN-OS CISA KEV	stated at publication Unknown, now states Known	Time to revision 53 days
2026-07-21	Fix version moved	CVE-2026-64824	home-assistanthome assistant core VulnCheck	stated at publication 2026.6.0, now states 2026.7.0Release branch starts at 0.same day	Time to revision 0 days
2026-07-21	Product added	CVE-2026-47304Show all 3 products in this change: Product added: 3 products named as affected in CVE-2026-47304Hide the 3 products in this change: Product added: 3 products named as affected in CVE-2026-47304	microsoft	not named as affected at publication, now names microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8) and 2 more	Time to revision 7 days
2026-07-21	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)	Time to revision 7 days
2026-07-21	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)	Time to revision 7 days
2026-07-21	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft visual studio 2026 version 18.5	Time to revision 7 days
2026-07-21	Product added	Show all 4 CVE records in this change: Product added: red hat enterprise linux ai 3.5 for rhel 9 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat enterprise linux ai 3.5 for rhel 9 named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux ai 3.5 for rhel 9	Time to revision 32 days
2026-07-21	same kind of change as the line above	CVE-2026-56208	same vendor as the line above	same change as the line above	Time to revision 32 days
2026-07-21	same kind of change as the line above	CVE-2026-56209	same vendor as the line above	same change as the line above	Time to revision 32 days
2026-07-21	same kind of change as the line above	CVE-2026-56210	same vendor as the line above	same change as the line above	Time to revision 32 days
2026-07-21	same kind of change as the line above	CVE-2026-56211	same vendor as the line above	same change as the line above	Time to revision 32 days
2026-07-21	Product added	CVE-2026-16118	xdg redhat	not named as affected at publication, now names xdgmime	Time to revision 4 days
2026-07-21	Product added	CVE-2025-57847	red hat	not named as affected at publication, now names red hat ansible automation platform 2.5	Time to revision 104 days
2026-07-21	Product added	CVE-2026-12701Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-12701Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-12701	red hat	not named as affected at publication, now names red hat ansible automation platform 2.6 and 1 more	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-12701	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.6	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-12701	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.7	Time to revision 1 days
2026-07-21	CVSS base score changed	CVE-2026-48356	whole record adobe	stated at publication 9.6, now states 9.3CVSS v3.1 · base scoreCriticalCritical	Time to revision 7 days
2026-07-21	Record state changed	Show all 4 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 4 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record GitHub_M	stated at publication PUBLISHED, now states REJECTED	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-44507	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-44508	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-44509	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-07-21	same kind of change as the line above	CVE-2026-44510	same vendor as the line above	same change as the line above	Time to revision 1 days
2026-07-21	Record state changed	CVE-2024-47220	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Time to revision 668 days
2026-07-21published 2026-05-07	Package added to advisory	GHSA-g924-cjx7-2rjwCVE-2026-42597	go moderate	not named as affected when the advisory was published, now names github.com/gotenberg/gotenberg/v7	Time to revision 76 days
2026-07-21published 2026-04-14	Package added to advisory	GHSA-2hx3-vp6r-mg3fShow all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-2hx3-vp6r-mg3fHide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-2hx3-vp6r-mg3f	nuget high	not named as affected when the advisory was published, now names microsoft.openapi.kiota and 1 more	Time to revision 98 days
2026-07-21published 2026-04-14	same kind of change as the line above	GHSA-2hx3-vp6r-mg3fCVE-2026-41134	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.openapi.kiota	Time to revision 98 days
2026-07-21published 2026-04-14	same kind of change as the line above	GHSA-2hx3-vp6r-mg3fCVE-2026-41134	same package registry as the line abovehigh	not named as affected when the advisory was published, now names microsoft.openapi.kiota.builder	Time to revision 98 days
2026-07-21published 2025-08-26	Advisory severity changed	Show all 2 advisories in this change: Advisory severity changed: MODERATE → HIGHHide the 2 advisories in this change: Advisory severity changed: MODERATE → HIGH	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 329 to 329 days
2026-07-21published 2025-08-26	same kind of change as the line above	GHSA-xp4f-hrf8-rxw7CVE-2025-71344	same package and registry as the line abovehigh	same change as the line above	Time to revision 329 days
2026-07-21published 2025-08-26	same kind of change as the line above	GHSA-3vg9-h568-4w9mCVE-2025-71354	same package and registry as the line abovehigh	same change as the line above	Time to revision 329 days
2026-07-21published 2026-06-23	Advisory severity changed	GHSA-vcm5-gvmp-78mpCVE-2026-52807	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 28 days
2026-07-21published 2026-06-22	Advisory severity changed	GHSA-c4v7-xg93-qf8gCVE-2026-47267	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 29 days
Mon 20 Jul 2026· 17 changes
2026-07-20	Affected range extended	CVE-2026-57956	signozsignoz VulnCheck	stated at publication 0.130.1, now states 0.133.0Release branch starts at 0.	Time to revision 21 days
2026-07-20	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 2.0.1 → 2.1.0 from sankoHide the 2 CVE records in this change: Affected range extended: 2.0.1 → 2.1.0 from sanko	sankonet::bittorrent CPANSec	stated at publication 2.0.1, now states 2.1.0Release branch starts at 0.	Time to revision 20 days
2026-07-20	same kind of change as the line above	CVE-2026-57080	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 20 days
2026-07-20	same kind of change as the line above	CVE-2026-57081	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 20 days
2026-07-203 commits	Product added	Show all 3 CVE records in this change: Product added: 8 products named as affected from red hatHide the 3 CVE records in this change: Product added: 8 products named as affected from red hat11 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 7 moreBranches and original-value intervals are stated on each row.	Time to revision 0 to 46 days
2026-07-20	same kind of change as the line above	CVE-2026-10649	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 34 days
2026-07-20	same kind of change as the line above	CVE-2026-10649	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Time to revision 34 days
2026-07-20	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.6 for rhel 10	Time to revision 46 days
2026-07-20	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.6 for rhel 9	Time to revision 46 days
2026-07-20	same kind of change as the line above	CVE-2026-12701	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.6 for rhel 9	Time to revision 0 days
2026-07-20	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.5 for rhel 8	Time to revision 46 days
2026-07-20	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.5 for rhel 9	Time to revision 46 days
2026-07-20	same kind of change as the line above	CVE-2026-12701	same vendor as the line above	not named as affected at publication, now names red hat ansible automation platform 2.5 for rhel 8	Time to revision 0 days
3 more rows in this change are not listed here. Open all 11 rows →
2026-07-20	CVSS base score changed	CVE-2026-34632	whole record adobe	stated at publication 8.2, now states 8.6CVSS v3.1 · base scoreHighHigh	Time to revision 96 days
2026-07-20published 2025-08-26	Advisory severity changed	GHSA-8r4j-24qv-fmq9CVE-2025-71361	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 328 days
2026-07-20published 2026-06-05	Advisory severity changed	GHSA-jr54-jwhj-55gpCVE-2026-47380	whole advisorymoderate	stated at publication LOW, now states MODERATENo CVSS vector was stated in the first observed version.	Time to revision 45 days
Sat 18 Jul 2026· 2 changes
2026-07-18	CVSS base score changed	CVE-2026-57857	whole record VulnCheck	stated at publication 7.2, now states 5.1CVSS v4.0 · base scoreHighMedium	Time to revision 0 days
2026-07-18published 2025-08-26	Advisory severity changed	GHSA-6w4w-5w54-rjvrCVE-2025-71358	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Time to revision 326 days
Fri 17 Jul 2026· 1 change
2026-07-17	CVSS base score changed	CVE-2026-7189	whole record TR-CERT	stated at publication 8.2, now states 7.5CVSS v3.1 · base scoreHighHigh	Time to revision 0 days
Thu 16 Jul 2026· 72 changes
2026-07-16	Added to CISA KEV	CVE-2026-58644	MicrosoftSharePoint CISA KEV	fix due 2026-07-19	Duration unknown
2026-07-16	Added to CISA KEV	Show all 2 CVE records in this change: Added to CISA KEV: FortiSandbox from FortinetHide the 2 CVE records in this change: Added to CISA KEV: FortiSandbox from Fortinet	FortinetFortiSandbox	fix due 2026-07-19	Duration unknown
2026-07-16	same kind of change as the line above	CVE-2026-25089	same vendor as the line above	same change as the line above	Duration unknown
2026-07-16	same kind of change as the line above	CVE-2026-39808	same vendor as the line above	same change as the line above	Duration unknown
2026-07-16	Affected range extended	CVE-2026-59840	fortinetfortios	stated at publication 7.6.2, now states 7.6.3Release branch starts at 7.6.0.	Time to revision 2 days
2026-07-16	Product added	Show all 8 CVE records in this change: Product added: 6 products named as affected from microsoftHide the 8 CVE records in this change: Product added: 6 products named as affected from microsoft42 rows, one per record and product	microsoft	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2 and 5 more	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8.1	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 4.8	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50324	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50324	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8	Time to revision 2 days
2026-07-16	same kind of change as the line above	CVE-2026-50324	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8.1	Time to revision 2 days
34 more rows in this change are not listed here. Open all 42 rows →
2026-07-16	Product added	CVE-2026-4601	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:jsrsasign	Time to revision 116 days
2026-07-16	Product added	CVE-2026-10840	red hat	not named as affected at publication, now names red hat openshift builds 1.8.1	Time to revision 42 days
2026-07-16	Product added	CVE-2024-8751Show all 16 products in this change: Product added: 16 products named as affected in CVE-2024-8751Hide the 16 products in this change: Product added: 16 products named as affected in CVE-2024-8751	endress+hauser SICK AG	not named as affected at publication, now names flps and 15 more	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names flps	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names gm32	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names gms800	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names gms800 fidor	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names marsic200	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names marsic280	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names marsic300	Time to revision 672 days
2026-07-16	same kind of change as the line above	CVE-2024-8751	same vendor as the line above	not named as affected at publication, now names mcs100ft	Time to revision 672 days
8 more rows in this change are not listed here. Open all 16 rows →
2026-07-16	Record state changed	CVE-2026-6685	whole record runZero	stated at publication PUBLISHED, now states REJECTED	Time to revision 15 days
2026-07-16	Record state changed	Show all 6 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 6 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record @huntr_ai	stated at publication PUBLISHED, now states REJECTED	Time to revision 483 to 645 days
2026-07-16	same kind of change as the line above	CVE-2024-7033	same vendor as the line above	same change as the line above	Time to revision 483 days
2026-07-16	same kind of change as the line above	CVE-2024-7034	same vendor as the line above	same change as the line above	Time to revision 483 days
2026-07-16	same kind of change as the line above	CVE-2024-7038	same vendor as the line above	same change as the line above	Time to revision 645 days
2026-07-16	same kind of change as the line above	CVE-2024-7039	same vendor as the line above	same change as the line above	Time to revision 483 days
2026-07-16	same kind of change as the line above	CVE-2024-7040	same vendor as the line above	same change as the line above	Time to revision 483 days
2026-07-16	same kind of change as the line above	CVE-2024-7959	same vendor as the line above	same change as the line above	Time to revision 483 days
2026-07-16published 2024-05-30	Package added to advisory	GHSA-22q7-cg4r-p9mx	packagist moderate	not named as affected when the advisory was published, now names typo3/cms-fluid	Time to revision 777 days
Wed 15 Jul 2026· 43 changes
2026-07-15	Added to CISA KEV	CVE-2026-46817	OracleE-Business Suite CISA KEV	fix due 2026-07-18	Duration unknown
2026-07-15	Added to CISA KEV	CVE-2023-4346	KNX AssociationKNX Protocol Connection Authorization Option 1 CISA KEV	fix due 2026-07-29	Duration unknown
2026-07-15	Affected range extended	Show all 13 CVE records in this change: Affected range extended: 6.5.24 → 6.5.25 from adobeHide the 13 CVE records in this change: Affected range extended: 6.5.24 → 6.5.25 from adobe	adobeadobe experience manager 6.5	stated at publication 6.5.24, now states 6.5.25Release branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48254	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48257	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48255	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48252	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48262	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48253	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48261	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-48355	same vendor as the line above	same change as the line aboveRelease branch starts at 0.	Time to revision 1 days
5 more rows in this change are not listed here. Open all 13 rows →
2026-07-15	Product added	Show all 4 CVE records in this change: Product added: 6 products named as affected from microsoftHide the 4 CVE records in this change: Product added: 6 products named as affected from microsoft24 rows, one per record and product	microsoft	not named as affected at publication, now names microsoft .net framework 3.5 and 5 more	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.8.1	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 4.6.2/4.7/4.7.1/4.7.2	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-47304	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 4.8	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-50525	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5	Time to revision 1 days
2026-07-15	same kind of change as the line above	CVE-2026-50525	same vendor as the line above	not named as affected at publication, now names microsoft .net framework 3.5 and 4.7.2	Time to revision 1 days
16 more rows in this change are not listed here. Open all 24 rows →
2026-07-15	Product added	CVE-2025-5278	red hat	not named as affected at publication, now names cost management 4	Time to revision 414 days
2026-07-15	Record state changed	CVE-2026-56401	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 7 days
2026-07-15published 2025-12-01	Package added to advisory	GHSA-rcmh-qjqh-p98vCVE-2025-14874	maven high	not named as affected when the advisory was published, now names org.webjars.npm:nodemailer	Time to revision 226 days
2026-07-15published 2026-06-12	Advisory severity changed	GHSA-4px2-pw77-vc85CVE-2026-28898	whole advisorymoderate	stated at publication LOW, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 33 days
Tue 14 Jul 2026· 46 changes
2026-07-14	Added to CISA KEV	CVE-2026-56155	MicrosoftActive Directory Federation Services CISA KEV	fix due 2026-07-28	Duration unknown
2026-07-14	Added to CISA KEV	CVE-2026-56164	MicrosoftSharePoint Server CISA KEV	fix due 2026-07-17	Duration unknown
2026-07-14	Added to CISA KEV	Show all 2 CVE records in this change: Added to CISA KEV: SMA1000 Appliances from SonicWallHide the 2 CVE records in this change: Added to CISA KEV: SMA1000 Appliances from SonicWall	SonicWallSMA1000 Appliances	fix due 2026-07-17	Duration unknown
2026-07-14	same kind of change as the line above	CVE-2026-15409	same vendor as the line above	same change as the line above	Duration unknown
2026-07-14	same kind of change as the line above	CVE-2026-15410	same vendor as the line above	same change as the line above	Duration unknown
2026-07-14	Affected range extended	CVE-2026-34690	adobeafter effects	stated at publication 25.6.4, now states 25.6.5Release branch starts at 0.	Time to revision 63 days
2026-07-14	Product added	Show all 12 CVE records in this change: Product added: 3 products named as affected from adobeHide the 12 CVE records in this change: Product added: 3 products named as affected from adobe36 rows, one per record and product	adobe	not named as affected at publication, now names content credentials command-line tool and 2 more	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48287	same vendor as the line above	not named as affected at publication, now names content credentials command-line tool	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48287	same vendor as the line above	not named as affected at publication, now names content credentials js sdk	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48287	same vendor as the line above	not named as affected at publication, now names content credentials rust sdk	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48290	same vendor as the line above	not named as affected at publication, now names content credentials command-line tool	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48290	same vendor as the line above	not named as affected at publication, now names content credentials js sdk	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48290	same vendor as the line above	not named as affected at publication, now names content credentials rust sdk	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48295	same vendor as the line above	not named as affected at publication, now names content credentials command-line tool	Time to revision 0 days
2026-07-14	same kind of change as the line above	CVE-2026-48295	same vendor as the line above	not named as affected at publication, now names content credentials js sdk	Time to revision 0 days
28 more rows in this change are not listed here. Open all 36 rows →
2026-07-14	Product added	CVE-2024-21529	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:dset	Time to revision 671 days
2026-07-14	Product added	CVE-2025-12758	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:validator	Time to revision 229 days
2026-07-14	Product added	CVE-2026-7891	siemens DIVD	not named as affected at publication, now names mendix runtime	Time to revision 68 days
2026-07-14	CVSS base score changed	CVE-2026-10642	whole record zephyr	stated at publication 6.5, now states 4.6CVSS v3.1 · base scoreMediumMedium	Time to revision 20 days
2026-07-14	Record state changed	CVE-2026-38969	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Time to revision 13 days
Mon 13 Jul 2026· 6 changes
2026-07-13	Added to CISA KEV	CVE-2008-4128	CiscoIOS CISA KEV	fix due 2026-07-16	Duration unknown
2026-07-13	Product added	CVE-2025-15608Show all 2 products in this change: Product added: 2 products named as affected in CVE-2025-15608Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2025-15608	tp-link systems inc. TPLink	not named as affected at publication, now names ax55 v4 and 1 more	Time to revision 115 days
2026-07-13	same kind of change as the line above	CVE-2025-15608	same vendor as the line above	not named as affected at publication, now names ax55 v4	Time to revision 115 days
2026-07-13	same kind of change as the line above	CVE-2025-15608	same vendor as the line above	not named as affected at publication, now names ax55 v4.6	Time to revision 115 days
2026-07-13	Product added	CVE-2026-21728	grafana	not named as affected at publication, now names enterprise traces (get)	Time to revision 80 days
2026-07-13	Product added	CVE-2026-11332	red hat	not named as affected at publication, now names red hat discovery 2	Time to revision 38 days
2026-07-13	CVSS base score changed	CVE-2026-12257	whole record INCIBE	stated at publication 5.1, now states 9.3CVSS v4.0 · base scoreMediumCritical	Time to revision 0 days
Fri 10 Jul 2026· 6 changes
2026-07-10	Added to CISA KEV	CVE-2026-56291	BalbooaForms CISA KEV	fix due 2026-07-13	Duration unknown
2026-07-10	Added to CISA KEV	CVE-2026-48939	iCagendaiCagenda CISA KEV	fix due 2026-07-13	Duration unknown
2026-07-10	Product added	CVE-2026-11332Show all 3 products in this change: Product added: 3 products named as affected in CVE-2026-11332Hide the 3 products in this change: Product added: 3 products named as affected in CVE-2026-11332	red hat	not named as affected at publication, now names red hat enterprise linux 10 and 2 more	Time to revision 35 days
2026-07-10	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 10	Time to revision 35 days
2026-07-10	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8	Time to revision 35 days
2026-07-10	same kind of change as the line above	CVE-2026-11332	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 9	Time to revision 35 days
2026-07-10	Record state changed	CVE-2026-53166	whole record Linux	stated at publication PUBLISHED, now states REJECTED	Time to revision 15 days
Thu 9 Jul 2026· 3 changes
2026-07-09	Product added	CVE-2026-4878	red hat	not named as affected at publication, now names red hat openshift container platform 4.17	Time to revision 91 days
2026-07-09	CVSS base score changed	CVE-2026-15308	whole record PSF	stated at publication 10.0, now states 8.7CVSS v4.0 · base scoreCriticalHigh	Time to revision 0 days
2026-07-09	Record state changed	CVE-2026-40500	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Time to revision 85 days
Wed 8 Jul 2026· 43 changes
2026-07-08	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 7.0.13 → 7.0.16 from fortinetHide the 2 CVE records in this change: Affected range extended: 7.0.13 → 7.0.16 from fortinet	fortinetfortimanager	stated at publication 7.0.13, now states 7.0.16Release branch starts at 7.0.0.	Time to revision 538 to 540 days
2026-07-08	same kind of change as the line above	CVE-2024-33503	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.	Time to revision 540 days
2026-07-08	same kind of change as the line above	CVE-2024-45331	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.	Time to revision 538 days
2026-07-08	Affected range extended	CVE-2024-45331	fortinetfortianalyzer	stated at publication 7.0.13, now states 7.0.16Release branch starts at 7.0.0.	Time to revision 538 days
2026-07-08	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 7.2.12 → 7.2.13 from fortinetHide the 2 CVE records in this change: Affected range extended: 7.2.12 → 7.2.13 from fortinet	fortinetfortios	stated at publication 7.2.12, now states 7.2.13Release branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	same kind of change as the line above	CVE-2025-47890	same vendor as the line above	same change as the line aboveRelease branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	same kind of change as the line above	CVE-2025-31366	same vendor as the line above	same change as the line aboveRelease branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 7.2.15 → 7.2.16 from fortinetHide the 2 CVE records in this change: Affected range extended: 7.2.15 → 7.2.16 from fortinet	fortinetfortiproxy	stated at publication 7.2.15, now states 7.2.16Release branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	same kind of change as the line above	CVE-2025-47890	same vendor as the line above	same change as the line aboveRelease branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	same kind of change as the line above	CVE-2025-31366	same vendor as the line above	same change as the line aboveRelease branch starts at 7.2.0.	Time to revision 267 days
2026-07-08	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 7.0.17 → 7.0.19 from fortinetHide the 2 CVE records in this change: Affected range extended: 7.0.17 → 7.0.19 from fortinet	fortinetfortios	stated at publication 7.0.17, now states 7.0.19Release branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	same kind of change as the line above	CVE-2025-47890	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	same kind of change as the line above	CVE-2025-31366	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	Affected range extended	CVE-2025-47890	fortinetfortiproxy	stated at publication 7.4.11, now states 7.4.14Release branch starts at 7.4.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	Affected range extended	Show all 2 CVE records in this change: Affected range extended: 7.0.21 → 7.0.23 from fortinetHide the 2 CVE records in this change: Affected range extended: 7.0.21 → 7.0.23 from fortinet	fortinetfortiproxy	stated at publication 7.0.21, now states 7.0.23Release branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	same kind of change as the line above	CVE-2025-47890	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-08	same kind of change as the line above	CVE-2025-31366	same vendor as the line above	same change as the line aboveRelease branch starts at 7.0.0.Original value first replaced 2026-01-14; this value first seen 2026-07-08.	Time to revision 92 days
2026-07-085 commits	Product added	Show all 12 CVE records in this change: Product added: 5 products named as affected from red hatHide the 12 CVE records in this change: Product added: 5 products named as affected from red hat23 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 4 moreBranches and original-value intervals are stated on each row.	Time to revision 1 to 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50256	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50257	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50258	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50259	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50260	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50261	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50262	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
2026-07-08	same kind of change as the line above	CVE-2026-50263	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 33 days
15 more rows in this change are not listed here. Open all 23 rows →
2026-07-08	Product added	Show all 2 CVE records in this change: Product added: fortimanager cloud named as affected from fortinetHide the 2 CVE records in this change: Product added: fortimanager cloud named as affected from fortinet	fortinet	not named as affected at publication, now names fortimanager cloud	Time to revision 540 days
2026-07-08	same kind of change as the line above	CVE-2024-33503	same vendor as the line above	same change as the line above	Time to revision 540 days
2026-07-08	same kind of change as the line above	CVE-2024-35276	same vendor as the line above	same change as the line above	Time to revision 540 days
2026-07-08	Product added	Show all 2 CVE records in this change: Product added: fortianalyzer cloud named as affected from fortinetHide the 2 CVE records in this change: Product added: fortianalyzer cloud named as affected from fortinet	fortinet	not named as affected at publication, now names fortianalyzer cloud	Time to revision 538 to 540 days
2026-07-08	same kind of change as the line above	CVE-2024-35276	same vendor as the line above	same change as the line above	Time to revision 540 days
2026-07-08	same kind of change as the line above	CVE-2024-45331	same vendor as the line above	same change as the line above	Time to revision 538 days
2026-07-08	Product added	CVE-2026-11610	389ds redhat	not named as affected at publication, now names 389-ds-base	Time to revision 1 days
2026-07-08	Product added	CVE-2023-42789	fortinet	not named as affected at publication, now names fortisase	Time to revision 848 days
2026-07-08	CVSS base score changed	CVE-2026-60104	whole record VulnCheck	stated at publication 8.5, now states 9.3CVSS v4.0 · base scoreHighCritical	Time to revision 0 days
2026-07-08	CVSS base score changed	CVE-2026-9182	whole record Esri	stated at publication 5.3, now states 9.8CVSS v3.1 · base scoreMediumCritical	Time to revision 2 days
Tue 7 Jul 2026· 24 changes
2026-07-07	Added to CISA KEV	CVE-2026-48908	JoomShaperSP Page Builder CISA KEV	fix due 2026-07-10	Duration unknown
2026-07-07	Added to CISA KEV	CVE-2026-55255	LangflowLangflow CISA KEV	fix due 2026-07-10	Duration unknown
2026-07-07	Added to CISA KEV	CVE-2026-56290	JoomlackPage Builder CISA KEV	fix due 2026-07-10	Duration unknown
2026-07-07	Added to CISA KEV	CVE-2026-48282	AdobeColdFusion CISA KEV	fix due 2026-07-10	Duration unknown
2026-07-07	Ransomware use confirmed	CVE-2025-3248	LangflowLangflow CISA KEV	stated at publication Unknown, now states Known	Time to revision 428 days
2026-07-074 commits	Product added	Show all 5 CVE records in this change: Product added: 7 products named as affected from red hatHide the 5 CVE records in this change: Product added: 7 products named as affected from red hat12 rows, one per record and product	red hat	not named as affected at publication, now names red hat directory server 12.4 e4s for rhel 9 and 6 moreBranches and original-value intervals are stated on each row.	Time to revision 0 to 61 days
2026-07-07	same kind of change as the line above	CVE-2026-11610	same vendor as the line above	not named as affected at publication, now names red hat directory server 12.4 e4s for rhel 9	Time to revision 0 days
2026-07-07	same kind of change as the line above	CVE-2026-11774	same vendor as the line above	not named as affected at publication, now names red hat directory server 12.4 e4s for rhel 9	Time to revision 26 days
2026-07-07	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.20	Time to revision 50 days
2026-07-07	same kind of change as the line above	CVE-2026-42010	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.20	Time to revision 61 days
2026-07-07	same kind of change as the line above	CVE-2026-9165	same vendor as the line above	not named as affected at publication, now names red hat advanced cluster security for kubernetes 4.11	Time to revision 1 days
2026-07-07	same kind of change as the line above	CVE-2026-42009	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.21	Time to revision 50 days
2026-07-07	same kind of change as the line above	CVE-2026-42010	same vendor as the line above	not named as affected at publication, now names red hat openshift container platform 4.21	Time to revision 61 days
2026-07-07	same kind of change as the line above	CVE-2026-11610	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Time to revision 0 days
4 more rows in this change are not listed here. Open all 12 rows →
2026-07-07	Product added	CVE-2026-12866	vendor not named snyk	not named as affected at publication, now names org.webjars.npm:expr-eval	Time to revision 15 days
2026-07-07	Product added	CVE-2025-49795	gnome redhat	not named as affected at publication, now names libxml2	Time to revision 386 days
2026-07-07	Product added	CVE-2026-12491	vllm-project redhat	not named as affected at publication, now names vllm	Time to revision 20 days
2026-07-07	CVSS base score changed	CVE-2026-55255	whole record GitHub_M	stated at publication 9.9, now states 8.4CVSS v3.1 · base scoreCriticalHigh	Time to revision 14 days
2026-07-07	Record state changed	CVE-2026-3260	whole record redhat	stated at publication PUBLISHED, now states REJECTED	Time to revision 106 days
2026-07-07published 2026-05-08	Package added to advisory	GHSA-mx76-r943-rf8gCVE-2026-8149	maven moderate	not named as affected when the advisory was published, now names org.bouncycastle:bcprov-lts8on	Time to revision 61 days
2026-07-07published 2026-06-19	Advisory severity changed	GHSA-qrpv-q767-xqq2CVE-2026-55255	whole advisoryhigh	stated at publication CRITICAL, now states HIGHA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Time to revision 18 days
Mon 6 Jul 2026· 1 change
2026-07-06	Product added	CVE-2026-2100	p11-glue redhat	not named as affected at publication, now names p11-kit	Time to revision 102 days

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version and an added product count once per product, every other kind once per record or advisory. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

What this page cannot see

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Paste your closed CVE tickets and see which of these changes hit them →