Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

11,999 record changes · 5,026 advisory changes · newest first · grouped by dayCSV JSON RSS

SinceKindVendorSort

Counted changes, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.	Kind	Record or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.	Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.	What changed	Days to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Tue 9 Jun 2026· 2 record changes · 15 advisory changes
2026-06-09	CVSS base score changed	CVE-2026-22895	whole record qnap	stated at publication 2.2, now states 6.2CVSS v4.0 · base scoreLowMedium	Days to revision 81
2026-06-09	Record state changed	CVE-2026-26957	whole record GitHub_M	stated at publication PUBLISHED, now states REJECTED	Days to revision 110
2026-06-09published 2021-08-25 to 2022-01-06	Advisory fix version moved	Show all 4 advisories in this change: Advisory fix version moved: 0.7.15 → 0.7.19 in crates.ioHide the 4 advisories in this change: Advisory fix version moved: 0.7.15 → 0.7.19 in crates.io	crates.ioactix-web 2 bands	stated at publication 0.7.15, now states 0.7.19	not dated
2026-06-09published 2022-01-06	same kind of change as the line above	GHSA-9qj6-4rfq-vm84CVE-2018-25024	same package and registry as the line abovecritical	same change as the line above	not dated
2026-06-09published 2022-01-06	same kind of change as the line above	GHSA-7x36-h62w-vw65CVE-2018-25026	same package and registry as the line abovecritical	same change as the line above	not dated
2026-06-09published 2022-01-06	same kind of change as the line above	GHSA-fgfm-hqjw-3265CVE-2018-25025	same package and registry as the line abovecritical	same change as the line above	not dated
2026-06-09published 2021-08-25	same kind of change as the line above	GHSA-w65j-g6c7-g3m4	same package and registry as the line abovemoderate	same change as the line above	not dated
2026-06-09published 2026-06-01	Package added to advisory	GHSA-q53q-5r4j-5729CVE-2026-47425	pypi moderate	not named as affected when the advisory was published, now names py-rattler	Days to revision 8
2026-06-09published 2026-05-29	Advisory severity changed	GHSA-j6fm-9rfm-j5hxCVE-2026-41237	whole advisoryhigh	stated at publication MODERATE, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 11
2026-06-09published 2022-05-24	Advisory severity changed	GHSA-4hm9-844j-jmxpCVE-2019-13117	whole advisorymoderate	stated at publication HIGH, now states MODERATENo CVSS vector was stated in the first observed version.	Days to revision 1,477
2026-06-09published 2026-05-12	Advisory severity changed	GHSA-3636-h3vx-6465CVE-2026-44593	whole advisoryhigh	stated at publication CRITICAL, now states HIGHNo CVSS vector was stated in the first observed version.	Days to revision 27
2026-06-09published 2026-05-15	Advisory severity changed	GHSA-rmqr-h98c-qg2m	whole advisoryhigh	stated at publication MODERATE, now states HIGHCVSS versions were removed or replaced; no shared version's vector was rescored.	Days to revision 24
2026-06-09published 2026-02-18 to 2026-05-15	Advisory withdrawn	Show all 6 advisories in this change: Advisory withdrawn: withdrawn 2026-06-09Hide the 6 advisories in this change: Advisory withdrawn: withdrawn 2026-06-09	whole advisory2 bands	withdrawn 2026-06-09	Days to revision 24 to 112
2026-06-09published 2026-02-18	same kind of change as the line above	GHSA-wgm6-9rvv-3438CVE-2026-26957	same package and registry as the line abovemoderate	withdrawn 2026-06-09	Days to revision 112
2026-06-09published 2026-05-15	same kind of change as the line above	GHSA-5h62-f8fg-4w7q	same package and registry as the line abovemoderate	withdrawn 2026-06-09	Days to revision 24
2026-06-09published 2026-05-15	same kind of change as the line above	GHSA-wj3q-vw2v-3rj3	same package and registry as the line abovemoderate	withdrawn 2026-06-09	Days to revision 24
2026-06-09published 2026-05-15	same kind of change as the line above	GHSA-9r8r-x3vg-6xh4	same package and registry as the line abovemoderate	withdrawn 2026-06-09	Days to revision 24
2026-06-09published 2026-05-15	same kind of change as the line above	GHSA-rmqr-h98c-qg2m	same package and registry as the line abovehigh	withdrawn 2026-06-09	Days to revision 24
2026-06-09published 2026-05-15	same kind of change as the line above	GHSA-h36g-93qx-rxgr	same package and registry as the line abovemoderate	withdrawn 2026-06-09	Days to revision 24
Mon 8 Jun 2026· 7 record changes · 8 advisory changes
2026-06-08	Added to CISA KEV	CVE-2026-50751	Check PointSecurity Gateway CISA KEV	fix due 2026-06-11	Not applicable: Added to CISA KEV has no earlier value
2026-06-08	Added to CISA KEV	CVE-2026-42271	BerriAILiteLLM CISA KEV	fix due 2026-06-22	Not applicable: Added to CISA KEV has no earlier value
2026-06-08	Fix version moved	CVE-2026-49777	shapedplugin, llcproduct slider pro for woocommerce Patchstack	stated at publication 3.5.3, now states 3.5.4Release branch starts at 0.	Days to revision 3
2026-06-08	Product added	CVE-2025-5372	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 339
2026-06-08	Product added	Show all 2 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hatHide the 2 CVE records in this change: Product added: red hat enterprise linux 8.6 advanced mission critical update support named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 60 to 70
2026-06-08	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 60
2026-06-08	same kind of change as the line above	CVE-2026-5119	same vendor as the line above	same change as the line above	Days to revision 70
2026-06-08	Record state changed	CVE-2026-50265	whole record redhat	stated at publication PUBLISHED, now states REJECTED	Days to revision 3
2026-06-08published 2026-05-15	Package added to advisory	GHSA-w42g-jj8w-fj77	packagist high	not named as affected when the advisory was published, now names thorsten/phpmyfaq	Days to revision 24
2026-06-08published 2021-04-13	Package added to advisory	GHSA-3pcr-4982-548m	packagist moderate	not named as affected when the advisory was published, now names shopware/shopware	not dated
2026-06-08published 2025-10-15	Package added to advisory	GHSA-6p6v-m64v-jx8qCVE-2025-55039	pypi low	not named as affected when the advisory was published, now names pyspark	Days to revision 236
2026-06-08published 2026-03-25	Package added to advisory	GHSA-7h8w-hj9j-8rjwCVE-2026-33718	pypi high	not named as affected when the advisory was published, now names openhands-ai	Days to revision 75
2026-06-08published 2022-05-02	Advisory severity changed	GHSA-f7w7-6pjc-wwm6CVE-2009-3555	whole advisorycritical	stated at publication MODERATE, now states CRITICALNo CVSS vector was stated in the first observed version.	Days to revision 1,499
2026-06-08published 2026-03-03	Advisory severity changed	GHSA-p4wh-cr8m-gm6cCVE-2026-22217	whole advisorymoderate	stated at publication HIGH, now states MODERATEA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 97
2026-06-08published 2025-10-15	Advisory severity changed	GHSA-6p6v-m64v-jx8qCVE-2025-55039	whole advisorylow	stated at publication MODERATE, now states LOWA vector changed on a shared CVSS version. The band and vector edits may have occurred separately.	Days to revision 236
2026-06-08published 2026-05-15	Advisory withdrawn	GHSA-w42g-jj8w-fj77	whole advisoryhigh	withdrawn 2026-06-08	Days to revision 24
Sat 6 Jun 2026· 1 record change · 1 advisory change
2026-06-06	Product added	CVE-2025-7425	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 331
2026-06-06published 2026-03-18	Advisory fix version moved	GHSA-rf6x-r45m-xv3wCVE-2026-33053	pypilangflow high	stated at publication 1.7.2, now states 1.9.0	Days to revision 80
Fri 5 Jun 2026· 13 record changes · 4 advisory changes
2026-06-05	Added to CISA KEV	CVE-2026-28318	SolarWindsServ-U CISA KEV	fix due 2026-06-19	Not applicable: Added to CISA KEV has no earlier value
2026-06-05	Fix version moved	CVE-2026-32177	microsoftmicrosoft visual studio 2022 version 17.14	stated at publication 17.14.31, now states 17.14.32Release branch starts at 17.14.0.	Days to revision 24
2026-06-05	Affected range extended	CVE-2024-58135	srimojolicious CPANSec	stated at publication 9.39, now states 9.45Release branch starts at 7.28.Original value first replaced 2025-05-12; this value first seen 2026-06-05.	Days to revision 9
2026-06-05	Product added	CVE-2025-5914	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 360
2026-06-05	Product added	Show all 5 CVE records in this change: Product added: red hat enterprise linux 6 extended lifecycle support - extension named as affected from red hatHide the 5 CVE records in this change: Product added: red hat enterprise linux 6 extended lifecycle support - extension named as affected from red hat	red hat	not named as affected at publication, now names red hat enterprise linux 6 extended lifecycle support - extension	Days to revision 30 to 42
2026-06-05	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	same change as the line above	Days to revision 30
2026-06-05	same kind of change as the line above	CVE-2026-34001	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	same change as the line above	Days to revision 30
2026-06-05	same kind of change as the line above	CVE-2026-34003	same vendor as the line above	same change as the line above	Days to revision 42
2026-06-05	CVSS base score changed	CVE-2026-42250	whole record CERT-PL	stated at publication 5.1, now states 4.8CVSS v4.0 · base scoreMediumMedium	Days to revision 8
2026-06-05	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record TR-CERT	stated at publication PUBLISHED, now states REJECTED	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6207	same vendor as the line above	same change as the line above	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6208	same vendor as the line above	same change as the line above	Days to revision 0
2026-06-05	same kind of change as the line above	CVE-2026-6209	same vendor as the line above	same change as the line above	Days to revision 0
2026-06-05published 2023-08-25	Package added to advisory	GHSA-q3mw-pvr8-9ggcCVE-2023-41080	maven moderate	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-catalina	Days to revision 1,015
2026-06-05published 2021-06-16	Package added to advisory	GHSA-j39c-c8hj-x4j3CVE-2021-25122	maven high	not named as affected when the advisory was published, now names org.apache.tomcat:tomcat-coyote	not dated
2026-06-05published 2026-04-18	Package added to advisory	GHSA-w9r4-94fj-xp69CVE-2026-32690	pypi low	not named as affected when the advisory was published, now names apache-airflow	Days to revision 48
2026-06-05published 2025-09-24	Package added to advisory	GHSA-776q-jw43-fhjxCVE-2025-48459	pypi critical	not named as affected when the advisory was published, now names apache-iotdb	Days to revision 254
Thu 4 Jun 2026· 4 record changes
2026-06-04	Product added	CVE-2026-22226	tp link systems inc. TPLink	not named as affected at publication, now names archer ax73 v2	Days to revision 122
2026-06-042 commits	Product added	Show all 2 CVE records in this change: Product added: red hat openshift container platform 4.13 named as affected from red hatHide the 2 CVE records in this change: Product added: red hat openshift container platform 4.13 named as affected from red hat	red hat	not named as affected at publication, now names red hat openshift container platform 4.13Branches and original-value intervals are stated on each row.	Days to revision 66 to 77
2026-06-04	same kind of change as the line above	CVE-2026-5121	same vendor as the line above	same change as the line above	Days to revision 66
2026-06-04	same kind of change as the line above	CVE-2026-4424	same vendor as the line above	same change as the line above	Days to revision 77
2026-06-04	CVSS base score changed	CVE-2025-71316	whole record cisa-cg	stated at publication 7.8, now states 9.8CVSS v3.1 · base scoreHighCritical	Days to revision 0
Wed 3 Jun 2026· 15 record changes
2026-06-03	Added to CISA KEV	CVE-2026-45247	MirasvitMirasvit Full Page Cache Warmer CISA KEV	fix due 2026-06-06	Not applicable: Added to CISA KEV has no earlier value
2026-06-03	Product added	Show all 2 CVE records in this change: Product added: openshift file integrity operator - fio 1 named as affected from red hatHide the 2 CVE records in this change: Product added: openshift file integrity operator - fio 1 named as affected from red hat	red hat	not named as affected at publication, now names openshift file integrity operator - fio 1	Days to revision 352
2026-06-03	same kind of change as the line above	CVE-2025-49794	same vendor as the line above	same change as the line above	Days to revision 352
2026-06-03	same kind of change as the line above	CVE-2025-49796	same vendor as the line above	same change as the line above	Days to revision 352
2026-06-03	Product added	CVE-2026-5119	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 65
2026-06-03	CVSS base score changed	Show all 3 CVE records in this change: CVSS base score changed: 7.1 → 8.1Hide the 3 CVE records in this change: CVSS base score changed: 7.1 → 8.1	whole record autodesk	stated at publication 7.1, now states 8.1CVSS v3.1 · base scoreHighHigh	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0533	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0534	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	same kind of change as the line above	CVE-2026-0535	same vendor as the line above	same change as the line above	Days to revision 132
2026-06-03	CVSS base score changed	Show all 4 CVE records in this change: CVSS base score changed: 7.8 → 8.4Hide the 4 CVE records in this change: CVSS base score changed: 7.8 → 8.4	whole record autodesk	stated at publication 7.8, now states 8.4CVSS v3.1 · base scoreHighHigh	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0537	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0538	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0660	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	same kind of change as the line above	CVE-2026-0661	same vendor as the line above	same change as the line above	Days to revision 119
2026-06-03	CVSS base score changed	Show all 2 CVE records in this change: CVSS base score changed: 5.3 → 5.5Hide the 2 CVE records in this change: CVSS base score changed: 5.3 → 5.5	whole record autodesk	stated at publication 5.3, now states 5.5CVSS v3.1 · base scoreMediumMedium	Days to revision 8
2026-06-03	same kind of change as the line above	CVE-2026-7450	same vendor as the line above	same change as the line above	Days to revision 8
2026-06-03	same kind of change as the line above	CVE-2026-7453	same vendor as the line above	same change as the line above	Days to revision 8
2026-06-03	CVSS base score changed	CVE-2026-4480	whole record redhat	stated at publication 8.5, now states 9.0CVSS v3.1 · base scoreHighCritical	Days to revision 8
2026-06-03	Record state changed	CVE-2026-9642	whole record tenable	stated at publication PUBLISHED, now states REJECTED	Days to revision 8
Tue 2 Jun 2026· 8 record changes
2026-06-02	Added to CISA KEV	CVE-2022-0492	LinuxKernel CISA KEV	fix due 2026-06-05	Not applicable: Added to CISA KEV has no earlier value
2026-06-02	Added to CISA KEV	CVE-2025-48595	AndroidFramework CISA KEV	fix due 2026-06-05	Not applicable: Added to CISA KEV has no earlier value
2026-06-02	Product added	Show all 4 CVE records in this change: Product added: red hat insights proxy 1.5 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat insights proxy 1.5 named as affected from red hat	red hat	not named as affected at publication, now names red hat insights proxy 1.5	Days to revision 54 to 174
2026-06-02	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Days to revision 174
2026-06-02	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Days to revision 174
2026-06-02	same kind of change as the line above	CVE-2026-2100	same vendor as the line above	same change as the line above	Days to revision 68
2026-06-02	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 54
2026-06-02	Product added	CVE-2026-22029	remix-run GitHub_M	not named as affected at publication, now names @remix-run/router	Days to revision 144
2026-06-02	CVSS base score changed	CVE-2025-53345	whole record Patchstack	stated at publication 6.5, now states 8.8CVSS v3.1 · base scoreMediumHigh	Days to revision 0
Mon 1 Jun 2026· 6 record changes · 2 advisory changes
2026-06-01	Added to CISA KEV	CVE-2024-21182	OracleWebLogic Server CISA KEV	fix due 2026-06-04	Not applicable: Added to CISA KEV has no earlier value
2026-06-01	Product added	CVE-2026-4324	red hat	not named as affected at publication, now names red hat satellite 6.19 for rhel 9	Days to revision 76
2026-06-01	Product added	CVE-2025-11234	red hat	not named as affected at publication, now names red hat enterprise linux 9.0 update services for sap solutions	Days to revision 241
2026-06-01	Product added	Show all 2 CVE records in this change: Product added: fast datapath for red hat enterprise linux 10 named as affected from red hatHide the 2 CVE records in this change: Product added: fast datapath for red hat enterprise linux 10 named as affected from red hat	red hat	not named as affected at publication, now names fast datapath for red hat enterprise linux 10	Days to revision 38
2026-06-01	same kind of change as the line above	CVE-2026-5265	same vendor as the line above	same change as the line above	Days to revision 38
2026-06-01	same kind of change as the line above	CVE-2026-5367	same vendor as the line above	same change as the line above	Days to revision 38
2026-06-01	Record state changed	CVE-2025-61081	whole record mitre	stated at publication PUBLISHED, now states REJECTED	Days to revision 14
2026-06-01published 2026-05-18	Package added to advisory	GHSA-v549-xx3c-6pc8Show all 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-v549-xx3c-6pc8Hide the 2 packages in this change: Package added to advisory: 2 packages named as affected in GHSA-v549-xx3c-6pc8	go moderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server and 1 more	Days to revision 14
2026-06-01published 2026-05-18	same kind of change as the line above	GHSA-v549-xx3c-6pc8CVE-2026-3637	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost-server	Days to revision 14
2026-06-01published 2026-05-18	same kind of change as the line above	GHSA-v549-xx3c-6pc8CVE-2026-3637	same package registry as the line abovemoderate	not named as affected when the advisory was published, now names github.com/mattermost/mattermost/server/v8	Days to revision 14
Fri 29 May 2026· 8 record changes · 1 advisory change
2026-05-29	Added to CISA KEV	CVE-2026-0257	Palo Alto NetworksPAN-OS CISA KEV	fix due 2026-06-01	Not applicable: Added to CISA KEV has no earlier value
2026-05-29	Product added	Show all 2 CVE records in this change: Product added: blueplanet 125 nx3 m10 named as affected from siemensHide the 2 CVE records in this change: Product added: blueplanet 125 nx3 m10 named as affected from siemens	siemens	not named as affected at publication, now names blueplanet 125 nx3 m10	Days to revision 17
2026-05-29	same kind of change as the line above	CVE-2025-40946	same vendor as the line above	same change as the line above	Days to revision 17
2026-05-29	same kind of change as the line above	CVE-2026-41125	same vendor as the line above	same change as the line above	Days to revision 17
2026-05-29	CVSS base score changed	CVE-2026-0257	whole record palo_alto	stated at publication 4.7, now states 7.8CVSS v4.0 · base scoreMediumHigh	Days to revision 16
2026-05-29	CVSS base score changed	CVE-2026-9828	whole record NCSC.ch	stated at publication 1.2, now states 2.9CVSS v4.0 · base scoreLowLow	Days to revision 1
2026-05-29	Record state changed	Show all 3 CVE records in this change: Record state changed: PUBLISHED → REJECTEDHide the 3 CVE records in this change: Record state changed: PUBLISHED → REJECTED	whole record VulnCheck	stated at publication PUBLISHED, now states REJECTED	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35020	same vendor as the line above	same change as the line above	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35021	same vendor as the line above	same change as the line above	Days to revision 53
2026-05-29	same kind of change as the line above	CVE-2026-35022	same vendor as the line above	same change as the line above	Days to revision 53
2026-05-29published 2026-04-22	Package added to advisory	GHSA-ffq5-qpvf-xq7xCVE-2026-42086	pypi moderate	not named as affected when the advisory was published, now names openc3	Days to revision 37
Thu 28 May 2026· 20 record changes · 1 advisory change
2026-05-28	Ransomware use confirmed	CVE-2026-48027	NxNx Console CISA KEV	stated at publication Unknown, now states Known	Days to revision 1
2026-05-28	Ransomware use confirmed	CVE-2026-45321	TanStackTanStack CISA KEV	stated at publication Unknown, now states Known	Days to revision 1
2026-05-28	Product added	CVE-2025-5039	autodesk	not named as affected at publication, now names 3ds max	Days to revision 308
2026-05-285 commits	Product added	Show all 9 CVE records in this change: Product added: 4 products named as affected from red hatHide the 9 CVE records in this change: Product added: 4 products named as affected from red hat14 rows, one per record and product	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 3 moreBranches and original-value intervals are stated on each row.	Days to revision 2 to 70
2026-05-28	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34001	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34003	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 35
2026-05-28	same kind of change as the line above	CVE-2026-34000	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-34002	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 23
2026-05-28	same kind of change as the line above	CVE-2026-33999	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 35
6 more rows in this change are not listed here. Open all 14 rows →
2026-05-28	Product added	CVE-2026-40034Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-40034Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-40034	gitoxide VulnCheck	not named as affected at publication, now names gix and 1 more	Days to revision 2
2026-05-28	same kind of change as the line above	CVE-2026-40034	same vendor as the line above	not named as affected at publication, now names gix	Days to revision 2
2026-05-28	same kind of change as the line above	CVE-2026-40034	same vendor as the line above	not named as affected at publication, now names gix-submodule	Days to revision 2
2026-05-28	Record state changed	CVE-2026-9818	whole record OCD	stated at publication PUBLISHED, now states REJECTED	Days to revision 0
2026-05-28published 2026-04-27	Advisory withdrawn	GHSA-c8g3-x47w-8q7p	whole advisoryhigh	withdrawn 2026-05-28	Days to revision 31
Wed 27 May 2026· 19 record changes
2026-05-27	Added to CISA KEV	CVE-2026-48027	NxNx Console CISA KEV	fix due 2026-06-10	Not applicable: Added to CISA KEV has no earlier value
2026-05-27	Added to CISA KEV	CVE-2026-45321	TanStackTanStack CISA KEV	fix due 2026-06-10	Not applicable: Added to CISA KEV has no earlier value
2026-05-27	Added to CISA KEV	CVE-2026-8398	DaemonDaemon Tools Lite CISA KEV	fix due 2026-05-30	Not applicable: Added to CISA KEV has no earlier value
2026-05-27	Affected range extended	CVE-2026-5718	glenwpcoderdrag and drop multiple file upload for contact form 7 Wordfence	stated at publication 1.3.9.6, now states 1.3.9.7Release branch starts at 0.	Days to revision 39
2026-05-27	Product added	CVE-2026-9170	ibm	not named as affected at publication, now names http server	Days to revision 1
2026-05-27	Product added	Show all 4 CVE records in this change: Product added: red hat update infrastructure 5 named as affected from red hatHide the 4 CVE records in this change: Product added: red hat update infrastructure 5 named as affected from red hat	red hat	not named as affected at publication, now names red hat update infrastructure 5	Days to revision 48 to 168
2026-05-27	same kind of change as the line above	CVE-2025-14087	same vendor as the line above	same change as the line above	Days to revision 168
2026-05-27	same kind of change as the line above	CVE-2025-14512	same vendor as the line above	same change as the line above	Days to revision 167
2026-05-27	same kind of change as the line above	CVE-2026-2100	same vendor as the line above	same change as the line above	Days to revision 62
2026-05-27	same kind of change as the line above	CVE-2026-4878	same vendor as the line above	same change as the line above	Days to revision 48
2026-05-272 commits	Product added	CVE-2026-7374Show all 8 products in this change: Product added: 8 products named as affected in CVE-2026-7374Hide the 8 products in this change: Product added: 8 products named as affected in CVE-2026-7374	red hat	not named as affected at publication, now names red hat container native virtualization 4.21 and 7 moreBranches and original-value intervals are stated on each row.	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.21	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.12	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.13	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.14	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.15	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.16	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.17	Days to revision 1
2026-05-27	same kind of change as the line above	CVE-2026-7374	same vendor as the line above	not named as affected at publication, now names red hat container native virtualization 4.18	Days to revision 1
2026-05-27	CVSS base score changed	CVE-2026-48999	whole record zte	stated at publication 5.3, now states 5.7CVSS v3.1 · base scoreMediumMedium	Days to revision 0
2026-05-27	CVSS base score changed	CVE-2026-49000	whole record zte	stated at publication 5.3, now states 7.0CVSS v3.1 · base scoreMediumHigh	Days to revision 0
Tue 26 May 2026· 8 record changes
2026-05-26	Added to CISA KEV	CVE-2026-48172	LiteSpeedcPanel Plugin CISA KEV	fix due 2026-05-29	Not applicable: Added to CISA KEV has no earlier value
2026-05-26	Affected range extended	CVE-2025-68648	fortinetfortianalyzer cloud	stated at publication 7.0.15, now states 7.0.16Release branch starts at 7.0.1.	Days to revision 77
2026-05-26	Product added	CVE-2025-23260	nvidia	not named as affected at publication, now names ais operator	Days to revision 336
2026-05-262 commits	Product added	CVE-2026-4887Show all 2 products in this change: Product added: 2 products named as affected in CVE-2026-4887Hide the 2 products in this change: Product added: 2 products named as affected in CVE-2026-4887	red hat	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support and 1 moreBranches and original-value intervals are stated on each row.	Days to revision 61
2026-05-26	same kind of change as the line above	CVE-2026-4887	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.4 advanced mission critical update support	Days to revision 61
2026-05-26	same kind of change as the line above	CVE-2026-4887	same vendor as the line above	not named as affected at publication, now names red hat enterprise linux 8.6 advanced mission critical update support	Days to revision 61
2026-05-26	CVSS base score changed	CVE-2026-41947	whole record VulnCheck	stated at publication 9.1, now states 9.3CVSS v4.0 · base scoreCriticalCritical	Days to revision 8
2026-05-26	CVSS base score changed	CVE-2026-48132	whole record checkpoint	stated at publication 7.4, now states 8.1CVSS v3.1 · base scoreHighHigh	Days to revision 0
2026-05-26	CVSS base score changed	CVE-2026-48134	whole record checkpoint	stated at publication 7.6, now states 5.6CVSS v3.1 · base scoreHighMedium	Days to revision 0
Fri 22 May 2026· 2 record changes
2026-05-22	Added to CISA KEV	CVE-2026-9082	DrupalCore CISA KEV	fix due 2026-05-27	Not applicable: Added to CISA KEV has no earlier value
2026-05-22	Ransomware use confirmed	CVE-2019-15107	WebminWebmin CISA KEV	stated at publication Unknown, now states Known	Days to revision at least 451
Thu 21 May 2026· 7 record changes
2026-05-21	Added to CISA KEV	CVE-2025-34291	LangflowLangflow CISA KEV	fix due 2026-06-04	Not applicable: Added to CISA KEV has no earlier value
2026-05-21	Added to CISA KEV	CVE-2026-34926	Trend MicroApex One CISA KEV	fix due 2026-06-04	Not applicable: Added to CISA KEV has no earlier value
2026-05-21	Ransomware use confirmed	CVE-2013-0422	OracleJava Runtime Environment (JRE) CISA KEV	stated at publication Unknown, now states Known	Days to revision at least 450
2026-05-21	Fix version moved	CVE-2026-48172	litespeed technologiescpanel plugin mitre	stated at publication 2.4.5, now states 2.4.7Release branch starts at 2.3.same day	Days to revision 1
2026-05-21	Product added	CVE-2026-48172	litespeed technologies mitre	not named as affected at publication, now names whm plugin	Days to revision 1
2026-05-21	Product added	CVE-2025-67972	zoho mail Patchstack	not named as affected at publication, now names zoho zeptomail	Days to revision 90
2026-05-21	Product added	CVE-2023-52355	red hat	not named as affected at publication, now names red hat enterprise linux 10	Days to revision 846
Wed 20 May 2026· 4 record changes
2026-05-20	Added to CISA KEV	CVE-2010-0249	MicrosoftInternet Explorer CISA KEV	fix due 2026-06-03 · listed 2026-06-03	Not applicable: Added to CISA KEV has no earlier value
2026-05-20	Added to CISA KEV	CVE-2008-4250	MicrosoftWindows CISA KEV	fix due 2026-06-03	Not applicable: Added to CISA KEV has no earlier value
2026-05-20	Added to CISA KEV	CVE-2009-1537	MicrosoftDirectX CISA KEV	fix due 2026-06-03	Not applicable: Added to CISA KEV has no earlier value
2026-05-20	Added to CISA KEV	CVE-2009-3459	AdobeAcrobat and Reader CISA KEV	fix due 2026-06-03	Not applicable: Added to CISA KEV has no earlier value

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →