Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days All time

Severity (select multiple)

Critical (43,370)High (124,775)Medium (163,219)Low (17,939)Unrated (2,047)

Attack vector (select multiple)

Results

CVE results

103 results · Sorted by Highest Buzz score first

CVE-2026-54121

Published Jul 14, 2026

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

CVSS 8.8 · High

evidence mentions: 8
Buzz score: 41.0

Vendor/product tagsBeta · best-effort

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

microsoft / windows_10_1607microsoft / windows_10_1809microsoft / windows_server_2012microsoft / windows_server_2016microsoft / windows_server_2019microsoft / windows_server_2022microsoft / windows_server_2025

CVE-2026-49170

Published Jul 14, 2026

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High

evidence mentions: 6
Buzz score: 35.5

CWE-285CWE-1220

Vendor/product tagsBeta · best-effort

microsoft / windows_10_1809microsoft / windows_10_21h2microsoft / windows_10_22h2microsoft / windows_11_24h2microsoft / windows_11_25h2microsoft / windows_11_26h1microsoft / windows_server_2019microsoft / windows_server_2022microsoft / windows_server_2025

CVE-2026-58631

Published Jul 14, 2026

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

CVSS 7.8 · High

evidence mentions: 6
Buzz score: 35.5

Vendor/product tagsBeta · best-effort

microsoft / windows_admin_center

CVE-2026-58277

Published Jul 14, 2026

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS 8.8 · High

evidence mentions: 5
Buzz score: 32.4

Vendor/product tagsBeta · best-effort

microsoft / sharepoint_server

CVE-2026-58251

Published Jul 8, 2026

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user with subscription den…

CVSS 6.5 · Medium

evidence mentions: 8
Buzz score: 32.0

Vendor/product tagsBeta · best-effort

linuxfoundation / nats-server

CVE-2026-58252

Published Jul 8, 2026

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive message…

CVSS 6.5 · Medium

evidence mentions: 8
Buzz score: 32.0

Vendor/product tagsBeta · best-effort

linuxfoundation / nats-server

CVE-2026-13514

Published Jun 29, 2026

A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com…

CVSS 0.9 · Low

evidence mentions: 6
Buzz score: 31.0

CVE-2026-13549

Published Jun 29, 2026

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 31.0

CVE-2026-14690

Published Jul 5, 2026

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipu…

CVSS 5.5 · Medium

evidence mentions: 6
Buzz score: 31.0

CVE-2026-14693

Published Jul 5, 2026

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.p…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 31.0

CVE-2026-14778

Published Jul 6, 2026

A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the c…

CVSS 5.5 · Medium

evidence mentions: 6
Buzz score: 31.0

CVE-2026-50344

Published Jul 14, 2026

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High

evidence mentions: 4
Buzz score: 29.1

Vendor/product tagsBeta · best-effort

microsoft / windows_10_1607microsoft / windows_10_1809microsoft / windows_10_21h2microsoft / windows_10_22h2microsoft / windows_11_24h2microsoft / windows_11_25h2microsoft / windows_11_26h1microsoft / windows_server_2012microsoft / windows_server_2016microsoft / windows_server_2019microsoft / windows_server_2022microsoft / windows_server_2025

CVE-2026-50346

Published Jul 14, 2026

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High

evidence mentions: 4
Buzz score: 29.1

Vendor/product tagsBeta · best-effort

microsoft / windows_10_1607microsoft / windows_10_1809microsoft / windows_10_21h2microsoft / windows_10_22h2microsoft / windows_11_24h2microsoft / windows_11_25h2microsoft / windows_11_26h1microsoft / windows_server_2012microsoft / windows_server_2016microsoft / windows_server_2019microsoft / windows_server_2022microsoft / windows_server_2025

CVE-2026-58540

Published Jul 14, 2026

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High

evidence mentions: 4
Buzz score: 29.1

Vendor/product tagsBeta · best-effort

microsoft / windows_10_1607microsoft / windows_10_1809microsoft / windows_10_21h2microsoft / windows_10_22h2microsoft / windows_11_24h2microsoft / windows_11_25h2microsoft / windows_11_26h1microsoft / windows_server_2012microsoft / windows_server_2016microsoft / windows_server_2019microsoft / windows_server_2022microsoft / windows_server_2025

CVE-2026-15375

Published Jul 10, 2026

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. This impacts an unknown function of the file /callrec/users_ldap.jsp of the component LDAP User Interface.…

CVSS 2.1 · Low

evidence mentions: 7
Buzz score: 28.8

CVE-2026-13591

Published Jun 29, 2026

A weakness has been identified in DeepMyst Mysti 0.4.0. Affected is the function _isTrackedConversation of the file src/managers/ChannelBridge.ts of the component Contact Tracking…

CVSS 1.3 · Low

evidence mentions: 8
Buzz score: 28.5

CVE-2026-15622

Published Jul 14, 2026

A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace…

CVSS 5.5 · Medium

evidence mentions: 8
Buzz score: 28.5

CVE-2026-16126

Published Jul 18, 2026

A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function handle_rpc_request of the file claw/services/swarm/swarm.c of the component Swar…

CVSS 5.5 · Medium

evidence mentions: 8
Buzz score: 28.5

CVE-2026-14608

Published Jul 3, 2026

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /in…

CVSS 2.1 · Low

evidence mentions: 5
Buzz score: 27.9

CVE-2026-15509

Published Jul 12, 2026

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads…

CVSS 2.1 · Low

evidence mentions: 5
Buzz score: 27.9

CVE-2026-15510

Published Jul 12, 2026

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The atta…

CVSS 2.1 · Low

evidence mentions: 5
Buzz score: 27.9

CVE-2026-15373

Published Jul 10, 2026

A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Performing a manipulation…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 27.5

CVE-2026-15374

Published Jul 10, 2026

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown function of the file /callrec/roleAddAction.do of the component Group Interface. Executing a…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 27.5

CVE-2026-15376

Published Jul 10, 2026

A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/statisticReportAction.do. The manipulation results in impro…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 27.5

CVE-2026-15377

Published Jul 10, 2026

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. Affected by this vulnerability is an unknown functionality of the file /callrec/sendlogfile. This manipulat…

CVSS 2.1 · Low

evidence mentions: 6
Buzz score: 27.5

Showing 1-25 of 103 CVEsPage 1 of 5

Previous1 2 5 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.