CVE-2026-62102High· 8.8▾ TwilightSubscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.
gato_graphql >= n/a <= 19.2.3Update the WordPress Gato GraphQL plugin to the latest available version (at least 19.2.4).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-94425High· 8.8A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150
CVE-2026-49811High· 8.4Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability
CVE-2026-15467High· 8.1A flaw was found in the trustyai-service-operator's LMEvalJob controller
CVE-2026-94048Medium· 6.6A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0
CVE-2026-94047Medium· 6.3A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32
CVE-2026-94036High· 8.8A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402