Weekly digest · in progress
Week 43, 2026 (19–25 Oct)
No new CVEs landed this week so far. 3 existing records changed (re-scores, KEV additions, exploit evidence).
0
New CVEs
0
Critical
0
KEV additions
3
Records changed
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2019-9901EnvoyProxy Envoy Missing HTTP URL path normalizationseverity, cvss56
- CVE-2014-6407Arbitrary Code Execution in Dockercvss41
- CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methodsexploit_available57