Hype vs Reality
● PoC or prediction: attacks unconfirmed
PoC or high prediction; exploitation in attacks unconfirmed
● Insufficient data
Insufficient fresh evidence to classify
● Attention with limited exploitation evidence
Attention with limited exploitation evidence
● Observed exploitation + lower recent attention
Observed exploitation, lower recent attention
● High attention + observed exploitation
High hype, confirmed exploitation
● Limited attention; review evidence
Below category thresholds; review exploitation signals
Current scores by publication date
HypeReality
2026-10-07 → 2026-11-06
Pay attention to
27,249 matching| CVE ID | Severity | Signals | Reality / confidence |
|---|---|---|---|
| CVE-2026-109618 | CRITICAL | KEV 10-261 PoCEPSS 100% | 9.9/10 Campaign documented Recorded exploitation; CVSS 9.2; EPSS 100.0% |
| CVE-2026-109619 | CRITICAL | KEV 10-2677 candidatesEPSS 100% | 9.9/10 Campaign documented Recorded exploitation; CVSS 9.2; EPSS 100.0% |
| CVE-2023-34362 | CRITICAL | KEV 06-02Ransomware reported2 candidatesEPSS 100% | 9.4/10 Campaign documented Recorded exploitation; CVSS 9.8; EPSS 99.9% |
| CVE-2021-44228 | CRITICAL | KEV 12-10Ransomware reported3 PoCEPSS 100% | 9.4/10 Campaign documented Recorded exploitation; CVSS 10; EPSS 100.0% |
| CVE-2025-53770 | CRITICAL | KEV 07-20Ransomware reported1 PoCEPSS 100% | 9.0/10 Exploitation recorded Recorded exploitation; CVSS 9.8; EPSS 100.0% |
| CVE-2024-7593 | CRITICAL | KEV 09-241 candidatesEPSS 100% | 9.0/10 Exploitation recorded Recorded exploitation; CVSS 9.8; EPSS 100.0% |
CVEs in publication range
| CVE ID | Severity | CVSS | Type | Published |
|---|---|---|---|---|
| CVE-2025-71458 | HIGH | 7.5 | SQLi | Nov 6, 2026 |
| CVE-2026-63774 | CRITICAL | 9.0 | SQLi | Nov 6, 2026 |
| CVE-2026-63017 | CRITICAL | 9.0 | PRIV ESC | Nov 6, 2026 |
| CVE-2026-123269 | LOW | 3.3 | — | Nov 6, 2026 |
| CVE-2026-123268 | LOW | 3.5 | — | Nov 5, 2026 |
| CVE-2026-85068 | LOW | 2.4 | INFO DISCLOSURE | Nov 5, 2026 |