Hype vs Reality
● PoC or prediction: attacks unconfirmed
PoC or high prediction; exploitation in attacks unconfirmed
● Insufficient data
Insufficient fresh evidence to classify
● Attention with limited exploitation evidence
Attention with limited exploitation evidence
● Observed exploitation + lower recent attention
Observed exploitation, lower recent attention
● High attention + observed exploitation
High hype, confirmed exploitation
● Limited attention; review evidence
Below category thresholds; review exploitation signals
Current scores by publication date
HypeReality
2026-10-07 → 2026-11-06
Pay attention to
27,250 matching| CVE ID | Severity | Signals | Reality / confidence |
|---|---|---|---|
| CVE-2025-25257 | CRITICAL | KEV 07-181 PoCEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.6; EPSS 99.9% |
| CVE-2024-32113 | CRITICAL | KEV 08-071 PoCEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.1; EPSS 99.9% |
| CVE-2026-8037 | CRITICAL | KEV 08-071 candidatesEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.6; EPSS 99.8% |
| CVE-2024-0012 | CRITICAL | KEV 11-18Ransomware reported6 candidatesEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.3; EPSS 99.8% |
| CVE-2026-39987 | CRITICAL | KEV 04-231 PoCEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.3; EPSS 99.7% |
| CVE-2026-21589 | CRITICAL | KEV 10-152 candidatesEPSS 100% | 8.9/10 Exploitation recorded Recorded exploitation; CVSS 9.3; EPSS 99.7% |
CVEs in publication range
| CVE ID | Severity | CVSS | Type | Published |
|---|---|---|---|---|
| CVE-2026-116630 | MEDIUM | 5.9 | RCE | Nov 6, 2026 |
| CVE-2026-123087 | HIGH | 8.7 | SQLi | Nov 6, 2026 |
| CVE-2026-122222 | MEDIUM | 6.4 | XSS | Nov 6, 2026 |
| CVE-2026-121794 | MEDIUM | 6.5 | RCE | Nov 6, 2026 |
| CVE-2026-118189 | MEDIUM | 6.4 | XSS | Nov 6, 2026 |
| CVE-2026-110291 | HIGH | 7.2 | XSS | Nov 6, 2026 |