<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0" xmlns:intruder="https://cvemon.intruder.io/rss">
    <channel>
        <title><![CDATA[cvemon | CVE Trends]]></title>
        <description><![CDATA[Get the latest rankings and info for CVEs currently trending on social media]]></description>
        <link>https://cvemon.intruder.io</link>
        <image>
            <url>https://cvemon.intruder.io/og.png</url>
            <title>cvemon | CVE Trends</title>
            <link>https://cvemon.intruder.io</link>
        </image>
        <generator>RSS for Node</generator>
        <lastBuildDate>Wed, 07 Oct 2026 09:07:04 GMT</lastBuildDate>
        <atom:link href="https://cvemon.intruder.io/rss/cvetrends/latest" rel="self" type="application/rss+xml"/>
        <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
        <item>
            <title><![CDATA[CVE-2025-54769]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 13 - An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing.  This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2025-54769</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2025-54769</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>1</intruder:rank>
            <intruder:hypeScore>13</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2025-54769</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-63277]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 10 - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-63277</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-63277</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>2</intruder:rank>
            <intruder:hypeScore>10</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-63277</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-86360]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 8 - Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-86360</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-86360</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>3</intruder:rank>
            <intruder:hypeScore>8</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-86360</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-88779]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 8 - Vulnerability in NetScaler ADC and NetScaler Gateway.

This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-88779</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-88779</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>4</intruder:rank>
            <intruder:hypeScore>8</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-88779</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-61500]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 7 - Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same generator to unauthenticated clients during login. A remote attacker can collect a small number of login responses, ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-61500</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-61500</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>5</intruder:rank>
            <intruder:hypeScore>7</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-61500</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-106445]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 5 - Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-106445</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-106445</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>6</intruder:rank>
            <intruder:hypeScore>5</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-106445</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-40281]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 1 - Gotenberg is a Docker-powered stateless API for PDF files. In versions 8.30.1 and earlier, the metadata write endpoint validates metadata keys for control characters but leaves metadata values unsanitized. A newline character in a metadata value splits the ExifTool stdin line ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-40281</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-40281</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>7</intruder:rank>
            <intruder:hypeScore>1</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-40281</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-63030]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 1 - WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-63030</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-63030</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>8</intruder:rank>
            <intruder:hypeScore>1</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-63030</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-42589]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 1 - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its keys directly to ExifTool via the go-exiftool library. No validation is performed on key ...]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-42589</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-42589</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>9</intruder:rank>
            <intruder:hypeScore>1</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-42589</intruder:cveUrl>
        </item>
        <item>
            <title><![CDATA[CVE-2026-60137]]></title>
            <description><![CDATA[Currently trending CVE - Hype Score: 1 - WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.]]></description>
            <link>https://cvemon.intruder.io/cves/CVE-2026-60137</link>
            <guid isPermaLink="true">https://cvemon.intruder.io/cves/CVE-2026-60137</guid>
            <pubDate>Wed, 07 Oct 2026 08:17:01 GMT</pubDate>
            <enclosure url="https://cvemon.intruder.io/og.png" length="0" type="image/png"/>
            <intruder:rank>10</intruder:rank>
            <intruder:hypeScore>1</intruder:hypeScore>
            <intruder:cveUrl>https://cvemon.intruder.io/cves/CVE-2026-60137</intruder:cveUrl>
        </item>
    </channel>
</rss>