AI Threat AlertN/A
AI Threat Alert tracks 48 known AI/ML vulnerabilities affecting N/A products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every N/A CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| LOW | CVE-2026-10813 | LMCache: weak hash enables KV cache integrity bypass | lmcache | 3.6 |
| UNKNOWN | CVE-2020-18325 | Subrion CMS: stored XSS in admin config panel | - | |
| UNKNOWN | CVE-2020-25514 | Sourcecodester LMS: broken access control in admin panel | - | |
| UNKNOWN | CVE-2020-35276 | EgavilanMedia ECM: SQLi bypasses admin login panel | - | |
| UNKNOWN | CVE-2021-42950 | Zepl Notebooks: RCE via malicious notebook code | - | |
| UNKNOWN | CVE-2022-23321 | XMPie UStore: persistent XSS in admin user panel | - | |
| UNKNOWN | CVE-2022-28568 | Doctor's Appointment System: file upload leads to RCE | - | |
| UNKNOWN | CVE-2021-42952 | Zepl Notebooks: sandbox escape exposes cloud metadata | - | |
| CRITICAL | CVE-2022-44194 | Netgear R7000P: buffer overflow via DNS params | 9.8 | |
| HIGH | CVE-2023-27098 | TP-Link Tapo: hardcoded creds bypass login auth | 7.5 | |
| CRITICAL | CVE-2025-45949 | PHPGurukul: session hijack via password change flow | 9.8 | |
| CRITICAL | CVE-2025-45953 | PHPGurukul Hostel Mgmt: session hijacking → takeover | 9.1 | |
| CRITICAL | CVE-2025-67418 | ClipBucket: hardcoded default admin creds enable takeover | 9.8 | |
| CRITICAL | CVE-2026-30623 | LiteLLM: RCE via unsanitized MCP server config | litellm | 9.8 |
| CRITICAL | CVE-2024-51567 | CyberPanel: pre-auth RCE via secMiddleware bypass | 10.0 | |
| CRITICAL | CVE-2024-51378 | CyberPanel: auth bypass enables unauthenticated RCE | 10.0 | |
| UNKNOWN | CVE-2020-27339 | InsydeH2O SMM drivers: buffer flaw corrupts firmware/OS memory | - | |
| UNKNOWN | CVE-2021-41838 | InsydeH2O UEFI: SMM callout flaw enables ring -2 code exec | - | |
| UNKNOWN | CVE-2021-33627 | InsydeH2O UEFI: SMM buffer flaw enables ring-2 escalation | - | |
| UNKNOWN | CVE-2021-33625 | InsydeH2O UEFI: unchecked SMM buffer enables SMRAM access | - |
Page 1 of 3
Frequently asked questions
How many known vulnerabilities affect N/A?
48 AI/ML CVEs affecting N/A products are tracked, sourced from NVD and GitHub Advisory.
What N/A products are affected?
The CVEs below map to the N/A AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the N/A vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor N/A for new vulnerabilities?
AI Threat Alert tracks N/A continuously; a Pro subscription adds breaking alerts when new CVEs affecting N/A are published.
How do I assess N/A's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity N/A issues first and judge the exposure for your stack.