Automation Boundary
This digest is automated CVE intake, not a reviewed threat-activity claim. It ranks public NVD records with EPSS enrichment and CISA KEV context so defenders have a daily review queue. Items without an exploitation signal should be treated as vulnerability-prioritization leads, not evidence of active intrusion.
Daily Counts
- NVD CVEs published in the source window: 89
- High or critical CVEs considered for ranking: 44
- CISA KEV additions on 2026-07-05: 0
- Ranked items published here: 10
Top 10 CVE Intake
| Rank | CVE | CVSS | EPSS percentile | CVE summary |
|---|---|---|---|---|
| 1 | CVE-2026-14736 | HIGH 7.3 | 36.2% | A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Perform... |
| 2 | CVE-2026-14721 | HIGH 8.8 | 35.9% | A vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase... |
| 3 | CVE-2026-14641 | HIGH 7.3 | 33.5% | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of... |
| 4 | CVE-2026-14734 | HIGH 7.3 | 33.1% | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This ma... |
| 5 | CVE-2026-14660 | HIGH 7.3 | 33.1% | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a man... |
| 6 | CVE-2026-14642 | HIGH 7.3 | 33.1% | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the f... |
| 7 | CVE-2026-14735 | HIGH 7.3 | 33.1% | A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.... |
| 8 | CVE-2026-14654 | HIGH 7.3 | 33.1% | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlspr... |
| 9 | CVE-2026-14653 | HIGH 7.3 | 33.1% | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/menspr... |
| 10 | CVE-2026-14652 | HIGH 7.3 | 33.1% | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php o... |
Source Notes
The source window is 2026-07-04T18:30:00.000Z to 2026-07-05T18:29:59.999Z. AttackTrace uses NVD publication timestamps, CISA KEV date-added values, and FIRST EPSS enrichment. Reviewed threat-activity briefs remain separate and require source-backed exploitation or campaign evidence.
Ranked CVEs
A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricte...
Open NVD recordA vulnerability has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects an unknown function of the file /goform/ConfigWirelessBase_5g of the component Web Endpoint. The manipulation of the argument ss...
Open NVD recordA vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_course.php. Executing a manipulation of the argument I...
Open NVD recordA flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation of the argument ID causes sql injection. Remote exploitatio...
Open NVD recordA vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. Th...
Open NVD recordA vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.php. The manipulation of the argument ID leads to sql...
Open NVD recordA vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql...
Open NVD recordA vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument user_id leads...
Open NVD recordA vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument user_id causes...
Open NVD recordA vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username...
Open NVD recordDefender review
How to use this digest
This digest is an intake queue. Treat it as a prioritization input, then verify product presence, exposure, patch state, and detection coverage in your own environment.
Separate KEV-backed exploitation from high CVSS records with no exploit signal.
Confirm affected products and versions before assigning remediation urgency.
Record evidence gaps instead of converting unknowns into exposure claims.
Escalate reviewed threat-activity candidates only when exploitation or campaign evidence exists.
Record history
Update history
Update history
- Published
- 2026-07-05
- Generated
- 2026-07-07T05:49:29.902Z
- CVEs included
- 89