StackRadar

CVE-2026-87863

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
446
of 18,131 indexed, latest versions
Container images
277
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 446 of 18,131 indexed charts deploy, on 277 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 moreno fix listed277
OSV records
DEBIAN-CVE-2026-87863

Charts affected

446 by stars
ChartLatestAffected imagesRadar Score
nextcloudhelmforgeVerified publisher2.0.01 of 3See more

nextcloud helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache8f2f0e93aca5
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,091
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
curl@8.14.1-2
no fix listed

Open the chart page →

5,639
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/httpd:latest41163d514c02
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,465
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest357724bf0ae2
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,582
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
curl@8.20.0-5~bpo13+1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

35,576
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

116,936
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,965
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
infisical/infisical:latest3f014f284cb9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,136
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
inventreeinventreeOfficialVerified publisher0.4.312 of 2See more

inventree inventree 0.4.31

2 of the 2 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
inventree/inventree:1.5.74aefd6e2bb0e
curl@8.14.1-2+deb13u5
no fix listed
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,057
dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher0.1.01 of 1See more

dynamic-ip-loadbalancer-controller itsmethemojo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/buildpack-deps:curlc0ecfde33724
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,410
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/buildpack-deps:scmec9476a31fe1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,991
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,193
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,522
jenkinsjenkins-automation-tool0.1.01 of 1See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
jenkinsjenkins-automation-tool-by-helm0.1.01 of 1See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
jenkinsjenkins-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
jondos-genericjondos2.0.11 of 1See more

jondos-generic jondos 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
api-key-managerjtektVerified publisher0.3.01 of 4See more

api-key-manager jtekt 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,945
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

71,749
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.201 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.20

1 of the 4 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,901
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,150
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,027
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

12,148
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,332
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,247
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

11,376
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,359
librephotosk8sonlabVerified publisher1.1.71 of 7See more

librephotos k8sonlab 1.1.7

1 of the 7 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.2.1111203b9551a
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

18,270
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,721
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
curl@8.19.0-1~bpo13+1
no fix listed

Open the chart page →

39,053
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

13,663
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,815
nginxkrateo0.1.01 of 1See more

nginx krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
library/nginx:1.28146adea4768b
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,001
oasgen-providerkrateo0.11.11 of 1See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,618
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-87863.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

12,213

Container images carrying it

277 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
infisical/infisical:v0.166.616c78f075ca3
curl@8.14.1-2+deb13u5
no fix listed
1
infisical/infisical:latest3f014f284cb9
curl@8.14.1-2+deb13u5
no fix listed
1
inventree/inventree:1.5.74aefd6e2bb0e
curl@8.14.1-2+deb13u5
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
no fix listed
1
jellyfin/jellyfin:latest357724bf0ae2
curl@8.14.1-2+deb13u5
no fix listed
1
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
curl@8.14.1-2+deb13u4
no fix listed
1
jertel/elastalert2:2.31.03cbf63f9b7dc
curl@8.14.1-2+deb13u4
no fix listed
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
curl@8.14.1-2+deb13u2
no fix listed
1
kitware/cdash:v5.4.0da5abe941506
curl@8.14.1-2+deb13u5
no fix listed
1
kixote/typemill628f79a08cc7
curl@8.14.1-2+deb13u4
no fix listed
1
kixote/typemill7dfb517d24f0
curl@8.14.1-2+deb13u5
no fix listed
1
langgenius/dify-sandbox:0.2.15750e1111426e
curl@8.19.0-3
no fix listed
1
library/buildpack-deps:curl3dd78c060b4d
curl@8.14.1-2+deb13u5
no fix listed
1
library/buildpack-deps:curlc0ecfde33724
curl@8.14.1-2+deb13u5
no fix listed
1
library/buildpack-deps:scmec9476a31fe1
curl@8.14.1-2+deb13u5
no fix listed
1
library/couchdb:3.53611ce43bd32
curl@8.14.1-2+deb13u5
no fix listed
1
library/golang:lateste0174e51e812
curl@8.14.1-2+deb13u5
no fix listed
1
library/matomo:5.14.0-apache1e0019262702
curl@8.14.1-2+deb13u5
no fix listed
1
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
curl@8.14.1-2+deb13u5
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
1
library/nginx:1.28146adea4768b
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
no fix listed
1
library/nginx:1.31.660f0d4e98656
curl@8.14.1-2+deb13u5
no fix listed
1
library/node:latest9965105b7a4e
curl@8.14.1-2+deb13u5
no fix listed
1
library/php:8.4-fpm1071b5609d16
curl@8.14.1-2+deb13u5
no fix listed
1
library/python:3.10c10791e6f690
curl@8.14.1-2+deb13u5
no fix listed
1
library/python:3.9da5aee29682d
curl@8.14.1-2
no fix listed
1
library/redmine:6.1.204ac44a2595b
curl@8.14.1-2+deb13u3
no fix listed
1
library/wordpress:latest4abf7a450ee4
curl@8.14.1-2+deb13u5
no fix listed
1
library/wordpress:7.1.3-apache8ecd8d8e3741
curl@8.14.1-2+deb13u5
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
curl@8.14.1-2+deb13u3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
no fix listed
1
localstack/localstack:latestdf6b89814326
curl@8.14.1-2+deb13u5
no fix listed
1
machines/filestash:latestaff504cd28a8
curl@8.14.1-2+deb13u5
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
curl@8.14.1-2+deb13u4
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
curl@8.14.1-2+deb13u4
no fix listed
1
matrixdotorg/synapse:v1.162.06b84a7bbac36
curl@8.14.1-2+deb13u5
no fix listed
1
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
no fix listed
1
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
no fix listed
1
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
no fix listed
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
curl@8.14.1-2+deb13u3
no fix listed
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
curl@8.14.1-2+deb13u4
no fix listed
1
netdata/netdata:v2.12.15cfa05a5fa56
curl@8.14.1-2+deb13u5
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
no fix listed
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
curl@8.14.1-2
no fix listed
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
curl@8.14.1-2+deb13u2
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.