Miggo Predictive Vulnerability Database
Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.
Concerned about an active attack path? Talk to our security experts and see Miggo in action
Contact Us
Top 10 CVEs
New vulnerabilities last 30 days
CVE-2026-62847: Metalama allows local code execution through DLL planting in shared temporary directories
Metalama local privilege escalation via DLL planting in insecure temporary directories executes arbitrary code by loading untrusted assemblies during builds.
Analysis:
Available
6
medium
10/14/2026
CVE-2026-55787: Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
flyto-core SSRF guard bypass via IPv6 transition addresses in validate_url_ssrf exfiltrates internal data and cloud metadata credentials via http modules.
Analysis:
Available
7.1
high
10/14/2026
CVE-2026-55786: Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`
flyto-core unauthenticated RCE via the /mcp endpoint grants arbitrary command execution through a JSON-RPC call invoking the sandbox.execute_shell module.
Analysis:
Available
8.4
high
10/14/2026
CVE-2026-53999: Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
Radius Controller auth bypass in multi-tenant installs from malicious Deployment annotation injection causes cross-tenant container resource deletion.
Analysis:
Available
7.7
high
10/14/2026