No review-now item passed evidence gates. Treat today as monitor/background unless new exploitation evidence arrives. Highest-scored item: A bug in the login redirect route in Apache Airflow allowed authenticated use….

Background

• A bug in the login redirect route in Apache Airflow allowed authenticated use… — score 15 — exploit status none — CVE CVE-2026-40961 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-40961. Evidence: nvd.

• SOPlanning does not enforce authorization for backup functionalities. An unau… — score 15 — exploit status none — CVE CVE-2026-40543 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-40543. Evidence: nvd.

• Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 an… — score 15 — exploit status none — CVE CVE-2026-32325 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-32325. Evidence: nvd.

• Incorrect permission assignment for critical resource issue exists in ServerV… — score 15 — exploit status none — CVE CVE-2026-27788 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-27788. Evidence: nvd.

• A flaw was found in Clair. The fetcher component makes outbound HTTP requests… — score 15 — exploit status none — CVE CVE-2026-10517 — flags: no_exploitation_signal — KQL: MDE exposure: devices with CVE-2026-10517. Evidence: nvd.