{"items":[{"id":"CVE-2026-63640","published":"2026-08-18T17:35:44.944Z","updated":"2026-08-18T17:56:32.044Z","title":"MagicMirror socket payload secret placeholder expansion can disclose SECRET_* environment variables","severity":"MEDIUM","score":4.3,"vendor":"MagicMirrorOrg","product":"MagicMirror","kev":false,"epss":0.00298,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63642","published":"2026-08-18T17:22:02.733Z","updated":"2026-08-19T15:06:31.454Z","title":"MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery","severity":"MEDIUM","score":6.3,"vendor":"MagicMirrorOrg","product":"MagicMirror","kev":false,"epss":0.00496,"kevAdded":null,"exploit":true},{"id":"CVE-2026-63643","published":"2026-08-18T17:18:52.556Z","updated":"2026-08-19T18:21:37.126Z","title":"MagicMirror: ssrf calendar .js","severity":"MEDIUM","score":6.3,"vendor":"MagicMirrorOrg","product":"MagicMirror","kev":false,"epss":0.00665,"kevAdded":null,"exploit":false},{"id":"CVE-2026-63641","published":"2026-08-18T17:13:03.109Z","updated":"2026-08-18T19:26:23.631Z","title":"MagicMirror Socket.IO module namespaces bypass configured IP whitelist and allow unauthenticated server-side actions","severity":"LOW","score":2.3,"vendor":"MagicMirrorOrg","product":"MagicMirror","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-42281","published":"2026-05-14T15:46:41.076Z","updated":"2026-05-14T19:51:14.186Z","title":"MagicMirror²: Unauthenticated SSRF via /cors endpoint","severity":"CRITICAL","score":9.2,"vendor":"MagicMirrorOrg","product":"MagicMirror","kev":false,"epss":0.01623,"kevAdded":null,"exploit":true}]}