CVE•Published 2026-02-10•2 articles on news•4 live references•NVD data

CVE-2026-21514

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

7.8

HIGH

EPSS percentile

Exploit Prediction Scoring System · top 25% of all CVEs

Description

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

Timeline

Published 2026-02-10

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-21514

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Microsoft 365 Apps"

All exposed Microsoft 365 Apps instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"365 Apps"

HTTP body or banner mentions "365 Apps" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2026-21514

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2026-21514

Censys host search filtered to this CVE id.

grep.app

CVE-2026-21514

Public source-code mentions — fast PoC discovery.

GitHub code

CVE-2026-21514

GitHub code search for direct mentions.

Google dork

"CVE-2026-21514" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-215148 repos

nomi-sec/PoC-in-GitHubunknown

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

★ 8,102·updated 2d ago

RhinoSecurityLabs/CVEsPython

Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs

★ 906·updated 3w ago

Ostorlab/KEVunknown

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

★ 619·updated 1w ago

MY0723/FLUX-Webscanunknown

FLUX 是一款专业的Web安全扫描工具，JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析等功能。

★ 249·updated 5mo ago

DarkFunct/TK-CVE-RepoPython

TK-CVE-Repo

★ 51·updated 4mo ago

ekomsSavior/CerberusPython

Cerberus-CVE Assessment Situation

★ 20·updated 7mo ago

ChaitanyaHaritash/CVE-2026-21514_CVE-2026-21510Python

CVE-2026-21514 & CVE-2026-21510 (Because MS-Office Fascinates me)

★ 6·updated 5mo ago

paulo9z2/kit_masterC#

Você sabe bem oque é isto

★ 1·updated 2mo ago