Will at least one CVE be published in 2026 with a CVSS v3.1 base score of exactly 4.20?

About

A nice round number that shows up surprisingly often. Resolves YES if at least one CVE in the NVD with a Published date in calendar 2026 has a CVSS v3.1 base score of exactly 4.2.

Resolution criteria

NVD JSON feed for 2026 contains at least one CVE with cvssMetricV31[].cvssData.baseScore == 4.2.

Source

NVD CVE JSON 2.0 feed at https://nvd.nist.gov/feeds/json/cve/2.0/.

Ambiguity

AMBIGUOUS only if NVD is offline / unreachable for more than 7 consecutive days around the resolution date.

Discussion

Loading comments…