Vulnerabilities by Vendor | Vuln Brief

309 CVEs

Microsoft 48 Cisco 20 Fortinet 12 Ivanti 12 Linux 8 Citrix 8 Google 8 SonicWall 7 Adobe 5 PaperCut 4 JetBrains 4 Oracle 4 Palo Alto Networks 4 SolarWinds 4 Apple 4 Check Point 4 WordPress 4 Sangoma 3 Apache 3 F5 3 Atlassian 3 Zyxel 3 GitLab 3 ConnectWise 3 PHP Group 3 SimpleHelp 3 N-able 3 Ubiquiti 3 JFrog 3 BerriAI 3 Red Hat 2 Synacor 2 Apache Software Foundation 2 D-Link 2 IBM 2 Sophos 2 Progress Software 2 ownCloud 2 Cleo 2 Langflow 2 Zammad GmbH 2 BeyondTrust 2 Ahsay 2 LiteSpeed Technologies 2 MikroTik 2 TrueConf 2 Arista 2 ProFTPD 1 Adobe Systems 1 Sierra Wireless 1 Ajax.NET Professional 1 OpenPLC ScadaBR 1 ISC 1 DD-WRT 1 ONLYOFFICE 1 Zoho 1 Fortra (formerly HelpSystems) 1 Strapi 1 Juniper 1 KNX Association 1 Digiever 1 OpenSSH 1 Samsung 1 TeamT5 1 Gladinet 1 React Native Community 1 WatchGuard 1 MongoDB 1 Notepad++ 1 Kentico 1 Craft CMS 1 Quest 1 Langflow (DataStax) 1 Android Framework 1 Android 1 Roundcube 1 Meta React Server Components 1 OSGeo 1 ASUS 1 RARLAB 1 Array Networks 1 Ray-Project 1 Lantronix 1 n8n 1 EG Secure Solutions 1 PTC 1 Siemens 1 Arista Networks 1 Splunk 1 Broadcom 1 Dell 1 SmarterTools 1 Soliton Systems K.K. 1 Aqua Security 1 Trend Micro 1 Marimo / CoreWeave 1 WebPros 1 Mirasvit 1 TanStack 1 Nx 1 Widget Factory 1 JoomShaper 1 iCagenda 1 Kestra 1 WSO2 1 DataStax / Langflow 1 Joomlack 1 Balbooa 1 Broadcom / VMware 1 Gitea 1 MLflow 1 Metabase 1 Progress Software (Kemp) 1 Daemon 1 Acronis 1 Drupal Association 1 IBM / Langflow 1 Plex 1 Collabora 1 GPUStack 1 SignalWire 1 OpenBSD 1 Barracuda Networks 1

Microsoft

48 CVEs Avg CVSS: 8.5 First: Nov 3, 2021

16 Critical 32 High

CVE-2026-96951 High Patched

CVE-2026-96951: Windows Shell Command Injection Bypasses Security Feature Over the Network

Windows

Oct 13, 2026 Read analysis →

CVE-2026-65660 High Patched

CVE-2026-65660: Microsoft SharePoint Code Injection Allows Authorized Attacker to Execute Code Over the Network

SharePoint

Sep 25, 2026 Read analysis →

CVE-2026-81963 High Patched

CVE-2026-81963: Windows Update Stack Link Following Vulnerability Allows Local SYSTEM Privilege Escalation

Windows

Sep 8, 2026 Read analysis →

CVE-2026-85880 High Patched

CVE-2026-85880: Heap-Based Buffer Overflow in Windows Advanced Local Procedure Call Enables Local Privilege Escalation

Windows

Sep 8, 2026 Read analysis →

CVE-2019-1068 High Patched

CVE-2019-1068: Microsoft SQL Server Remote Code Execution

SQL Server

Aug 26, 2026 Read analysis →

CVE-2026-33824 Critical Patched

CVE-2026-33824: Windows IKE Extension Double-Free RCE Now in CISA KEV

Windows IKE Service Extensions

Aug 18, 2026 Read analysis →

CVE-2026-55040 Critical Patched

CVE-2026-55040: SharePoint JWT Forgery Lets Attackers Impersonate Any User

SharePoint Server

Aug 18, 2026 Read analysis →

CVE-2026-68820 High Patched

CVE-2026-68820: Windows WinSock Driver — Use-After-Free Privilege Escalation

Windows Ancillary Function Driver for WinSock

Aug 12, 2026 Read analysis →

CVE-2026-50522 Critical Patched

CVE-2026-50522: Microsoft SharePoint Unauthenticated RCE via Deserialization

SharePoint Server

Jul 23, 2026 Read analysis →

CVE-2026-58644 Critical Patched

CVE-2026-58644: Microsoft SharePoint — Unauthenticated Deserialization RCE

Microsoft SharePoint Server

Jul 17, 2026 Read analysis →

CVE-2026-56155 High Patched

CVE-2026-56155: Microsoft Active Directory Federation Services — Local Privilege Escalation

Active Directory Federation Services

Jul 15, 2026 Read analysis →

CVE-2026-56164 Critical Patched

CVE-2026-56164: Microsoft SharePoint Server — Missing Authentication Privilege Escalation

SharePoint Server

Jul 15, 2026 Read analysis →

CVE-2026-45659 High Patched

CVE-2026-45659: Microsoft SharePoint Server — Deserialization RCE

SharePoint Server

Jul 2, 2026 Read analysis →

CVE-2026-41089 Critical Patched

CVE-2026-41089: Windows Netlogon Pre-Authentication RCE — Unauthenticated Domain Controller Takeover

Windows Netlogon (Windows Server)

Jun 5, 2026 Read analysis →

CVE-2008-4250 Critical Patched

CVE-2008-4250: MS08-067 — Windows Server Service RPC Buffer Overflow (Conficker)

Microsoft Windows (Server Service)

May 20, 2026 Read analysis →

CVE-2009-1537 Critical Patched

CVE-2009-1537: Microsoft DirectX — MPEG2 Null Byte Overwrite via quartz.dll

Microsoft DirectX (quartz.dll)

May 20, 2026 Read analysis →

CVE-2010-0249 Critical Patched

CVE-2010-0249: Internet Explorer — Operation Aurora Use-After-Free (IE6/IE7 RCE)

Microsoft Internet Explorer

May 20, 2026 Read analysis →

CVE-2010-0806 Critical Patched

CVE-2010-0806: Internet Explorer — DHTML Peering Use-After-Free (Drive-By RCE)

Microsoft Internet Explorer

May 20, 2026 Read analysis →

CVE-2026-41091 High Patched

CVE-2026-41091: Microsoft Defender Symlink Following — Low-Privilege to SYSTEM via Malware Protection Engine

Defender (Microsoft Malware Protection Engine)

May 20, 2026 Read analysis →

CVE-2026-45498 High Patched

CVE-2026-45498: Microsoft Defender — Denial of Service via Malformed Input

Microsoft Defender Antivirus

May 20, 2026 Read analysis →

CVE-2026-42897 High Patched

CVE-2026-42897: Microsoft Exchange Server XSS in Outlook Web Access

Exchange Server

May 15, 2026 Read analysis →

CVE-2026-33825 High Patched

CVE-2026-33825: Microsoft Defender Insufficient Access Control — Local Privilege Escalation

Defender

Apr 22, 2026 Read analysis →

CVE-2023-21529 High Patched

CVE-2023-21529: Microsoft Exchange Server Deserialization — Authenticated RCE

Exchange Server

Apr 13, 2026 Read analysis →

CVE-2026-20963 Critical Patched

CVE-2026-20963: Microsoft SharePoint Deserialization — Unauthenticated Network RCE

SharePoint Server

Mar 18, 2026 Read analysis →

CVE-2008-0015 Critical Patched

CVE-2008-0015: Microsoft Windows Video ActiveX Control — Remote Code Execution

Windows Video ActiveX Control

Feb 17, 2026 Read analysis →

CVE-2024-43468 Critical Patched

CVE-2024-43468: Microsoft Configuration Manager — Unauthenticated SQL Injection RCE

Microsoft Configuration Manager (SCCM/MEM)

Feb 12, 2026 Read analysis →

CVE-2026-21510 High Patched

CVE-2026-21510: Microsoft Windows Shell — Protection Mechanism Failure

Windows Shell

Feb 10, 2026 Read analysis →

CVE-2026-21513 High Patched

CVE-2026-21513: Microsoft Windows MSHTML — Protection Mechanism Failure

Windows MSHTML

Feb 10, 2026 Read analysis →

CVE-2026-21514 High Patched

CVE-2026-21514: Microsoft Office Word — Reliance on Untrusted Inputs Privilege Escalation

Microsoft Office Word

Feb 10, 2026 Read analysis →

CVE-2026-21519 High Patched

CVE-2026-21519: Microsoft Desktop Window Manager — Type Confusion Privilege Escalation

Windows Desktop Window Manager (DWM)

Feb 10, 2026 Read analysis →

CVE-2026-21533 High Patched

CVE-2026-21533: Microsoft Windows Remote Desktop Services — Privilege Escalation

Windows Remote Desktop Services

Feb 10, 2026 Read analysis →

CVE-2025-62221 High Patched

CVE-2025-62221: Microsoft Windows Cloud Files Mini Filter Driver — Use-After-Free Privilege Escalation

Windows Cloud Files Mini Filter Driver

Dec 9, 2025 Read analysis →

CVE-2025-29824 High Patched

CVE-2025-29824: Windows CLFS — Zero-Day Privilege Escalation

Windows (CLFS Driver)

Apr 8, 2025 Read analysis →

CVE-2025-26633 High Patched

CVE-2025-26633: Microsoft MMC — Zero-Day Security Feature Bypass

Microsoft Management Console

Mar 11, 2025 Read analysis →

CVE-2025-21418 High Patched

CVE-2025-21418: Windows AFD Driver — Privilege Escalation

Windows AFD Driver

Feb 11, 2025 Read analysis →

CVE-2024-43451 High Patched

CVE-2024-43451: Windows — NTLM Hash Disclosure Spoofing

Windows

Nov 12, 2024 Read analysis →

CVE-2024-49039 High Patched

CVE-2024-49039: Windows Task Scheduler — Privilege Escalation

Windows Task Scheduler

Nov 12, 2024 Read analysis →

CVE-2024-38094 High Patched

CVE-2024-38094: Microsoft SharePoint Server — Remote Code Execution

SharePoint Server

Oct 22, 2024 Read analysis →

CVE-2024-38193 High Patched

CVE-2024-38193: Windows AFD Driver — Privilege Escalation

Windows AFD Driver

Aug 13, 2024 Read analysis →

CVE-2024-38112 High Patched

CVE-2024-38112: Windows MSHTML — Platform Spoofing

Windows MSHTML Platform

Jul 9, 2024 Read analysis →

CVE-2024-26169 High Patched

CVE-2024-26169: Windows Error Reporting — Privilege Escalation

Windows Error Reporting Service

Jun 13, 2024 Read analysis →

CVE-2024-30080 Critical Patched

CVE-2024-30080: Microsoft MSMQ — Remote Code Execution

Microsoft Message Queuing

Jun 11, 2024 Read analysis →

CVE-2024-30051 High Patched

CVE-2024-30051: Windows DWM Core Library — Privilege Escalation

Windows Desktop Window Manager

May 14, 2024 Read analysis →

CVE-2024-21338 High Patched

CVE-2024-21338: Windows Kernel — Privilege Escalation

Windows Kernel

Mar 4, 2024 Read analysis →

CVE-2023-36025 High Patched

CVE-2023-36025: Windows SmartScreen — Security Feature Bypass

Windows SmartScreen

Nov 14, 2023 Read analysis →

CVE-2022-41040 High Patched

CVE-2022-41040: Microsoft Exchange — ProxyNotShell SSRF

Exchange Server

Sep 30, 2022 Read analysis →

CVE-2021-26855 Critical Patched

CVE-2021-26855: Microsoft Exchange — ProxyLogon SSRF

Exchange Server

Nov 3, 2021 Read analysis →

CVE-2021-34473 Critical Patched

CVE-2021-34473: Microsoft Exchange — ProxyShell RCE

Exchange Server

Nov 3, 2021 Read analysis →

Cisco

20 CVEs Avg CVSS: 8.9 First: Oct 16, 2023

9 Critical 11 High

CVE-2026-20320 High Patched

CVE-2026-20320: Cisco BroadWorks OCI-P Blind XXE Lets Unauthenticated Attackers Read Configuration Files

BroadWorks

Nov 11, 2026 Read analysis →

CVE-2026-76418 High Patched

CVE-2026-76418: Cisco ASA and FTD SSL VPN Secondary-Authentication Flaw Lets Unauthenticated Attackers Reload Firewalls

Secure Firewall ASA Software and Secure FTD Software

Oct 30, 2026 Read analysis →

CVE-2026-76519 Critical Patched

CVE-2026-76519: Cisco Secure Email Gateway Path Traversal Enables Unauthenticated Arbitrary File Write

Secure Email Gateway

Oct 14, 2026 Read analysis →

CVE-2026-76504 Critical Patched

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Flaw Grants Unauthenticated Admin Access

Catalyst SD-WAN Manager

Sep 30, 2026 Read analysis →

CVE-2026-76460 Critical Patched

CVE-2026-76460: Cisco ISE Privileged API Misuse Enables Unauthenticated Management Interface Bypass

Identity Services Engine

Sep 16, 2026 Read analysis →

CVE-2026-76461 Critical Patched

CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Leads to Root-Level Command Execution

Secure Email Gateway

Sep 14, 2026 Read analysis →

CVE-2026-20079 Critical Patched

CVE-2026-20079: Cisco Secure Firewall Management Center Auth Bypass Grants Root Access

Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management

Sep 9, 2026 Read analysis →

CVE-2026-20349 High Patched

CVE-2026-20349: Cisco ASA and FTD — Remote DoS via VPN Heap Inspection

Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

Aug 12, 2026 Read analysis →

CVE-2026-20316 High Patched

CVE-2026-20316: Cisco Secure Firewall Management Center — Hard-Coded Password Authentication Bypass (CVSS 8.9)

Secure Firewall Management Center

Jul 29, 2026 Read analysis →

CVE-2026-20230 High Patched

CVE-2026-20230: Cisco Unified CM — SSRF to Root via Webshell

Unified Communications Manager

Jun 25, 2026 Read analysis →

CVE-2026-20245 High

CVE-2026-20245: Cisco Catalyst SD-WAN Manager CLI Command Injection — Unpatched Root Privilege Escalation

Catalyst SD-WAN Manager

Jun 10, 2026 Read analysis →

CVE-2026-20122 High Patched

CVE-2026-20122/20128/20133: Cisco Catalyst SD-WAN Manager Exploitation Chain

Catalyst SD-WAN Manager

May 23, 2026 Read analysis →

CVE-2026-20182 Critical Patched

CVE-2026-20182: Cisco Catalyst SD-WAN Authentication Bypass — Unauthenticated Admin Access

Catalyst SD-WAN Controller & Manager

May 14, 2026 Read analysis →

CVE-2026-20131 Critical Patched

CVE-2026-20131: Cisco FMC Deserialization — Unauthenticated RCE as Root

Secure Firewall Management Center (FMC) / Security Cloud Control

Mar 19, 2026 Read analysis →

CVE-2022-20775 High Patched

CVE-2022-20775: Cisco SD-WAN CLI — Path Traversal Privilege Escalation

Cisco SD-WAN

Feb 25, 2026 Read analysis →

CVE-2026-20127 Critical Patched

CVE-2026-20127: Cisco Catalyst SD-WAN Auth Bypass — Unauthenticated Admin Access

Catalyst SD-WAN Controller and Manager

Feb 25, 2026 Read analysis →

CVE-2025-20393 High Patched

CVE-2025-20393: Cisco Secure Email — OS Command Injection with Root Privileges

Secure Email Gateway / AsyncOS / Web Manager

Dec 17, 2025 Read analysis →

CVE-2024-20353 High Patched

CVE-2024-20353: Cisco ASA/FTD — ArcaneDoor DoS and Memory Leak

Cisco ASA / Firepower Threat Defense

Apr 24, 2024 Read analysis →

CVE-2023-20273 High Patched

CVE-2023-20273: Cisco IOS XE Web UI — Command Injection

Cisco IOS XE

Oct 23, 2023 Read analysis →

CVE-2023-20198 Critical Patched

CVE-2023-20198: Cisco IOS XE Web UI — Zero-Day Privilege Escalation (CVSS 10.0)

IOS XE

Oct 16, 2023 Read analysis →

Fortinet

12 CVEs Avg CVSS: 9.6 First: Dec 13, 2022

11 Critical 1 High

CVE-2026-104286 Critical Patched

CVE-2026-104286: Fortinet FortiMail Path Traversal and Null Byte Injection Enable Unauthenticated File Write

FortiMail

Oct 1, 2026 Read analysis →

CVE-2025-25249 High Patched

CVE-2025-25249: Heap-Based Buffer Overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE

Multiple Products

Sep 9, 2026 Read analysis →

CVE-2026-25089 Critical Patched

CVE-2026-25089: Fortinet FortiSandbox — Unauthenticated OS Command Injection

FortiSandbox, FortiSandbox Cloud, FortiSandbox PaaS

Jul 17, 2026 Read analysis →

CVE-2026-39808 Critical Patched

CVE-2026-39808: Fortinet FortiSandbox — Second Unauthenticated Command Injection

FortiSandbox

Jul 17, 2026 Read analysis →

CVE-2026-21643 Critical Patched

CVE-2026-21643: Fortinet FortiClient EMS Unauthenticated SQL Injection

FortiClient EMS

May 23, 2026 Read analysis →

CVE-2026-35616 Critical Patched

CVE-2026-35616: Fortinet FortiClient EMS Improper Access Control — Unauthenticated RCE

FortiClient EMS

Apr 6, 2026 Read analysis →

CVE-2025-59718 Critical Patched

CVE-2025-59718: Fortinet FortiOS/FortiProxy/FortiWeb — SAML Authentication Bypass

FortiOS / FortiProxy / FortiSwitchMaster / FortiWeb

Dec 16, 2025 Read analysis →

CVE-2024-23113 Critical Patched

CVE-2024-23113: Fortinet FortiOS — Format String RCE

FortiOS / FortiProxy / FortiPAM / FortiWeb

Oct 9, 2024 Read analysis →

CVE-2023-48788 Critical Patched

CVE-2023-48788: Fortinet FortiClientEMS — SQL Injection to RCE

FortiClientEMS

Mar 25, 2024 Read analysis →

CVE-2024-21762 Critical Patched

CVE-2024-21762: Fortinet FortiOS SSL VPN — Out-of-Bounds Write RCE

FortiOS

Feb 9, 2024 Read analysis →

CVE-2023-27997 Critical Patched

CVE-2023-27997: Fortinet FortiGate SSL-VPN — Pre-Auth Heap Overflow RCE

FortiOS / FortiProxy

Jun 13, 2023 Read analysis →

CVE-2022-42475 Critical Patched

CVE-2022-42475: Fortinet FortiOS — Heap Overflow RCE

FortiOS

Dec 13, 2022 Read analysis →

Ivanti

12 CVEs Avg CVSS: 8.9 First: Jul 25, 2023

7 Critical 5 High

CVE-2026-111357 High Patched

CVE-2026-111357: Ivanti Connect Secure dsinvoked Privilege Escalation to Root, Exploited as the Last Step of a Zero-Day Chain

Connect Secure

Oct 31, 2026 Read analysis →

CVE-2026-104935 High Patched

CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Enables Unauthenticated Command Execution

Connect Secure

Oct 13, 2026 Read analysis →

CVE-2026-10520 Critical Patched

CVE-2026-10520: Ivanti Sentry — Pre-Authentication OS Command Injection (CVSS 10.0)

Sentry (formerly MobileIron Sentry)

Jun 12, 2026 Read analysis →

CVE-2026-6973 High Patched

CVE-2026-6973: Ivanti EPMM Improper Input Validation Enables Authenticated RCE

Endpoint Manager Mobile (EPMM)

May 7, 2026 Read analysis →

CVE-2026-1340 Critical Patched

CVE-2026-1340: Ivanti EPMM Unauthenticated Code Injection Enables Full RCE

Endpoint Manager Mobile (EPMM)

Apr 8, 2026 Read analysis →

CVE-2026-1603 Critical Patched

CVE-2026-1603: Ivanti EPM Auth Bypass — Unauthenticated Credential Data Leak

Endpoint Manager (EPM)

Mar 9, 2026 Read analysis →

CVE-2025-0282 Critical Patched

CVE-2025-0282: Ivanti Connect Secure — Stack Overflow Zero-Day RCE

Connect Secure / Policy Secure / Neurons for ZTA

Jan 8, 2025 Read analysis →

CVE-2024-29824 Critical Patched

CVE-2024-29824: Ivanti EPM — SQL Injection to RCE

Endpoint Manager (EPM)

Oct 2, 2024 Read analysis →

CVE-2024-21893 High Patched

CVE-2024-21893: Ivanti Connect Secure — SSRF to Authentication Bypass

Connect Secure / Policy Secure

Jan 31, 2024 Read analysis →

CVE-2023-46805 High Patched

CVE-2023-46805: Ivanti Connect Secure — Authentication Bypass via Path Traversal

Connect Secure / Policy Secure

Jan 10, 2024 Read analysis →

CVE-2024-21887 Critical Patched

CVE-2024-21887: Ivanti Connect Secure — Authenticated Command Injection

Connect Secure / Policy Secure

Jan 10, 2024 Read analysis →

CVE-2023-35078 Critical Patched

CVE-2023-35078: Ivanti EPMM — Unauthenticated API Access

Endpoint Manager Mobile (EPMM)

Jul 25, 2023 Read analysis →

Linux

8 CVEs Avg CVSS: 8.2 First: May 1, 2026

1 Critical 7 High

CVE-2026-46300 High Patched

CVE-2026-46300: Linux Kernel Fragnesia ESP Shared-Fragment Flaw Gives Local Root

Kernel

Oct 29, 2026 Read analysis →

CVE-2025-39964 High Patched

CVE-2025-39964: Linux Kernel AF_ALG Socket Race Condition Corrupts Internal State

Kernel

Sep 18, 2026 Read analysis →

CVE-2025-39682 Critical Patched

CVE-2025-39682: Linux Kernel TLS Receive Path Zero-Length Record Flaw Breaks recvmsg() Assumptions

Kernel

Sep 18, 2026 Read analysis →

CVE-2026-53266 High Patched

CVE-2026-53266: Linux Kernel ebtables SNAT Out-of-Bounds Write via Splice-Imported Socket Buffers

Kernel

Sep 18, 2026 Read analysis →

CVE-2026-53362 High Patched

CVE-2026-53362: Linux Kernel IPv6 Subsystem Privilege Escalation

Kernel

Aug 27, 2026 Read analysis →

CVE-2022-0995 High Patched

CVE-2022-0995: Linux Kernel Watch Queue Out-of-Bounds Write LPE

Kernel

Aug 26, 2026 Read analysis →

CVE-2022-0492 High Patched

CVE-2022-0492: Linux Kernel cgroups v1 — Container Escape and Privilege Escalation

Kernel

Jun 3, 2026 Read analysis →

CVE-2026-31431 High Patched

CVE-2026-31431: Linux Kernel Privilege Escalation via Incorrect Resource Transfer

Linux Kernel

May 1, 2026 Read analysis →

Citrix

8 CVEs Avg CVSS: 9.0 First: Nov 8, 2022

4 Critical 4 High

CVE-2026-88779 High Patched

CVE-2026-88779: Citrix NetScaler ADC and Gateway Memory Buffer Flaw Enables Remote Denial of Service

NetScaler

Oct 4, 2026 Read analysis →

CVE-2026-88771 Critical Patched

CVE-2026-88771: Citrix NetScaler Improper Input Validation Enables Unauthenticated Remote Command Execution

NetScaler

Sep 27, 2026 Read analysis →

CVE-2026-88772 High Patched

CVE-2026-88772: Citrix NetScaler ADC and Gateway Memory Buffer Flaw Enables Remote Code Execution

NetScaler

Sep 27, 2026 Read analysis →

CVE-2026-19490 Critical Patched

CVE-2026-19490: Citrix NetScaler AAA/Gateway Authentication Bypass via Alternate Path

NetScaler

Sep 9, 2026 Read analysis →

CVE-2026-8452 High Patched

CVE-2026-8452: Citrix NetScaler ADC/Gateway Memory Buffer DoS

NetScaler ADC and NetScaler Gateway

Aug 26, 2026 Read analysis →

CVE-2026-3055 High Patched

CVE-2026-3055: Citrix NetScaler Out-of-Bounds Read — SAML IDP Memory Disclosure

NetScaler ADC / Gateway

Mar 30, 2026 Read analysis →

CVE-2023-4966 Critical Patched

CVE-2023-4966: Citrix NetScaler Bleed — Session Token Leak

NetScaler ADC / NetScaler Gateway

Oct 18, 2023 Read analysis →

CVE-2022-27510 Critical Patched

CVE-2022-27510: Citrix ADC/Gateway — Authentication Bypass

Citrix ADC / Citrix Gateway

Nov 8, 2022 Read analysis →

Google

8 CVEs Avg CVSS: 8.8 First: Dec 12, 2025

1 Critical 7 High

CVE-2026-111497 Critical Patched

CVE-2026-111497: Google Brotli Decoder Out-of-Bounds Write Enables RCE (Node2Shell)

Brotli

Oct 28, 2026 Read analysis →

CVE-2026-58704 High Patched

CVE-2026-58704: Google Pixel Cellular Modem Improper Authorization Enables Privilege Escalation

Pixel

Sep 16, 2026 Read analysis →

CVE-2026-87491 High Patched

CVE-2026-87491: Chromium V8 Out-of-Bounds Write Enables Sandboxed Remote Code Execution via Crafted HTML

Chromium V8

Sep 9, 2026 Read analysis →

CVE-2026-85046 High Patched

CVE-2026-85046: Chromium V8 Type Confusion Vulnerability Allows Sandboxed Code Execution via Crafted HTML

Chromium V8

Sep 4, 2026 Read analysis →

CVE-2026-11645 High Patched

CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read/Write — Actively Exploited Browser RCE

Chromium V8

Jun 10, 2026 Read analysis →

CVE-2026-3910 High Patched

CVE-2026-3910: Google Chromium V8 Memory Buffer — Sandbox RCE via Crafted HTML

Chromium / Chrome

Mar 13, 2026 Read analysis →

CVE-2026-2441 High Patched

CVE-2026-2441: Google Chromium CSS — Use-After-Free Heap Corruption

Chromium / Chrome / Edge / Opera

Feb 17, 2026 Read analysis →

CVE-2025-14174 High Patched

CVE-2025-14174: Google Chromium ANGLE — Out-of-Bounds Memory Access

Chromium / Chrome / Edge / Opera

Dec 12, 2025 Read analysis →

SonicWall

7 CVEs Avg CVSS: 8.7 First: Jan 24, 2025

3 Critical 4 High

CVE-2026-19868 High Patched

CVE-2026-19868: SonicWall SonicOS SSLVPN SAML Authentication and MFA Bypass

SonicOS SSLVPN

Nov 10, 2026 Read analysis →

CVE-2026-83548 Critical Patched

CVE-2026-83548: SonicWall SMA1000 SSRF Allows Unauthenticated Access to Sensitive Functionality

SMA1000 Appliances

Sep 2, 2026 Read analysis →

CVE-2026-83549 High Patched

CVE-2026-83549: SonicWall SMA1000 OS Command Injection Allows Authenticated Admin to Achieve Remote Code Execution

SMA1000 Appliances

Sep 2, 2026 Read analysis →

CVE-2026-15409 Critical Patched

CVE-2026-15409: SonicWall SMA1000 WorkPlace — Unauthenticated SSRF (CVSS 10.0)

SMA1000 Appliance

Jul 15, 2026 Read analysis →

CVE-2026-15410 High Patched

CVE-2026-15410: SonicWall SMA1000 AMC — Code Injection Remote Code Execution

SMA1000 Appliance

Jul 15, 2026 Read analysis →

CVE-2025-40602 High Patched

CVE-2025-40602: SonicWall SMA1000 — Missing Authorization Privilege Escalation

SMA1000 Appliance

Dec 17, 2025 Read analysis →

CVE-2025-23006 Critical Patched

CVE-2025-23006: SonicWall SMA 1000 — Pre-Auth Deserialization RCE

SonicWall SMA 1000

Jan 24, 2025 Read analysis →

Adobe

5 CVEs Avg CVSS: 9.4 First: Mar 15, 2023

4 Critical 1 High

CVE-2026-48356 Critical Patched

CVE-2026-48356: Adobe Commerce and Magento Unrestricted File Upload (CWE-434)

Adobe Commerce, Magento Open Source

Oct 28, 2026 Read analysis →

CVE-2026-71362 Critical Patched

CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Grants Elevated Access Without User Interaction

Commerce and Magento

Sep 24, 2026 Read analysis →

CVE-2026-75650 Critical Patched

CVE-2026-75650: Adobe Commerce and Magento Template Engine Injection Enables Arbitrary Code Execution

Commerce and Magento

Sep 8, 2026 Read analysis →

CVE-2026-48282 Critical Patched

CVE-2026-48282: Adobe ColdFusion RDS FILEIO Path Traversal to Unauthenticated RCE

ColdFusion

Jul 8, 2026 Read analysis →

CVE-2023-26360 High Patched

CVE-2023-26360: Adobe ColdFusion — Deserialization RCE

ColdFusion

Mar 15, 2023 Read analysis →

PaperCut

4 CVEs Avg CVSS: 9.4 First: Apr 21, 2023

3 Critical 1 High

CVE-2026-81578 High Patched

CVE-2026-81578: PaperCut NG/MF Missing Authentication Flaw Enables Unauthenticated Configuration Tampering

NG/MF

Aug 31, 2026 Read analysis →

CVE-2026-82078 Critical Patched

CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Enables Arbitrary Java Bytecode Execution

NG/MF

Aug 31, 2026 Read analysis →

CVE-2023-27351 Critical Patched

CVE-2023-27351: PaperCut NG/MF Improper Authentication — SecurityRequestFilter Bypass

PaperCut NG / MF

Apr 20, 2026 Read analysis →

CVE-2023-27350 Critical Patched

CVE-2023-27350: PaperCut MF/NG — Authentication Bypass RCE

PaperCut MF/NG

Apr 21, 2023 Read analysis →

JetBrains

4 CVEs Avg CVSS: 9.2 First: Oct 4, 2023

3 Critical 1 High

CVE-2026-63077 Critical Patched

CVE-2026-63077: JetBrains TeamCity — Deserialization RCE via Agent Protocol

TeamCity

Aug 6, 2026 Read analysis →

CVE-2024-27199 High Patched

CVE-2024-27199: JetBrains TeamCity Unauthenticated Path Traversal Enables Admin Actions

TeamCity

Apr 20, 2026 Read analysis →

CVE-2024-27198 Critical Patched

CVE-2024-27198: JetBrains TeamCity — Authentication Bypass to RCE

TeamCity

Mar 7, 2024 Read analysis →

CVE-2023-42793 Critical Patched

CVE-2023-42793: JetBrains TeamCity — Pre-Auth Authentication Bypass

TeamCity

Oct 4, 2023 Read analysis →

Oracle

4 CVEs Avg CVSS: 9.3 First: Jun 2, 2026

3 Critical 1 High

CVE-2026-21962 Critical Patched

CVE-2026-21962: Oracle HTTP Server & WebLogic Proxy Plug-in — Improper Access Control

Oracle HTTP Server / WebLogic Server Proxy Plug-in

Aug 25, 2026 Read analysis →

CVE-2026-46817 Critical Patched

CVE-2026-46817: Oracle E-Business Suite Payments — Unauthenticated Remote Code Execution

E-Business Suite (EBS) 12.2

Jul 16, 2026 Read analysis →

CVE-2026-35273 Critical Patched

CVE-2026-35273: Oracle PeopleSoft PeopleTools — Missing Authentication Enabling Unauthenticated Takeover

PeopleSoft Enterprise PeopleTools

Jun 12, 2026 Read analysis →

CVE-2024-21182 High Patched

CVE-2024-21182: Oracle WebLogic Server — Unauthenticated Information Disclosure via T3/IIOP

WebLogic Server

Jun 2, 2026 Read analysis →

Palo Alto Networks

4 CVEs Avg CVSS: 9.1 First: Apr 12, 2024

2 Critical 2 High

CVE-2026-0322 High Patched

CVE-2026-0322: Authenticated Code Injection in Palo Alto Networks PAN-OS Grants Root on Firewalls

PAN-OS

Oct 14, 2026 Read analysis →

CVE-2026-0257 High Patched

CVE-2026-0257: Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass via Cookie Forgery

PAN-OS

May 30, 2026 Read analysis →

CVE-2026-0300 Critical Patched

CVE-2026-0300: Palo Alto PAN-OS Out-of-Bounds Write Leads to Root RCE on Firewalls

PAN-OS

May 6, 2026 Read analysis →

CVE-2024-3400 Critical Patched

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect — Zero-Day Command Injection

PAN-OS

Apr 12, 2024 Read analysis →

SolarWinds

4 CVEs Avg CVSS: 9.1 First: Feb 3, 2026

3 Critical 1 High

CVE-2026-28318 High Patched

CVE-2026-28318: SolarWinds Serv-U Unauthenticated DoS via Deflate Header

Serv-U

Jun 6, 2026 Read analysis →

CVE-2025-26399 Critical Patched

CVE-2025-26399: SolarWinds Web Help Desk Deserialization — RCE via AjaxProxy

Web Help Desk

Mar 9, 2026 Read analysis →

CVE-2025-40536 Critical Patched

CVE-2025-40536: SolarWinds Web Help Desk — Security Control Bypass

Web Help Desk

Feb 12, 2026 Read analysis →

CVE-2025-40551 Critical Patched

CVE-2025-40551: SolarWinds Web Help Desk — Deserialization RCE

Web Help Desk

Feb 3, 2026 Read analysis →

Apple

4 CVEs Avg CVSS: 9.1 First: Dec 15, 2025

1 Critical 3 High

CVE-2026-86950 High Patched

CVE-2026-86950: Apple CoreGraphics Out-of-Bounds Write Enables Arbitrary Code Execution on iOS, iPadOS, and macOS

Multiple Products

Sep 29, 2026 Read analysis →

CVE-2026-65400 Critical Patched

CVE-2026-65400: macOS Screen Sharing Auth Bypass Fuels Cryptojacking Wave

macOS Screen Sharing

Aug 18, 2026 Read analysis →

CVE-2026-20700 High Patched

CVE-2026-20700: Apple Multiple Products — Buffer Overflow RCE

iOS / macOS / tvOS / watchOS / visionOS

Feb 12, 2026 Read analysis →

CVE-2025-43529 High Patched

CVE-2025-43529: Apple Multiple Products WebKit — Use-After-Free Memory Corruption

iOS/iPadOS/macOS/Safari

Dec 15, 2025 Read analysis →

Check Point

4 CVEs Avg CVSS: 9.6 First: Jun 9, 2026

4 Critical

CVE-2026-85102 Critical Patched

CVE-2026-85102: Check Point VPN Certificate Validation Flaw Enables Unauthenticated Code Execution on Security Gateways

Multiple Products

Sep 22, 2026 Read analysis →

CVE-2026-93616 Critical Patched

CVE-2026-93616: Check Point Management Servers Path Traversal Allows Unauthenticated Arbitrary Script Upload

Multiple Products

Sep 22, 2026 Read analysis →

CVE-2026-16232 Critical Patched

CVE-2026-16232: Check Point SmartConsole Authentication Bypass

SmartConsole

Jul 23, 2026 Read analysis →

CVE-2026-50751 Critical Patched

CVE-2026-50751: Check Point Security Gateway IKEv1 Authentication Bypass — Qilin Ransomware Exploiting in the Wild

Security Gateway

Jun 9, 2026 Read analysis →

WordPress

4 CVEs Avg CVSS: 8.9 First: Jul 22, 2026

2 Critical 2 High

CVE-2026-119977 High Patched

CVE-2026-119977: WordPress Core Upgrade-Window TOCTOU Race Allows Unauthenticated Remote Code Execution

Core

Nov 4, 2026 Read analysis →

CVE-2026-87902 High Patched

CVE-2026-87902: WordPress Core Remote File Inclusion Lets Attackers Achieve Remote Code Execution

Core

Sep 25, 2026 Read analysis →

CVE-2026-63030 Critical Patched

CVE-2026-63030: WordPress Core — Interpretation Conflict Enabling RCE

WordPress Core

Jul 22, 2026 Read analysis →

CVE-2026-60137 Critical Patched

CVE-2026-60137: WordPress Core — SQL Injection Leading to RCE Chain

WordPress Core

Jul 22, 2026 Read analysis →

Sangoma

3 CVEs Avg CVSS: 9.5 First: Feb 3, 2026

2 Critical 1 High

CVE-2026-9586 Critical Patched

CVE-2026-9586: Sangoma Switchvox Unauthenticated SQL Injection Enables Remote Code Execution

Switchvox

Sep 2, 2026 Read analysis →

CVE-2019-19006 Critical Patched

CVE-2019-19006: Sangoma FreePBX — Improper Authentication Bypass

FreePBX

Feb 3, 2026 Read analysis →

CVE-2025-64328 High Patched

CVE-2025-64328: Sangoma FreePBX Endpoint Manager — Post-Auth OS Command Injection

FreePBX Endpoint Manager

Feb 3, 2026 Read analysis →

Apache

3 CVEs Avg CVSS: 8.1 First: Apr 16, 2026

3 High

CVE-2016-3081 High Patched

CVE-2016-3081 (S2-032): Decade-Old Apache Struts Dynamic Method Invocation Flaw Still Being Exploited

Struts

Oct 8, 2026 Read analysis →

CVE-2026-34486 High Patched

CVE-2026-34486: Apache Tomcat — EncryptInterceptor Bypass, Cluster RCE

Apache Tomcat

Aug 5, 2026 Read analysis →

CVE-2026-34197 High Patched

CVE-2026-34197: Apache ActiveMQ RCE via Jolokia JMX-HTTP Bridge

ActiveMQ

Apr 16, 2026 Read analysis →

F5

3 CVEs Avg CVSS: 9.5 First: May 10, 2022

2 Critical 1 High

CVE-2026-94127 Critical Patched

CVE-2026-94127: F5 BIG-IP APM Heap Buffer Overflow Enables Unauthenticated Remote Code Execution

BIG-IP APM

Sep 22, 2026 Read analysis →

CVE-2025-53521 High Patched

CVE-2025-53521: F5 BIG-IP APM Stack-Based Buffer Overflow — RCE

BIG-IP APM

Mar 27, 2026 Read analysis →

CVE-2022-1388 Critical Patched

CVE-2022-1388: F5 BIG-IP iControl REST — Authentication Bypass to RCE

BIG-IP

May 10, 2022 Read analysis →

Atlassian

3 CVEs Avg CVSS: 9.7 First: Jun 2, 2022

3 Critical

CVE-2026-21589 Critical Patched

CVE-2026-21589: Atlassian Data Center Products — Unauthenticated Arbitrary File Access

Oct 19, 2026 Read analysis →

CVE-2023-22515 Critical Patched

CVE-2023-22515: Atlassian Confluence — Privilege Escalation to Admin

Confluence Data Center and Server

Oct 5, 2023 Read analysis →

CVE-2022-26134 Critical Patched

CVE-2022-26134: Atlassian Confluence — OGNL Injection RCE

Confluence Server / Data Center

Jun 2, 2022 Read analysis →

Zyxel

3 CVEs Avg CVSS: 9.5 First: May 16, 2022

2 Critical 1 High

CVE-2026-7273 High Patched

CVE-2026-7273: Zyxel GS1900 Switches Stack Buffer Overflow Enables Unauthenticated OS Command Execution

GS1900 Series Switches

Sep 21, 2026 Read analysis →

CVE-2023-28771 Critical Patched

CVE-2023-28771: Zyxel Firewall — Pre-Auth OS Command Injection

Zyxel Firewall

May 31, 2023 Read analysis →

CVE-2022-30525 Critical Patched

CVE-2022-30525: Zyxel Firewall — OS Command Injection

Zyxel Firewall

May 16, 2022 Read analysis →

GitLab

3 CVEs Avg CVSS: 10.0 First: May 1, 2024

3 Critical

CVE-2026-97229 Critical Patched

CVE-2026-97229: GitLab CE/EE CI/CD Regex Integer Overflow Could Allow Unauthenticated Code Execution

GitLab Community Edition and Enterprise Edition

Oct 30, 2026 Read analysis →

CVE-2026-85706 Critical Patched

CVE-2026-85706: GitLab Repository Commits API Path Traversal Enables Unauthenticated Arbitrary File Read

Community Edition and Enterprise Edition

Sep 11, 2026 Read analysis →

CVE-2023-7028 Critical Patched

CVE-2023-7028: GitLab — Account Takeover via Email Reset

GitLab CE/EE

May 1, 2024 Read analysis →

ConnectWise

3 CVEs Avg CVSS: 9.9 First: Feb 22, 2024

3 Critical

CVE-2026-84869 Critical Patched

CVE-2026-84869: ConnectWise ScreenConnect Flaw Enables Unauthorized File Transfer and Execution

ScreenConnect

Sep 11, 2026 Read analysis →

CVE-2024-1708 Critical Patched

CVE-2024-1708: ConnectWise ScreenConnect Path Traversal — RMM Tools as Attack Vectors

ScreenConnect

Apr 28, 2026 Read analysis →

CVE-2024-1709 Critical Patched

CVE-2024-1709: ConnectWise ScreenConnect — Authentication Bypass (CVSS 10.0)

ScreenConnect

Feb 22, 2024 Read analysis →

PHP Group

3 CVEs Avg CVSS: 9.2 First: Jun 12, 2024

2 Critical 1 High

CVE-2026-109618 Critical Patched

CVE-2026-109618: PHP Out-of-Memory longjmp Corruption Allows Unauthenticated RCE

PHP

Oct 27, 2026 Read analysis →

CVE-2026-109619 High Patched

CVE-2026-109619: PHP Stale Request State Use-After-Free Allows Unauthenticated RCE

PHP

Oct 27, 2026 Read analysis →

CVE-2024-4577 Critical Patched

CVE-2024-4577: PHP CGI — Argument Injection RCE on Windows

PHP (CGI mode on Windows)

Jun 12, 2024 Read analysis →

SimpleHelp

3 CVEs Avg CVSS: 9.0 First: Apr 24, 2026

2 Critical 1 High

CVE-2026-48558 Critical Patched

CVE-2026-48558: SimpleHelp — OIDC Authentication Bypass via Unsigned Token Acceptance

SimpleHelp

Jun 30, 2026 Read analysis →

CVE-2024-57726 High Patched

CVE-2024-57726: SimpleHelp Missing Authorization — Privilege Escalation via API Keys

SimpleHelp Remote Support

Apr 24, 2026 Read analysis →

CVE-2024-57728 Critical Patched

CVE-2024-57728: SimpleHelp Path Traversal (Zip Slip) — Arbitrary File Write via Admin Upload

SimpleHelp Remote Support

Apr 24, 2026 Read analysis →

N-able

3 CVEs Avg CVSS: 8.5 First: Aug 4, 2026

1 Critical 2 High

CVE-2026-86218 Critical Patched

CVE-2026-86218: N-able N-central Static Code Injection Enables Pre-Auth RCE

N-central

Sep 8, 2026 Read analysis →

CVE-2026-18556 High Patched

CVE-2026-18556: N-able N-central — Authentication Bypass, RMM Takeover

N-central

Aug 5, 2026 Read analysis →

CVE-2026-18577 High Patched

CVE-2026-18577: N-able N-central — Authentication Bypass Leading to Account Takeover

N-central

Aug 4, 2026 Read analysis →

Ubiquiti

3 CVEs Avg CVSS: 10.0 First: Jun 24, 2026

3 Critical

CVE-2026-34909 Critical Patched

CVE-2026-34909: Ubiquiti UniFi OS — Path Traversal

UniFi OS Server

Jun 25, 2026 Read analysis →

CVE-2026-34910 Critical Patched

CVE-2026-34910: Ubiquiti UniFi OS — Command Injection

UniFi OS Server

Jun 25, 2026 Read analysis →

CVE-2026-34910 Critical Patched

CVE-2026-34908/34909/34910: Ubiquiti UniFi OS — Unauthenticated Root RCE Chain

UniFi OS

Jun 24, 2026 Read analysis →

JFrog

3 CVEs Avg CVSS: 8.5 First: Sep 2, 2026

1 Critical 2 High

CVE-2026-42016 High Patched

CVE-2026-42016: JFrog Artifactory Incorrect Authorization Enables Token-Scope Privilege Escalation

Artifactory

Sep 11, 2026 Read analysis →

CVE-2026-42018 High Patched

CVE-2026-42018: JFrog Artifactory Anonymous Token Leak Authentication Bypass

Artifactory

Sep 11, 2026 Read analysis →

CVE-2026-82329 Critical Patched

CVE-2026-82329: JFrog Artifactory Default-Configuration Flaw Grants Unauthenticated Administrative Access

Artifactory

Sep 2, 2026 Read analysis →

BerriAI

3 CVEs Avg CVSS: 8.6 First: May 8, 2026

3 High

CVE-2026-59822 High Patched

CVE-2026-59822: BerriAI LiteLLM MCP Streamable HTTP Endpoint Allows Authentication Bypass via Arbitrary Bearer Token

LiteLLM

Sep 2, 2026 Read analysis →

CVE-2026-42271 High Patched

CVE-2026-42271: LiteLLM Command Injection in MCP Endpoints Gives Any User Shell Access

LiteLLM

Jun 9, 2026 Read analysis →

CVE-2026-42208 High Patched

CVE-2026-42208: SQL Injection in BerriAI LiteLLM Exposes AI Proxy Credentials

LiteLLM

May 8, 2026 Read analysis →

Red Hat

2 CVEs Avg CVSS: 7.5 First: Aug 26, 2026

2 High

CVE-2015-3246 High Patched

CVE-2015-3246: Red Hat Libuser — Race Condition Privilege Escalation

Libuser

Aug 26, 2026 Read analysis →

CVE-2015-5287 High Patched

CVE-2015-5287: Red Hat ABRT - Symlink Attack Privilege Escalation

Automatic Bug Reporting Tool (ABRT)

Aug 26, 2026 Read analysis →

Synacor

2 CVEs Avg CVSS: 9.4 First: Feb 17, 2026

1 Critical 1 High

CVE-2026-73570 High Patched

CVE-2026-73570: Zimbra Collaboration Suite — Unauthenticated OS Command Injection via SNMP/SMTP

Zimbra Collaboration Suite

Aug 21, 2026 Read analysis →

CVE-2020-7796 Critical Patched

CVE-2020-7796: Synacor Zimbra Collaboration Suite — SSRF via WebEx Zimlet

Zimbra Collaboration Suite (ZCS)

Feb 17, 2026 Read analysis →

Apache Software Foundation

2 CVEs Avg CVSS: 10.0 First: Dec 10, 2021

2 Critical

CVE-2025-30065 Critical Patched

CVE-2025-30065: Apache Parquet — Remote Code Execution

Apache Parquet

Apr 2, 2025 Read analysis →

CVE-2021-44228 Critical Patched

CVE-2021-44228: Log4Shell — Apache Log4j Remote Code Execution

Log4j 2

Dec 10, 2021 Read analysis →

D-Link

2 CVEs Avg CVSS: 8.5 First: Dec 8, 2025

1 Critical 1 High

CVE-2025-29635 High

CVE-2025-29635: D-Link DIR-823X Command Injection — End-of-Life Device with No Fix

DIR-823X

Apr 24, 2026 Read analysis →

CVE-2022-37055 Critical

CVE-2022-37055: D-Link Routers — Buffer Overflow RCE

D-Link Routers

Dec 8, 2025 Read analysis →

IBM

2 CVEs Avg CVSS: 9.8 First: Feb 21, 2023

2 Critical

CVE-2026-123218 Critical Patched

CVE-2026-123218: IBM Aspera Faspex 5 Authorization Bypass — Full Administrative Privileges

Aspera Faspex

Nov 10, 2026 Read analysis →

CVE-2022-47986 Critical Patched

CVE-2022-47986: IBM Aspera Faspex — YAML Deserialization RCE

Aspera Faspex

Feb 21, 2023 Read analysis →

Sophos

2 CVEs Avg CVSS: 9.8 First: Sep 23, 2022

2 Critical

CVE-2023-1671 Critical Patched

CVE-2023-1671: Sophos Web Appliance — Pre-Auth Command Injection

Sophos Web Appliance

Nov 16, 2023 Read analysis →

CVE-2022-3236 Critical Patched

CVE-2022-3236: Sophos Firewall — User Portal and Webadmin Code Injection

Sophos Firewall

Sep 23, 2022 Read analysis →

Progress Software

2 CVEs Avg CVSS: 9.9 First: Jun 2, 2023

2 Critical

CVE-2023-40044 Critical Patched

CVE-2023-40044: Progress WS_FTP Server — Deserialization RCE

WS_FTP Server

Oct 5, 2023 Read analysis →

CVE-2023-34362 Critical Patched

CVE-2023-34362: MOVEit Transfer — SQL Injection to RCE

MOVEit Transfer

Jun 2, 2023 Read analysis →

ownCloud

2 CVEs Avg CVSS: 9.9 First: Nov 30, 2023

2 Critical

CVE-2023-49105 Critical Patched

CVE-2023-49105: ownCloud WebDAV API Authentication Bypass via Pre-Signed URLs

ownCloud

Aug 27, 2026 Read analysis →

CVE-2023-49103 Critical Patched

CVE-2023-49103: ownCloud graphapi — Sensitive Information Disclosure (CVSS 10.0)

ownCloud (graphapi app)

Nov 30, 2023 Read analysis →

Cleo

2 CVEs Avg CVSS: 9.3 First: Dec 13, 2024

1 Critical 1 High

CVE-2024-55956 Critical Patched

CVE-2024-55956: Cleo MFT — Unrestricted File Upload to RCE

Harmony / VLTrader / LexiCom

Dec 17, 2024 Read analysis →

CVE-2024-50623 High Patched

CVE-2024-50623: Cleo Harmony/VLTrader — Unrestricted File Upload and Download RCE

Harmony / VLTrader / LexiCom

Dec 13, 2024 Read analysis →

Langflow

2 CVEs Avg CVSS: 9.8 First: Mar 25, 2026

2 Critical

CVE-2026-0770 Critical Patched

CVE-2026-0770: Langflow — Untrusted Control Sphere RCE

Langflow

Jul 22, 2026 Read analysis →

CVE-2026-33017 Critical Patched

CVE-2026-33017: Langflow Code Injection — Unauthenticated RCE via Public Flows

Langflow

Mar 25, 2026 Read analysis →

Zammad GmbH

2 CVEs Avg CVSS: 8.6 First: Oct 2, 2026

2 High

CVE-2026-102489 High Patched

CVE-2026-102489: Zammad Session Fixation Flaw Enables Remote Code Execution as the Zammad User

Zammad

Oct 2, 2026 Read analysis →

CVE-2026-102490 High Patched

CVE-2026-102490: Zammad Improper Privilege Management Allows Local Escalation to Root

Zammad

Oct 2, 2026 Read analysis →

BeyondTrust

2 CVEs Avg CVSS: 9.8 First: Feb 13, 2026

2 Critical

CVE-2026-102764 Critical Patched

CVE-2026-102764: BeyondTrust Remote Support Authentication Bypass by Spoofing

Remote Support

Oct 16, 2026 Read analysis →

CVE-2026-1731 Critical Patched

CVE-2026-1731: BeyondTrust Remote Support OS Command Injection — Unauthenticated RCE

Remote Support / Privileged Remote Access

Feb 13, 2026 Read analysis →

Ahsay

2 CVEs Avg CVSS: 8.7 First: Oct 14, 2026

1 Critical 1 High

CVE-2026-105133 High Patched

CVE-2026-105133: Ahsay AhsayCBS Authentication Bypass via checkSysPwd Parameter Manipulation

AhsayCBS

Oct 14, 2026 Read analysis →

CVE-2026-105134 Critical Patched

CVE-2026-105134: Ahsay AhsayCBS Command Injection via Replication Receiver Endpoint

AhsayCBS

Oct 14, 2026 Read analysis →

LiteSpeed Technologies

2 CVEs Avg CVSS: 9.3 First: May 27, 2026

1 Critical 1 High

CVE-2026-54420 High Patched

CVE-2026-54420: LiteSpeed cPanel Plugin — UNIX Symlink Following Allows Container Escape on Shared Hosting

LiteSpeed cPanel Plugin

Jun 16, 2026 Read analysis →

CVE-2026-48172 Critical Patched

CVE-2026-48172: LiteSpeed cPanel Plugin — Root Privilege Escalation via redisAble API

LiteSpeed cPanel Plugin

May 27, 2026 Read analysis →

MikroTik

2 CVEs Avg CVSS: 9.3 First: Sep 10, 2026

1 Critical 1 High

CVE-2026-67277 High Patched

CVE-2026-67277: MikroTik RouterOS Missing Authentication in btest Service Allows Kernel Memory Disclosure and DoS

RouterOS

Sep 10, 2026 Read analysis →

CVE-2026-86060 Critical Patched

CVE-2026-86060: MikroTik RouterOS Argument Delimiter Injection Allows Policy Mask Privilege Escalation

RouterOS

Sep 10, 2026 Read analysis →

TrueConf

2 CVEs Avg CVSS: 9.4 First: Aug 20, 2026

2 Critical

CVE-2026-72529 Critical Patched

CVE-2026-72529: TrueConf Server — Missing Authentication for Critical Function

Server

Aug 20, 2026 Read analysis →

CVE-2026-72530 Critical Patched

CVE-2026-72530: TrueConf Server — Code Injection / Sandbox Escape

Server

Aug 20, 2026 Read analysis →

Arista

2 CVEs Avg CVSS: 9.9 First: Sep 22, 2026

2 Critical

CVE-2026-114625 Critical Patched

CVE-2026-114625: Arista VeloCloud Orchestrator Flaw Gives Any Logged-In User Operator Rights

VeloCloud Orchestrator (on-prem)

Oct 26, 2026 Read analysis →

CVE-2026-93952 Critical Patched

CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Exposes Privileged Internal Functionality

VeloCloud Orchestrator

Sep 22, 2026 Read analysis →

ProFTPD

1 CVE Avg CVSS: 10.0 First: Oct 8, 2026

1 Critical

CVE-2015-3306 Critical Patched

CVE-2015-3306: ProFTPD mod_copy Improper Access Control Enables Arbitrary File Read/Write

ProFTPD

Oct 8, 2026 Read analysis →

Adobe Systems

1 CVE Avg CVSS: 9.3 First: May 20, 2026

1 Critical

CVE-2009-3459 Critical Patched

CVE-2009-3459: Adobe Acrobat and Reader — Heap-Based Buffer Overflow via Malicious PDF

Adobe Acrobat and Reader

May 20, 2026 Read analysis →

Sierra Wireless

1 CVE Avg CVSS: 8.8 First: Dec 12, 2025

1 High

CVE-2018-4063 High

CVE-2018-4063: Sierra Wireless AirLink ALEOS — Unrestricted File Upload RCE

AirLink ALEOS

Dec 12, 2025 Read analysis →

Ajax.NET Professional

1 CVE Avg CVSS: 9.8 First: Aug 26, 2026

1 Critical

CVE-2021-23758 Critical Patched

CVE-2021-23758: Ajax.NET Professional, Insecure Deserialization RCE

AjaxPro

Aug 26, 2026 Read analysis →

OpenPLC ScadaBR

1 CVE Avg CVSS: 8.8 First: Dec 3, 2025

1 High

CVE-2021-26828 High Patched

CVE-2021-26828: OpenPLC ScadaBR — Unrestricted File Upload RCE

ScadaBR

Dec 3, 2025 Read analysis →

ISC

1 CVE Avg CVSS: 7.5 First: Oct 8, 2026

1 High

CVE-2015-5477 High Patched

CVE-2015-5477: ISC BIND TKEY Query Denial of Service

BIND

Oct 8, 2026 Read analysis →

DD-WRT

1 CVE Avg CVSS: 9.8 First: Jul 22, 2026

1 High

CVE-2021-27137 High Patched

CVE-2021-27137: DD-WRT — UPnP Stack Buffer Overflow RCE

DD-WRT

Jul 22, 2026 Read analysis →

ONLYOFFICE

1 CVE Avg CVSS: 9.8 First: Oct 8, 2026

1 Critical

CVE-2021-3199 Critical Patched

CVE-2021-3199: ONLYOFFICE Docs Path Traversal via JWT Image Upload Enables Remote Code Execution

Docs

Oct 8, 2026 Read analysis →

Zoho

1 CVE Avg CVSS: 9.8 First: Nov 3, 2021

1 Critical

CVE-2021-40539 Critical Patched

CVE-2021-40539: Zoho ManageEngine ADSelfService Plus — Unauthenticated RCE

ManageEngine ADSelfService Plus

Nov 3, 2021 Read analysis →

Fortra (formerly HelpSystems)

1 CVE Avg CVSS: 7.2 First: Feb 10, 2023

1 High

CVE-2023-0669 High Patched

CVE-2023-0669: GoAnywhere MFT — Pre-Auth Remote Code Execution

GoAnywhere MFT

Feb 10, 2023 Read analysis →

Strapi

1 CVE Avg CVSS: 7.2 First: Oct 8, 2026

1 High

CVE-2023-22894 High Patched

CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information

Strapi

Oct 8, 2026 Read analysis →

Juniper

1 CVE Avg CVSS: 9.8 First: Nov 13, 2023

1 Critical

CVE-2023-36844 Critical Patched

CVE-2023-36844: Juniper SRX/EX — PHP Environment Variable Injection

Juniper SRX / EX Series

Nov 13, 2023 Read analysis →

KNX Association

1 CVE Avg CVSS: 7.5 First: Jul 16, 2026

1 High

CVE-2023-4346 High

CVE-2023-4346: KNX Protocol — BCU Key Lockout Enables Permanent Building Automation Denial of Service

KNX Protocol

Jul 16, 2026 Read analysis →

Digiever

1 CVE Avg CVSS: 9.8 First: Dec 22, 2025

1 Critical

CVE-2023-52163 Critical

CVE-2023-52163: Digiever DS-2105 Pro — Missing Authorization / Command Injection

DS-2105 Pro NVR

Dec 22, 2025 Read analysis →

OpenSSH

1 CVE Avg CVSS: 8.1 First: Jul 1, 2024

1 High

CVE-2024-6387 High Patched

CVE-2024-6387: OpenSSH regreSSHion — Unauthenticated RCE in sshd

OpenSSH (sshd)

Jul 1, 2024 Read analysis →

Samsung

1 CVE Avg CVSS: 9.8 First: Apr 24, 2026

1 Critical

CVE-2024-7399 Critical Patched

CVE-2024-7399: Samsung MagicINFO 9 Server Unauthenticated File Write Leading to RCE

MagicINFO 9 Server

Apr 24, 2026 Read analysis →

TeamT5

1 CVE Avg CVSS: 7.2 First: Feb 17, 2026

1 High

CVE-2024-7694 High Patched

CVE-2024-7694: TeamT5 ThreatSonar Anti-Ransomware — Unrestricted File Upload RCE

ThreatSonar Anti-Ransomware

Feb 17, 2026 Read analysis →

Gladinet

1 CVE Avg CVSS: 9.1 First: Dec 15, 2025

1 Critical

CVE-2025-14611 Critical Patched

CVE-2025-14611: Gladinet CentreStack/Triofox — Hardcoded Cryptographic Keys

CentreStack / Triofox

Dec 15, 2025 Read analysis →

React Native Community

1 CVE Avg CVSS: 9.8 First: Feb 5, 2026

1 Critical

CVE-2025-11953 Critical Patched

CVE-2025-11953: React Native Community CLI — Metro Dev Server OS Command Injection

React Native CLI / Metro Development Server

Feb 5, 2026 Read analysis →

WatchGuard

1 CVE Avg CVSS: 9.8 First: Dec 19, 2025

1 Critical

CVE-2025-14733 Critical Patched

CVE-2025-14733: WatchGuard Firebox — Out-of-Bounds Write RCE via IKEv2

Firebox / Fireware OS

Dec 19, 2025 Read analysis →

MongoDB

1 CVE Avg CVSS: 7.5 First: Dec 29, 2025

1 High

CVE-2025-14847 High Patched

CVE-2025-14847: MongoDB Server — Zlib Compressed Protocol Heap Memory Disclosure

MongoDB Server

Dec 29, 2025 Read analysis →

Notepad++

1 CVE Avg CVSS: 7.5 First: Feb 12, 2026

1 High

CVE-2025-15556 High Patched

CVE-2025-15556: Notepad++ WinGUp Updater — Download Without Integrity Check

Notepad++ (WinGUp updater)

Feb 12, 2026 Read analysis →

Kentico

1 CVE Avg CVSS: 7.5 First: Apr 20, 2026

1 High

CVE-2025-2749 High Patched

CVE-2025-2749: Kentico Xperience Path Traversal — Authenticated Staging Sync File Write

Kentico Xperience

Apr 20, 2026 Read analysis →

Craft CMS

1 CVE Avg CVSS: 9.8 First: Mar 20, 2026

1 Critical

CVE-2025-32432 Critical Patched

CVE-2025-32432: Craft CMS Code Injection — Remote Code Execution

Craft CMS

Mar 20, 2026 Read analysis →

Quest

1 CVE Avg CVSS: 9.8 First: Apr 20, 2026

1 Critical

CVE-2025-32975 Critical Patched

CVE-2025-32975: Quest KACE Systems Management Appliance Improper Authentication

KACE Systems Management Appliance (SMA)

Apr 20, 2026 Read analysis →

Langflow (DataStax)

1 CVE Avg CVSS: 9.8 First: May 21, 2026

1 Critical

CVE-2025-34291 Critical Patched

CVE-2025-34291: Langflow — Origin Validation Error Enabling Unauthenticated RCE

Langflow

May 21, 2026 Read analysis →

Android Framework

1 CVE Avg CVSS: 7.8 First: Dec 2, 2025

1 High

CVE-2025-48572 High Patched

CVE-2025-48572: Android Framework — Privilege Escalation Vulnerability

Android Framework

Dec 2, 2025 Read analysis →

Android

1 CVE Avg CVSS: 8.4 First: Jun 3, 2026

1 High

CVE-2025-48595 High Patched

CVE-2025-48595: Android Framework — Integer Overflow Enabling Local Privilege Escalation

Framework

Jun 3, 2026 Read analysis →

Roundcube

1 CVE Avg CVSS: 8.8 First: Feb 20, 2026

1 High

CVE-2025-49113 High Patched

CVE-2025-49113: Roundcube Webmail Deserialization — Authenticated RCE via upload.php

Roundcube Webmail

Feb 20, 2026 Read analysis →

Meta React Server Components

1 CVE Avg CVSS: 9.8 First: Dec 5, 2025

1 Critical

CVE-2025-55182 Critical Patched

CVE-2025-55182: Meta React Server Components — Unauthenticated RCE

React Server Components

Dec 5, 2025 Read analysis →

OSGeo

1 CVE Avg CVSS: 7.5 First: Dec 11, 2025

1 High

CVE-2025-58360 High Patched

CVE-2025-58360: OSGeo GeoServer — XXE via WMS GetMap Endpoint

GeoServer

Dec 11, 2025 Read analysis →

ASUS

1 CVE Avg CVSS: 7.5 First: Dec 17, 2025

1 High

CVE-2025-59374 High

CVE-2025-59374: ASUS Live Update — Embedded Malicious Code (Supply Chain)

ASUS Live Update

Dec 17, 2025 Read analysis →

RARLAB

1 CVE Avg CVSS: 7.8 First: Dec 9, 2025

1 High

CVE-2025-6218 High Patched

CVE-2025-6218: RARLAB WinRAR — Path Traversal Code Execution

WinRAR

Dec 9, 2025 Read analysis →

Array Networks

1 CVE Avg CVSS: 9.8 First: Dec 8, 2025

1 Critical

CVE-2025-66644 Critical Patched

CVE-2025-66644: Array Networks ArrayOS AG — OS Command Injection

ArrayOS AG

Dec 8, 2025 Read analysis →

Ray-Project

1 CVE Avg CVSS: 9.4 First: Aug 17, 2026

1 Critical

CVE-2025-62593 Critical Patched

CVE-2025-62593: Ray — Browser CSRF Chains to Code Injection RCE

Ray

Aug 17, 2026 Read analysis →

Lantronix

1 CVE Avg CVSS: 9.8 First: Jun 24, 2026

1 Critical

CVE-2025-67038 Critical Patched

CVE-2025-67038: Lantronix EDS5000 — OS Command Injection (Root)

EDS5000

Jun 24, 2026 Read analysis →

n8n

1 CVE Avg CVSS: 9.8 First: Mar 11, 2026

1 Critical

CVE-2025-68613 Critical Patched

CVE-2025-68613: n8n Workflow Automation RCE — Expression Evaluation Code Injection

n8n Workflow Automation

Mar 11, 2026 Read analysis →

EG Secure Solutions

1 CVE Avg CVSS: 8.5 First: Oct 21, 2026

1 High

CVE-2026-106931 High Patched

CVE-2026-106931: SiteGuard Server Edition OS Command Injection Runs as root or SYSTEM

SiteGuard Server Edition

Oct 21, 2026 Read analysis →

PTC

1 CVE Avg CVSS: 9.3 First: Jun 25, 2026

1 Critical

CVE-2026-12569 Critical Patched

CVE-2026-12569: PTC Windchill — Unauthenticated Deserialization RCE

Windchill PDMLink / FlexPLM

Jun 25, 2026 Read analysis →

Siemens

1 CVE Avg CVSS: 8.4 First: Oct 21, 2026

1 High

CVE-2026-110936 High Patched

CVE-2026-110936: Siemens Software Center Uncontrolled DLL Search Path Enables Code Execution

Software Center

Oct 21, 2026 Read analysis →

Arista Networks

1 CVE Avg CVSS: 10.0 First: Jul 27, 2026

1 Critical

CVE-2026-16812 Critical Patched

CVE-2026-16812: Arista VeloCloud Orchestrator — Unauthenticated OS Command Injection

VeloCloud Orchestrator On-Prem

Jul 27, 2026 Read analysis →

Splunk

1 CVE Avg CVSS: 9.8 First: Jun 19, 2026

1 Critical

CVE-2026-20253 Critical Patched

CVE-2026-20253: Splunk Enterprise — Unauthenticated PostgreSQL Sidecar RCE

Splunk Enterprise

Jun 19, 2026 Read analysis →

Broadcom

1 CVE Avg CVSS: 9.8 First: Mar 3, 2026

1 Critical

CVE-2026-22719 Critical Patched

CVE-2026-22719: VMware Aria Operations Command Injection — Unauthenticated RCE via Migration

VMware Aria Operations (vRealize Operations)

Mar 3, 2026 Read analysis →

Dell

1 CVE Avg CVSS: 9.8 First: Feb 18, 2026

1 Critical

CVE-2026-22769 Critical Patched

CVE-2026-22769: Dell RecoverPoint for VMs — Hard-Coded Credentials

RecoverPoint for Virtual Machines (RP4VMs)

Feb 18, 2026 Read analysis →

SmarterTools

1 CVE Avg CVSS: 9.8 First: Feb 5, 2026

1 Critical

CVE-2026-24423 Critical Patched

CVE-2026-24423: SmarterTools SmarterMail — Missing Authentication RCE via ConnectToHub

SmarterMail

Feb 5, 2026 Read analysis →

Soliton Systems K.K.

1 CVE Avg CVSS: 8.8 First: Feb 24, 2026

1 High

CVE-2026-25108 High Patched

CVE-2026-25108: Soliton FileZen — OS Command Injection via HTTP Request

FileZen

Feb 24, 2026 Read analysis →

Aqua Security

1 CVE Avg CVSS: 9.5 First: Mar 26, 2026

1 Critical

CVE-2026-33634 Critical Patched

CVE-2026-33634: Aqua Security Trivy Supply Chain Attack — Embedded Malicious Code

Trivy

Mar 26, 2026 Read analysis →

Trend Micro

1 CVE Avg CVSS: 7.5 First: May 21, 2026

1 High

CVE-2026-34926 High Patched

CVE-2026-34926: Trend Micro Apex One — Directory Traversal Enabling Arbitrary File Read/Write

Apex One (On-Premise)

May 21, 2026 Read analysis →

Marimo / CoreWeave

1 CVE Avg CVSS: 9.8 First: Apr 23, 2026

1 Critical

CVE-2026-39987 Critical Patched

CVE-2026-39987: Marimo Unauthenticated WebSocket PTY Shell Exposes Full RCE

Marimo

Apr 23, 2026 Read analysis →

WebPros

1 CVE Avg CVSS: 9.8 First: Apr 30, 2026

1 Critical

CVE-2026-41940 Critical Patched

CVE-2026-41940: cPanel & WHM Authentication Bypass — Unauthenticated Control Panel Access

cPanel & WHM

Apr 30, 2026 Read analysis →

Mirasvit

1 CVE Avg CVSS: 9.8 First: Jun 4, 2026

1 Critical

CVE-2026-45247 Critical Patched

CVE-2026-45247: Mirasvit Full Page Cache Warmer — Unauthenticated PHP Object Injection RCE

Full Page Cache Warmer for Magento 2

Jun 4, 2026 Read analysis →

TanStack

1 CVE Avg CVSS: 9.6 First: May 28, 2026

1 Critical

CVE-2026-45321 Critical Patched

CVE-2026-45321: TanStack npm Supply Chain Compromise — Credential-Stealing Malware in 42 Packages

TanStack

May 28, 2026 Read analysis →

Nx

1 CVE Avg CVSS: 9.8 First: May 28, 2026

1 Critical

CVE-2026-48027 Critical Patched

CVE-2026-48027: Nx Console VS Code Extension — Supply Chain Compromise and Credential Theft

Nx Console

May 28, 2026 Read analysis →

JoomShaper

1 CVE Avg CVSS: 10.0 First: Jul 8, 2026

1 Critical

CVE-2026-48908 Critical Patched

CVE-2026-48908: JoomShaper SP Page Builder Unauthenticated File Upload to RCE

SP Page Builder

Jul 8, 2026 Read analysis →

iCagenda

1 CVE Avg CVSS: 9.8 First: Jul 10, 2026

1 Critical

CVE-2026-48939 Critical Patched

CVE-2026-48939: iCagenda — Dual-Path File Upload RCE and Access Control Bypass

iCagenda (Joomla component)

Jul 10, 2026 Read analysis →

Kestra

1 CVE Avg CVSS: 10.0 First: Sep 2, 2026

1 Critical

CVE-2026-49869 Critical Patched

CVE-2026-49869: Kestra OSS Unauthenticated OS Command Injection via Workflow Creation

Kestra OSS

Sep 2, 2026 Read analysis →

WSO2

1 CVE Avg CVSS: 10.0 First: Sep 24, 2026

1 Critical

CVE-2026-5430 Critical Patched

CVE-2026-5430: WSO2 API Manager and Gateway Products Path Traversal Enables RCE via File Upload

Multiple Products

Sep 24, 2026 Read analysis →

DataStax / Langflow

1 CVE Avg CVSS: 9.9 First: Jul 8, 2026

1 Critical

CVE-2026-55255 Critical Patched

CVE-2026-55255: Langflow IDOR in /api/v1/responses Allows Authenticated Attackers to Execute Arbitrary User Flows

Langflow

Jul 8, 2026 Read analysis →

Joomlack

1 CVE Avg CVSS: 9.8 First: Jul 8, 2026

1 Critical

CVE-2026-56290 Critical Patched

CVE-2026-56290: Joomlack Page Builder CK Unauthenticated File Upload to RCE

Page Builder CK

Jul 8, 2026 Read analysis →

Balbooa

1 CVE Avg CVSS: 9.8 First: Jul 10, 2026

1 Critical

CVE-2026-56291 Critical Patched

CVE-2026-56291: Balbooa Forms — Unauthenticated File Upload RCE in Joomla

Balbooa Forms (Joomla extension)

Jul 10, 2026 Read analysis →

Broadcom / VMware

1 CVE Avg CVSS: 9.8 First: Aug 18, 2026

1 Critical

CVE-2026-59310 Critical Patched

CVE-2026-59310: VMware vCenter Path Traversal Exploited Across 47 Countries

vCenter Server

Aug 18, 2026 Read analysis →

Gitea

1 CVE Avg CVSS: 9.8 First: Aug 25, 2026

1 Critical

CVE-2026-60004 Critical Patched

CVE-2026-60004: Gitea — diffpatch Git Hook Code Injection

Gitea

Aug 25, 2026 Read analysis →

MLflow

1 CVE Avg CVSS: 9.3 First: Aug 19, 2026

1 Critical

CVE-2026-64849 Critical Patched

CVE-2026-64849: MLflow — Unauthenticated Webhook SSRF Reaching Cloud Metadata

MLflow

Aug 19, 2026 Read analysis →

Metabase

1 CVE Avg CVSS: 10.0 First: Aug 12, 2026

1 Critical

CVE-2026-72898 Critical Patched

CVE-2026-72898: Metabase — Unauthenticated SQL Injection via Password Reset

Metabase

Aug 12, 2026 Read analysis →

Progress Software (Kemp)

1 CVE Avg CVSS: 9.8 First: Aug 8, 2026

1 Critical

CVE-2026-8037 Critical Patched

CVE-2026-8037: Progress Kemp LoadMaster — Pre-Auth Command Injection RCE

LoadMaster

Aug 8, 2026 Read analysis →

Daemon

1 CVE Avg CVSS: 9.8 First: May 28, 2026

1 Critical

CVE-2026-8398 Critical Patched

CVE-2026-8398: DAEMON Tools Lite — Official Installer Backdoored with Signed Malware

Daemon Tools Lite

May 28, 2026 Read analysis →

Acronis

1 CVE Avg CVSS: 7.8 First: Sep 16, 2026

1 High

CVE-2026-87886 High Patched

CVE-2026-87886: Acronis Backup Plugin for cPanel & Plesk — Incorrect Default Permissions Enable Privilege Escalation

Backup

Sep 16, 2026 Read analysis →

Drupal Association

1 CVE Avg CVSS: 8.1 First: May 22, 2026

1 High

CVE-2026-9082 High Patched

CVE-2026-9082: Drupal Core SQL Injection via PostgreSQL Database Abstraction API

Drupal Core

May 22, 2026 Read analysis →

IBM / Langflow

1 CVE Avg CVSS: 9.8 First: Aug 5, 2026

1 Critical

CVE-2026-9198 Critical Patched

CVE-2026-9198: IBM Langflow — Unauthenticated Remote Code Execution

Langflow

Aug 5, 2026 Read analysis →

Plex

1 CVE Avg CVSS: 7.2 First: Oct 22, 2026

1 High

CVE-2026-96656 High Patched

CVE-2026-96656: Plex Media Server File Write Gives Code Execution

Media Server

Oct 22, 2026 Read analysis →

Collabora

1 CVE Avg CVSS: 9.2 First: Oct 26, 2026

1 Critical

CVE-2026-110447 Critical Patched

CVE-2026-110447: Nextcloud's Collabora Built-in CODE Server Hit by Command Injection

Collabora Online - Built-in CODE Server (richdocumentscode)

Oct 26, 2026 Read analysis →

GPUStack

1 CVE Avg CVSS: 9.8 First: Nov 10, 2026

1 Critical

CVE-2026-102895 Critical Patched

CVE-2026-102895: GPUStack Authentication Bypass — Unauthenticated Admin via Trusted Loopback Source

GPUStack

Nov 10, 2026 Read analysis →

SignalWire

1 CVE Avg CVSS: 9.8 First: Nov 10, 2026

1 Critical

CVE-2026-116779 Critical Patched

CVE-2026-116779: FreeSWITCH SIP MESSAGE Runs API Commands — Remote Command Execution

FreeSWITCH

Nov 10, 2026 Read analysis →

OpenBSD

1 CVE Avg CVSS: 8.1 First: Nov 10, 2026

1 High

CVE-2026-123158 High Patched

CVE-2026-123158: OpenSSH sshd Password Authentication Bypass on musl Libc Without PAM (Alpine Linux)

OpenSSH

Nov 10, 2026 Read analysis →

Barracuda Networks

1 CVE Avg CVSS: 9.3 First: Nov 11, 2026

1 Critical

CVE-2026-116606 Critical Patched

CVE-2026-116606 and CVE-2026-111560: Barracuda ESG Authentication Bypass Chains to Root Command Injection

Email Security Gateway (ESG) and other Barracuda appliances

Nov 11, 2026 Read analysis →

No vendors match your search.