Automatically updated

CVE entries

353 vulnerabilities tracked, 341 of them actively exploited according to CISA: for each, what we know, the vendor advisory, CERT-FR alerts, our analyses and what to do.

October 2026 30

1. CVE-2026-108099Oct 18

   Your Drupal site could be hacked without a password: two critical flaws to patch fast

2. CVE-2026-108097Oct 18

   Your Drupal site could be hacked without a password: two critical flaws to patch fast

3. CVE-2026-102764Oct 16

   BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

4. CVE-2025-61624Oct 16

   Fortinet Multiple Products Path Traversal Vulnerability

5. CVE-2026-110447Oct 16

   Nextcloud: exploited since September 10, the Collabora flaw wasn't disclosed until October 14

6. CVE-2026-21589Oct 15

   Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

7. CVE-2026-92392Oct 14

   curl patches a high-severity HTTP/2 flaw: update to version 8.23.0

8. CVE-2026-74580Oct 14

   Linux: a Tencent AI reportedly found a flaw that gives full control of the machine

9. CVE-2026-76519Oct 14

   Cisco Secure Email Gateway Relative Path Traversal Vulnerability

10. CVE-2026-105134Oct 14

    Ahsay AhsayCBS Command Injection Vulnerability

11. CVE-2026-105133Oct 14

    Ahsay AhsayCBS Improper Authentication Vulnerability

12. CVE-2026-0322Oct 14

    Palo Alto Networks PAN-OS Code Injection Vulnerability

13. CVE-2026-105445Oct 13

    Docker Hub flaw let attackers impersonate users and tamper with their images

14. CVE-2026-96951Oct 13

    Microsoft Windows Command Injection Vulnerability

15. CVE-2026-104935Oct 13

    Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

16. CVE-2026-85097Oct 13

    Critical Bricksforge WordPress flaw exploited since October 7

17. CVE-2025-41452Oct 12

    Cyberattack disrupts refrigeration at hundreds of Intermarché, U and Leclerc supermarkets

18. CVE-2025-41451Oct 12

    Cyberattack disrupts refrigeration at hundreds of Intermarché, U and Leclerc supermarkets

19. CVE-2025-41450Oct 12

    Hacked fridges: CERT-FR issues alert on Danfoss AK-SM and AK-SC controllers

20. CVE-2026-102255Oct 11

    SonicWall SMA1000: critical flaw already targeted in attacks

21. CVE-2026-107406Oct 11

    NetScaler: Citrix patches new critical SAML-related flaw

22. CVE-2023-22894Oct 8

    Strapi Cleartext Storage of Sensitive Information Vulnerability

23. CVE-2021-3199Oct 8

    ONLYOFFICE Docs Server Path Traversal Vulnerability

24. CVE-2016-3081Oct 8

    Apache Struts Command Injection Vulnerability

25. CVE-2015-5477Oct 8

    ISC BIND Data Processing Errors Vulnerability

26. CVE-2015-3306Oct 8

    ProFTPD Improper Access Control Vulnerability

27. CVE-2026-88779Oct 4

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

28. CVE-2026-102490Oct 2

    Zammad GmbH Zammad Improper Privilege Management Vulnerability

29. CVE-2026-102489Oct 2

    Zammad GmbH Zammad Session Fixation Vulnerability

30. CVE-2026-104286Oct 1

    Fortinet FortiMail Path Traversal Vulnerability

September 2026 43

1. CVE-2026-76504Sep 30

   Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

2. CVE-2026-86950Sep 29

   Apple Multiple Products Out-of-Bounds Write Vulnerability

3. CVE-2026-88772Sep 27

   Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

4. CVE-2026-88771Sep 27

   Citrix NetScaler Improper Input Validation Vulnerability

5. CVE-2026-87902Sep 25

   WordPress Core Remote File Inclusion Vulnerability

6. CVE-2026-67279Sep 25

   Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

7. CVE-2026-65660Sep 25

   Microsoft SharePoint Code Injection Vulnerability

8. CVE-2026-71362Sep 24

   Adobe Commerce and Magento Incorrect Authorization Vulnerability

9. CVE-2026-5430Sep 24

   WSO2 Multiple Products Path Traversal Vulnerability

10. CVE-2026-94127Sep 22

    F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

11. CVE-2026-93952Sep 22

    Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

12. CVE-2026-93616Sep 22

    Check Point Multiple Products Path Traversal Vulnerability

13. CVE-2026-85102Sep 22

    Check Point Multiple Products Improper Certificate Validation Vulnerability

14. CVE-2026-7273Sep 21

    Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

15. CVE-2026-53266Sep 18

    Linux Kernel Out-of-Bounds Write Vulnerability

16. CVE-2025-39964Sep 18

    Linux Kernel Race Condition Vulnerability

17. CVE-2025-39682Sep 18

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

18. CVE-2026-87886Sep 16

    Acronis Backup Incorrect Default Permissions Vulnerability

19. CVE-2026-76460Sep 16

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

20. CVE-2026-58704Sep 16

    Google Pixel Improper Authorization Vulnerability

21. CVE-2026-76461Sep 14

    Cisco Secure Email Gateway SQL Injection Vulnerability

22. CVE-2026-85706Sep 11

    GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

23. CVE-2026-84869Sep 11

    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

24. CVE-2026-42018Sep 11

    JFrog Artifactory Improper Authentication Vulnerability

25. CVE-2026-42016Sep 11

    JFrog Artifactory Incorrect Authorization Vulnerability

26. CVE-2026-86060Sep 10

    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

27. CVE-2026-67277Sep 10

    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

28. CVE-2026-87491Sep 9

    Google Chromium V8 Out of Bounds Write Vulnerability

29. CVE-2026-20079Sep 9

    Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

30. CVE-2026-19490Sep 9

    Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

31. CVE-2025-25249Sep 9

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

32. CVE-2026-86218Sep 8

    N-able N-central Static Code Injection Vulnerability

33. CVE-2026-85880Sep 8

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

34. CVE-2026-81963Sep 8

    Microsoft Windows Link Following Vulnerability

35. CVE-2026-75650Sep 8

    Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

36. CVE-2026-85046Sep 4

    Google Chromium V8 Type Confusion Vulnerability

37. CVE-2026-9586Sep 2

    Sangoma Switchvox SQL Injection Vulnerability

38. CVE-2026-83549Sep 2

    SonicWall SMA1000 Appliances OS Command Injection Vulnerability

39. CVE-2026-83548Sep 2

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

40. CVE-2026-82329Sep 2

    JFrog Artifactory Improper Authentication Vulnerability

41. CVE-2026-59822Sep 2

    BerriAI LiteLLM Improper Authentication Vulnerability

42. CVE-2026-49869Sep 2

    Kestra OSS OS Command Injection Vulnerability

43. CVE-2026-48710Sep 2

    Kludex Starlette HTTP Request/Response Smuggling Vulnerability

August 2026 31

1. CVE-2026-82078Aug 31

   PaperCut NG/MF Unsafe Reflection Vulnerability

2. CVE-2026-81578Aug 31

   PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

3. CVE-2026-66384Aug 27

   JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

4. CVE-2026-53362Aug 27

   Linux Kernel Unspecified Vulnerability

5. CVE-2023-49105Aug 27

   ownCloud Improper Authentication Vulnerability

6. CVE-2026-8452Aug 26

   Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

7. CVE-2022-0995Aug 26

   Linux Kernel Out-of-Bounds Write Vulnerability

8. CVE-2021-23758Aug 26

   Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

9. CVE-2019-1068Aug 26

   Microsoft SQL Server Remote Code Execution Vulnerability

10. CVE-2015-5287Aug 26

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

11. CVE-2015-3246Aug 26

    Red Hat Libuser Race Condition Vulnerability

12. CVE-2026-60004Aug 25

    Gitea Code Injection Vulnerability

13. CVE-2026-21962Aug 24

    Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

14. CVE-2026-73570Aug 21

    Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

15. CVE-2026-72530Aug 20

    TrueConf Server Code Injection Vulnerability

16. CVE-2026-72529Aug 20

    TrueConf Server Missing Authentication for Critical Function Vulnerability

17. CVE-2026-64849Aug 19

    MLflow Server-Side Request Forgery Vulnerability

18. CVE-2026-65400Aug 18

    Apple macOS Improper Authentication Vulnerability

19. CVE-2026-59310Used by ransomwareAug 18

    Broadcom VMware vCenter Path Traversal Vulnerability

20. CVE-2026-55040Aug 18

    Microsoft SharePoint Weak Authentication Vulnerability

21. CVE-2026-33824Aug 18

    Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

22. CVE-2025-62593Aug 17

    Ray-Project Ray Code Injection Vulnerability

23. CVE-2026-72898Aug 11

    Metabase SQL Injection Vulnerability

24. CVE-2026-68820Aug 11

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

25. CVE-2026-20349Aug 11

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

26. CVE-2026-8037Aug 7

    Progress LoadMaster Command Injection Vulnerability

27. CVE-2026-63077Used by ransomwareAug 5

    JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

28. CVE-2026-9198Aug 4

    IBM Langflow Code Injection Vulnerability

29. CVE-2026-34486Aug 4

    Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

30. CVE-2026-18556Aug 4

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

31. CVE-2026-18577Aug 3

    N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

July 2026 26

1. CVE-2026-20316Used by ransomwareJul 29

   Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

2. CVE-2026-16812Jul 27

   Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

3. CVE-2025-68686Jul 27

   Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

4. CVE-2026-50522Jul 22

   Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

5. CVE-2026-16232Jul 22

   Check Point SmartConsole Improper Authentication Vulnerability

6. CVE-2026-63030Jul 21

   WordPress Core Interpretation Conflict Vulnerability

7. CVE-2026-60137Jul 21

   WordPress Core SQL Injection Vulnerability

8. CVE-2026-0770Jul 21

   Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

9. CVE-2021-27137Jul 21

   DD-WRT Stack-Based Buffer Overflow Vulnerability

10. CVE-2026-58644Jul 16

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

11. CVE-2026-39808Jul 16

    Fortinet FortiSandbox OS Command Injection Vulnerability

12. CVE-2026-25089Jul 16

    Fortinet FortiSandbox OS Command Injection Vulnerability

13. CVE-2026-46817Jul 15

    Oracle E-Business Suite Improper Privilege Management Vulnerability

14. CVE-2023-4346Jul 15

    KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

15. CVE-2026-56164Jul 14

    Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

16. CVE-2026-56155Jul 14

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

17. CVE-2026-15410Used by ransomwareJul 14

    SonicWall SMA1000 Appliances Code Injection Vulnerability

18. CVE-2026-15409Used by ransomwareJul 14

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

19. CVE-2008-4128Jul 13

    Cisco IOS Cross-Site Request Forgery Vulnerability

20. CVE-2026-56291Jul 10

    Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

21. CVE-2026-48939Jul 10

    iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability

22. CVE-2026-56290Jul 7

    Joomlack Page Builder Improper Access Control Vulnerability

23. CVE-2026-55255Jul 7

    Langflow Authorization Bypass Through User-Controlled Key Vulnerability

24. CVE-2026-48908Jul 7

    JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

25. CVE-2026-48282Jul 7

    Adobe ColdFusion Path Traversal Vulnerability

26. CVE-2026-45659Used by ransomwareJul 1

    Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

June 2026 23

1. CVE-2026-48558Jun 29

   SimpleHelp Authentication Bypass Vulnerability

2. CVE-2026-20230Jun 25

   Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability

3. CVE-2026-12569Used by ransomwareJun 25

   PTC Windchill and FlexPLM Improper Input Validation Vulnerability

4. CVE-2026-34910Jun 23

   Ubiquiti UniFi OS Improper Input Validation Vulnerability

5. CVE-2026-34909Jun 23

   Ubiquiti UniFi OS Path Traversal Vulnerability

6. CVE-2026-34908Jun 23

   Ubiquiti UniFi OS Improper Access Control Vulnerability

7. CVE-2025-67038Jun 23

   Lantronix EDS5000 Code Injection Vulnerability

8. CVE-2026-20253Jun 18

   Splunk Enterprise Missing Authentication for Critical Function Vulnerability

9. CVE-2026-48907Jun 16

   Widget Factory Joomla Content Editor Improper Access Control Vulnerability

10. CVE-2026-54420Jun 15

    LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

11. CVE-2026-20262Jun 15

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

12. CVE-2026-35273Used by ransomwareJun 12

    Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

13. CVE-2026-10520Jun 11

    Ivanti Sentry OS Command Injection Vulnerability

14. CVE-2026-7473Jun 9

    Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

15. CVE-2026-20245Jun 9

    Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

16. CVE-2026-11645Jun 9

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

17. CVE-2026-50751Used by ransomwareJun 8

    Check Point Security Gateway Improper Authentication Vulnerability

18. CVE-2026-42271Jun 8

    BerriAI LiteLLM Command Injection Vulnerability

19. CVE-2026-28318Jun 5

    SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

20. CVE-2026-45247Jun 3

    Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability

21. CVE-2025-48595Jun 2

    Android Framework Integer Overflow Vulnerability

22. CVE-2022-0492Jun 2

    Linux Kernel Improper Authentication Vulnerability

23. CVE-2024-21182Jun 1

    Oracle WebLogic Server Unspecified Vulnerability

May 2026 21

1. CVE-2026-0257Used by ransomwareMay 29

   Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

2. CVE-2026-8398May 27

   Daemon Tools Lite Embedded Malicious Code Vulnerability

3. CVE-2026-48027Used by ransomwareMay 27

   Nx Console Embedded Malicious Code Vulnerability

4. CVE-2026-45321Used by ransomwareMay 27

   TanStack Unspecified Vulnerability

5. CVE-2026-48172May 26

   LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

6. CVE-2026-9082May 22

   Drupal Core SQL Injection Vulnerability

7. CVE-2026-34926May 21

   Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

8. CVE-2025-34291May 21

   Langflow Origin Validation Error Vulnerability

9. CVE-2026-45498May 20

   Microsoft Defender Denial of Service Vulnerability

10. CVE-2026-41091May 20

    Microsoft Defender Link Following Vulnerability

11. CVE-2010-0806May 20

    Microsoft Internet Explorer Use-After-Free Vulnerability

12. CVE-2010-0249May 20

    Microsoft Internet Explorer Use-After-Free Vulnerability

13. CVE-2009-3459May 20

    Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

14. CVE-2009-1537May 20

    Microsoft DirectX NULL Byte Overwrite Vulnerability

15. CVE-2008-4250May 20

    Microsoft Windows Buffer Overflow Vulnerability

16. CVE-2026-42897May 15

    Microsoft Exchange Server Cross-Site Scripting Vulnerability

17. CVE-2026-20182May 14

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

18. CVE-2026-42208May 8

    BerriAI LiteLLM SQL Injection Vulnerability

19. CVE-2026-6973May 7

    Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

20. CVE-2026-0300May 6

    Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

21. CVE-2026-31431May 1

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

April 2026 31

1. CVE-2026-41940Used by ransomwareApr 30

   WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

2. CVE-2026-32202Apr 28

   Microsoft Windows Protection Mechanism Failure Vulnerability

3. CVE-2024-1708Used by ransomwareApr 28

   ConnectWise ScreenConnect Path Traversal Vulnerability

4. CVE-2025-29635Apr 24

   D-Link DIR-823X Command Injection Vulnerability

5. CVE-2024-7399Apr 24

   Samsung MagicINFO 9 Server Path Traversal Vulnerability

6. CVE-2024-57728Used by ransomwareApr 24

   SimpleHelp Path Traversal Vulnerability

7. CVE-2024-57726Used by ransomwareApr 24

   SimpleHelp Missing Authorization Vulnerability

8. CVE-2026-39987Apr 23

   Marimo Remote Code Execution Vulnerability

9. CVE-2026-33825Used by ransomwareApr 22

   Microsoft Defender Insufficient Granularity of Access Control Vulnerability

10. CVE-2026-20133Apr 20

    Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

11. CVE-2026-20128Apr 20

    Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

12. CVE-2026-20122Apr 20

    Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

13. CVE-2025-48700Apr 20

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

14. CVE-2025-32975Apr 20

    Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

15. CVE-2025-2749Apr 20

    Kentico Xperience Path Traversal Vulnerability

16. CVE-2024-27199Used by ransomwareApr 20

    JetBrains TeamCity Relative Path Traversal Vulnerability

17. CVE-2023-27351Used by ransomwareApr 20

    PaperCut NG/MF Improper Authentication Vulnerability

18. CVE-2026-34197Apr 16

    Apache ActiveMQ Improper Input Validation Vulnerability

19. CVE-2026-32201Apr 14

    Microsoft SharePoint Server Improper Input Validation Vulnerability

20. CVE-2009-0238Apr 14

    Microsoft Office Remote Code Execution

21. CVE-2026-34621Apr 13

    Adobe Acrobat and Reader Prototype Pollution Vulnerability

22. CVE-2026-21643Apr 13

    Fortinet FortiClient EMS SQL Injection Vulnerability

23. CVE-2025-60710Used by ransomwareApr 13

    Microsoft Windows Link Following Vulnerability

24. CVE-2023-36424Apr 13

    Microsoft Windows Out-of-Bounds Read Vulnerability

25. CVE-2023-21529Used by ransomwareApr 13

    Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

26. CVE-2020-9715Apr 13

    Adobe Acrobat Use-After-Free Vulnerability

27. CVE-2012-1854Apr 13

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

28. CVE-2026-1340Apr 8

    Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

29. CVE-2026-35616Apr 6

    Fortinet FortiClient EMS Improper Access Control Vulnerability

30. CVE-2026-3502Apr 2

    TrueConf Client Download of Code Without Integrity Check Vulnerability

31. CVE-2026-5281Apr 1

    Google Dawn Use-After-Free Vulnerability

March 2026 26

1. CVE-2026-3055Mar 30

   Citrix NetScaler Out-of-Bounds Read Vulnerability

2. CVE-2025-53521Mar 27

   F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

3. CVE-2026-33634Mar 26

   Aquasecurity Trivy Embedded Malicious Code Vulnerability

4. CVE-2026-33017Mar 25

   Langflow Code Injection Vulnerability

5. CVE-2025-54068Mar 20

   Laravel Livewire Code Injection Vulnerability

6. CVE-2025-43520Mar 20

   Apple Multiple Products Classic Buffer Overflow Vulnerability

7. CVE-2025-43510Mar 20

   Apple Multiple Products Improper Locking Vulnerability

8. CVE-2025-32432Mar 20

   Craft CMS Code Injection Vulnerability

9. CVE-2025-31277Mar 20

   Apple Multiple Products Buffer Overflow Vulnerability

10. CVE-2026-20131Used by ransomwareMar 19

    Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

11. CVE-2026-20963Mar 18

    Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

12. CVE-2025-66376Mar 18

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

13. CVE-2025-47813Mar 16

    Wing FTP Server Information Disclosure Vulnerability

14. CVE-2026-3910Mar 13

    Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

15. CVE-2026-3909Mar 13

    Google Skia Out-of-Bounds Write Vulnerability

16. CVE-2025-68613Mar 11

    n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

17. CVE-2026-1603Mar 9

    Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

18. CVE-2025-26399Used by ransomwareMar 9

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

19. CVE-2021-22054Mar 9

    Omnissa Workspace ONE Server-Side Request Forgery

20. CVE-2023-43000Mar 5

    Apple Multiple products Use-After-Free Vulnerability

21. CVE-2023-41974Mar 5

    Apple iOS and iPadOS Use-After-Free Vulnerability

22. CVE-2021-30952Mar 5

    Apple Multiple Products Integer Overflow or Wraparound Vulnerability

23. CVE-2021-22681Mar 5

    Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

24. CVE-2017-7921Mar 5

    Hikvision Multiple Products Improper Authentication Vulnerability

25. CVE-2026-22719Mar 3

    Broadcom VMware Aria Operations Command Injection Vulnerability

26. CVE-2026-21385Mar 3

    Qualcomm Multiple Chipsets Memory Corruption Vulnerability

February 2026 28

1. CVE-2026-20127Feb 25

   Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

2. CVE-2022-20775Feb 25

   Cisco SD-WAN Path Traversal Vulnerability

3. CVE-2026-25108Feb 24

   Soliton Systems K.K FileZen OS Command Injection Vulnerability

4. CVE-2025-68461Feb 20

   RoundCube Webmail Cross-site Scripting Vulnerability

5. CVE-2025-49113Feb 20

   RoundCube Webmail Deserialization of Untrusted Data Vulnerability

6. CVE-2026-22769Feb 18

   Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

7. CVE-2021-22175Feb 18

   GitLab Server-Side Request Forgery (SSRF) Vulnerability

8. CVE-2026-2441Feb 17

   Google Chromium CSS Use-After-Free Vulnerability

9. CVE-2024-7694Feb 17

   TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

10. CVE-2020-7796Feb 17

    Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

11. CVE-2008-0015Feb 17

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

12. CVE-2026-1731Used by ransomwareFeb 13

    BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

13. CVE-2026-20700Feb 12

    Apple Multiple Buffer Overflow Vulnerability

14. CVE-2025-40536Feb 12

    SolarWinds Web Help Desk Security Control Bypass Vulnerability

15. CVE-2025-15556Feb 12

    Notepad++ Download of Code Without Integrity Check Vulnerability

16. CVE-2024-43468Feb 12

    Microsoft Configuration Manager SQL Injection Vulnerability

17. CVE-2026-21533Feb 10

    Microsoft Windows Improper Privilege Management Vulnerability

18. CVE-2026-21525Feb 10

    Microsoft Windows NULL Pointer Dereference Vulnerability

19. CVE-2026-21519Feb 10

    Microsoft Windows Type Confusion Vulnerability

20. CVE-2026-21514Feb 10

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

21. CVE-2026-21513Feb 10

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

22. CVE-2026-21510Feb 10

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

23. CVE-2026-24423Used by ransomwareFeb 5

    SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

24. CVE-2025-11953Feb 5

    React Native Community CLI OS Command Injection Vulnerability

25. CVE-2025-64328Feb 3

    Sangoma FreePBX OS Command Injection Vulnerability

26. CVE-2025-40551Feb 3

    SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

27. CVE-2021-39935Feb 3

    GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

28. CVE-2019-19006Feb 3

    Sangoma FreePBX Improper Authentication Vulnerability

January 2026 17

1. CVE-2026-1281Jan 29

   Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

2. CVE-2026-24858Jan 27

   Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

3. CVE-2026-24061Jan 26

   GNU InetUtils Argument Injection Vulnerability

4. CVE-2026-23760Used by ransomwareJan 26

   SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

5. CVE-2026-21509Jan 26

   Microsoft Office Security Feature Bypass Vulnerability

6. CVE-2025-52691Used by ransomwareJan 26

   SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

7. CVE-2018-14634Jan 26

   Linux Kernel Integer Overflow Vulnerability

8. CVE-2024-37079Jan 23

   Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

9. CVE-2025-68645Jan 22

   Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

10. CVE-2025-54313Jan 22

    Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

11. CVE-2025-34026Jan 22

    Versa Concerto Improper Authentication Vulnerability

12. CVE-2025-31125Jan 22

    Vite Vitejs Improper Access Control Vulnerability

13. CVE-2026-20045Jan 21

    Cisco Unified Communications Products Code Injection Vulnerability

14. CVE-2026-20805Jan 13

    Microsoft Windows Information Disclosure Vulnerability

15. CVE-2025-8110Jan 12

    Gogs Path Traversal Vulnerability

16. CVE-2025-37164Jan 7

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

17. CVE-2009-0556Jan 7

    Microsoft Office PowerPoint Code Injection Vulnerability

December 2025 20

1. CVE-2025-14847Dec 29 2025

   MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

2. CVE-2023-52163Dec 22 2025

   Digiever DS-2105 Pro Missing Authorization Vulnerability

3. CVE-2025-14733Used by ransomwareDec 19 2025

   WatchGuard Firebox Out of Bounds Write Vulnerability

4. CVE-2025-59374Dec 17 2025

   ASUS Live Update Embedded Malicious Code Vulnerability

5. CVE-2025-40602Dec 17 2025

   SonicWall SMA1000 Missing Authorization Vulnerability

6. CVE-2025-20393Dec 17 2025

   Cisco Multiple Products Improper Input Validation Vulnerability

7. CVE-2025-59718Dec 16 2025

   Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

8. CVE-2025-43529Dec 15 2025

   Apple Multiple Products Use-After-Free WebKit Vulnerability

9. CVE-2025-14611Dec 15 2025

   Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

10. CVE-2025-14174Dec 12 2025

    Google Chromium Out of Bounds Memory Access Vulnerability

11. CVE-2018-4063Dec 12 2025

    Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

12. CVE-2025-58360Dec 11 2025

    OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

13. CVE-2025-62221Dec 9 2025

    Microsoft Windows Use After Free Vulnerability

14. CVE-2025-6218Dec 9 2025

    RARLAB WinRAR Path Traversal Vulnerability

15. CVE-2025-66644Dec 8 2025

    Array Networks ArrayOS AG OS Command Injection Vulnerability

16. CVE-2022-37055Dec 8 2025

    D-Link Routers Buffer Overflow Vulnerability

17. CVE-2025-55182Used by ransomwareDec 5 2025

    Meta React Server Components Remote Code Execution Vulnerability

18. CVE-2021-26828Dec 3 2025

    OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

19. CVE-2025-48633Dec 2 2025

    Android Framework Information Disclosure Vulnerability

20. CVE-2025-48572Dec 2 2025

    Android Framework Privilege Escalation Vulnerability

November 2025 11

1. CVE-2021-26829Nov 28 2025

   OpenPLC ScadaBR Cross-site Scripting Vulnerability

2. CVE-2025-61757Nov 21 2025

   Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

3. CVE-2025-13223Nov 19 2025

   Google Chromium V8 Type Confusion Vulnerability

4. CVE-2025-58034Nov 18 2025

   Fortinet FortiWeb OS Command Injection Vulnerability

5. CVE-2025-64446Nov 14 2025

   Fortinet FortiWeb Path Traversal Vulnerability

6. CVE-2025-9242Nov 12 2025

   WatchGuard Firebox Out-of-Bounds Write Vulnerability

7. CVE-2025-62215Nov 12 2025

   Microsoft Windows Race Condition Vulnerability

8. CVE-2025-12480Nov 12 2025

   Gladinet Triofox Improper Access Control Vulnerability

9. CVE-2025-21042Nov 10 2025

   Samsung Mobile Devices Out-of-Bounds Write Vulnerability

10. CVE-2025-48703Nov 4 2025

    CWP Control Web Panel OS Command Injection Vulnerability

11. CVE-2025-11371Nov 4 2025

    Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

October 2025 31

1. CVE-2025-41244Oct 30 2025

   Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

2. CVE-2025-24893Oct 30 2025

   XWiki Platform Eval Injection Vulnerability

3. CVE-2025-6205Oct 28 2025

   Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

4. CVE-2025-6204Oct 28 2025

   Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

5. CVE-2025-59287Oct 24 2025

   Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

6. CVE-2025-54236Oct 24 2025

   Adobe Commerce and Magento Improper Input Validation Vulnerability

7. CVE-2025-61932Oct 22 2025

   Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

8. CVE-2025-61884Used by ransomwareOct 20 2025

   Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

9. CVE-2025-33073Oct 20 2025

   Microsoft Windows SMB Client Improper Access Control Vulnerability

10. CVE-2025-2747Oct 20 2025

    Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

11. CVE-2025-2746Oct 20 2025

    Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

12. CVE-2022-48503Oct 20 2025

    Apple Multiple Products Unspecified Vulnerability

13. CVE-2025-54253Oct 15 2025

    Adobe Experience Manager Forms Code Execution Vulnerability

14. CVE-2025-59230Oct 14 2025

    Microsoft Windows Improper Access Control Vulnerability

15. CVE-2025-47827Oct 14 2025

    IGEL OS Use of a Key Past its Expiration Date Vulnerability

16. CVE-2025-24990Oct 14 2025

    Microsoft Windows Untrusted Pointer Dereference Vulnerability

17. CVE-2016-7836Oct 14 2025

    SKYSEA Client View Improper Authentication Vulnerability

18. CVE-2021-43798Oct 9 2025

    Grafana Path Traversal Vulnerability

19. CVE-2025-27915Oct 7 2025

    Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

20. CVE-2025-61882Used by ransomwareOct 6 2025

    Oracle E-Business Suite Unspecified Vulnerability

21. CVE-2021-43226Used by ransomwareOct 6 2025

    Microsoft Windows Privilege Escalation Vulnerability

22. CVE-2021-22555Oct 6 2025

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

23. CVE-2013-3918Oct 6 2025

    Microsoft Windows Out-of-Bounds Write Vulnerability

24. CVE-2011-3402Oct 6 2025

    Microsoft Windows Remote Code Execution Vulnerability

25. CVE-2010-3962Oct 6 2025

    Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

26. CVE-2010-3765Oct 6 2025

    Mozilla Multiple Products Remote Code Execution Vulnerability

27. CVE-2025-4008Oct 2 2025

    Smartbedded Meteobridge Command Injection Vulnerability

28. CVE-2025-21043Oct 2 2025

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

29. CVE-2017-1000353Oct 2 2025

    Jenkins Remote Code Execution Vulnerability

30. CVE-2015-7755Oct 2 2025

    Juniper ScreenOS Improper Authentication Vulnerability

31. CVE-2014-6278Oct 2 2025

    GNU Bash OS Command Injection Vulnerability

August 2025 1

1. CVE-2025-7775Aug 26 2025

   Citrix NetScaler Memory Overflow Vulnerability

June 2025 1

1. CVE-2024-42009Jun 9 2025

   RoundCube Webmail Cross-Site Scripting Vulnerability

May 2025 3

1. CVE-2025-4428May 19 2025

   Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

2. CVE-2025-4427May 19 2025

   Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

3. CVE-2025-32756May 14 2025

   Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

April 2025 1

1. CVE-2025-31324Used by ransomwareApr 29 2025

   SAP NetWeaver Unrestricted File Upload Vulnerability

February 2025 1

1. CVE-2024-21413Feb 6 2025

   Microsoft Outlook Improper Input Validation Vulnerability

January 2025 2

1. CVE-2024-55591Used by ransomwareJan 14 2025

   Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

2. CVE-2025-0282Used by ransomwareJan 8 2025

   Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

October 2024 1

1. CVE-2024-47575Oct 23 2024

   Fortinet FortiManager Missing Authentication Vulnerability

September 2024 2

1. CVE-2024-8190Sep 13 2024

   Ivanti Cloud Services Appliance OS Command Injection Vulnerability

2. CVE-2024-40766Used by ransomwareSep 9 2024

   SonicWall SonicOS Improper Access Control Vulnerability

April 2024 2

1. CVE-2024-20359Apr 24 2024

   Cisco ASA and FTD Privilege Escalation Vulnerability

2. CVE-2024-20353Apr 24 2024

   Cisco ASA and FTD Denial of Service Vulnerability

February 2024 1

1. CVE-2024-21762Used by ransomwareFeb 9 2024

   Fortinet FortiOS Out-of-Bound Write Vulnerability