Full list:
kev_bigfix_13Oct2026.csv (342.9 KB)
CVEs for 2026
| CVE | Vulnerability type | KEV title | KEV Date Added | Supported Platforms | Remediation Status |
|---|---|---|---|---|---|
| CVE-2026-88779 | Appliance | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-10-04 | ||
| CVE-2026-102490 | Software Libraries | Zammad GmbH Zammad Improper Privilege Management Vulnerability | 2026-10-02 | Any Version of Linux - Zammad on Linux | No_Remediation_Available |
| CVE-2026-102489 | Software Libraries | Zammad GmbH Zammad Session Fixation Vulnerability | 2026-10-02 | Any Version of Linux - Zammad on Linux | No_Remediation_Available |
| CVE-2026-104286 | Virtualization | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | ||
| CVE-2026-76504 | Appliance | Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability | 2026-09-30 | ||
| CVE-2026-86950 | Operating System | Apple Multiple Products Out-of-Bounds Write Vulnerability | 2026-09-29 | Any Version of MacOS Apple iOS |
No_Remediation_Available |
| CVE-2026-88772 | Appliance | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-09-27 | ||
| CVE-2026-88771 | Appliance | Citrix NetScaler Improper Input Validation Vulnerability | 2026-09-27 | ||
| CVE-2026-65660 | Server Software | Microsoft SharePoint Code Injection Vulnerability | 2026-09-25 | SharePoint | Remediation_Available |
| CVE-2026-67279 | Appliance | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | 2026-09-25 | ||
| CVE-2026-87902 | Server Software - Application | WordPress Core Remote File Inclusion Vulnerability | 2026-09-25 | Any Operating System - WordPress | No_Remediation_Available |
| CVE-2026-5430 | Appliance | WSO2 Multiple Products Path Traversal Vulnerability | 2026-09-24 | ||
| CVE-2026-71362 | Server Software | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 2026-09-24 | ||
| CVE-2026-93952 | Appliance | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 2026-09-22 | ||
| CVE-2026-94127 | Virtualization | F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability | 2026-09-22 | ||
| CVE-2026-93616 | Virtualization | Check Point Multiple Products Path Traversal Vulnerability | 2026-09-22 | ||
| CVE-2026-85102 | Appliance | Check Point Multiple Products Improper Certificate Validation Vulnerability | 2026-09-22 | ||
| CVE-2026-7273 | Appliance | Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability | 2026-09-19 | ||
| CVE-2026-53266 | Operating System | Linux Kernel Out-of-Bounds Write Vulnerability | 2026-09-18 | Ubuntu RHEL Oracle Linux Amazon Linux AlmaLinux |
Remediation_Available |
| CVE-2026-58704 | Mobile | Google Pixel Improper Authorization Vulnerability | 2026-09-16 | Any Current Service Pack of Android | No_Remediation_Available |
| CVE-2026-76460 | Appliance | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 2026-09-16 | ||
| CVE-2026-87886 | Software Libraries | Acronis Backup Incorrect Default Permissions Vulnerability | 2026-09-16 | ||
| CVE-2026-76461 | Appliance | Cisco Secure Email Gateway SQL Injection Vulnerability | 2026-09-14 | ||
| CVE-2026-84869 | Server Software - Application | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 2026-09-11 | Any Version of Windows - ScreenConnect Server on Windows | No_Remediation_Available |
| CVE-2026-85706 | Software Libraries | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 2026-09-11 | Any Version of Linux - Gitlab Community for Linux Any Version of Linux - Gitlab Enterprise for Linux |
No_Remediation_Available |
| CVE-2026-42016 | Server Software - Middleware | JFrog Artifactory Incorrect Authorization Vulnerability | 2026-09-11 | Any Operating System - JFrog Artifactory | No_Remediation_Available |
| CVE-2026-42018 | Server Software - Middleware | JFrog Artifactory Improper Authentication Vulnerability | 2026-09-11 | Any Operating System - JFrog Artifactory | No_Remediation_Available |
| CVE-2026-86060 | Appliance | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | 2026-09-10 | ||
| CVE-2026-67277 | Appliance | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | 2026-09-10 | ||
| CVE-2026-19490 | Appliance | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-09-09 | ||
| CVE-2026-20079 | Appliance | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-09-09 | ||
| CVE-2026-87491 | Web Browser | Google Chromium V8 Out of Bounds Write Vulnerability | 2026-09-09 | Any Version of Windows - Google Chrome for Windows Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-86218 | Virtualization | N-able N-central Static Code Injection Vulnerability | 2026-09-08 | ||
| CVE-2026-81963 | Operating System | Microsoft Windows Link Following Vulnerability | 2026-09-08 | Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-85880 | Operating System | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 2026-09-08 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 |
Remediation_Available |
| CVE-2026-75650 | Software Libraries | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 2026-09-08 | ||
| CVE-2026-85046 | Web Browser | Google Chromium V8 Type Confusion Vulnerability | 2026-09-04 | Any Version of Windows - Edge for Windows Any Version of Windows - Google Chrome for Windows Any Version of Linux - Edge (.deb) for Linux Any Version of Linux - Edge (.rpm) for Linux Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of MacOS - Edge for MacOS Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-59822 | Software Libraries | BerriAI LiteLLM Improper Authentication Vulnerability | 2026-09-02 | Any Operating System - LiteLLM | No_Remediation_Available |
| CVE-2026-82329 | Server Software - Middleware | JFrog Artifactory Improper Authentication Vulnerability | 2026-09-02 | Any Operating System - JFrog Artifactory | No_Remediation_Available |
| CVE-2026-83548 | Appliance | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-09-02 | ||
| CVE-2026-83549 | Appliance | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2026-09-02 | ||
| CVE-2026-9586 | Appliance | Sangoma Switchvox SQL Injection Vulnerability | 2026-09-02 | ||
| CVE-2026-48710 | Software Libraries | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-02 | Any Operating System - Starlette | No_Remediation_Available |
| CVE-2026-49869 | Virtualization | Kestra OSS OS Command Injection Vulnerability | 2026-09-02 | ||
| CVE-2026-81578 | Server Software | PaperCut NG/MF Missing Authentication for Critical Function Vulnerability | 2026-08-31 | Any Version of Windows - PaperCut NG - Server for Windows Any Version of Windows - PaperCut MF - Server for Windows Any Version of Linux - PaperCut MF - Server for Linux Any Version of Linux - PaperCut NG - Server for Linux Any Version of MacOS - PaperCut NG - Server for MacOS Any Version of MacOS - PaperCut MF - Server for MacOS |
Partial_Remediation_Available |
| CVE-2026-82078 | Server Software | PaperCut NG/MF Unsafe Reflection Vulnerability | 2026-08-31 | Any Version of Windows - PaperCut NG - Server for Windows Any Version of Windows - PaperCut MF - Server for Windows Any Version of Linux - PaperCut MF - Server for Linux Any Version of Linux - PaperCut NG - Server for Linux Any Version of MacOS - PaperCut MF - Server for MacOS Any Version of MacOS - PaperCut NG - Server for MacOS |
Partial_Remediation_Available |
| CVE-2026-66384 | Server Software - Middleware | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 2026-08-27 | Any Operating System - JFrog Artifactory | No_Remediation_Available |
| CVE-2026-53362 | Operating System | Linux Kernel Unspecified Vulnerability | 2026-08-27 | RHEL Oracle Linux Amazon Linux |
Remediation_Available |
| CVE-2026-8452 | Appliance | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 2026-08-26 | ||
| CVE-2026-60004 | Server Software | Gitea Code Injection Vulnerability | 2026-08-25 | ||
| CVE-2026-21962 | Server Software - Middleware | Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability | 2026-08-24 | Any Version of Windows - Oracle HTTP Server on Windows Any Version of Linux - Oracle HTTP Server on Linux |
No_Remediation_Available |
| CVE-2026-73570 | Server Software | Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | 2026-08-21 | Any Version of Linux - Synacor Zimbra Collaboration Suite for Linux | No_Remediation_Available |
| CVE-2026-72530 | Server Software - Application | TrueConf Server Code Injection Vulnerability | 2026-08-20 | Any Version of Windows - TrueConf Server on Windows Any Version of Linux - TrueConf Server on Linux |
No_Remediation_Available |
| CVE-2026-72529 | Server Software - Application | TrueConf Server Missing Authentication for Critical Function Vulnerability | 2026-08-20 | Any Version of Windows - TrueConf Server on Windows Any Version of Linux - TrueConf Server on Linux |
No_Remediation_Available |
| CVE-2026-64849 | Server Software | MLflow Server-Side Request Forgery Vulnerability | 2026-08-19 | Any Operating System - MLflow | No_Remediation_Available |
| CVE-2026-33824 | Operating System | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | 2026-08-18 | Windows Server 2016 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-59310 | Virtualization | Broadcom VMware vCenter Path Traversal Vulnerability | 2026-08-18 | ||
| CVE-2026-65400 | Operating System | Apple macOS Improper Authentication Vulnerability | 2026-08-18 | Any Version of MacOS | No_Remediation_Available |
| CVE-2026-55040 | Server Software | Microsoft SharePoint Weak Authentication Vulnerability | 2026-08-18 | SharePoint | Remediation_Available |
| CVE-2026-68820 | Operating System | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | 2026-08-11 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-72898 | Server Software - Application | Metabase SQL Injection Vulnerability | 2026-08-11 | ||
| CVE-2026-20349 | Appliance | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability | 2026-08-11 | ||
| CVE-2026-8037 | Appliance | Progress LoadMaster Command Injection Vulnerability | 2026-08-07 | ||
| CVE-2026-63077 | Server Software | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 2026-08-05 | Any Version of Windows - JetBrains TeamCity for Windows | No_Remediation_Available |
| CVE-2026-9198 | Software Libraries | IBM Langflow Code Injection Vulnerability | 2026-08-04 | Any Operating System - Langflow Any Version of Windows - Langflow on Windows Any Version of MacOS - Langflow on Mac |
No_Remediation_Available |
| CVE-2026-18556 | Virtualization | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-04 | ||
| CVE-2026-34486 | Server Software - Middleware | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 2026-08-04 | Any Version of Windows - Apache Tomcat 10 on Windows Any Version of Windows - Apache Tomcat 11 on Windows Any Version of Windows - Apache Tomcat 9 on Windows RHEL |
Remediation_Available |
| CVE-2026-18577 | Virtualization | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-03 | ||
| CVE-2026-20316 | Appliance | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 2026-07-29 | ||
| CVE-2026-16812 | Virtualization | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 2026-07-27 | ||
| CVE-2026-16232 | Appliance | Check Point SmartConsole Improper Authentication Vulnerability | 2026-07-22 | ||
| CVE-2026-50522 | Server Software | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-22 | SharePoint | Remediation_Available |
| CVE-2026-0770 | Software Libraries | Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability | 2026-07-21 | Any Operating System - Langflow Any Version of Windows - Langflow on Windows Any Version of MacOS - Langflow on Mac |
No_Remediation_Available |
| CVE-2026-63030 | Server Software - Application | WordPress Core Interpretation Conflict Vulnerability | 2026-07-21 | Any Operating System - WordPress | No_Remediation_Available |
| CVE-2026-60137 | Server Software - Application | WordPress Core SQL Injection Vulnerability | 2026-07-21 | Any Operating System - WordPress | No_Remediation_Available |
| CVE-2026-25089 | Appliance | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | ||
| CVE-2026-39808 | Appliance | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | ||
| CVE-2026-58644 | Server Software | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-07-16 | SharePoint | Remediation_Available |
| CVE-2026-46817 | Server Software | Oracle E-Business Suite Improper Privilege Management Vulnerability | 2026-07-15 | ||
| CVE-2026-56164 | Server Software | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | 2026-07-14 | SharePoint | Remediation_Available |
| CVE-2026-56155 | Operating System | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | 2026-07-14 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows Server 2025 |
Remediation_Available |
| CVE-2026-15409 | Appliance | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-07-14 | ||
| CVE-2026-15410 | Appliance | SonicWall SMA1000 Appliances Code Injection Vulnerability | 2026-07-14 | ||
| CVE-2026-56291 | Server Software - Application | Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 | Any Operating System - Balbooa Forms | No_Remediation_Available |
| CVE-2026-48939 | Software Libraries | iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-10 | Any Operating System - iCagenda | No_Remediation_Available |
| CVE-2026-48908 | Software Libraries | JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-07-07 | Any Operating System - SP Page Builder | No_Remediation_Available |
| CVE-2026-56290 | Software Libraries | Joomlack Page Builder Improper Access Control Vulnerability | 2026-07-07 | ||
| CVE-2026-48282 | Server Software | Adobe ColdFusion Path Traversal Vulnerability | 2026-07-07 | Any Version of Windows - Adobe ColdFusion for Windows | No_Remediation_Available |
| CVE-2026-45659 | Server Software | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | 2026-07-01 | SharePoint | Remediation_Available |
| CVE-2026-48558 | Server Software | SimpleHelp Authentication Bypass Vulnerability | 2026-06-29 | Any Operating System - SimpleHelp | No_Remediation_Available |
| CVE-2026-12569 | Server Software - Application | PTC Windchill and FlexPLM Improper Input Validation Vulnerability | 2026-06-25 | ||
| CVE-2026-20230 | Virtualization | Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability | 2026-06-25 | ||
| CVE-2026-34910 | Server Software - Application | Ubiquiti UniFi OS Improper Input Validation Vulnerability | 2026-06-23 | Any Version of Windows - UniFi OS Server - Server on Windows Any Version of Linux - UniFi OS Server - Server on Linux Any Version of MacOS - UniFi OS Server - Server on Mac |
No_Remediation_Available |
| CVE-2026-34909 | Server Software - Application | Ubiquiti UniFi OS Path Traversal Vulnerability | 2026-06-23 | Any Version of Windows - UniFi OS Server - Server on Windows Any Version of Linux - UniFi OS Server - Server on Linux Any Version of MacOS - UniFi OS Server - Server on Mac |
No_Remediation_Available |
| CVE-2026-55255 | Software Libraries | Langflow Authorization Bypass Through User-Controlled Key Vulnerability | 2026-06-23 | Any Operating System - Langflow Any Version of Windows - Langflow on Windows Any Version of MacOS - Langflow on Mac |
No_Remediation_Available |
| CVE-2026-34908 | Server Software - Application | Ubiquiti UniFi OS Improper Access Control Vulnerability | 2026-06-23 | Any Version of Windows - UniFi OS Server - Server on Windows Any Version of Linux - UniFi OS Server - Server on Linux Any Version of MacOS - UniFi OS Server - Server on Mac |
No_Remediation_Available |
| CVE-2026-20253 | Server Software - Application | Splunk Enterprise Missing Authentication for Critical Function Vulnerability | 2026-06-18 | Any Version of Windows - Splunk Enterprise for Windows Any Version of Linux - Splunk Enterprise for Linux |
No_Remediation_Available |
| CVE-2026-48907 | Software Libraries | Widget Factory Joomla Content Editor Improper Access Control Vulnerability | 2026-06-16 | Any Operating System - Joomla Content Editor | No_Remediation_Available |
| CVE-2026-54420 | Software Libraries | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 2026-06-15 | Any Version of Linux - cPanel plugin on Linux | No_Remediation_Available |
| CVE-2026-20262 | Appliance | Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability | 2026-06-15 | ||
| CVE-2026-35273 | Server Software - Middleware | Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability | 2026-06-12 | Any Operating System - PeopleSoft PeopleTools | No_Remediation_Available |
| CVE-2026-10520 | Appliance | Ivanti Sentry OS Command Injection Vulnerability | 2026-06-11 | ||
| CVE-2026-7473 | Operating System | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 2026-06-09 | ||
| CVE-2026-11645 | Web Browser | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2026-06-09 | Any Version of Windows - Google Chrome for Windows Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-20245 | Appliance | Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability | 2026-06-09 | ||
| CVE-2026-42271 | Software Libraries | BerriAI LiteLLM Command Injection Vulnerability | 2026-06-08 | Any Operating System - LiteLLM | No_Remediation_Available |
| CVE-2026-50751 | Appliance | Check Point Security Gateway Improper Authentication Vulnerability | 2026-06-08 | ||
| CVE-2026-28318 | Server Software | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | 2026-06-05 | Any Version of Windows - Solarwinds Serv-U for Windows Any Version of Linux - Solarwinds Serv-U for Linux |
No_Remediation_Available |
| CVE-2026-45247 | Productivity Software | Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability | 2026-06-03 | ||
| CVE-2026-0257 | Appliance | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 2026-05-29 | ||
| CVE-2026-8398 | Software Libraries | Daemon Tools Lite Embedded Malicious Code Vulnerability | 2026-05-27 | Any Version of Windows - DAEMON Tools Lite | No_Remediation_Available |
| CVE-2026-45321 | Software Libraries | TanStack Unspecified Vulnerability | 2026-05-27 | Any Operating System - router-utils (package) Any Operating System - start-client-core (package) Any Operating System - router-vite-plugin (package) Any Operating System - vue-start (package) Any Operating System - solid-router-ssr-query (package) Any Operating System - valibot-adapter (package) Any Operating System - eslint-plugin-start (package) Any Operating System - router-plugin (package) Any Operating System - router-devtools-core (package) Any Operating System - router-devtools (package) Any Operating System - start-static-server-functions (package) Any Operating System - eslint-plugin-router (package) Any Operating System - react-start-client (package) Any Operating System - react-start-rsc (package) Any Operating System - tanstack-history (package) Any Operating System - vue-start-server (package) Any Operating System - solid-router (package) Any Operating System - vue-start-client (package) Any Operating System - nitro-v2-vite-plugin (package) Any Operating System - router-cli (package) Any Operating System - start-plugin-core (package) Any Operating System - arktype-adapter (package) Any Operating System - react-router-ssr-query (package) Any Operating System - start-server-core (package) Any Operating System - vue-router-devtools (package) Any Operating System - vue-router-ssr-query (package) Any Operating System - router-core (package) Any Operating System - solid-start-server (package) Any Operating System - router-ssr-query-core (package) Any Operating System - start-storage-context (package) Any Operating System - solid-start-client (package) Any Operating System - router-generator (package) Any Operating System - react-router-devtools (package) Any Operating System - react-start-server (package) Any Operating System - zod-adapter (package) Any Operating System - react-start (package) Any Operating System - vue-router (package) Any Operating System - solid-start (package) Any Operating System - solid-router-devtools (package) Any Operating System - virtual-file-routes (package) Any Operating System - react-router (package) Any Operating System - start-fn-stubs (package) |
No_Remediation_Available |
| CVE-2026-48027 | Software Libraries | Nx Console Embedded Malicious Code Vulnerability | 2026-05-27 | Any Operating System - Nx Console (VSCode) | No_Remediation_Available |
| CVE-2026-48172 | Software Libraries | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 2026-05-26 | Any Version of Linux - cPanel plugin on Linux | No_Remediation_Available |
| CVE-2026-39987 | Software Libraries | Marimo Remote Code Execution Vulnerability | 2026-05-23 | Any Operating System - marimo | No_Remediation_Available |
| CVE-2026-9082 | Software Libraries | Drupal Core SQL Injection Vulnerability | 2026-05-22 | Any Operating System - Drupal | No_Remediation_Available |
| CVE-2026-34926 | Server Software | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 2026-05-21 | Any Version of Windows - Apex One Server | No_Remediation_Available |
| CVE-2026-41091 | Software Libraries | Microsoft Defender Link Following Vulnerability | 2026-05-20 | Any Version of Windows - Windows Malware Protection Engine | No_Remediation_Available |
| CVE-2026-45498 | Software Libraries | Microsoft Defender Denial of Service Vulnerability | 2026-05-20 | Any Version of Windows - Microsoft Defender Antimalware Platform | No_Remediation_Available |
| CVE-2026-42897 | Server Software | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 2026-05-15 | Exchange Server | Remediation_Available |
| CVE-2026-20182 | Appliance | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 2026-05-14 | ||
| CVE-2026-42208 | Software Libraries | BerriAI LiteLLM SQL Injection Vulnerability | 2026-05-08 | Any Operating System - LiteLLM | No_Remediation_Available |
| CVE-2026-6973 | Virtualization | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 2026-05-07 | ||
| CVE-2026-0300 | Appliance | Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability | 2026-05-06 | ||
| CVE-2026-31431 | Operating System | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 2026-05-01 | Ubuntu RHEL Oracle Linux SLE RockyLinux Amazon Linux AlmaLinux |
Remediation_Available |
| CVE-2026-41940 | Server Software | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | 2026-04-30 | Any Version of Linux - cPanel on Linux | No_Remediation_Available |
| CVE-2026-32202 | Operating System | Microsoft Windows Protection Mechanism Failure Vulnerability | 2026-04-28 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-42043 | Software Libraries | Axios vulnerability | 2026-04-27 | Any Operating System - Axios Any Operating System - Axios (package) |
No_Remediation_Available |
| CVE-2026-33634 | Software Libraries | Aquasecurity Trivy Embedded Malicious Code Vulnerability | 2026-04-26 | Any Operating System - Telnyx Python SDK Any Operating System - LiteLLM Any Version of Linux - Trivy on Linux |
No_Remediation_Available |
| CVE-2026-33825 | Software Libraries | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | 2026-04-22 | Any Version of Windows - Microsoft Defender Antimalware Platform | No_Remediation_Available |
| CVE-2026-20128 | Appliance | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 2026-04-20 | ||
| CVE-2026-20133 | Appliance | Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability | 2026-04-20 | ||
| CVE-2026-20122 | Appliance | Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability | 2026-04-20 | ||
| CVE-2026-34197 | Server Software | Apache ActiveMQ Improper Input Validation Vulnerability | 2026-04-16 | ||
| CVE-2026-32201 | Server Software | Microsoft SharePoint Server Improper Input Validation Vulnerability | 2026-04-14 | SharePoint | Remediation_Available |
| CVE-2026-34621 | Productivity Software | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 2026-04-13 | Any Version of Windows - Adobe Acrobat on Windows Any Version of Windows - Adobe Acrobat DC for Windows Any Version of Windows - Adobe Acrobat Reader DC for Windows Any Version of MacOS - Adobe Acrobat Reader DC for MacOS Any Version of MacOS - Adobe Acrobat Reader on MacOS |
Remediation_Available |
| CVE-2026-21643 | Server Software - Application | Fortinet FortiClient EMS SQL Injection Vulnerability | 2026-04-13 | Any Version of Linux - Foticlient EMS - Server | No_Remediation_Available |
| CVE-2026-1340 | Virtualization | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-04-08 | ||
| CVE-2026-35616 | Server Software | Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-06 | Any Version of Linux - Foticlient EMS - Server | No_Remediation_Available |
| CVE-2026-3502 | Server Software - Application | TrueConf Client Download of Code Without Integrity Check Vulnerability | 2026-04-02 | Any Version of Windows - TrueConf Client for Windows (x86 - MSI) Any Version of Windows - TrueConf Client for Windows (x86 - EXE) Any Version of Windows - TrueConf Client for Windows (x64 - MSI) Any Version of Windows - TrueConf Client for Windows (x64 - EXE) Any Version of Linux - TrueConf Client for Linux Any Version of MacOS - TrueConf Client for Mac |
Partial_Remediation_Available |
| CVE-2026-5281 | Web Browser | Google Dawn Use-After-Free Vulnerability | 2026-04-01 | Any Version of Windows - Google Chrome for Windows Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-3055 | Appliance | Citrix NetScaler Out-of-Bounds Read Vulnerability | 2026-03-30 | ||
| CVE-2026-33017 | Software Libraries | Langflow Code Injection Vulnerability | 2026-03-25 | Any Operating System - Langflow Any Version of Windows - Langflow on Windows Any Version of MacOS - Langflow on Mac |
No_Remediation_Available |
| CVE-2026-20131 | Appliance | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | 2026-03-19 | ||
| CVE-2026-20963 | Server Software | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | 2026-03-18 | SharePoint | Remediation_Available |
| CVE-2026-3909 | Web Browser | Google Skia Out-of-Bounds Write Vulnerability | 2026-03-13 | Any Version of Windows - Google Chrome for Windows Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of Linux - Google Chrome (.deb) for Linux Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-3910 | Web Browser | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 2026-03-13 | Any Version of Windows - Edge for Windows Any Version of Windows - Google Chrome for Windows Any Version of Linux - Edge (.rpm) for Linux Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Edge (.deb) for Linux Any Version of MacOS - Edge for MacOS Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-1603 | Server Software | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 2026-03-09 | ||
| CVE-2026-22719 | Virtualization | Broadcom VMware Aria Operations Command Injection Vulnerability | 2026-03-03 | ||
| CVE-2026-21385 | Mobile | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 2026-03-03 | ||
| CVE-2026-20127 | Appliance | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | 2026-02-25 | ||
| CVE-2026-25108 | Virtualization | Soliton Systems K.K FileZen OS Command Injection Vulnerability | 2026-02-24 | ||
| CVE-2026-22769 | Virtualization | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 2026-02-18 | ||
| CVE-2026-2441 | Web Browser | Google Chromium CSS Use-After-Free Vulnerability | 2026-02-17 | Any Version of Windows - Edge for Windows Any Version of Windows - Google Chrome for Windows Any Version of Linux - Google Chrome (.rpm) for Linux Any Version of Linux - Google Chrome (.deb) for Linux Any Version of Linux - Edge (.deb) for Linux Any Version of Linux - Edge (.rpm) for Linux Any Version of MacOS - Edge for MacOS Any Version of MacOS - Google Chrome for MacOS |
Remediation_Available |
| CVE-2026-1731 | Server Software - Middleware | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability | 2026-02-13 | ||
| CVE-2026-20700 | Operating System | Apple Multiple Buffer Overflow Vulnerability | 2026-02-12 | Any Version of MacOS Apple iOS |
No_Remediation_Available |
| CVE-2026-21525 | Operating System | Microsoft Windows NULL Pointer Dereference Vulnerability | 2026-02-10 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-21519 | Operating System | Microsoft Windows Type Confusion Vulnerability | 2026-02-10 | Windows Server 2016 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-21533 | Operating System | Microsoft Windows Improper Privilege Management Vulnerability | 2026-02-10 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-21510 | Operating System | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | 2026-02-10 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-21513 | Operating System | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | 2026-02-10 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 Windows Server 2025 |
Remediation_Available |
| CVE-2026-21514 | Productivity Software | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | 2026-02-10 | Any Version of Windows - Office 2021 LTSC LCC Any Version of Windows - Office 2024 LTSC LCC Any Version of Windows - Office 2021 LTSC Any Version of Windows - Office 2024 LTSC Any Version of MacOS - Office for Mac - Word 2021-24 |
Partial_Remediation_Available |
| CVE-2026-24423 | Server Software | SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability | 2026-02-05 | Any Version of Windows - SmarterMail on Windows | No_Remediation_Available |
| CVE-2026-1281 | Virtualization | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-01-29 | ||
| CVE-2026-24858 | Appliance | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-27 | ||
| CVE-2026-23760 | Server Software | SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-26 | Any Version of Windows - SmarterMail on Windows | No_Remediation_Available |
| CVE-2026-21509 | Productivity Software | Microsoft Office Security Feature Bypass Vulnerability | 2026-01-26 | Office | Remediation_Available |
| CVE-2026-24061 | Software Libraries | GNU InetUtils Argument Injection Vulnerability | 2026-01-26 | Any Version of Linux - Inetutils (.deb) on Linux | No_Remediation_Available |
| CVE-2026-20045 | Virtualization | Cisco Unified Communications Products Code Injection Vulnerability | 2026-01-21 | ||
| CVE-2026-20805 | Operating System | Microsoft Windows Information Disclosure Vulnerability | 2026-01-13 | Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows Server 2019 Windows 10 Windows Server 2022 Windows 11 |
Remediation_Available |