415128CVEs tracked
4629Last 7 days
16430Last 30 days
1756CISA KEV
Recently published CVEs
71 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-114625 KEV | 9.9
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
Scope change
C:HI:HA:H
|
0.8% | Security Advisory 0199 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may … |
2026-10-22 |
| CVE-2026-102764 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.2% | Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditio… |
2026-10-15 |
| CVE-2026-110936 KEV | 6.7
CNA (via NVD) v3.1 |
LocalAdminNo interaction
C:HI:HA:H
|
0.2% | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allo… | 2026-10-15 |
| CVE-2026-0322 KEV | 7.2
NVD v3.1 |
NetworkAdminNo interaction
Exploited
C:HI:HA:H
|
1.2% | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root… |
2026-10-14 |
| CVE-2026-76519 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.6% | Cisco Secure Email Gateway Arbitrary File Write Vulnerability A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating syst… |
2026-10-14 |
| CVE-2026-106931 KEV | 7.8
CNA (via NVD) v3.0 |
LocalLoginNo interaction
C:HI:HA:H
|
1.2% | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected … | 2026-10-14 |
| CVE-2026-110447 KEV | 9.2
CNA (via NVD) v4.0 |
NetworkNo authNo interactionConditions
C:HI:HA:H
|
2.3% | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerabil… | 2026-10-14 |
| CVE-2026-96951 KEV | 8.8
CNA (via NVD) v3.1 |
NetworkNo authUser action
Exploit code
C:HI:HA:H
|
1.5% | Windows Shell Security Feature Bypass Vulnerability Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
2026-10-13 |
| CVE-2026-104935 KEV | 8.6
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:LA:L
|
26.0% | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. | 2026-10-13 |
| CVE-2026-21589 KEV | 7.5
NVD v3.1 |
NetworkNo authNo interaction
C:HI:NA:N
|
12.7% | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. T… | 2026-10-05 |
| CVE-2026-105134 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
PoC
C:HI:HA:H
|
38.3% | Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulati… |
2026-10-04 |
| CVE-2026-105133 KEV | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
5.8% | Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation o… |
2026-10-04 |
| CVE-2026-88779 KEV | 7.5
NVD v3.1 |
NetworkNo authNo interaction
C:NI:NA:H
|
0.6% | Memory overflow vulnerability leading to Denial of Service Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and befo… |
2026-10-04 |
| CVE-2026-104286 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:HI:HA:H
|
2.2% | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,… | 2026-10-01 |
| CVE-2026-102490 KEV | 7.8
NVD v3.1 |
LocalLoginNo interaction
Exploited
C:HI:HA:H
|
0.5% | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full roo… |
2026-09-30 |
| CVE-2026-102489 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
Exploited
C:HI:HA:H
|
1.3% | Undisclosed RCE in Zammad v6.3 and higher Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not … |
2026-09-30 |
| CVE-2026-76504 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.8% | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the … |
2026-09-30 |
| CVE-2026-86950 KEV | 8.8
CISA-ADP (via NVD) v3.1 |
NetworkNo authUser action
C:HI:HA:H
|
1.2% | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafte… | 2026-09-28 |
| CVE-2026-88772 KEV | 8.1
NVD v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:H
|
5.3% | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gatewa… |
2026-09-27 |
| CVE-2026-88771 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
5.1% | A remote code execution vulnerability exists due to improper input validation, which can a… Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.… |
2026-09-27 |
| CVE-2026-96656 KEV | 7.2
CNA (via NVD) v3.1 |
NetworkAdminNo interaction
C:HI:HA:H
|
0.8% | Plex Media Server arbitrary file write Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on e… |
2026-09-23 |
| CVE-2026-96655 KEV | 4.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:LI:NA:N
|
0.5% | Plex Media Server arbitrary-host SSRF Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. |
2026-09-23 |
| CVE-2026-96654 KEV | 6.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:N
|
0.5% | Plex Media Server URL injection Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters. |
2026-09-23 |
| CVE-2026-96652 KEV | 4.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:LI:NA:N
|
0.5% | Plex Media Server SSRF Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST … |
2026-09-23 |
| CVE-2026-87902 KEV | 8.1
CISA-ADP (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:H
|
40.0% | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for bot… | 2026-09-22 |
| CVE-2026-94127 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
2.2% | BIG-IP APM OAuth vulnerability When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG… |
2026-09-22 |
| CVE-2026-93616 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
75.9% | Directory Traversal and File upload allows execution of arbitrary script on the Management… A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. |
2026-09-22 |
| CVE-2026-93952 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
1.1% | Security Advisory 0183 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may … |
2026-09-22 |
| CVE-2026-87886 KEV | 7.8
CNA (via NVD) v3.0 |
LocalLoginNo interaction
C:HI:HA:H
|
0.2% | Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for P… | 2026-09-17 |
| CVE-2026-76460 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
66.6% | Cisco Identity Services Engine Authentication Bypass Vulnerability A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication … |
2026-09-16 |
| CVE-2026-58704 KEV | 8.8
CISA-ADP (via NVD) v3.1 |
AdjacentNo authNo interaction
C:HI:HA:H
|
0.6% | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges… | 2026-09-15 |
| CVE-2026-76461 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
29.5% | Cisco Secure Email Gateway SQL Injection Vulnerability A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the … |
2026-09-14 |
| CVE-2026-85706 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:N
|
92.0% | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain … |
2026-09-12 |
| CVE-2026-85102 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
54.2% | Improper Certificate Validation in Quantum Security Gateway Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. |
2026-09-09 |
| CVE-2026-87491 KEV | 8.8
CISA-ADP (via NVD) v3.1 |
NetworkNo authUser action
C:HI:HA:H
|
3.1% | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 2026-09-09 |
| CVE-2026-84869 KEV | 9.9
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
Scope change
C:HI:HA:H
|
0.9% | ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances. ScreenConne… |
2026-09-08 |
| CVE-2026-85880 KEV | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Exploit code
C:HI:HA:H
|
3.6% | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
2026-09-08 |
| CVE-2026-81963 KEV | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
Exploit code
C:HI:HA:H
|
0.4% | Windows Update Stack Elevation of Privilege Vulnerability Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
2026-09-08 |
| CVE-2026-75650 KEV | 10.0
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
3.9% | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CW… Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. A… |
2026-09-07 |
| CVE-2026-86218 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
13.3% | pre-authentication remote code execution N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. |
2026-09-06 |
| CVE-2026-86060 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
6.4% | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to pr… |
2026-09-05 |
| CVE-2026-67279 KEV | 6.5
NVD v3.1 |
NetworkNo authNo interaction
C:LI:LA:N
|
1.0% | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an… |
2026-09-05 |
| CVE-2026-67277 KEV | 8.2
NVD v3.1 |
NetworkNo authNo interaction
C:LI:NA:H
|
1.6% | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "rando… |
2026-09-05 |
| CVE-2026-85046 KEV | 8.8
CISA-ADP (via NVD) v3.1 |
NetworkNo authUser action
C:HI:HA:H
|
48.9% | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-09-03 |
| CVE-2026-83549 KEV | 7.8
CISA-ADP (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
9.9% | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which… | 2026-09-01 |
| CVE-2026-83548 KEV | 10.0
CISA-ADP (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:HI:HA:H
|
8.0% | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit thi… | 2026-09-01 |
| CVE-2026-82329 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
14.4% | Potential authentication bypass leading to administrative access in Artifactory JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. |
2026-08-28 |
| CVE-2026-82078 KEV | 9.1
NVD v3.1 |
NetworkAdminNo interaction
Scope change
C:HI:HA:H
|
63.5% | PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable dri… |
2026-08-28 |
| CVE-2026-81578 KEV | 9.8
NVD v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
85.6% | PaperCut MF/NG: Authentication Bypass An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative func… |
2026-08-28 |
| CVE-2026-60004 KEV | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
24.0% | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. | 2026-08-26 |