CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-10-26 03:40 Perth time (AWST). Critical.

1756KEV listed
209Published, last 14 days
654Critical
981High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-45247Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityMirasvit2026-05-262026-06-03
CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityUi2026-05-222026-06-23
CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityUi2026-05-222026-06-23
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityUi2026-05-222026-06-23
CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityLitespeedtech2026-05-212026-05-26
CVE-2026-9082Drupal Core SQL Injection VulnerabilityDrupal2026-05-202026-05-22
CVE-2026-8398Daemon Tools Lite Embedded Malicious Code VulnerabilityDisc-soft2026-05-152026-05-27
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco2026-05-142026-05-14
CVE-2026-45321TanStack Unspecified VulnerabilityTanstack2026-05-122026-05-27
CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityLitellm2026-05-082026-05-08
CVE-2026-0300Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPaloaltonetworks2026-05-062026-05-06
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityCpanel2026-04-292026-04-30
CVE-2026-39808Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet2026-04-142026-07-16
CVE-2026-33824Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityMicrosoft2026-04-142026-08-18
CVE-2026-39987Marimo Remote Code Execution VulnerabilityCoreweave2026-04-092026-04-23
CVE-2026-35616Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinet2026-04-042026-04-06
CVE-2026-33634Aquasecurity Trivy Embedded Malicious Code VulnerabilityAquasec2026-03-232026-03-26
CVE-2026-3055Citrix NetScaler Out-of-Bounds Read VulnerabilityCitrix2026-03-232026-03-30
CVE-2026-33017Langflow Code Injection VulnerabilityLangflow2026-03-202026-03-25
CVE-2025-67038Lantronix EDS5000 Code Injection VulnerabilityLantronix2026-03-112026-06-23
CVE-2026-20131Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCisco2026-03-042026-03-19
CVE-2026-20079Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityCisco2026-03-042026-09-09
CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityCisco2026-02-252026-02-25
CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityDell2026-02-172026-02-18
CVE-2026-21643Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet2026-02-062026-04-13
CVE-2026-1731BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityBeyondtrust2026-02-062026-02-13
CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvanti2026-01-292026-04-08
CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityIvanti2026-01-292026-01-29
CVE-2025-40551SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilitySolarwinds2026-01-282026-02-03
CVE-2025-40536SolarWinds Web Help Desk Security Control Bypass VulnerabilitySolarwinds2026-01-282026-02-12
CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityFortinet2026-01-272026-01-27
CVE-2026-24423SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilitySmartertools2026-01-232026-02-05
CVE-2026-0770Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityLangflow2026-01-232026-07-21
CVE-2026-23760SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilitySmartertools2026-01-222026-01-26
CVE-2026-24061GNU InetUtils Argument Injection VulnerabilityGnu2026-01-212026-01-26
CVE-2026-20045Cisco Unified Communications Products Code Injection VulnerabilityCisco2026-01-212026-01-21
CVE-2026-21962Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityOracle2026-01-202026-08-24
CVE-2026-20963Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityMicrosoft2026-01-132026-03-18
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityFortinet2026-01-132026-09-09
CVE-2025-52691SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilitySmartertools2025-12-292026-01-26

Previous81–120 of 654Next