CISA KEV · MENA-Cross-Referenced Exploited Vulnerabilities

CVECVE-2026-85102

Check Point Multiple Products Improper Certificate Validation Vulnerability

Check Point · Multiple Productsremediation: CISA due date imminent

P2added 2026-09-22due 2026-09-25

View

CVECVE-2026-93616

Check Point Multiple Products Path Traversal Vulnerability

Check Point · Multiple Productsremediation: CISA due date imminent

P2added 2026-09-22due 2026-09-25

View

CVECVE-2026-93952

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Arista · VeloCloud Orchestratorremediation: CISA due date imminent

P2added 2026-09-22due 2026-09-25

View

CVECVE-2026-94127

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

F5 · BIG-IP APMremediation: CISA due date imminent

P2added 2026-09-22due 2026-09-25

View

CVECVE-2026-7273

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Zyxel · GS1900 Series Switchesremediation: past CISA due date

P2added 2026-09-21due 2026-09-24

View

CVECVE-2025-39682

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-09-18due 2026-09-21

View

CVECVE-2025-39964

Linux Kernel Race Condition Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-09-18due 2026-09-21

View

CVECVE-2026-53266

Linux Kernel Out-of-Bounds Write Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-09-18due 2026-09-21

View

CVECVE-2026-58704

Google Pixel Improper Authorization Vulnerability

Google · Pixelremediation: past CISA due date

P2added 2026-09-16due 2026-09-19

View

CVECVE-2026-76460

Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Cisco · Identity Services Engineremediation: past CISA due date

P2added 2026-09-16due 2026-09-19

View

CVECVE-2026-87886

Acronis Backup Incorrect Default Permissions Vulnerability

Acronis · Backupremediation: past CISA due date

P2added 2026-09-16due 2026-09-19

View

CVECVE-2026-76461

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco · Secure Email Gatewayremediation: past CISA due date

P2added 2026-09-14due 2026-09-17

View

CVECVE-2026-42016

JFrog Artifactory Incorrect Authorization Vulnerability

JFrog · Artifactoryremediation: CISA due date imminent

P2added 2026-09-11due 2026-09-25

View

CVECVE-2026-42018

JFrog Artifactory Improper Authentication Vulnerability

JFrog · Artifactoryremediation: CISA due date imminent

P2added 2026-09-11due 2026-09-25

View

CVECVE-2026-84869

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

ConnectWise · ScreenConnectremediation: past CISA due date

P2added 2026-09-11due 2026-09-14

View

CVECVE-2026-85706

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab · Community Edition and Enterprise Editionremediation: past CISA due date

P2added 2026-09-11due 2026-09-14

View

CVECVE-2026-67277

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

MikroTik · RouterOSremediation: past CISA due date

P2added 2026-09-10due 2026-09-13

View

CVECVE-2026-86060

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik · RouterOSremediation: past CISA due date

P2added 2026-09-10due 2026-09-13

View

CVECVE-2025-25249

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Fortinet · Multiple Productsremediation: past CISA due date

P2added 2026-09-09due 2026-09-12

View

CVECVE-2026-19490

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability

Citrix · NetScalerremediation: past CISA due date

P2added 2026-09-09due 2026-09-12

View

CVECVE-2026-20079

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Managementremediation: past CISA due date

P2added 2026-09-09due 2026-09-12

View

CVECVE-2026-87491

Google Chromium V8 Out of Bounds Write Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2026-09-09due 2026-09-23

View

CVECVE-2026-75650

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Adobe · Commerce and Magentoremediation: past CISA due date

P2added 2026-09-08due 2026-09-11

View

CVECVE-2026-81963

Microsoft Windows Link Following Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-09-08due 2026-09-22

View

CVECVE-2026-85880

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2026-09-08due 2026-09-22

View

CVECVE-2026-86218

N-able N-central Static Code Injection Vulnerability

N-able · N-centralremediation: past CISA due date

P2added 2026-09-08due 2026-09-11

View

CVECVE-2026-85046

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2026-09-04due 2026-09-18

View

CVECVE-2026-48710

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Kludex · Starletteremediation: past CISA due date

P2added 2026-09-02due 2026-09-16

View

CVECVE-2026-49869

Kestra OSS OS Command Injection Vulnerability

Kestra · Kestra OSSremediation: past CISA due date

P2added 2026-09-02due 2026-09-05

View

CVECVE-2026-59822

BerriAI LiteLLM Improper Authentication Vulnerability

BerriAI · LiteLLMremediation: past CISA due date

P2added 2026-09-02due 2026-09-16

View

CVECVE-2026-82329

JFrog Artifactory Improper Authentication Vulnerability

JFrog · Artifactoryremediation: past CISA due date

P2added 2026-09-02due 2026-09-05

View

CVECVE-2026-83548

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliancesremediation: past CISA due date

P2added 2026-09-02due 2026-09-05

View

CVECVE-2026-83549

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall · SMA1000 Appliancesremediation: past CISA due date

P2added 2026-09-02due 2026-09-05

View

CVECVE-2026-9586

Sangoma Switchvox SQL Injection Vulnerability

Sangoma · Switchvoxremediation: past CISA due date

P2added 2026-09-02due 2026-09-05

View

CVECVE-2026-81578

PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

PaperCut · NG/MFremediation: past CISA due date

P2added 2026-08-31due 2026-09-14

View

CVECVE-2026-82078

PaperCut NG/MF Unsafe Reflection Vulnerability

PaperCut · NG/MFremediation: past CISA due date

P2added 2026-08-31due 2026-09-14

View

CVECVE-2023-49105

ownCloud Improper Authentication Vulnerability

ownCloud · ownCloudremediation: past CISA due date

P2added 2026-08-27due 2026-08-30

View

CVECVE-2026-53362

Linux Kernel Unspecified Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-08-27due 2026-08-30

View

CVECVE-2026-66384

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

JFrog · Artifactoryremediation: past CISA due date

P2added 2026-08-27due 2026-09-10

View

CVECVE-2015-3246

Red Hat Libuser Race Condition Vulnerability

Red Hat · Libuserremediation: past CISA due date

P2added 2026-08-26due 2026-09-09

View

CVECVE-2015-5287

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Red Hat · Automatic Bug Reporting Toolremediation: past CISA due date

P2added 2026-08-26due 2026-09-09

View

CVECVE-2019-1068

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft · SQL Serverremediation: past CISA due date

P2added 2026-08-26due 2026-08-29

View

CVECVE-2021-23758

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional · Ajax.NET Professionalremediation: past CISA due date

P2added 2026-08-26due 2026-09-09

View

CVECVE-2022-0995

Linux Kernel Out-of-Bounds Write Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2026-08-26due 2026-09-09

View

CVECVE-2026-8452

Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix · NetScaler ADC and NetScaler Gatewayremediation: past CISA due date

P2added 2026-08-26due 2026-08-29

View

CVECVE-2026-60004

Gitea Code Injection Vulnerability

Gitea · Gitearemediation: past CISA due date

P2added 2026-08-25due 2026-08-28

View

CVECVE-2026-21962

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-inremediation: past CISA due date

P2added 2026-08-24due 2026-08-27

View

CVECVE-2026-69836

Microsoft Entra ID Deserialization of Untrusted Data Vulnerability

Microsoft · Entra ID remediation: past CISA due date

P2added 2026-08-21due 2026-08-24

View

CVECVE-2026-73570

Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2026-08-21due 2026-08-24

View

CVECVE-2026-72529

TrueConf Server Missing Authentication for Critical Function Vulnerability

TrueConf · Serverremediation: past CISA due date

P2added 2026-08-20due 2026-08-23

View