Security Warnings — Source: cisa kev

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

2026-03-05 CVE-2021-30952

highApple CISA-KEV 2026-W10

Hikvision Multiple Products Improper Authentication Vulnerability

2026-03-05 CVE-2017-7921

highHikvision CISA-KEV 2026-W10

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

2026-03-05 CVE-2021-22681

highRockwell CISA-KEV 2026-W10

Broadcom VMware Aria Operations Command Injection Vulnerability

2026-03-03 CVE-2026-22719

highBroadcom CISA-KEV 2026-W10

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

2026-03-03 CVE-2026-21385

highQualcomm CISA-KEV 2026-W10

Google Chromium CSS Use-After-Free Vulnerability

2026-02-26 CVE-2026-2441

highGoogle CISA-KEV 2026-W09

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

2026-02-25 CVE-2026-20127

highCisco CISA-KEV 2026-W09

Cisco SD-WAN Path Traversal Vulnerability

2026-02-25 CVE-2022-20775

highCisco CISA-KEV 2026-W09

Soliton Systems K.K FileZen OS Command Injection Vulnerability

2026-02-24 CVE-2026-25108

highSoliton Systems K.K CISA-KEV 2026-W09

RoundCube Webmail Cross-site Scripting Vulnerability

2026-02-20 CVE-2025-68461

highRoundcube CISA-KEV 2026-W08

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

2026-02-20 CVE-2025-49113

highRoundcube CISA-KEV 2026-W08

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

2026-02-18 CVE-2026-22769

highDell CISA-KEV 2026-W08

GitLab Server-Side Request Forgery (SSRF) Vulnerability

2026-02-18 CVE-2021-22175

highGitLab CISA-KEV 2026-W08

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

2026-02-17 CVE-2008-0015

highMicrosoft CISA-KEV 2026-W08

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

2026-02-17 CVE-2020-7796

highSynacor CISA-KEV 2026-W08

TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

2026-02-17 CVE-2024-7694

highTeamT5 CISA-KEV 2026-W08

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

2026-02-13 CVE-2026-1731

criticalBeyondTrust CISA-KEV 2026-W07

Apple Multiple Buffer Overflow Vulnerability

2026-02-12 CVE-2026-20700

highApple CISA-KEV 2026-W07

Microsoft Configuration Manager SQL Injection Vulnerability

2026-02-12 CVE-2024-43468

highMicrosoft CISA-KEV 2026-W07

Notepad++ Download of Code Without Integrity Check Vulnerability

2026-02-12 CVE-2025-15556

highNotepad++CISA-KEV 2026-W07

SolarWinds Web Help Desk Security Control Bypass Vulnerability

2026-02-12 CVE-2025-40536

highSolarWinds CISA-KEV 2026-W07

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

2026-02-10 CVE-2026-21514

highMicrosoft CISA-KEV 2026-W07

Microsoft Windows NULL Pointer Dereference Vulnerability

2026-02-10 CVE-2026-21525

highMicrosoft CISA-KEV 2026-W07

React Native Community CLI OS Command Injection Vulnerability

2026-02-05 CVE-2025-11953

highReact Native Community CISA-KEV 2026-W06

SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

2026-02-05 CVE-2026-24423

criticalSmarterTools CISA-KEV 2026-W06

GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

2026-02-03 CVE-2021-39935

highGitLab CISA-KEV 2026-W06

Sangoma FreePBX Improper Authentication Vulnerability

2026-02-03 CVE-2019-19006

highSangoma CISA-KEV 2026-W06

Sangoma FreePBX OS Command Injection Vulnerability

2026-02-03 CVE-2025-64328

highSangoma CISA-KEV 2026-W06

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

2026-02-03 CVE-2025-40551

highSolarWinds CISA-KEV 2026-W06

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

2026-01-29 CVE-2026-1281

highIvanti CISA-KEV 2026-W05

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

2026-01-27 CVE-2026-24858

highFortinet CISA-KEV 2026-W05

GNU InetUtils Argument Injection Vulnerability

2026-01-26 CVE-2026-24061

highGNU CISA-KEV 2026-W05

Linux Kernel Integer Overflow Vulnerability

2026-01-26 CVE-2018-14634

highLinux CISA-KEV 2026-W05

Microsoft Office Security Feature Bypass Vulnerability

2026-01-26 CVE-2026-21509

highMicrosoft CISA-KEV 2026-W05

SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

2026-01-26 CVE-2026-23760

criticalSmarterTools CISA-KEV 2026-W05

SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

2026-01-26 CVE-2025-52691

criticalSmarterTools CISA-KEV 2026-W05

Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

2026-01-23 CVE-2024-37079

highBroadcom CISA-KEV 2026-W04

Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

2026-01-22 CVE-2025-54313

highPrettier CISA-KEV 2026-W04

Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

2026-01-22 CVE-2025-68645

highSynacor CISA-KEV 2026-W04

Versa Concerto Improper Authentication Vulnerability

2026-01-22 CVE-2025-34026

highVersa CISA-KEV 2026-W04

Vite Vitejs Improper Access Control Vulnerability

2026-01-22 CVE-2025-31125

highVite CISA-KEV 2026-W04

Cisco Unified Communications Products Code Injection Vulnerability

2026-01-21 CVE-2026-20045

highCisco CISA-KEV 2026-W04

Microsoft Windows Information Disclosure Vulnerability

2026-01-13 CVE-2026-20805

highMicrosoft CISA-KEV 2026-W03

Gogs Path Traversal Vulnerability

2026-01-12 CVE-2025-8110

highGogs CISA-KEV 2026-W03

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

2026-01-07 CVE-2025-37164

highHewlett Packard Enterprise (HPE)CISA-KEV 2026-W02

Microsoft Office PowerPoint Code Injection Vulnerability

2026-01-07 CVE-2009-0556

highMicrosoft CISA-KEV 2026-W02

MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

2025-12-29 CVE-2025-14847

highMongoDB CISA-KEV 2026-W01

Digiever DS-2105 Pro Missing Authorization Vulnerability

2025-12-22 CVE-2023-52163

highDigiever CISA-KEV 2025-W52

WatchGuard Firebox Out of Bounds Write Vulnerability

2025-12-19 CVE-2025-14733

highWatchGuard CISA-KEV 2025-W51

ASUS Live Update Embedded Malicious Code Vulnerability

2025-12-17 CVE-2025-59374

highASUS CISA-KEV 2025-W51

Cisco Multiple Products Improper Input Validation Vulnerability

2025-12-17 CVE-2025-20393

highCisco CISA-KEV 2025-W51

SonicWall SMA1000 Missing Authorization Vulnerability

2025-12-17 CVE-2025-40602

highSonicWall CISA-KEV 2025-W51

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

2025-12-16 CVE-2025-59718

highFortinet CISA-KEV 2025-W51

Apple Multiple Products Use-After-Free WebKit Vulnerability

2025-12-15 CVE-2025-43529

highApple CISA-KEV 2025-W51

Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

2025-12-15 CVE-2025-14611

highGladinet CISA-KEV 2025-W51

Google Chromium Out of Bounds Memory Access Vulnerability

2025-12-12 CVE-2025-14174

highGoogle CISA-KEV 2025-W50

Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

2025-12-12 CVE-2018-4063

highSierra Wireless CISA-KEV 2025-W50

OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

2025-12-11 CVE-2025-58360

highOSGeo CISA-KEV 2025-W50

Microsoft Windows Use After Free Vulnerability

2025-12-09 CVE-2025-62221

highMicrosoft CISA-KEV 2025-W50

RARLAB WinRAR Path Traversal Vulnerability

2025-12-09 CVE-2025-6218

highRARLAB CISA-KEV 2025-W50