Security Warnings — Source: cisa kev

Array Networks ArrayOS AG OS Command Injection Vulnerability

2025-12-08 CVE-2025-66644

highArray Networks CISA-KEV 2025-W50

D-Link Routers Buffer Overflow Vulnerability

2025-12-08 CVE-2022-37055

highD-Link CISA-KEV 2025-W50

Meta React Server Components Remote Code Execution Vulnerability

2025-12-05 CVE-2025-55182

criticalMeta CISA-KEV 2025-W49

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

2025-12-03 CVE-2021-26828

highOpenPLC CISA-KEV 2025-W49

Android Framework Information Disclosure Vulnerability

2025-12-02 CVE-2025-48633

highAndroid CISA-KEV 2025-W49

Android Framework Privilege Escalation Vulnerability

2025-12-02 CVE-2025-48572

highAndroid CISA-KEV 2025-W49

OpenPLC ScadaBR Cross-site Scripting Vulnerability

2025-11-28 CVE-2021-26829

highOpenPLC CISA-KEV 2025-W48

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

2025-11-21 CVE-2025-61757

highOracle CISA-KEV 2025-W47

Google Chromium V8 Type Confusion Vulnerability

2025-11-19 CVE-2025-13223

highGoogle CISA-KEV 2025-W47

Fortinet FortiWeb OS Command Injection Vulnerability

2025-11-18 CVE-2025-58034

highFortinet CISA-KEV 2025-W47

Fortinet FortiWeb Path Traversal Vulnerability

2025-11-14 CVE-2025-64446

highFortinet CISA-KEV 2025-W46

Gladinet Triofox Improper Access Control Vulnerability

2025-11-12 CVE-2025-12480

highGladinet CISA-KEV 2025-W46

Microsoft Windows Race Condition Vulnerability

2025-11-12 CVE-2025-62215

highMicrosoft CISA-KEV 2025-W46

WatchGuard Firebox Out-of-Bounds Write Vulnerability

2025-11-12 CVE-2025-9242

highWatchGuard CISA-KEV 2025-W46

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

2025-11-10 CVE-2025-21042

highSamsung CISA-KEV 2025-W46

CWP Control Web Panel OS Command Injection Vulnerability

2025-11-04 CVE-2025-48703

highCWP CISA-KEV 2025-W45

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

2025-11-04 CVE-2025-11371

highGladinet CISA-KEV 2025-W45

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

2025-10-30 CVE-2025-41244

highBroadcom CISA-KEV 2025-W44

XWiki Platform Eval Injection Vulnerability

2025-10-30 CVE-2025-24893

highXWiki CISA-KEV 2025-W44

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

2025-10-28 CVE-2025-6204

highDassault Systèmes CISA-KEV 2025-W44

Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

2025-10-28 CVE-2025-6205

highDassault Systèmes CISA-KEV 2025-W44

Adobe Commerce and Magento Improper Input Validation Vulnerability

2025-10-24 CVE-2025-54236

highAdobe CISA-KEV 2025-W43

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

2025-10-24 CVE-2025-59287

highMicrosoft CISA-KEV 2025-W43

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

2025-10-22 CVE-2025-61932

highMotex CISA-KEV 2025-W43

Apple Multiple Products Unspecified Vulnerability

2025-10-20 CVE-2022-48503

highApple CISA-KEV 2025-W43

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

2025-10-20 CVE-2025-2746

highKentico CISA-KEV 2025-W43

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

2025-10-20 CVE-2025-2747

highKentico CISA-KEV 2025-W43

Microsoft Windows SMB Client Improper Access Control Vulnerability

2025-10-20 CVE-2025-33073

highMicrosoft CISA-KEV 2025-W43

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

2025-10-20 CVE-2025-61884

criticalOracle CISA-KEV 2025-W43

Adobe Experience Manager Forms Code Execution Vulnerability

2025-10-15 CVE-2025-54253

highAdobe CISA-KEV 2025-W42

IGEL OS Use of a Key Past its Expiration Date Vulnerability

2025-10-14 CVE-2025-47827

highIGEL CISA-KEV 2025-W42

Microsoft Windows Improper Access Control Vulnerability

2025-10-14 CVE-2025-59230

highMicrosoft CISA-KEV 2025-W42

Microsoft Windows Untrusted Pointer Dereference Vulnerability

2025-10-14 CVE-2025-24990

highMicrosoft CISA-KEV 2025-W42

SKYSEA Client View Improper Authentication Vulnerability

2025-10-14 CVE-2016-7836

highSKYSEA CISA-KEV 2025-W42

Grafana Path Traversal Vulnerability

2025-10-09 CVE-2021-43798

highGrafana Labs CISA-KEV 2025-W41

Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

2025-10-07 CVE-2025-27915

highSynacor CISA-KEV 2025-W41

Linux Kernel Heap Out-of-Bounds Write Vulnerability

2025-10-06 CVE-2021-22555

highLinux CISA-KEV 2025-W41

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

2025-10-06 CVE-2010-3962

highMicrosoft CISA-KEV 2025-W41

Microsoft Windows Out-of-Bounds Write Vulnerability

2025-10-06 CVE-2013-3918

highMicrosoft CISA-KEV 2025-W41

Microsoft Windows Privilege Escalation Vulnerability

2025-10-06 CVE-2021-43226

highMicrosoft CISA-KEV 2025-W41

Microsoft Windows Remote Code Execution Vulnerability

2025-10-06 CVE-2011-3402

highMicrosoft CISA-KEV 2025-W41

Mozilla Multiple Products Remote Code Execution Vulnerability

2025-10-06 CVE-2010-3765

highMozilla CISA-KEV 2025-W41

Oracle E-Business Suite Unspecified Vulnerability

2025-10-06 CVE-2025-61882

criticalOracle CISA-KEV 2025-W41

GNU Bash OS Command Injection Vulnerability

2025-10-02 CVE-2014-6278

highGNU CISA-KEV 2025-W40

Jenkins Remote Code Execution Vulnerability

2025-10-02 CVE-2017-1000353

highJenkins CISA-KEV 2025-W40

Juniper ScreenOS Improper Authentication Vulnerability

2025-10-02 CVE-2015-7755

highJuniper CISA-KEV 2025-W40

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

2025-10-02 CVE-2025-21043

highSamsung CISA-KEV 2025-W40

Smartbedded Meteobridge Command Injection Vulnerability

2025-10-02 CVE-2025-4008

highSmartbedded CISA-KEV 2025-W40

Adminer Server-Side Request Forgery Vulnerability

2025-09-29 CVE-2021-21311

highAdminer CISA-KEV 2025-W40

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

2025-09-29 CVE-2025-20352

highCisco CISA-KEV 2025-W40

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

2025-09-29 CVE-2025-10035

criticalFortra CISA-KEV 2025-W40

Libraesva Email Security Gateway Command Injection Vulnerability

2025-09-29 CVE-2025-59689

highLibraesva CISA-KEV 2025-W40

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

2025-09-29 CVE-2025-32463

highSudo CISA-KEV 2025-W40

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

2025-09-25 CVE-2025-20362

highCisco CISA-KEV 2025-W39

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

2025-09-25 CVE-2025-20333

highCisco CISA-KEV 2025-W39

Google Chromium V8 Type Confusion Vulnerability

2025-09-23 CVE-2025-10585

highGoogle CISA-KEV 2025-W39

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

2025-09-11 CVE-2025-5086

highDassault Systèmes CISA-KEV 2025-W37

Android Runtime Use-After-Free Vulnerability

2025-09-04 CVE-2025-48543

highAndroid CISA-KEV 2025-W36

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

2025-09-04 CVE-2025-38352

highLinux CISA-KEV 2025-W36

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

2025-09-04 CVE-2025-53690

highSitecore CISA-KEV 2025-W36