https://github.com/advisoryops/advisoryopsP0 and P1 priority cybersecurity advisories requiring immediate attentionTue, 27 Oct 2026 12:11:05 +0000en-ushttps://nvd.nist.gov/vuln/detail/CVE-2026-42271https://nvd.nist.gov/vuln/detail/CVE-2026-42271Mon, 08 Jun 2026 00:00:00 +0000LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied comP0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239aCisco IOS and IOS XE software has a critical vulnerability in the Smart Install feature that could allow an attacker to remotely crash the device or run harmful code. A patch is available, so it is essential to update your software immediately to protect your network from potential attacks. Please prioritize this action to prevent any service disruptions.P0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239aCisco IOS XE Software has a critical vulnerability in its web interface that could allow an authenticated attacker to execute commands with root access. A patch is available to fix this issue. It is recommended to update your software immediately to prevent potential unauthorized access.P0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239aCisco IOS XE Software has a critical vulnerability that allows attackers to gain unauthorized access and escalate their privileges. A patch is available, so it's important to update your systems immediately to protect against potential exploitation. Ensure that your devices are checked and updated to prevent unauthorized access.P0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071aFortinet FortiClientEMS versions 7.2.0 to 7.2.2 and 7.0.1 to 7.0.10 have a critical security vulnerability that could allow an attacker to execute unauthorized commands. A patch is available, so it is essential to update to the latest version immediately to protect your systems. Please prioritize this update to ensure the safety of our network.P0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-071aConnectWise ScreenConnect versions 23.9.7 and earlier have a critical vulnerability that could allow attackers to bypass authentication and access sensitive information or systems. A patch is available to resolve this issue. It is recommended to update to the latest version as soon as possible to protect your systems.P0https://nvd.nist.gov/vuln/detail/CVE-2026-9082https://nvd.nist.gov/vuln/detail/CVE-2026-9082Fri, 22 May 2026 00:00:00 +0000Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API. | Drupal CoreP0https://www.cisa.gov/news-events/analysis-reports/ar25-261ahttps://www.cisa.gov/news-events/analysis-reports/ar25-261aIvanti Endpoint Manager Mobile has a critical authentication bypass vulnerability that allows unauthorized access to protected resources through its API. A patch is available to fix this issue. It's essential to update your software immediately to prevent potential attacks.P0https://www.cisa.gov/news-events/analysis-reports/ar25-261ahttps://www.cisa.gov/news-events/analysis-reports/ar25-261aIvanti Endpoint Manager Mobile versions 12.5.0.0 and earlier have a critical vulnerability that allows authenticated attackers to execute arbitrary code through specially crafted requests. A patch is available to fix this issue. It is essential to update your systems to avoid potential exploitation.P0https://nvd.nist.gov/vuln/detail/CVE-2025-57819https://nvd.nist.gov/vuln/detail/CVE-2025-57819Fri, 29 Aug 2025 00:00:00 +0000Sangoma's FreePBX has a critical vulnerability that allows unauthorized access to its administrator interface, potentially leading to remote control of the system. Patches are available for versions 15.0.66, 16.0.89, and 17.0.3. It is urgent to update your FreePBX to the latest version to protect against this security risk.P0https://nvd.nist.gov/vuln/detail/CVE-2025-6554https://nvd.nist.gov/vuln/detail/CVE-2025-6554Google Chrome versions before 138.0.7204.96 have a high-severity vulnerability that lets attackers read or write data remotely through a specially crafted webpage. A patch is available for this issue. It's important to upgrade to the latest version of Chrome to protect against this risk.P0https://nvd.nist.gov/vuln/detail/CVE-2013-3893https://nvd.nist.gov/vuln/detail/CVE-2013-3893Tue, 12 Aug 2025 00:00:00 +0000Microsoft Internet Explorer versions 6 through 11 have a critical vulnerability that could allow attackers to run harmful code on your system through malicious JavaScript. A patch is available, so it's essential to update your Internet Explorer immediately to protect your network. This will help prevent potential security risks from remote attackers.P0https://nvd.nist.gov/vuln/detail/CVE-2013-3918https://nvd.nist.gov/vuln/detail/CVE-2013-3918Mon, 06 Oct 2025 00:00:00 +0000Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). UserP0https://nvd.nist.gov/vuln/detail/CVE-2010-3962https://nvd.nist.gov/vuln/detail/CVE-2010-3962Mon, 06 Oct 2025 00:00:00 +0000Microsoft Internet Explorer versions 6, 7, and 8 have a critical vulnerability that allows remote attackers to run unauthorized code through specific web content features. There is no patch available for this issue, so it is important to avoid using these outdated versions of Internet Explorer. Ensure that users switch to a more secure browser to protect hospital systems.P0https://nvd.nist.gov/vuln/detail/CVE-2021-23758https://nvd.nist.gov/vuln/detail/CVE-2021-23758Wed, 26 Aug 2026 00:00:00 +0000Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. | Ajax.NET Professional Ajax.NET ProfessionalP0https://nvd.nist.gov/vuln/detail/CVE-2023-22894https://nvd.nist.gov/vuln/detail/CVE-2023-22894Thu, 08 Oct 2026 00:00:00 +0000This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution.P0https://nvd.nist.gov/vuln/detail/CVE-2023-22894https://nvd.nist.gov/vuln/detail/CVE-2023-22894Thu, 08 Oct 2026 00:00:00 +0000Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. This vulnerability can be chained with CVE-2023-22621 to achieve remote code execution. | Strapi StrapiP0https://nvd.nist.gov/vuln/detail/CVE-2026-60137https://nvd.nist.gov/vuln/detail/CVE-2026-60137Tue, 21 Jul 2026 00:00:00 +0000WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default WordPress installations. | WordPress CoreP0https://nvd.nist.gov/vuln/detail/CVE-2026-60137https://nvd.nist.gov/vuln/detail/CVE-2026-60137Tue, 21 Jul 2026 00:00:00 +0000WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.P0https://nvd.nist.gov/vuln/detail/CVE-2026-9586https://nvd.nist.gov/vuln/detail/CVE-2026-9586Wed, 02 Sep 2026 00:00:00 +0000Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution. | Sangoma SwitchvoxP0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-266ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-266aA critical vulnerability exists in the Linux kernel that can allow local users to gain unauthorized access to system privileges. This weakness has been exploited in the past and does have a patch available. It is highly recommended that you update your Linux systems to the latest version to protect against potential attacks.P0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-266ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-266aGeoServer has a critical vulnerability that allows unauthenticated users to execute arbitrary code, affecting all versions before 2.22.6, 2.23.6, 2.24.4, and 2.25.2. Patches are available for these versions, and it's recommended to upgrade immediately or, as a temporary measure, remove the gt-complex module, which may affect functionality. Ensure all instances of GeoServer are secured to prevent potential exploitation.P0https://nvd.nist.gov/vuln/detail/CVE-2025-20352https://nvd.nist.gov/vuln/detail/CVE-2025-20352Mon, 29 Sep 2025 00:00:00 +0000Cisco IOS and IOS XE software have a critical vulnerability in their Simple Network Management Protocol that could allow low-privileged attackers to cause a service outage, or high-privileged attackers to gain complete control of the device. A patch is available to fix this issue. It is crucial to apply the patch immediately to protect your systems from potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2025-7775https://nvd.nist.gov/vuln/detail/CVE-2025-7775Tue, 26 Aug 2025 00:00:00 +0000Citrix has identified a critical memory overflow vulnerability in the NetScaler ADC and NetScaler Gateway products, which can allow hackers to execute remote code or cause service interruptions. A patch is available, and it's crucial to apply it immediately to protect your systems. Ensure that all configurations, especially involving IPv6, are reviewed as part of this update.P0https://nvd.nist.gov/vuln/detail/CVE-2007-0671https://nvd.nist.gov/vuln/detail/CVE-2007-0671Tue, 12 Aug 2025 00:00:00 +0000Microsoft Excel has a critical vulnerability that allows remote attackers to run harmful code. A patch is currently unavailable, so it’s essential to limit the use of affected versions of Excel in your environment. Regularly review your systems to ensure that they are not exposed to this risk.P0https://nvd.nist.gov/vuln/detail/CVE-2017-1000353https://nvd.nist.gov/vuln/detail/CVE-2017-1000353Thu, 02 Oct 2025 00:00:00 +0000Jenkins software versions 2.56 and earlier, as well as 2.46.1 LTS and earlier, have a critical vulnerability that allows attackers to execute code without authentication. A patch is available, so it's important to upgrade to Jenkins version 2.46.2 LTS or newer immediately to secure your systems. Be sure to check your systems for these versions and apply the update as soon as possible.P0https://nvd.nist.gov/vuln/detail/CVE-2024-8069https://nvd.nist.gov/vuln/detail/CVE-2024-8069Mon, 25 Aug 2025 00:00:00 +0000Citrix Session Recording has a critical vulnerability that allows an authenticated user on the same network to execute harmful commands with high-level access. A patch is available to fix this issue. It's essential to apply the patch immediately to safeguard your systems.P0https://nvd.nist.gov/vuln/detail/CVE-2025-20281https://nvd.nist.gov/vuln/detail/CVE-2025-20281Mon, 28 Jul 2025 00:00:00 +0000Cisco has identified a critical vulnerability in their ISE and ISE-PIC products that could allow an unverified attacker to gain full control of the device remotely without needing any login credentials. A patch is available, so it is crucial to update these systems immediately to prevent potential exploitation.P0https://nvd.nist.gov/vuln/detail/CVE-2025-20333https://nvd.nist.gov/vuln/detail/CVE-2025-20333Thu, 25 Sep 2025 00:00:00 +0000Cisco has identified a critical vulnerability in the VPN web server of its Secure Firewall products that could allow an authenticated attacker to execute harmful code on the device. A patch is available, and it is strongly recommended that you apply it immediately to protect your systems from potential breaches. Please ensure all VPN users are updated and informed about this security risk.P0https://nvd.nist.gov/vuln/detail/CVE-2025-20337https://nvd.nist.gov/vuln/detail/CVE-2025-20337Mon, 28 Jul 2025 00:00:00 +0000Cisco has identified a critical vulnerability in their Identity Services Engine (ISE) that allows attackers to run harmful code without needing any credentials. A patch is available, and it's crucial to apply it immediately to protect against potential unauthorized access to your systems.P0https://nvd.nist.gov/vuln/detail/CVE-2025-20333https://nvd.nist.gov/vuln/detail/CVE-2025-20333Thu, 25 Sep 2025 00:00:00 +0000Cisco has identified a critical vulnerability in the VPN web server of Cisco Secure ASA and FTD software that could allow unauthorized access to restricted areas, potentially causing devices to crash. A patch is available, and it is strongly recommended that you upgrade to the latest software version to protect your network. Please prioritize this update to prevent any disruption in service.P0https://nvd.nist.gov/vuln/detail/CVE-2025-24016https://nvd.nist.gov/vuln/detail/CVE-2025-24016Tue, 10 Jun 2025 00:00:00 +0000Wazuh, a threat management tool, has a critical security vulnerability that allows attackers to execute arbitrary code remotely. This affects versions 4.4.0 to 4.9.0, but version 4.9.1 includes a patch to fix the issue. It is essential to upgrade to version 4.9.1 immediately to protect against potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2025-32433https://nvd.nist.gov/vuln/detail/CVE-2025-32433Mon, 09 Jun 2025 00:00:00 +0000Erlang/OTP has a critical vulnerability in its SSH server that allows attackers to execute commands without authentication. Patches are available for the most recent versions, so it's essential to update to OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20 as soon as possible. If you can't patch immediately, consider disabling the SSH server or adjusting firewall rules to limit access.P0https://nvd.nist.gov/vuln/detail/CVE-2025-3935https://nvd.nist.gov/vuln/detail/CVE-2025-3935Mon, 02 Jun 2025 00:00:00 +0000ConnectWise ScreenConnect versions 25.2.3 and earlier have a critical vulnerability that could allow attackers to execute code remotely if specific system keys are compromised. A patch is available in version 2025.4, which disables the vulnerable feature. It's recommended to upgrade to this version immediately to protect against this risk.P0https://nvd.nist.gov/vuln/detail/CVE-2025-49704https://nvd.nist.gov/vuln/detail/CVE-2025-49704Sun, 20 Jul 2025 00:00:00 +0000Microsoft Office SharePoint has a critical vulnerability that allows an authorized attacker to run malicious code over the network. A patch is available to fix this issue. It is recommended to apply the patch immediately to protect hospital systems.P0https://nvd.nist.gov/vuln/detail/CVE-2025-49704https://nvd.nist.gov/vuln/detail/CVE-2025-49704Tue, 22 Jul 2025 00:00:00 +0000Microsoft Office SharePoint has a critical vulnerability that allows unauthorized access, potentially letting attackers spoof identities on the network. A patch is available to fix this issue. We recommend updating SharePoint immediately to enhance security.P0https://nvd.nist.gov/vuln/detail/CVE-2025-5086https://nvd.nist.gov/vuln/detail/CVE-2025-5086Thu, 11 Sep 2025 00:00:00 +0000Dassault Systèmes has identified a serious vulnerability in their DELMIA Apriso software that could allow remote code execution. This is considered a critical risk, and a patch is available. To protect your systems, it is crucial to apply the patch as soon as possible.P0https://nvd.nist.gov/vuln/detail/CVE-2025-53690https://nvd.nist.gov/vuln/detail/CVE-2025-53690Thu, 04 Sep 2025 00:00:00 +0000Sitecore's Experience Manager and Experience Platform have a critical vulnerability that allows code injection through untrusted data. A patch is available, so it's essential to update these systems to mitigate potential security risks. Ensure that all installations are updated to the latest version as soon as possible.P0https://nvd.nist.gov/vuln/detail/CVE-2016-7836https://nvd.nist.gov/vuln/detail/CVE-2016-7836Tue, 14 Oct 2025 00:00:00 +0000SKYSEA Client View software versions 11.221.03 and earlier have a critical vulnerability that allows remote attackers to execute code on the system. A patch is available to fix this issue. It is recommended to update your software immediately to protect your network.P0https://nvd.nist.gov/vuln/detail/CVE-2025-59287https://nvd.nist.gov/vuln/detail/CVE-2025-59287Microsoft Windows Server Update Service has a critical vulnerability that could allow an unauthorized attacker to execute harmful code remotely. A patch is available to fix this issue. It is crucial to apply the patch immediately to protect your network from potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2025-24893https://nvd.nist.gov/vuln/detail/CVE-2025-24893Thu, 30 Oct 2025 00:00:00 +0000XWiki has a critical vulnerability that allows unauthorized users to execute harmful commands, affecting the entire system's security. A patch is available in versions 15.10.11, 16.4.1, and 16.5.0RC1. It is recommended to upgrade to these versions immediately to protect your systems.P0https://nvd.nist.gov/vuln/detail/CVE-2025-48703https://nvd.nist.gov/vuln/detail/CVE-2025-48703Tue, 04 Nov 2025 00:00:00 +0000CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known. | CWP Control Web PanelP0https://nvd.nist.gov/vuln/detail/CVE-2025-55182https://nvd.nist.gov/vuln/detail/CVE-2025-55182Meta's React Server Components have a critical vulnerability that allows unauthorized remote code execution in specific versions 19.0.0 to 19.2.0. There is no current patch available to fix this issue. It is recommended to immediately assess your systems for these versions and either upgrade to a secure version or disable the affected components until a remedy is found.P0https://nvd.nist.gov/vuln/detail/CVE-2025-55182https://nvd.nist.gov/vuln/detail/CVE-2025-55182The advisory from Meta indicates that the reported vulnerability in Next.js is a duplicate and does not require further action. No new risks or patches are being introduced from this advisory. Please continue monitoring for other relevant security updates.P0https://nvd.nist.gov/vuln/detail/CVE-2024-37079https://nvd.nist.gov/vuln/detail/CVE-2024-37079Fri, 23 Jan 2026 00:00:00 +0000Broadcom VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. This could allow a malicious actor with network access to vCenter Server to send specially crafted network packets, potentially leading to remote code execution. | Broadcom VMware vCenter ServerP0https://nvd.nist.gov/vuln/detail/CVE-2025-37164https://nvd.nist.gov/vuln/detail/CVE-2025-37164Wed, 07 Jan 2026 00:00:00 +0000Hewlett Packard Enterprise has identified a critical remote code execution vulnerability in HPE OneView, and a patch is available. It's crucial for security teams to quickly apply this update to protect hospital networks from potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2025-40551https://nvd.nist.gov/vuln/detail/CVE-2025-40551Tue, 03 Feb 2026 00:00:00 +0000SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication. | SolarWinds Web Help DeskP0https://nvd.nist.gov/vuln/detail/CVE-2025-52691https://nvd.nist.gov/vuln/detail/CVE-2025-52691Mon, 26 Jan 2026 00:00:00 +0000SmarterTools has a critical vulnerability that allows unauthorized users to upload files to the mail server, which could lead to serious security issues, including remote code execution. There is currently no information on whether a patch is available. It is recommended to monitor your mail server closely and implement additional security measures until a fix is released.P0https://nvd.nist.gov/vuln/detail/CVE-2026-1281https://nvd.nist.gov/vuln/detail/CVE-2026-1281Thu, 29 Jan 2026 00:00:00 +0000Ivanti Endpoint Manager Mobile has a critical vulnerability that allows unauthorized users to execute code remotely. A patch is available to fix this issue. It is crucial for you to apply the patch immediately to protect our systems from potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2008-0015https://nvd.nist.gov/vuln/detail/CVE-2008-0015Tue, 17 Feb 2026 00:00:00 +0000Microsoft has identified a critical vulnerability in the Active Template Library that affects multiple versions of Windows, allowing remote attackers to execute unauthorized code. A patch is not available for this issue, so it's crucial to limit exposure by disabling the affected ActiveX control if it is not essential for operations. Further steps should be taken to monitor and protect affected systems from potential attacks.P0https://nvd.nist.gov/vuln/detail/CVE-2025-49113https://nvd.nist.gov/vuln/detail/CVE-2025-49113Fri, 20 Feb 2026 00:00:00 +0000Roundcube Webmail has a critical vulnerability that allows authenticated users to execute malicious code remotely. A patch is available in version 1.5.10 and later, and 1.6.11 or newer. It's important to update to a secure version immediately to protect against this risk.P0https://nvd.nist.gov/vuln/detail/CVE-2026-22719https://nvd.nist.gov/vuln/detail/CVE-2026-22719Tue, 03 Mar 2026 00:00:00 +0000Broadcom's VMware Aria Operations has a critical command injection vulnerability that could allow an attacker to execute unauthorized commands during product migration. A patch is available, and it's essential to apply it as soon as possible to prevent potential remote code execution. Review the provided response matrix for specific patch instructions and workarounds.P0https://nvd.nist.gov/vuln/detail/CVE-2025-68613https://nvd.nist.gov/vuln/detail/CVE-2025-68613Wed, 11 Mar 2026 00:00:00 +0000n8n, an open-source workflow automation platform, has a critical vulnerability that could allow an authenticated user to run arbitrary code, potentially compromising sensitive data and system operations. A patch is available in versions 1.120.4, 1.121.1, and 1.122.0, and it's strongly recommended to upgrade to one of these versions immediately. If you can't upgrade right away, limit workflow permissions to trusted users and ensure n8n runs in a secure environment to reduce risk until you can appP0https://nvd.nist.gov/vuln/detail/CVE-2025-53521https://nvd.nist.gov/vuln/detail/CVE-2025-53521Fri, 27 Mar 2026 00:00:00 +0000F5's BIG-IP APM device has a critical vulnerability that could allow remote code execution if certain malicious traffic is processed. A patch is likely needed, but the specific software versions impacted aren't clearly identified. It is strongly recommended to review your current software version and apply necessary updates as soon as possible.P0https://nvd.nist.gov/vuln/detail/CVE-2009-0238https://nvd.nist.gov/vuln/detail/CVE-2009-0238Tue, 14 Apr 2026 00:00:00 +0000Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object. | Microsoft OfficeP0https://nvd.nist.gov/vuln/detail/CVE-2012-1854https://nvd.nist.gov/vuln/detail/CVE-2012-1854Mon, 13 Apr 2026 00:00:00 +0000Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. | Microsoft Visual Basic for Applications (VBA)P0https://nvd.nist.gov/vuln/detail/CVE-2019-1068https://nvd.nist.gov/vuln/detail/CVE-2019-1068Wed, 26 Aug 2026 00:00:00 +0000Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account. | Microsoft SQL ServerP0https://nvd.nist.gov/vuln/detail/CVE-2021-3199https://nvd.nist.gov/vuln/detail/CVE-2021-3199Thu, 08 Oct 2026 00:00:00 +0000ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution. | ONLYOFFICE DocsP0https://nvd.nist.gov/vuln/detail/CVE-2023-21529https://nvd.nist.gov/vuln/detail/CVE-2023-21529Mon, 13 Apr 2026 00:00:00 +0000Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. | Microsoft Exchange ServerP0https://nvd.nist.gov/vuln/detail/CVE-2025-62593https://nvd.nist.gov/vuln/detail/CVE-2025-62593Mon, 17 Aug 2026 00:00:00 +0000Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari. | Ray-Project RayP0https://nvd.nist.gov/vuln/detail/CVE-2026-10520https://nvd.nist.gov/vuln/detail/CVE-2026-10520Thu, 11 Jun 2026 00:00:00 +0000Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors. | Ivanti SentryP0https://nvd.nist.gov/vuln/detail/CVE-2026-110447https://nvd.nist.gov/vuln/detail/CVE-2026-110447Fri, 23 Oct 2026 00:00:00 +0000Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running. | Collabora Collabora Online – Built-in CODE ServerP0https://nvd.nist.gov/vuln/detail/CVE-2026-1340https://nvd.nist.gov/vuln/detail/CVE-2026-1340Wed, 08 Apr 2026 00:00:00 +0000Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. | Ivanti Endpoint Manager Mobile (EPMM)P0https://nvd.nist.gov/vuln/detail/CVE-2026-33824https://nvd.nist.gov/vuln/detail/CVE-2026-33824Tue, 18 Aug 2026 00:00:00 +0000Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. | Microsoft Internet Key Exchange (IKE) Service ExtensionsP0https://nvd.nist.gov/vuln/detail/CVE-2026-39987https://nvd.nist.gov/vuln/detail/CVE-2026-39987Thu, 23 Apr 2026 00:00:00 +0000Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to shell access and execute arbitrary system commands. | Marimo MarimoP0https://nvd.nist.gov/vuln/detail/CVE-2026-45247https://nvd.nist.gov/vuln/detail/CVE-2026-45247Wed, 03 Jun 2026 00:00:00 +0000Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. | Mirasvit Mirasvit Full Page Cache WarmerP0https://nvd.nist.gov/vuln/detail/CVE-2026-5430https://nvd.nist.gov/vuln/detail/CVE-2026-5430Thu, 24 Sep 2026 00:00:00 +0000WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution. | WSO2 Multiple ProductsP0https://nvd.nist.gov/vuln/detail/CVE-2026-56290https://nvd.nist.gov/vuln/detail/CVE-2026-56290Tue, 07 Jul 2026 00:00:00 +0000Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload. | Joomlack Page BuilderP0https://nvd.nist.gov/vuln/detail/CVE-2026-63077https://nvd.nist.gov/vuln/detail/CVE-2026-63077Wed, 05 Aug 2026 00:00:00 +0000JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. | JetBrains TeamCityP0https://nvd.nist.gov/vuln/detail/CVE-2026-6973https://nvd.nist.gov/vuln/detail/CVE-2026-6973Thu, 07 May 2026 00:00:00 +0000Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution. | Ivanti Endpoint Manager Mobile (EPMM)P0https://nvd.nist.gov/vuln/detail/CVE-2026-83549https://nvd.nist.gov/vuln/detail/CVE-2026-83549Wed, 02 Sep 2026 00:00:00 +0000SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. | SonicWall SMA1000 AppliancesP0https://nvd.nist.gov/vuln/detail/CVE-2026-86218https://nvd.nist.gov/vuln/detail/CVE-2026-86218Tue, 08 Sep 2026 00:00:00 +0000N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution. | N-able N-centralP0https://nvd.nist.gov/vuln/detail/CVE-2026-87902https://nvd.nist.gov/vuln/detail/CVE-2026-87902Fri, 25 Sep 2026 00:00:00 +0000WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution. | WordPress CoreP0https://nvd.nist.gov/vuln/detail/CVE-2026-9198https://nvd.nist.gov/vuln/detail/CVE-2026-9198Tue, 04 Aug 2026 00:00:00 +0000Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. | IBM LangflowP0https://nvd.nist.gov/vuln/detail/CVE-2026-94127https://nvd.nist.gov/vuln/detail/CVE-2026-94127Tue, 22 Sep 2026 00:00:00 +0000F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution. | F5 BIG-IP APMP0https://nvd.nist.gov/vuln/detail/CVE-2025-48595https://nvd.nist.gov/vuln/detail/CVE-2025-48595Tue, 02 Jun 2026 00:00:00 +0000Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation. | Android FrameworkP0https://nvd.nist.gov/vuln/detail/CVE-2026-35273https://nvd.nist.gov/vuln/detail/CVE-2026-35273Fri, 12 Jun 2026 00:00:00 +0000Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability iP0https://nvd.nist.gov/vuln/detail/CVE-2023-50224https://nvd.nist.gov/vuln/detail/CVE-2023-50224Wed, 03 Sep 2025 00:00:00 +0000TP-Link TL-WR841N routers have a critical vulnerability that allows nearby attackers to access sensitive information without needing to log in. A patch is available, and it's important to update your devices immediately to protect against potential breaches. If you have these routers in your network, make sure to implement the patch as soon as possible.P0https://nvd.nist.gov/vuln/detail/CVE-2022-48503https://nvd.nist.gov/vuln/detail/CVE-2022-48503Mon, 20 Oct 2025 00:00:00 +0000Apple has identified a critical vulnerability in several of its products that could allow attackers to execute arbitrary code by processing web content. A patch is available in updated versions of tvOS, watchOS, iOS, iPadOS, macOS Monterey, and Safari. It is recommended to promptly update all affected devices to the latest version to protect against this security risk.P0https://nvd.nist.gov/vuln/detail/CVE-2010-0249https://nvd.nist.gov/vuln/detail/CVE-2010-0249Wed, 20 May 2026 00:00:00 +0000Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Microsoft Internet ExplorerP0https://nvd.nist.gov/vuln/detail/CVE-2010-0806https://nvd.nist.gov/vuln/detail/CVE-2010-0806Wed, 20 May 2026 00:00:00 +0000Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. | Microsoft Internet ExplorerP0https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-203ahttps://www.cisa.gov/news-events/cybersecurity-advisories/aa25-203aThe FBI and CISA have issued a critical advisory regarding a new ransomware variant called Interlock, which has recently targeted various organizations in North America and Europe. No patch exists for this ransomware threat, so it's recommended that hospital staff implement strong endpoint detection measures and stay vigilant against common tactics used by attackers, such as social engineering. Follow best practices to help protect sensitive data and minimize the impact of potential ransomware aP0https://nvd.nist.gov/vuln/detail/CVE-2024-0769https://nvd.nist.gov/vuln/detail/CVE-2024-0769Wed, 25 Jun 2025 00:00:00 +0000D-Link's DIR-859 router has a critical vulnerability that allows remote attackers to exploit the device due to improper handling of certain requests. Since this product is no longer supported, there is no patch available. It is strongly recommended to retire and replace this device to ensure your network's security.P0https://nvd.nist.gov/vuln/detail/CVE-2015-5287https://nvd.nist.gov/vuln/detail/CVE-2015-5287Wed, 26 Aug 2026 00:00:00 +0000Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. | Red Hat Automatic Bug Reporting ToolP0https://cloud.google.com/blog/topics/threat-intelligence/ai-assisted-vulnerability-management/https://cloud.google.com/blog/topics/threat-intelligence/ai-assisted-vulnerability-management/Written by: Jules Czarniak Introduction As highlighted in the Mandiant M-Trends 2026 report , the mean time-to-exploit (TTE) has dropped to -7 days, meaning vulnerabilities are often exploited a week before a patch even exists. To keep pace, many security teams are exploring how to integrate large language model (LLM) agents into their codebases, development environments and continuous integration and continuous delivery (CI/CD) pipelines for automated vulnerability discovery and remediation. HoP0https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.P0https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/Fri, 13 Feb 2026 00:00:00 +0000BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption. | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRP0https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/https://cloud.google.com/blog/topics/threat-intelligence/vulnerability-discovery-and-exploitation-trends-in-the-ai-era/The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart form data, allowing an attacker to write files to arbitrary locations on the filesystem using path traversal sequences ('../').P0https://nvd.nist.gov/vuln/detail/CVE-2026-56291https://nvd.nist.gov/vuln/detail/CVE-2026-56291Fri, 10 Jul 2026 00:00:00 +0000Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which could allow uploading of executable files leading to full RCE. | Balbooa FormsP0https://nvd.nist.gov/vuln/detail/CVE-2026-20182https://nvd.nist.gov/vuln/detail/CVE-2026-20182Thu, 14 May 2026 00:00:00 +0000May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show Control Connections guidance to help with system checks.  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, fP0https://nvd.nist.gov/vuln/detail/CVE-2026-20245https://nvd.nist.gov/vuln/detail/CVE-2026-20245Tue, 09 Jun 2026 00:00:00 +0000A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the aP0https://nvd.nist.gov/vuln/detail/CVE-2016-10033https://nvd.nist.gov/vuln/detail/CVE-2016-10033Mon, 07 Jul 2025 00:00:00 +0000PHP's PHPMailer before version 5.2.18 has a critical vulnerability that could allow attackers to run harmful code by sending specially crafted email commands. A patch is available, so it's important to update to the latest version immediately to protect your systems. Ensure all instances of PHPMailer are reviewed and updated accordingly.P0https://nvd.nist.gov/vuln/detail/CVE-2023-2533https://nvd.nist.gov/vuln/detail/CVE-2023-2533Mon, 28 Jul 2025 00:00:00 +0000PaperCut NG/MF has a critical flaw that allows attackers to trick logged-in administrators into clicking harmful links, which could change security settings or run unauthorized code. A patch is available to fix this issue. It is essential to apply the patch immediately to protect your systems from potential exploitation.P0https://nvd.nist.gov/vuln/detail/CVE-2024-54085https://nvd.nist.gov/vuln/detail/CVE-2024-54085Wed, 25 Jun 2025 00:00:00 +0000AMI's SPx device has a critical vulnerability that allows an attacker to remotely bypass authentication through its management interface. This could compromise the security of sensitive data and the device's functionality. Immediate action is required to address this issue as no patch is currently available.P0https://api.fda.gov/device/enforcement.json?search=recall_number:"Z-0032-2014"https://api.fda.gov/device/enforcement.json?search=recall_number:"Z-0032-2014"The FSE Image Upgrade kit (part 92019C) is recalled due to issue related to the export of data from the EVOLIS analyzer to Laboratory Information Systems (LIS) when using the MONOLISA Anti-HBs EIA Quantitative Determination in EVOLIS APF version 6.0. | FSE Image Upgrade Kit, Catalog # 92019C This kit is used to install and/or upgrade software used with the EVOLIS Microplate System. | Bio-Rad Laboratories | Class Class IIIP0https://api.fda.gov/device/enforcement.json?search=recall_number:"Z-0070-2021"https://api.fda.gov/device/enforcement.json?search=recall_number:"Z-0070-2021"It was discovered during a documentation review that China has the software version as v5.01 approved for use in China. The current software version on devices distributed in China since 2011 is v6.01. | Neoprobe GDS Control Unit, Model Number NPCU3 | Devicor Medical Products Inc | Class Class IIIP0https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfres/res.cfm?id=36309https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfres/res.cfm?id=36309Wed, 15 Dec 2004 00:00:00 +0000Historical FDA recall Z-0341-05 for Philips HeartStart MRx monitor/defibrillator models M3535A and M3536A. The recall concerns a possible delay in energy delivery when the sync function is enabled and the device switches from manual to AED mode. FDA lists software versions A.02.00 and lower in the code information. Philips notified customers by letter in December 2004, with interim risk mitigation pending correction by a company representative. The recall was initiated on 2004-12-15 and terminatP0https://api.fda.gov/device/recall.json?search=res_event_number:"31955"https://api.fda.gov/device/recall.json?search=res_event_number:"31955"Tue, 14 Sep 2010 00:00:00 +0000The device may disarm and not deliver shock when performing a Synchronized Cardioversion | Philips Medical HeartStart MRx Monitor/Defibrillator Model: M3535A, M3536A | Philips Medical Systems | Device: Automated External Defibrillators (Non-Wearable).P0https://api.fda.gov/device/recall.json?search=res_event_number:"30915"https://api.fda.gov/device/recall.json?search=res_event_number:"30915"Sat, 06 May 2006 00:00:00 +0000The LIFEPAK 12 biphasic defibrillator/ monitors may deliver inappropriate energy levels and fail to escalate energy levels when configured to do so. | LIFEPAK 12 defibrillator/ monitors biphasic | Medtronic Emergency Response Systems, Inc. | Device: Automated External Defibrillators (Non-Wearable).P0https://api.fda.gov/device/recall.json?search=res_event_number:"34685"https://api.fda.gov/device/recall.json?search=res_event_number:"34685"Sun, 25 Jun 2006 00:00:00 +0000Some Powerheart AED Model 9300A may contain a suspect electronic component and there is a remote likelihood that the function of this device may be interrupted during the charge. | Powerheart AED G3 Automated External Defibrillator Model 9300A (Automatic). Cardiac Science AEDs are manufactured by: Manufacturing: Cardiac Science, Inc., 5474 Feltl Road, Minnetonka, MN 55343-7982. | Cardiac Science Corporation | Device: Automated External Defibrillators (Non-Wearable).P0