CVE-2026-41940 WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Cpanel 2026-04-29 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-04-30 CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet 2026-04-14 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-07-16 CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft 2026-04-14 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-08-18 CVE-2026-39987 Marimo Remote Code Execution Vulnerability Coreweave 2026-04-09 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-04-23 CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet 2026-04-04 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-06 CVE-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasec 2026-03-23 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required Low
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality High
SISubsequent System Integrity High
SASubsequent System Availability High 2026-03-26 CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix 2026-03-23 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality Low
SISubsequent System Integrity Low
SASubsequent System Availability Low 2026-03-30 CVE-2026-33017 Langflow Code Injection Vulnerability Langflow 2026-03-20 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality Low
SISubsequent System Integrity Low
SASubsequent System Availability Low 2026-03-25 CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability Lantronix 2026-03-11 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-06-23 CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability Cisco 2026-03-04 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-19 CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Cisco 2026-03-04 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-09-09 CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco 2026-02-25 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-25 CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell 2026-02-17 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-18 CVE-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet 2026-02-06 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-13 CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability Beyondtrust 2026-02-06 9.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:H/SA:L
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality Low
SISubsequent System Integrity High
SASubsequent System Availability Low 2026-02-13 CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti 2026-01-29 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-04-08 CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti 2026-01-29 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-29 CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability Solarwinds 2026-01-28 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-03 CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability Solarwinds 2026-01-28 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-02-12 CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet 2026-01-27 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-27 CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability Smartertools 2026-01-23 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-02-05 CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability Langflow 2026-01-23 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-07-21 CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability Smartertools 2026-01-22 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2026-01-26 CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability Gnu 2026-01-21 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-26 CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco 2026-01-21 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-21 CVE-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Oracle 2026-01-20 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability None 2026-08-24 CVE-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft 2026-01-13 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-03-18 CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Fortinet 2026-01-13 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-09-09 CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability Smartertools 2025-12-29 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-26 CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability Watchguard 2025-12-19 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2025-12-19 CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability Asus 2025-12-17 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction None
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality None
SISubsequent System Integrity None
SASubsequent System Availability None 2025-12-17 CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco 2025-12-17 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2025-12-17 CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hpe 2025-12-16 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2026-01-07 CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet 2025-12-09 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2025-12-16 CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Arraynetworks 2025-12-05 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2025-12-08 CVE-2025-34291 Langflow Origin Validation Error Vulnerability Langflow 2025-12-05 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction Passive
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality High
SISubsequent System Integrity High
SASubsequent System Availability High 2026-05-21 CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Facebook 2025-12-03 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Changed
CConfidentiality High
IIntegrity High
AAvailability High 2025-12-05 CVE-2025-62593 Ray-Project Ray Code Injection Vulnerability Anyscale 2025-11-26 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
AVAttack Vector Network
ACAttack Complexity Low
ATAttack Requirements None
PRPrivileges Required None
UIUser Interaction Passive
VCVulnerable System Confidentiality High
VIVulnerable System Integrity High
VAVulnerable System Availability High
SCSubsequent System Confidentiality High
SISubsequent System Integrity High
SASubsequent System Availability High 2026-08-17 CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability Geoserver 2025-11-25 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2025-12-11 CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability Fortinet 2025-11-14 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AVAttack Vector Network
ACAttack Complexity Low
PRPrivileges Required None
UIUser Interaction None
SScope Unchanged
CConfidentiality High
IIntegrity High
AAvailability High 2025-11-14 