|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11108
|
|
CVE-2026-49869
|
Kestra Remote Code Execution (CVE-2026-49869)
|
|
Critical
|
2 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11109
|
|
CVE-2026-82329
|
JFrog Artifactory Authentication Bypass (CVE-2026-82329)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11100
|
|
CVE-2026-76581
|
WordPress WPMU DEV Dashboard Plugin Authentication Bypass (CVE-2026-76581)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2023-5279
|
|
CVE-2023-54391
|
Proxmox Virtual Environment Authentication Bypass (CVE-2023-54391)
|
|
Critical
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10799
|
|
CVE-2026-8979
|
Mennekes Amtron Authentication Bypass (CVE-2026-8979)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10798
|
|
CVE-2026-8980
|
Mennekes Amtron Privilege Escalation (CVE-2026-8980)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10785
|
|
CVE-2026-8273
|
D-Link DNS-320 Command Injection (CVE-2026-8273)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11086
|
|
CVE-2026-48710
|
Starlette Authentication Bypass (CVE-2026-48710)
|
|
Critical
|
2 Sep 2026 |
2 Sep 2026 |
CPAI-2026-11046
|
|
CVE-2026-82329
|
JFrog Artifactory Authentication Bypass (CVE-2026-82329)
|
|
Critical
|
2 Sep 2026 |
2 Sep 2026 |
CPAI-2026-11043
|
|
CVE-2026-9586
|
Sangoma Switchvox SQL Injection (CVE-2026-9586)
|
|
Critical
|
31 Aug 2026 |
2 Sep 2026 |
CPAI-2026-11025
|
|
|
Apache Log4j Insecure Deserialization
|
|
Critical
|
31 Aug 2026 |
1 Sep 2026 |
CPAI-2026-10909
|
|
|
Apache Log4j Insecure Deserialization
|
|
High
|
1 Sep 2026 |
1 Sep 2026 |
CPAI-2026-10908
|
|
CVE-2026-20316
|
Cisco Secure Firewall Management Center Software Authentication Bypass (CVE-2026-20316)
|
|
Critical
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10851
|
|
|
Apache Log4j Insecure Deserialization
|
|
Critical
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10844
|
|
CVE-2026-81578 CVE-2026-82078
|
PaperCut Remote Code Execution (CVE-2026-81578; CVE-2026-82078)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10846
|
|
CVE-2026-56705
|
Adminer Remote Code Execution (CVE-2026-56705)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10691
|
|
CVE-2026-10649
|
Red Hat Pacemaker Integer Overflow (CVE-2026-10649)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10673
|
|
CVE-2026-44705
|
tmp Directory Traversal (CVE-2026-44705)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10671
|
|
CVE-2026-44495
|
Axios Remote Code Execution (CVE-2026-44495)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2024-8467
|
|
CVE-2024-32114
|
Apache ActiveMQ Authentication Bypass (CVE-2024-32114)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10811
|
|
CVE-2026-19912 CVE-2026-19913
|
Kaltura HTML5 Video Player Remote Code Execution (CVE-2026-19912; CVE-2026-19913)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2019-3831
|
|
CVE-2019-1068
|
Microsoft SQL Server Remote Code Execution (CVE-2019-1068)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10809
|
|
CVE-2026-77647 CVE-2026-77806
|
SPIP Code Injection (CVE-2026-77647; CVE-2026-77806)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10805
|
|
CVE-2026-62911
|
Microsoft Exchange Server Authentication Bypass (CVE-2026-62911)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10575
|
|
CVE-2026-24301
|
Microsoft Copilot Web Command Injection (CVE-2026-24301)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10570
|
|
CVE-2026-46586
|
Apache OFBiz Code Injection (CVE-2026-46586)
|
|
Critical
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2025-18349
|
|
CVE-2025-54442
|
MagicINFO 9 Server Code Injection (CVE-2025-54442)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10563
|
|
CVE-2026-42167
|
ProFTPD Remote Code Execution (CVE-2026-42167)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10527
|
|
CVE-2026-9748
|
MongoDB Server Denial of Service (CVE-2026-9748)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10525
|
|
CVE-2026-7186
|
Checkmk Cross-Site Scripting (CVE-2026-7186)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10519
|
|
CVE-2026-9746
|
MongoDB Server Denial of Service (CVE-2026-9746)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10505
|
|
CVE-2026-9742
|
MongoDB Server Denial of Service (CVE-2026-9742)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10497
|
|
CVE-2026-41850
|
Spring Framework Denial of Service (CVE-2026-41850)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10495
|
|
CVE-2026-41848
|
Spring Framework Denial of Service (CVE-2026-41848)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10493
|
|
CVE-2026-8833
|
Checkmk Cross-Site Scripting (CVE-2026-8833)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10479
|
|
CVE-2026-42880
|
Argo CD Information Disclosure (CVE-2026-42880)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10477
|
|
CVE-2026-56270
|
Flowise Information Disclosure (CVE-2026-56270)
|
|
Critical
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10476
|
|
CVE-2026-53576
|
Kestra Remote Code Execution (CVE-2026-53576)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10389
|
|
CVE-2026-41448
|
AdGuardHome Authentication Bypass (CVE-2026-41448)
|
|
Critical
|
17 May 2026 |
30 Aug 2026 |
CPAI-2026-4512
|
|
CVE-2026-41176
|
Rclone Authentication Bypass (CVE-2026-41176)
|
|
Critical
|
5 Mar 2026 |
30 Aug 2026 |
CPAI-2026-1265
|
|
CVE-2026-21902
|
Juniper Networks Junos OS Evolved Remote Code Execution (CVE-2026-21902)
|
|
High
|
27 Aug 2026 |
27 Aug 2026 |
CPAI-2026-10395
|
|
CVE-2026-27960
|
Citeum OpenCTI Privilege Escalation (CVE-2026-27960)
|
|
High
|
27 Aug 2026 |
27 Aug 2026 |
CPAI-2025-18332
|
|
CVE-2025-54988
|
Apache Tika PDF Parser Module XML External Entity Injection (CVE-2025-54988)
|
|
High
|
27 Aug 2026 |
27 Aug 2026 |
CPAI-2025-18330
|
|
CVE-2025-14500
|
IceWarp Command Injection (CVE-2025-14500)
|
|
High
|
27 Aug 2026 |
27 Aug 2026 |
CPAI-2026-10622
|
|
|
WordPress Brute Force Login Attempt
|
|
Critical
|
26 Aug 2026 |
26 Aug 2026 |
CPAI-2026-10598
|
|
|
Oracle WebLogic Server Insecure Deserialization
|
|
High
|
26 Aug 2026 |
26 Aug 2026 |
CPAI-2026-10596
|
|
CVE-2026-63520
|
Microsoft SharePoint Server Remote Code Execution (CVE-2026-63520)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10460
|
|
CVE-2026-76904
|
GeoTools SQL Injection (CVE-2026-76904)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10451
|
|
CVE-2026-32475
|
WordPress Elementor Pro Plugin Arbitrary File Upload (CVE-2026-32475)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10354
|
|
CVE-2026-48092
|
7-Zip Information Disclosure (CVE-2026-48092)
|