Home / 2026 Advisories Archive

2026 Advisories Archive

Sort By: 2025  2024  2023  2022  2021  2020  2019  2018  2017  2016  2015  2014  2013  2012  2011  2010  2009  2008  2007  2006  2005  2004  1999  1998  

Security Gateway R75 and above

Security Advisories Subscription



Severity Date Published Date Updated Check Point Reference Source Industry Reference Description
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17812 CVE-2026-106023
 Apache HTTP Server Denial of Service (CVE-2026-106023)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17809 CVE-2026-125350
 Google Chrome Use After Free (CVE-2026-125350)
Critical 21 Oct 2026 12 Nov 2026 CPAI-2026-17884 CVE-2026-109618
CVE-2026-109619
CVE-2026-115560
 PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619; CVE-2026-115560)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17761 Xen Orchestra Authentication Bypass
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19108 CVE-2025-41452
 Danfoss AK-SM 8xxA Series Denial of Service (CVE-2025-41452)
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19110 CVE-2025-41451
 Danfoss AK-SM 8xxA Series Command Injection (CVE-2025-41451)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17800 CVE-2026-13182
CVE-2026-13183
 Progress Telerik UI Information Disclosure (CVE-2026-13182; CVE-2026-13183)
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19116 CVE-2025-41450
 Danfoss AK-SM 8xxA Series Authentication Bypass (CVE-2025-41450)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17553 CVE-2026-13181
 Progress Telerik UI Remote Code Execution (CVE-2026-13181)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17552 CVE-2026-13184
 Progress Telerik UI Authentication Bypass (CVE-2026-13184)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17472 CVE-2026-75128
 Langchain-Chatchat Remote Code Execution (CVE-2026-75128)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17347 CVE-2026-51886
 langflow-ai langflow Code Injection (CVE-2026-51886)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17342 CVE-2026-105697
 Langflow Multiple Products Command Injection (CVE-2026-105697)
Medium 12 Nov 2026 12 Nov 2026 CPAI-2026-17333 CVE-2026-77272
 MCP Atlassian Cross-Site Scripting (CVE-2026-77272)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17332 CVE-2026-79748
 MCPHub Remote Code Execution (CVE-2026-79748)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17331 CVE-2026-12268
 ManageEngine DDI Central Command Injection (CVE-2026-12268)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17329 CVE-2026-44721
 Open WebUI Cross-Site Scripting (CVE-2026-44721)
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19078 CVE-2025-71324
 Flowise Arbitrary File Read (CVE-2025-71324)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17328 CVE-2026-45665
 Open WebUI Cross-Site Scripting (CVE-2026-45665)
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19077 CVE-2025-55232
 Microsoft High Performance Compute Pack Insecure Deserialization (CVE-2025-55232)
High 12 Nov 2026 12 Nov 2026 CPAI-2025-19076 CVE-2025-71327
 Flowise Authentication Bypass (CVE-2025-71327)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-17293 CVE-2026-18912
 ManageEngine DataSecurity Plus SQL Injection (CVE-2026-18912)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16687 CVE-2022-29006
CVE-2022-31382
CVE-2022-31383
CVE-2022-31384
CVE-2025-4697
CVE-2026-1160
 PHPGurukul Directory Management System SQL Injection (CVE-2022-29006; CVE-2022-31382; CVE-2022-31383; CVE-2022-31384; CVE-2025-4697; CVE-2026-1160)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16686 CVE-2026-0570
CVE-2026-0606
CVE-2026-0851
CVE-2026-0852
CVE-2026-1443
CVE-2026-1535
CVE-2026-2132
CVE-2026-2211
CVE-2026-2212
 Fabian Online Music Site SQL Injection (CVE-2026-0570; CVE-2026-0606; CVE-2026-0851; CVE-2026-0852; CVE-2026-1443; CVE-2026-1535; CVE-2026-2132; CVE-2026-2211; CVE-2026-2212)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16684 CVE-2026-1159
CVE-2026-4469
CVE-2026-4470
 Adones Evangelista Online Frozen Foods Ordering System SQL Injection (CVE-2026-1159; CVE-2026-4469; CVE-2026-4470)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16680 CVE-2025-32021
CVE-2026-21889
 Weblate Information Disclosure (CVE-2025-32021; CVE-2026-21889)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16679 CVE-2026-1688
CVE-2026-2161
 itsourcecode Directory Management System SQL Injection (CVE-2026-1688; CVE-2026-2161)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16677 CVE-2024-7190
CVE-2024-7191
CVE-2024-7195
CVE-2025-15353
CVE-2026-1593
CVE-2026-1595
CVE-2026-2115
CVE-2026-2116
CVE-2026-2117
CVE-2026-3410
 Angel Jude Suarez Society Management System SQL Injection (CVE-2024-7190; CVE-2024-7191; CVE-2024-7195; CVE-2025-15353; CVE-2026-1593; CVE-2026-1595; CVE-2026-2115; CVE-2026-2116; CVE-2026-2117; CVE-2026-3410)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16675 CVE-2018-12493
CVE-2018-12494
CVE-2026-1111
 Sanluan PublicCMS Directory Traversal (CVE-2018-12493; CVE-2018-12494; CVE-2026-1111)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16674 CVE-2025-12916
CVE-2026-1412
CVE-2026-1414
 Sangfor Operation and Maintenance Security Management System Command Injection (CVE-2025-12916; CVE-2026-1412; CVE-2026-1414)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16673 CVE-2026-1545
CVE-2026-1590
 Angel Jude Suarez School Management System SQL Injection (CVE-2026-1545; CVE-2026-1590)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16672 CVE-2025-15501
CVE-2025-15502
CVE-2026-1324
 Sangfor Operation and Maintenance Management System Command Injection (CVE-2025-15501; CVE-2025-15502; CVE-2026-1324)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16671 CVE-2026-22687
CVE-2026-30860
 Tencent WeKnora Remote Code Execution (CVE-2026-22687; CVE-2026-30860)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16670 CVE-2025-15420
CVE-2025-15424
CVE-2025-15425
CVE-2026-1179
 Yonyou KSOA SQL Injection (CVE-2025-15420; CVE-2025-15424; CVE-2025-15425; CVE-2026-1179)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16667 CVE-2026-1176
CVE-2026-1701
CVE-2026-2012
CVE-2026-2018
CVE-2026-2073
CVE-2026-2190
 Itsourcecode School Management System SQL Injection (CVE-2026-1176; CVE-2026-1701; CVE-2026-2012; CVE-2026-2018; CVE-2026-2073; CVE-2026-2190)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16663 CVE-2024-41550
CVE-2024-41551
CVE-2024-8344
CVE-2025-13554
CVE-2025-14515
CVE-2025-14664
CVE-2025-14952
CVE-2025-15206
CVE-2026-0597
 CampCodes Supplier Management System SQL Injection (CVE-2024-41550; CVE-2024-41551; CVE-2024-8344; CVE-2025-13554; CVE-2025-14515; CVE-2025-14664; CVE-2025-14952; CVE-2025-15206; CVE-2026-0597)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16661 CVE-2026-0750
 Verifone Commerce Paybox Authentication Bypass (CVE-2026-0750)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16660 CVE-2024-5066
CVE-2026-0803
 PHPGurukul Online Course Registration System SQL Injection (CVE-2024-5066; CVE-2026-0803)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16658 CVE-2026-0963
CVE-2026-13716
 Crafty Controller Directory Traversal (CVE-2026-0963; CVE-2026-13716)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16656 CVE-2025-8339
CVE-2026-0850
 Carmelo Intern Membership Management System SQL Injection (CVE-2025-8339; CVE-2026-0850)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16655 CVE-2026-1059
 FeMiner Warehouse management system SQL Injection (CVE-2026-1059)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16652 CVE-2026-0566
 Code-Projects Content Management System Unrestricted File Upload (CVE-2026-0566)
Critical 12 Nov 2026 12 Nov 2026 CPAI-2026-16651 CVE-2026-0577
 Fabian Online Product Reservation System Unrestricted File Upload (CVE-2026-0577)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16650 CVE-2026-0641
CVE-2026-2167
 Totolink WA300 Command Injection (CVE-2026-0641; CVE-2026-2167)
High 12 Nov 2026 12 Nov 2026 CPAI-2026-16577 CVE-2026-113666
 ApostropheCMS Denial of Service (CVE-2026-113666)
Critical 21 Oct 2026 10 Nov 2026 CPAI-2026-17625 CVE-2026-109618
CVE-2026-109619
CVE-2026-115560
 PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619; CVE-2026-115560)
High 10 Nov 2026 10 Nov 2026 CPAI-2026-17659 CVE-2026-116779
 SignalWire FreeSWITCH Command Injection (CVE-2026-116779)
High 10 Nov 2026 10 Nov 2026 CPAI-2026-17661 CVE-2026-102895
 GPUStack Authentication Bypass (CVE-2026-102895)
High 10 Nov 2026 10 Nov 2026 CPAI-2026-17616 Microsoft CVE-2026-112798 CVE-2026-112798
 Microsoft Windows NetBIOS Elevation of Privilege (CVE-2026-112798)
High 10 Nov 2026 10 Nov 2026 CPAI-2026-17600 Microsoft CVE-2026-95935 CVE-2026-95935
 Microsoft Windows Graphics Kernel Elevation of Privilege (CVE-2026-95935)
×
  Feedback