Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	8 Oct 2026	8 Oct 2026	CPAI-2026-14175		CVE-2026-89026	Issabel Framework Remote Code Execution (CVE-2026-89026)
High	8 Oct 2026	8 Oct 2026	CPAI-2026-13967		CVE-2026-44631	Apache HTTP Server Buffer Underflow (CVE-2026-44631)
Critical	8 Oct 2026	8 Oct 2026	CPAI-2026-14174		CVE-2026-40281 CVE-2026-42589	Gotenberg Command Injection (CVE-2026-40281; CVE-2026-42589)
High	8 Oct 2026	8 Oct 2026	CPAI-2026-13706		CVE-2026-76570	Joomla JCTables Plugin SQL Injection (CVE-2026-76570)
High	8 Oct 2026	8 Oct 2026	CPAI-2026-13380		CVE-2026-93616	Check Point Quantum Security Management Arbitrary File Upload (CVE-2026-93616)
High	8 Oct 2026	8 Oct 2026	CPAI-2026-13320		CVE-2026-49179	Microsoft Windows Active Directory Command Injection (CVE-2026-49179)
Critical	7 Oct 2026	7 Oct 2026	CPAI-2026-13980		CVE-2026-21589	Atlassian Multiple Products Arbitrary File Read (CVE-2026-21589)
High	7 Oct 2026	7 Oct 2026	CPAI-2026-13864		CVE-2026-61500	Rejetto HFS Remote Code Execution (CVE-2026-61500)
High	7 Oct 2026	7 Oct 2026	CPAI-2026-13857	Microsoft CVE-2026-96940	CVE-2026-96940	Microsoft Exchange Server Privilege Escalation (CVE-2026-96940)
High	18 Jan 2026	7 Oct 2026	CPAI-2025-10761		CVE-2025-61812	Adobe ColdFusion Code Injection (CVE-2025-61812)
Critical	6 Oct 2026	6 Oct 2026	CPAI-2026-13853		CVE-2026-88773	Citrix NetScaler Multiple Products HTTP Request Smuggling (CVE-2026-88773)
High	6 Oct 2026	6 Oct 2026	CPAI-2026-13619		CVE-2026-48842	Roundcube Webmail SQL Injection (CVE-2026-48842)
Critical	28 Sep 2026	6 Oct 2026	CPAI-2026-13067		CVE-2026-88771	Citrix NetScaler Multiple Products Command Injection (CVE-2026-88771)
Critical	2 Sep 2026	5 Oct 2026	CPAI-2026-11043		CVE-2026-9586	Sangoma Switchvox SQL Injection (CVE-2026-9586)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13147		CVE-2026-56150	Elastic Fleet Server Denial of Service (CVE-2026-56150)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13134		CVE-2026-59936	pypdf Denial of Service (CVE-2026-59936)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13135		CVE-2026-46588	Apache Camel Information Disclosure (CVE-2026-46588)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13132		CVE-2026-59093	Weaviate Privilege Escalation (CVE-2026-59093)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13131		CVE-2026-22547	Gitea Open Source Git Server Information Disclosure (CVE-2026-22547)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13129		CVE-2026-8147	LFProjects MLflow Authentication Bypass (CVE-2026-8147)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13128		CVE-2026-13341	KongHQ MCP-Konnect Command Injection (CVE-2026-13341)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13404		CVE-2026-82384	Apache Roller Insecure Deserialization (CVE-2026-82384)
High	4 Oct 2026	4 Oct 2026	CPAI-2025-18895		CVE-2025-2761	GIMP Out Of Bounds Write (CVE-2025-2761)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-13040		CVE-2026-20242	Cisco Secure Firewall Management Center Insecure Deserialization (CVE-2026-20242)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-12847		CVE-2026-4555 CVE-2026-6014	D-Link DIR-513 Stack Overflow (CVE-2026-4555; CVE-2026-6014)
Critical	4 Oct 2026	4 Oct 2026	CPAI-2026-13070		CVE-2026-4211 CVE-2026-4212 CVE-2026-4213 CVE-2026-4214 CVE-2026-5211 CVE-2026-5212 CVE-2026-5213 CVE-2026-5214	D-Link Multiple Products Stack Overflow (CVE-2026-4211; CVE-2026-4212; CVE-2026-4213; CVE-2026-4214; CVE-2026-5211; CVE-2026-5212; CVE-2026-5213; CVE-2026-5214)
High	4 Oct 2026	4 Oct 2026	CPAI-2026-12785		CVE-2026-4529	D-Link DHP-1320 Buffer Overflow CVE-2026-4529
High	30 Sep 2026	4 Oct 2026	CPAI-2026-13383		CVE-2026-94545	Next.js Remote Code Execution (CVE-2026-94545)
High	23 Jul 2026	4 Oct 2026	CPAI-2026-9229		CVE-2026-2045	GIMP Out Of Bounds Write (CVE-2026-2045)
Critical	1 Oct 2026	1 Oct 2026	CPAI-2026-13370		CVE-2026-76504	Cisco Catalyst SD-WAN Manager Authentication Bypass (CVE-2026-76504)
High	1 Oct 2026	1 Oct 2026	CPAI-2025-18880		CVE-2025-3887	GStreamer Buffer Overflow (CVE-2025-3887)
High	1 Oct 2026	1 Oct 2026	CPAI-2026-13356		CVE-2026-54420	LiteSpeed Multiple Products Information Disclosure (CVE-2026-54420)
Critical	1 Oct 2026	1 Oct 2026	CPAI-2026-13354		CVE-2026-86218	N-able N-central Remote Code Execution (CVE-2026-86218)
Critical	1 Oct 2026	1 Oct 2026	CPAI-2026-12208		CVE-2026-4196	D-Link Multiple Products Command Injection (CVE-2026-4196)
High	1 Oct 2026	1 Oct 2026	CPAI-2026-13358		CVE-2026-28292	steveukx simple-git Remote Code Execution (CVE-2026-28292)
Critical	30 Sep 2026	1 Oct 2026	CPAI-2026-13346		CVE-2026-88772	Citrix NetScaler Multiple Products Buffer Overflow (CVE-2026-88772)
Critical	20 May 2026	1 Oct 2026	CPAI-2026-5100		CVE-2026-2743 CVE-2026-44128	SEPPMail Secure Email Gateway Remote Code Execution (CVE-2026-2743; CVE-2026-44128)
Critical	30 Sep 2026	30 Sep 2026	CPAI-2026-13231		CVE-2026-88772	Citrix NetScaler Multiple Products Buffer Overflow (CVE-2026-88772)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-13209		CVE-2026-94545	Next.js Remote Code Execution (CVE-2026-94545)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-13075		CVE-2026-20213	ClamAV Out of Bounds Write (CVE-2026-20213)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-13072		CVE-2026-4555 CVE-2026-6012 CVE-2026-6014	D-Link DIR-513 Buffer Overflow (CVE-2026-6012; CVE-2026-4555; CVE-2026-6014)
Critical	30 Sep 2026	30 Sep 2026	CPAI-2026-12831		CVE-2026-4194	D-Link Multiple Products Authentication Bypass (CVE-2026-4194)
Critical	30 Sep 2026	30 Sep 2026	CPAI-2025-18805		CVE-2025-70218 CVE-2025-70221 CVE-2025-70222 CVE-2025-70223 CVE-2025-70225 CVE-2025-70229 CVE-2025-70230 CVE-2025-70232 CVE-2025-70234 CVE-2025-70236 CVE-2025-70237 CVE-2025-70239 CVE-2025-70240 CVE-2025-70243	D-Link DIR-513 Stack Overflow (CVE-2025-70237; CVE-2025-70218; CVE-2025-70221; CVE-2025-70222; CVE-2025-70223; CVE-2025-70225; CVE-2025-70229; CVE-2025-70230; CVE-2025-70232; CVE-2025-70234; CVE-2025-70236; CVE-2025-70239; CVE-2025-70240; CVE-2025-70243)
Critical	30 Sep 2026	30 Sep 2026	CPAI-2026-12787		CVE-2022-42998 CVE-2022-43000 CVE-2022-43001 CVE-2022-43002 CVE-2022-43003 CVE-2026-4181 CVE-2026-4182 CVE-2026-4183 CVE-2026-4184	D-Link DIR-816 Stack Overflow (CVE-2022-43002; CVE-2022-42998; CVE-2022-43000; CVE-2022-43001; CVE-2022-43003; CVE-2026-4181; CVE-2026-4182; CVE-2026-4183; CVE-2026-4184)
Critical	30 Sep 2026	30 Sep 2026	CPAI-2025-18804		CVE-2025-70231	D-Link DIR-513 Directory Traversal (CVE-2025-70231)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-12530		CVE-2026-87902	WordPress Remote Code Execution (CVE-2026-87902)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-12529		CVE-2026-17633	IBM Langflow OSS Code Injection (CVE-2026-17633)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-12517		CVE-2026-2085 CVE-2026-2168 CVE-2026-2169	D-Link DWR-M921 Command Injection (CVE-2026-2085; CVE-2026-2168; CVE-2026-2169)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-12513		CVE-2026-13545	D-Link DCS-935L Command Injection (CVE-2026-13545)
High	30 Sep 2026	30 Sep 2026	CPAI-2026-12488		CVE-2024-7357 CVE-2026-2163	D-Link DIR-600 Command Injection (CVE-2026-2163; CVE-2024-7357)