Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9769			Server Authentication Bypass
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9819		CVE-2026-16232	Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9789		CVE-2026-26046	Moodle Command Injection (CVE-2026-26046)
High	29 Jul 2026	29 Jul 2026	CPAI-2025-18171		CVE-2025-23209	Craft CMS Command Injection (CVE-2025-23209)
High	29 Jul 2026	29 Jul 2026	CPAI-2025-18168		CVE-2025-68686	Fortinet FortiOS Information Disclosure (CVE-2025-68686)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9783		CVE-2026-61511	vBulletin Remote Code Execution (CVE-2026-61511)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9780		CVE-2026-59734	Coolify Command Injection (CVE-2026-59734)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9777		CVE-2026-53595	FreeScout Authentication Bypass (CVE-2026-53595)
Critical	14 Jul 2026	29 Jul 2026	CPAI-2026-9788	Microsoft CVE-2026-50522	CVE-2026-50522	Microsoft SharePoint Remote Code Execution (CVE-2026-50522)
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9785		CVE-2026-12569	PTC Multiple Products Remote Code Execution (CVE-2026-12569)
High	4 May 2026	29 Jul 2026	CPAI-2025-18154		CVE-2025-0434	Google Chrome Heap Corruption (CVE-2025-0434)
Critical	26 May 2026	28 Jul 2026	CPAI-2026-9707			Windows System Files Information Disclosure Over HTTP
High	27 Jul 2026	27 Jul 2026	CPAI-2026-9660		CVE-2026-33112	Microsoft SharePoint Server Insecure Deserialization (CVE-2026-33112)
Critical	27 Jul 2026	27 Jul 2026	CPAI-2026-9650			MCP Tools Command Injection
Critical	26 Jul 2026	26 Jul 2026	CPAI-2026-9631		CVE-2026-16723	Alibaba Fastjson Remote Code Execution (CVE-2026-16723)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9603		CVE-2026-62327	9Router Information Disclosure (CVE-2026-62327)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9599		CVE-2026-62241	Clawvet Authentication Bypass (CVE-2026-62241)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9605		CVE-2026-8383	WordPress LearnPress Plugin Information Disclosure (CVE-2026-8383)
Critical	26 Jul 2026	26 Jul 2026	CPAI-2026-9588		CVE-2026-57830	Joomla Helix Ultimate Plugin Arbitrary File Deletion (CVE-2026-57830)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9448		CVE-2026-9181	Esri ArcGIS Server Directory Traversal (CVE-2026-9181)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9302		CVE-2026-8111	Ivanti Endpoint Manager SQL Injection (CVE-2026-8111)
Critical	16 Jul 2026	26 Jul 2026	CPAI-2026-9185		CVE-2026-15409	SonicWall SMA1000 Series Server-Side Request Forgery (CVE-2026-15409)
High	23 Jul 2026	23 Jul 2026	CPAI-2022-4777		CVE-2022-34169	Apache Xalan-Java Integer Overflow (CVE-2022-34169)
High	23 Jul 2026	23 Jul 2026	CPAI-2026-9229		CVE-2026-2045	GIMP Out Of Bounds Write (CVE-2026-2045)
Critical	19 Jul 2026	23 Jul 2026	CPAI-2026-9540		CVE-2026-60137	WordPress SQL Injection (CVE-2026-60137)
Critical	16 Jul 2026	23 Jul 2026	CPAI-2026-9495		CVE-2026-6875	ServiceNow AI Platform Remote Code Execution (CVE-2026-6875)
High	24 May 2026	22 Jul 2026	CPAI-2026-9491		CVE-2026-32255	Kan Server-Side Request Forgery (CVE-2026-32255)
High	24 May 2026	21 Jul 2026	CPAI-2026-9415		CVE-2026-32255	Kan Server-Side Request Forgery (CVE-2026-32255)
High	21 Jul 2026	21 Jul 2026	CPAI-2013-4188		CVE-2013-3307	Linksys Multiple Products Command Injection (CVE-2013-3307)
High	21 Jul 2026	21 Jul 2026	CPAI-2026-9376		CVE-2026-41266	Flowise Information Disclosure (CVE-2026-41266)
Critical	21 Jul 2026	21 Jul 2026	CPAI-2024-8257		CVE-2024-6779	Google Chrome Out of Bounds Read (CVE-2024-6779)
High	12 Apr 2026	21 Jul 2026	CPAI-2025-14717		CVE-2025-3833	Zohocorp ManageEngine ADSelfService Plus SQL Injection (CVE-2025-3833)
High	24 May 2026	20 Jul 2026	CPAI-2026-9342		CVE-2026-32255	Kan Server-Side Request Forgery (CVE-2026-32255)
Critical	20 Jul 2026	20 Jul 2026	CPAI-2026-9289		CVE-2026-4228	LB-LINK BL-WR9000 Command Injection (CVE-2026-4228)
High	20 Jul 2026	20 Jul 2026	CPAI-2026-9285		CVE-2026-2182	UTT 521G Command Injection (CVE-2026-2182)
Critical	19 Jul 2026	19 Jul 2026	CPAI-2026-9265		CVE-2026-60137	WordPress SQL Injection (CVE-2026-60137)
Critical	19 Jul 2026	19 Jul 2026	CPAI-2026-9267		CVE-2026-63030	WordPress Authentication Bypass (CVE-2026-63030)
High	19 Jul 2026	19 Jul 2026	CPAI-2026-9044		CVE-2026-41277	Flowise Privilege Escalation (CVE-2026-41277)
High	19 Jul 2026	19 Jul 2026	CPAI-2025-17975		CVE-2025-61734	Apache Kylin Information Disclosure (CVE-2025-61734)
High	19 Jul 2026	19 Jul 2026	CPAI-2025-17971		CVE-2025-0453	LFProjects MLFlow Denial of Service (CVE-2025-0453)
High	19 Jul 2026	19 Jul 2026	CPAI-2026-8904		CVE-2026-3518	Progress Software Multiple Products Command Injection (CVE-2026-3518)
Critical	10 Jun 2026	19 Jul 2026	CPAI-2026-7220		CVE-2026-10520	Ivanti Sentry Remote Code Execution (CVE-2026-10520)
Critical	16 Jul 2026	16 Jul 2026	CPAI-2026-9183		CVE-2026-6875	ServiceNow AI Platform Remote Code Execution (CVE-2026-6875)
High	16 Jul 2026	16 Jul 2026	CPAI-2026-9187		CVE-2026-49049	Joomla Helix3 Plugin Directory Traversal (CVE-2026-49049)
Critical	16 Jul 2026	16 Jul 2026	CPAI-2026-9181		CVE-2026-15410	SonicWall SMA1000 Series Path Traversal (CVE-2026-15410)
High	16 Jul 2026	16 Jul 2026	CPAI-2026-9128	Microsoft CVE-2026-49800	CVE-2026-49800	Microsoft Windows Web Proxy Auto-Discovery Protocol Elevation of Privilege (CVE-2026-49800)
Medium	16 Jul 2026	16 Jul 2026	CPAI-2024-8253		CVE-2024-56131	Progress LoadMaster Command Injection (CVE-2024-56131)
High	16 Jul 2026	16 Jul 2026	CPAI-2026-8776		CVE-2026-26026	GLPI Remote Code Execution (CVE-2026-26026)
Critical	16 Jul 2026	16 Jul 2026	CPAI-2026-8774		CVE-2026-20896	Gitea Open Source Git Server Authentication Bypass (CVE-2026-20896)
Critical	5 Jul 2026	16 Jul 2026	CPAI-2026-8444		CVE-2026-48276 CVE-2026-48282 CVE-2026-48313	Adobe ColdFusion Remote Code Execution (CVE-2026-48276; CVE-2026-48282; CVE-2026-48313)