Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	6 Aug 2026	6 Aug 2026	CPAI-2026-10004		CVE-2026-66066	Rails Arbitrary File Upload (CVE-2026-66066)
High	6 Aug 2026	6 Aug 2026	CPAI-2025-18224		CVE-2025-6197	Grafana Open Redirect (CVE-2025-6197)
Critical	6 Aug 2026	6 Aug 2026	CPAI-2026-9889		CVE-2026-46442	Flowise Remote Code Execution (CVE-2026-46442)
High	6 Aug 2026	6 Aug 2026	CPAI-2020-5296		CVE-2020-8654	EyesOfNetwork Command Injection (CVE-2020-8654)
High	1 Jan 2026	6 Aug 2026	CPAI-2025-11623		CVE-2025-52691	SmarterTools SmarterMail Arbitrary File Upload (CVE-2025-52691)
High	5 Aug 2026	5 Aug 2026	CPAI-2026-9972		CVE-2026-4354	TRENDnet TEW-824DRU Cross-Site Scripting (CVE-2026-4354)
High	4 Aug 2026	4 Aug 2026	CPAI-2026-9961		CVE-2026-60004	Gitea Remote Code Execution (CVE-2026-60004)
High	4 Aug 2026	4 Aug 2026	CPAI-2026-9963		CVE-2026-45087	Dalfox Remote Code Execution (CVE-2026-45087)
Medium	3 Aug 2026	3 Aug 2026	CPAI-2026-9836		CVE-2026-20146	Cisco Multiple Products Directory Traversal (CVE-2026-20146)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9718		CVE-2026-55638	Decolua 9Router Authentication Bypass (CVE-2026-55638)
Critical	3 Aug 2026	3 Aug 2026	CPAI-2026-9717		CVE-2026-8711	F5 NGINX JavaScript Heap Overflow (CVE-2026-8711)
Critical	3 Aug 2026	3 Aug 2026	CPAI-2026-9716		CVE-2026-42508	Golang Go Crypto Security Bypass (CVE-2026-42508)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9715		CVE-2026-54068	SiYuan Information Disclosure (CVE-2026-54068)
Critical	3 Aug 2026	3 Aug 2026	CPAI-2026-9714		CVE-2026-54069	SiYuan Authentication Bypass (CVE-2026-54069)
High	3 Aug 2026	3 Aug 2026	CPAI-2024-8332		CVE-2024-7035	OpenWebUI Cross-Site Request Forgery (CVE-2024-7035)
High	3 Aug 2026	3 Aug 2026	CPAI-2020-5292		CVE-2020-13671	Drupal Core Unrestricted File Upload (CVE-2020-13671)
Medium	3 Aug 2026	3 Aug 2026	CPAI-2026-9612		CVE-2026-59208	n8n Authentication Bypass (CVE-2026-59208)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9610		CVE-2026-61450	Grav Information Disclosure (CVE-2026-61450)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9609		CVE-2026-24208	NVIDIA Triton Inference Server Directory Traversal (CVE-2026-24208)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9606		CVE-2026-27825	MCP Atlassian Arbitrary File Write (CVE-2026-27825)
High	3 Aug 2026	3 Aug 2026	CPAI-2026-9597		CVE-2026-61447	PraisonAI Remote Code Execution (CVE-2026-61447)
High	29 Jul 2026	3 Aug 2026	CPAI-2026-9952		CVE-2026-61511	vBulletin Remote Code Execution (CVE-2026-61511)
Critical	14 Jun 2026	3 Aug 2026	CPAI-2026-7737		CVE-2026-20253	Splunk Enterprise Arbitrary File Write (CVE-2026-20253)
Medium	2 Aug 2026	2 Aug 2026	CPAI-2026-9752		CVE-2026-42897	Microsoft Exchange Server Cross-Site Scripting (CVE-2026-42897)
Critical	2 Aug 2026	2 Aug 2026	CPAI-2025-18139		CVE-2025-54453	Samsung MagicINFO 9 Server Directory Traversal (CVE-2025-54453)
High	2 Aug 2026	2 Aug 2026	CPAI-2025-18135		CVE-2025-25254	Fortinet FortiWeb Directory Traversal (CVE-2025-25254)
High	2 Aug 2026	2 Aug 2026	CPAI-2026-9634		CVE-2026-20181	Cisco Multiple Products Command Injection (CVE-2026-20181)
Critical	29 Jul 2026	2 Aug 2026	CPAI-2026-9895		CVE-2026-16232	Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
High	12 Mar 2026	2 Aug 2026	CPAI-2026-9858		CVE-2026-22812	Anoma OpenCode Command Injection (CVE-2026-22812)
High	30 Jul 2026	30 Jul 2026	CPAI-2026-9853		CVE-2026-34938	PraisonAI Remote Code Execution (CVE-2026-34938)
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9769			Server Authentication Bypass
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9819		CVE-2026-16232	Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9783		CVE-2026-61511	vBulletin Remote Code Execution (CVE-2026-61511)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9789		CVE-2026-26046	Moodle Command Injection (CVE-2026-26046)
High	29 Jul 2026	29 Jul 2026	CPAI-2025-18171		CVE-2025-23209	Craft CMS Command Injection (CVE-2025-23209)
High	29 Jul 2026	29 Jul 2026	CPAI-2025-18168		CVE-2025-68686	Fortinet FortiOS Information Disclosure (CVE-2025-68686)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9780		CVE-2026-59734	Coolify Command Injection (CVE-2026-59734)
High	29 Jul 2026	29 Jul 2026	CPAI-2026-9777		CVE-2026-53595	FreeScout Authentication Bypass (CVE-2026-53595)
Critical	29 Jul 2026	29 Jul 2026	CPAI-2026-9785		CVE-2026-12569	PTC Multiple Products Remote Code Execution (CVE-2026-12569)
Critical	14 Jul 2026	29 Jul 2026	CPAI-2026-9788	Microsoft CVE-2026-50522	CVE-2026-50522	Microsoft SharePoint Remote Code Execution (CVE-2026-50522)
High	4 May 2026	29 Jul 2026	CPAI-2025-18154		CVE-2025-0434	Google Chrome Heap Corruption (CVE-2025-0434)
Critical	26 May 2026	28 Jul 2026	CPAI-2026-9707			Windows System Files Information Disclosure Over HTTP
High	27 Jul 2026	27 Jul 2026	CPAI-2026-9660		CVE-2026-33112	Microsoft SharePoint Server Insecure Deserialization (CVE-2026-33112)
Critical	27 Jul 2026	27 Jul 2026	CPAI-2026-9650			MCP Tools Command Injection
Critical	26 Jul 2026	26 Jul 2026	CPAI-2026-9631		CVE-2026-16723	Alibaba Fastjson Remote Code Execution (CVE-2026-16723)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9603		CVE-2026-62327	9Router Information Disclosure (CVE-2026-62327)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9599		CVE-2026-62241	Clawvet Authentication Bypass (CVE-2026-62241)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9605		CVE-2026-8383	WordPress LearnPress Plugin Information Disclosure (CVE-2026-8383)
Critical	26 Jul 2026	26 Jul 2026	CPAI-2026-9588		CVE-2026-57830	Joomla Helix Ultimate Plugin Arbitrary File Deletion (CVE-2026-57830)
High	26 Jul 2026	26 Jul 2026	CPAI-2026-9448		CVE-2026-9181	Esri ArcGIS Server Directory Traversal (CVE-2026-9181)