Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12043		CVE-2026-45368	Kirby Cross-Site Scripting (CVE-2026-45368)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12041		CVE-2026-15076	Eclipse Vert.x Information Disclosure (CVE-2026-15076)
Medium	27 Sep 2026	27 Sep 2026	CPAI-2026-12039		CVE-2026-47732	Twig Security Bypass (CVE-2026-47732)
Medium	27 Sep 2026	27 Sep 2026	CPAI-2026-12037		CVE-2026-9754	MongoDB Information Disclosure (CVE-2026-9754)
Medium	27 Sep 2026	27 Sep 2026	CPAI-2026-12034		CVE-2026-46639	Twig Information Disclosure (CVE-2026-46639)
Critical	27 Sep 2026	27 Sep 2026	CPAI-2026-12033		CVE-2026-59864	Microsoft Kiota Directory Traversal (CVE-2026-59864)
Critical	27 Sep 2026	27 Sep 2026	CPAI-2026-12032		CVE-2026-44180	Jupyter Enterprise Gateway Privilege Escalation (CVE-2026-44180)
Critical	27 Sep 2026	27 Sep 2026	CPAI-2026-12030		CVE-2026-48807	Twig Information Disclosure (CVE-2026-48807)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12031		CVE-2026-59861	Microsoft Kiota Code Injection (CVE-2026-59861)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12028		CVE-2026-59862	Microsoft Kiota Code Injection (CVE-2026-59862)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12027		CVE-2026-59255	SpecterOps BloodHound Privilege Escalation (CVE-2026-59255)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12024		CVE-2026-50289	Systeminformation Command Injection (CVE-2026-50289)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12023		CVE-2026-14871	osTicket Information Disclosure (CVE-2026-14871)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12013		CVE-2026-28699	Gitea Open Source Git Server Authentication Bypass (CVE-2026-28699)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-11978		CVE-2026-84387	FortiSandbox Command Injection (CVE-2026-84387)
Medium	27 Sep 2026	27 Sep 2026	CPAI-2025-18597		CVE-2025-68163	JetBrains TeamCity Cross-Site Scripting (CVE-2025-68163)
High	27 Sep 2026	27 Sep 2026	CPAI-2025-18587		CVE-2025-3485	Allegra Directory Traversal (CVE-2025-3485)
Critical	27 Sep 2026	27 Sep 2026	CPAI-2026-11868		CVE-2026-6024	Tenda i6 Directory Traversal (CVE-2026-6024)
Critical	27 Sep 2026	27 Sep 2026	CPAI-2026-11866		CVE-2026-5841	Tenda i3 Directory Traversal (CVE-2026-5841)
High	27 Sep 2026	27 Sep 2026	CPAI-2025-18563		CVE-2025-26699	Django Denial of Service (CVE-2025-26699)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-11820		CVE-2026-8259	Tenda AC6 Command Injection (CVE-2026-8259)
High	27 Sep 2026	27 Sep 2026	CPAI-2026-12564		CVE-2026-28825	Apple macOS Out of Bounds Write (CVE-2026-28825)
High	24 Sep 2026	27 Sep 2026	CPAI-2026-12562		CVE-2026-94127	F5 BIG-IP Heap Overflow (CVE-2026-94127)
Critical	14 Jul 2026	27 Sep 2026	CPAI-2026-10332	Microsoft CVE-2026-50522	CVE-2026-50522 CVE-2026-58644	Microsoft SharePoint Insecure Deserialization (CVE-2026-50522; CVE-2026-58644)
Critical	29 Jan 2026	27 Sep 2026	CPAI-2025-11919		CVE-2025-40551	SolarWinds Web Help Desk Insecure Deserialization (CVE-2025-40551)
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12463		CVE-2026-94127	F5 BIG-IP Heap Overflow (CVE-2026-94127)
Critical	24 Sep 2026	24 Sep 2026	CPAI-2026-12336		CVE-2026-65660	Microsoft SharePoint Remote Code Execution (CVE-2026-65660)
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12416		CVE-2026-58138	Orkes Conductor Remote Code Execution (CVE-2026-58138)
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12418			WordPress Cross-Site Request Forgery
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12459		CVE-2026-54569	SENAITE.CORE Remote Code Execution (CVE-2026-54569)
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12457		CVE-2026-79756	Nuclio Command Injection (CVE-2026-79756)
High	24 Sep 2026	24 Sep 2026	CPAI-2026-12450		CVE-2026-12944	Langflow OSS Server-Side Request Forgery (CVE-2026-12944)
Critical	19 Jul 2026	24 Sep 2026	CPAI-2026-12363		CVE-2026-63030	WordPress Authentication Bypass (CVE-2026-63030)
Critical	22 Sep 2026	22 Sep 2026	CPAI-2025-18560		CVE-2025-1128	Everest Forms Plugin Arbitrary File Upload (CVE-2025-1128)
High	22 Sep 2026	22 Sep 2026	CPAI-2026-11794		CVE-2026-82690	D-Link Multiple Products Command Injection (CVE-2026-82690)
High	22 Sep 2026	22 Sep 2026	CPAI-2026-12072		CVE-2026-34159	LLaMA.cpp Remote Code Execution (CVE-2026-34159)
High	22 Sep 2026	22 Sep 2026	CPAI-2026-12122		CVE-2026-84372	Predis Command Injection (CVE-2026-84372)
Critical	22 Sep 2026	22 Sep 2026	CPAI-2026-11504		CVE-2026-89010	WN535M1 Command Injection (CVE-2026-89010)
High	22 Sep 2026	22 Sep 2026	CPAI-2025-18440		CVE-2025-40755	Siemens SINEC NMS SQL Injection (CVE-2025-40755)
High	17 Sep 2026	17 Sep 2026	CPAI-2026-11775		CVE-2026-73698	FileRun SQL Injection (CVE-2026-73698)
High	17 Sep 2026	17 Sep 2026	CPAI-2026-11767		CVE-2026-73693 CVE-2026-73694	FileRun Command Injection (CVE-2026-73693; CVE-2026-73694)
High	17 Sep 2026	17 Sep 2026	CPAI-2026-11804		CVE-2026-25750	LangChain LangSmith Studio Authentication Bypass (CVE-2026-25750)
High	29 Jan 2026	17 Sep 2026	CPAI-2025-18550		CVE-2025-15467	OpenSSL Stack Overflow (CVE-2025-15467)
High	15 Sep 2026	15 Sep 2026	CPAI-2026-11588		CVE-2026-87491	Google Chrome Out of Bounds Write (CVE-2026-87491)
High	15 Sep 2026	15 Sep 2026	CPAI-2026-11640		CVE-2026-54914	WebAssembly Micro Runtime Heap Buffer Overflow (CVE-2026-54914)
Critical	14 Sep 2026	15 Sep 2026	CPAI-2026-11636		CVE-2026-85706	GitLab Arbitrary File Read (CVE-2026-85706)
High	31 Mar 2026	15 Sep 2026	CPAI-2025-18503		CVE-2025-10925	GIMP Buffer Overflow (CVE-2025-10925)
Critical	14 Sep 2026	14 Sep 2026	CPAI-2026-11569		CVE-2026-85706	GitLab Arbitrary File Read (CVE-2026-85706)
High	14 Sep 2026	14 Sep 2026	CPAI-2026-11587		CVE-2026-42016 CVE-2026-42018	JFrog Artifactory Authentication Bypass (CVE-2026-42016; CVE-2026-42018)
High	6 Sep 2026	14 Sep 2026	CPAI-2026-11572		CVE-2026-75604	Vercel Next.js Directory Traversal (CVE-2026-75604)