|
High
|
14 Jul 2026 |
7 Sep 2026 |
CPAI-2026-11190
|
Microsoft CVE-2026-50343
|
CVE-2026-50343
|
Microsoft Install Service Elevation of Privilege (CVE-2026-50343)
|
|
High
|
9 Jun 2026 |
7 Sep 2026 |
CPAI-2026-11194
|
Microsoft CVE-2026-42986
|
CVE-2026-42986
|
Microsoft Graphics Component Elevation of Privilege (CVE-2026-42986)
|
|
High
|
14 May 2026 |
7 Sep 2026 |
CPAI-2026-4191
|
|
CVE-2026-35029
|
LiteLLM Remote Code Execution (CVE-2026-35029)
|
|
High
|
22 Mar 2026 |
7 Sep 2026 |
CPAI-2026-11212
|
|
CVE-2026-2043
|
Nagios XI Command Injection (CVE-2026-2043)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-11122
|
|
CVE-2026-75604
|
Vercel Next.js Directory Traversal (CVE-2026-75604)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-11128
|
|
CVE-2026-58400 CVE-2026-63219
|
GeoNetwork Remote Code Execution (CVE-2026-58400; CVE-2026-63219)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-11126
|
|
CVE-2026-82286
|
gpt-crawler Arbitrary File Write (CVE-2026-82286)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-11131
|
|
CVE-2026-19286
|
Langflow OSS Remote Code Execution (CVE-2026-19286)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-10947
|
|
CVE-2026-63514
|
Microsoft SharePoint Server Insecure Deserialization (CVE-2026-63514)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-10943
|
|
CVE-2026-41679
|
Paperclip Remote Code Execution (CVE-2026-41679)
|
|
High
|
6 Sep 2026 |
6 Sep 2026 |
CPAI-2026-10942
|
|
CVE-2026-24135
|
Gogs Directory Traversal (CVE-2026-24135)
|
|
High
|
3 Sep 2026 |
6 Sep 2026 |
CPAI-2026-11124
|
|
CVE-2026-49869
|
Kestra Remote Code Execution (CVE-2026-49869)
|
|
Critical
|
31 Aug 2026 |
6 Sep 2026 |
CPAI-2026-10844
|
|
CVE-2026-81578 CVE-2026-82078
|
PaperCut Remote Code Execution (CVE-2026-81578; CVE-2026-82078)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11108
|
|
CVE-2026-49869
|
Kestra Remote Code Execution (CVE-2026-49869)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11100
|
|
CVE-2026-76581
|
WordPress WPMU DEV Dashboard Plugin Authentication Bypass (CVE-2026-76581)
|
|
Critical
|
2 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11109
|
|
CVE-2026-82329
|
JFrog Artifactory Authentication Bypass (CVE-2026-82329)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2023-5279
|
|
CVE-2023-54391
|
Proxmox Virtual Environment Authentication Bypass (CVE-2023-54391)
|
|
Critical
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10799
|
|
CVE-2026-8979
|
Mennekes Amtron Authentication Bypass (CVE-2026-8979)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10798
|
|
CVE-2026-8980
|
Mennekes Amtron Privilege Escalation (CVE-2026-8980)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-10785
|
|
CVE-2026-8273
|
D-Link DNS-320 Command Injection (CVE-2026-8273)
|
|
High
|
3 Sep 2026 |
3 Sep 2026 |
CPAI-2026-11086
|
|
CVE-2026-48710
|
Starlette Authentication Bypass (CVE-2026-48710)
|
|
Critical
|
2 Sep 2026 |
2 Sep 2026 |
CPAI-2026-11046
|
|
CVE-2026-82329
|
JFrog Artifactory Authentication Bypass (CVE-2026-82329)
|
|
Critical
|
31 Aug 2026 |
2 Sep 2026 |
CPAI-2026-11025
|
|
|
Apache Log4j Insecure Deserialization
|
|
Critical
|
31 Aug 2026 |
1 Sep 2026 |
CPAI-2026-10909
|
|
|
Apache Log4j Insecure Deserialization
|
|
High
|
1 Sep 2026 |
1 Sep 2026 |
CPAI-2026-10908
|
|
CVE-2026-20316
|
Cisco Secure Firewall Management Center Software Authentication Bypass (CVE-2026-20316)
|
|
Critical
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10851
|
|
|
Apache Log4j Insecure Deserialization
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10846
|
|
CVE-2026-56705
|
Adminer Remote Code Execution (CVE-2026-56705)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10691
|
|
CVE-2026-10649
|
Red Hat Pacemaker Integer Overflow (CVE-2026-10649)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10673
|
|
CVE-2026-44705
|
tmp Directory Traversal (CVE-2026-44705)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2026-10671
|
|
CVE-2026-44495
|
Axios Remote Code Execution (CVE-2026-44495)
|
|
High
|
31 Aug 2026 |
31 Aug 2026 |
CPAI-2024-8467
|
|
CVE-2024-32114
|
Apache ActiveMQ Authentication Bypass (CVE-2024-32114)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10811
|
|
CVE-2026-19912 CVE-2026-19913
|
Kaltura HTML5 Video Player Remote Code Execution (CVE-2026-19912; CVE-2026-19913)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2019-3831
|
|
CVE-2019-1068
|
Microsoft SQL Server Remote Code Execution (CVE-2019-1068)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10809
|
|
CVE-2026-77647 CVE-2026-77806
|
SPIP Code Injection (CVE-2026-77647; CVE-2026-77806)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10805
|
|
CVE-2026-62911
|
Microsoft Exchange Server Authentication Bypass (CVE-2026-62911)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10575
|
|
CVE-2026-24301
|
Microsoft Copilot Web Command Injection (CVE-2026-24301)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10570
|
|
CVE-2026-46586
|
Apache OFBiz Code Injection (CVE-2026-46586)
|
|
Critical
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2025-18349
|
|
CVE-2025-54442
|
MagicINFO 9 Server Code Injection (CVE-2025-54442)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10563
|
|
CVE-2026-42167
|
ProFTPD Remote Code Execution (CVE-2026-42167)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10527
|
|
CVE-2026-9748
|
MongoDB Server Denial of Service (CVE-2026-9748)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10525
|
|
CVE-2026-7186
|
Checkmk Cross-Site Scripting (CVE-2026-7186)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10519
|
|
CVE-2026-9746
|
MongoDB Server Denial of Service (CVE-2026-9746)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10505
|
|
CVE-2026-9742
|
MongoDB Server Denial of Service (CVE-2026-9742)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10497
|
|
CVE-2026-41850
|
Spring Framework Denial of Service (CVE-2026-41850)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10495
|
|
CVE-2026-41848
|
Spring Framework Denial of Service (CVE-2026-41848)
|
|
Medium
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10493
|
|
CVE-2026-8833
|
Checkmk Cross-Site Scripting (CVE-2026-8833)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10479
|
|
CVE-2026-42880
|
Argo CD Information Disclosure (CVE-2026-42880)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10477
|
|
CVE-2026-56270
|
Flowise Information Disclosure (CVE-2026-56270)
|
|
Critical
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10476
|
|
CVE-2026-53576
|
Kestra Remote Code Execution (CVE-2026-53576)
|
|
High
|
30 Aug 2026 |
30 Aug 2026 |
CPAI-2026-10389
|
|
CVE-2026-41448
|
AdGuardHome Authentication Bypass (CVE-2026-41448)
|