Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	7 Jan 2026	7 Jan 2026	CPAI-2025-10477	CVE-2025-68615	Net-SNMP Buffer Overflow (CVE-2025-68615)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4721	CVE-2024-32324 CVE-2024-39181 CVE-2024-40535 CVE-2024-40536	Shenzhen Libituo Technology LBT-T300-T400 Buffer Overflow (CVE-2024-32324; CVE-2024-39181; CVE-2024-40535; CVE-2024-40536)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4717	CVE-2024-33792 CVE-2024-33793	Netis Systems MEX605 Command Injection (CVE-2024-33792; CVE-2024-33793)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4709	CVE-2024-50993 CVE-2024-50999 CVE-2024-51005 CVE-2024-51009 CVE-2024-51010 CVE-2024-52019 CVE-2024-52020 CVE-2024-52021 CVE-2024-52022	Netgear Multiple Products Command Injection (CVE-2024-50993; CVE-2024-50999; CVE-2024-51005; CVE-2024-51009; CVE-2024-51010; CVE-2024-52019; CVE-2024-52020; CVE-2024-52021; CVE-2024-52022)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4743	CVE-2024-32394	Ruijie RG-RSR10-01G-T Command Injection (CVE-2024-32394)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4706	CVE-2024-48288	TP-Link TL-IPC42C Command Injection (CVE-2024-48288)
High	6 Jan 2026	6 Jan 2026	CPAI-2024-4746	CVE-2024-47407	mySCADA myPRO Command Injection (CVE-2024-47407)
Critical	5 Jan 2026	5 Jan 2026	CPAI-2025-10325	CVE-2024-0542 CVE-2024-2980 CVE-2024-2981 CVE-2024-30587 CVE-2025-7529	Embedded Devices Web Servers Buffer Overflow (CVE-2024-0542; CVE-2024-2980; CVE-2024-2981; CVE-2024-30587; CVE-2025-7529)
High	5 Jan 2026	5 Jan 2026	CPAI-2024-4177	CVE-2024-9047	WordPress File Upload Plugin Directory Traversal (CVE-2024-9047)
High	5 Jan 2026	5 Jan 2026	CPAI-2025-9663	CVE-2025-41656	Node-RED Authentication Bypass (CVE-2025-41656)
Critical	5 Jan 2026	5 Jan 2026	CPAI-2025-9661	CVE-2025-13446	Tenda AC21 Stack Overflow (CVE-2025-13446)
Critical	5 Jan 2026	5 Jan 2026	CPAI-2022-3038	CVE-2022-25359	ICL ScadaFlex II SCADA Controller Arbitrary File Write (CVE-2022-25359)
Critical	5 Jan 2026	5 Jan 2026	CPAI-2025-9659	CVE-2025-13445	Tenda AC21 Stack Overflow (CVE-2025-13445)
High	1 Jan 2026	4 Jan 2026	CPAI-2025-10269	CVE-2025-52691	SmarterMail Arbitrary File Upload (CVE-2025-52691)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4585	CVE-2024-52739	D-Link DI-8400 Command Injection (CVE-2024-52739)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4569	CVE-2024-2909 CVE-2024-2910	Ruijie RG-EG350 Command Injection (CVE-2024-2909; CVE-2024-2910)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4581	CVE-2024-4115 CVE-2024-4116 CVE-2024-4117 CVE-2024-4118 CVE-2024-4119 CVE-2024-4120 CVE-2024-4121 CVE-2024-4122 CVE-2024-4123 CVE-2024-4124 CVE-2024-4125 CVE-2024-4126 CVE-2024-4127	Tenda W15E Buffer Overflow (CVE-2024-4115; CVE-2024-4116; CVE-2024-4117; CVE-2024-4118; CVE-2024-4119; CVE-2024-4120; CVE-2024-4121; CVE-2024-4122; CVE-2024-4123; CVE-2024-4124; CVE-2024-4125; CVE-2024-4126; CVE-2024-4127)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4566	CVE-2024-53939 CVE-2024-53940	Victure RX1800 Command Injection (CVE-2024-53939; CVE-2024-53940)
Critical	4 Jan 2026	4 Jan 2026	CPAI-2024-4533	CVE-2024-55547	ORing IAP-420 Remote Code Execution (CVE-2024-55547)
High	4 Jan 2026	4 Jan 2026	CPAI-2025-10241	CVE-2025-50398 CVE-2025-50401	Mercury D196G Buffer Overflow (CVE-2025-50398; CVE-2025-50401)
High	4 Jan 2026	4 Jan 2026	CPAI-2025-10166	CVE-2024-53334 CVE-2024-53335 CVE-2025-28021 CVE-2025-28024 CVE-2025-28030 CVE-2025-28135	TOTOLINK A810R Buffer Overflow (CVE-2024-53334; CVE-2024-53335; CVE-2025-28021; CVE-2025-28024; CVE-2025-28030; CVE-2025-28135)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4535	CVE-2024-55544	ORing IAP-420 Command Injection (CVE-2024-55544)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4530	CVE-2024-57376	D-Link DSR Buffer Overflow (CVE-2024-57376)
High	4 Jan 2026	4 Jan 2026	CPAI-2024-4527	CVE-2024-7217	TOTOLINK CA300-PoE Buffer Overflow (CVE-2024-7217)
High	1 Jan 2026	1 Jan 2026	CPAI-2025-9914	CVE-2025-52691	SmarterMail Arbitrary File Upload (CVE-2025-52691)
High	1 Jan 2026	1 Jan 2026	CPAI-2025-9911	CVE-2025-68645	Zimbra Collaboration Local File Inclusion (CVE-2025-68645)
High	1 Jan 2026	1 Jan 2026	CPAI-2025-9881	CVE-2025-54322	Xspeeder SXZOS Remote Code Execution (CVE-2025-54322)
Critical	1 Jan 2026	1 Jan 2026	CPAI-2025-9897	CVE-2025-34515	Ilevia EVE X1 Server Command Injection (CVE-2025-34515)
Critical	1 Jan 2026	1 Jan 2026	CPAI-2025-9895	CVE-2023-33669 CVE-2023-33670 CVE-2023-33672 CVE-2023-33675 CVE-2023-39784 CVE-2024-4064 CVE-2024-4065 CVE-2024-4066 CVE-2025-1853 CVE-2025-29101 CVE-2025-29118 CVE-2025-4368 CVE-2025-5798	Tenda AC8 Buffer Overflow (CVE-2023-33669; CVE-2023-33670; CVE-2023-33672; CVE-2023-33675; CVE-2023-39784; CVE-2024-4064; CVE-2024-4065; CVE-2024-4066; CVE-2025-1853; CVE-2025-29101; CVE-2025-29118; CVE-2025-4368; CVE-2025-5798)
High	1 Jan 2026	1 Jan 2026	CPAI-2024-4421	CVE-2024-54803 CVE-2024-54804 CVE-2024-54805 CVE-2024-54806 CVE-2024-54807	NETGEAR WNR854T Command Injection (CVE-2024-54803; CVE-2024-54804; CVE-2024-54805; CVE-2024-54806; CVE-2024-54807)