|
Critical
|
6 Nov 2025 |
8 Mar 2026 |
CPAI-2025-11997
|
|
CVE-2025-11953
|
React Native Community CLI Command Injection (CVE-2025-11953)
|
|
High
|
10 Dec 2025 |
4 Mar 2026 |
CPAI-2025-12819
|
|
CVE-2025-61928
|
Better Auth Authentication Bypass (CVE-2025-61928)
|
|
High
|
25 May 2025 |
3 Mar 2026 |
CPAI-2025-11301
|
|
CVE-2025-34026
CVE-2025-34027
|
Versa Concerto Authentication Bypass (CVE-2025-34026; CVE-2025-34027)
|
|
Critical
|
25 Mar 2025 |
1 Mar 2026 |
CPAI-2025-0109
|
|
CVE-2025-29927
|
Next.js Authentication Bypass (CVE-2025-29927)
|
|
Critical
|
14 Apr 2025 |
24 Feb 2026 |
CPAI-2025-12428
|
|
CVE-2025-3248
|
Langflow Remote Code Execution (CVE-2025-3248)
|
|
High
|
13 Nov 2025 |
22 Feb 2026 |
CPAI-2025-4350
|
|
CVE-2025-34299
|
MonstaFTP Arbitrary File Upload (CVE-2025-34299)
|
|
High
|
5 Nov 2025 |
22 Feb 2026 |
CPAI-2010-0882
|
|
CVE-2010-1428
|
Red Hat JBoss Enterprise Application Platform Information Disclosure (CVE-2010-1428)
|
|
High
|
8 Jun 2025 |
22 Feb 2026 |
CPAI-2025-12357
|
|
CVE-2025-49113
|
Roundcube Webmail Remote Code Execution (CVE-2025-49113)
|
|
High
|
23 Jan 2025 |
18 Feb 2026 |
CPAI-2024-5493
|
|
CVE-2024-11651
CVE-2024-11652
CVE-2024-11653
CVE-2024-11654
CVE-2024-11655
CVE-2024-11656
CVE-2024-11657
CVE-2024-11658
CVE-2024-11659
CVE-2024-36060
CVE-2024-36061
CVE-2024-45242
|
EnGenius Multiple Products Command Injection (CVE-2024-11651; CVE-2024-11652; CVE-2024-11653; CVE-2024-11654; CVE-2024-11655; CVE-2024-11656; CVE-2024-11657; CVE-2024-11658; CVE-2024-11659; CVE-2024-36060; CVE-2024-36061; CVE-2024-45242)
|
|
Critical
|
21 Dec 2025 |
17 Feb 2026 |
CPAI-2025-12272
|
|
CVE-2025-66516
|
Apache Tika XML External Entity Injection (CVE-2025-66516)
|
|
High
|
24 Jun 2025 |
17 Feb 2026 |
CPAI-2024-5472
|
|
CVE-2024-53703
|
SonicWall SMA100 Buffer Overflow (CVE-2024-53703)
|
|
High
|
13 Nov 2025 |
15 Feb 2026 |
CPAI-2025-12246
|
|
CVE-2025-12101
|
Citrix NetScaler Cross-Site Scripting (CVE-2025-12101)
|
|
High
|
10 Apr 2025 |
15 Feb 2026 |
CPAI-2025-12245
|
|
CVE-2025-2945
|
PostgreSQL pgAdmin Remote Code Execution (CVE-2025-2945)
|
|
High
|
9 Feb 2025 |
15 Feb 2026 |
CPAI-2024-5454
|
|
CVE-2024-43468
|
Microsoft Configuration Manager Remote Code Execution (CVE-2024-43468)
|
|
High
|
30 Dec 2025 |
15 Feb 2026 |
CPAI-2025-12232
|
|
CVE-2025-14847
|
MongoDB Information Disclosure (CVE-2025-14847)
|
|
High
|
24 Nov 2025 |
12 Feb 2026 |
CPAI-2022-3134
|
|
CVE-2022-36799
|
Atlassian Jira Remote Code Execution (CVE-2022-36799)
|
|
High
|
30 Dec 2025 |
9 Feb 2026 |
CPAI-2025-12007
|
|
CVE-2025-14847
|
MongoDB Information Disclosure (CVE-2025-14847)
|
|
High
|
16 Jun 2025 |
9 Feb 2026 |
CPAI-2025-12016
|
|
CVE-2025-5902
CVE-2025-6137
CVE-2025-6138
|
TOTOLINK T10 Buffer Overflow (CVE-2025-5902; CVE-2025-6137; CVE-2025-6138)
|
|
Medium
|
3 Jun 2025 |
9 Feb 2026 |
CPAI-2025-0365
|
|
CVE-2025-32102
|
CrushFTP Server-Side Request Forgery (CVE-2025-32102)
|
|
Critical
|
5 Jun 2025 |
9 Feb 2026 |
CPAI-2025-12010
|
|
CVE-2025-25609
CVE-2025-25610
CVE-2025-25635
CVE-2025-45859
CVE-2025-45861
CVE-2025-45862
CVE-2025-45863
CVE-2025-45864
CVE-2025-45865
CVE-2025-45866
CVE-2025-45867
CVE-2025-6487
|
TOTOLINK A3002R Buffer Overflow (CVE-2025-25609; CVE-2025-25610; CVE-2025-25635; CVE-2025-45859; CVE-2025-45861; CVE-2025-45862; CVE-2025-45863; CVE-2025-45864; CVE-2025-45865; CVE-2025-45866; CVE-2025-45867; CVE-2025-6487)
|
|
Medium
|
29 Apr 2025 |
9 Feb 2026 |
CPAI-2025-0234
|
|
CVE-2025-28142
|
Dimax AC1200 Command Injection (CVE-2025-28142)
|
|
Critical
|
6 Jan 2025 |
9 Feb 2026 |
CPAI-2024-1218
|
|
CVE-2024-12987
|
DrayTek Vigor Command Injection (CVE-2024-12987)
|
|
High
|
27 Nov 2025 |
8 Feb 2026 |
CPAI-2025-5493
|
|
CVE-2025-41115
|
Grafana Multiple Products Privilege Escalation (CVE-2025-41115)
|
|
Critical
|
10 Dec 2025 |
5 Feb 2026 |
CPAI-2025-11877
|
|
CVE-2025-10775
CVE-2025-10958
CVE-2025-10959
CVE-2025-10960
CVE-2025-10961
CVE-2025-10962
CVE-2025-10964
CVE-2025-9149
|
Wavlink WL-NU516U1 Command Injection (CVE-2025-10775; CVE-2025-10958; CVE-2025-10959; CVE-2025-10960; CVE-2025-10961; CVE-2025-10962; CVE-2025-10964; CVE-2025-9149)
|
|
High
|
16 Jun 2025 |
5 Feb 2026 |
CPAI-2025-11915
|
|
CVE-2025-5600
CVE-2025-5793
CVE-2025-5907
CVE-2025-6302
|
TOTOLINK EX1200T Buffer Overflow (CVE-2025-5600; CVE-2025-5793; CVE-2025-5907; CVE-2025-6302)
|
|
High
|
14 Dec 2025 |
4 Feb 2026 |
CPAI-2025-8125
|
|
CVE-2025-14225
|
D-Link DCS-930L Command Injection (CVE-2025-14225)
|
|
High
|
15 Dec 2025 |
3 Feb 2026 |
CPAI-2025-9071
|
|
CVE-2025-6389
|
WordPress Sneeit Framework Plugin Remote Code Execution (CVE-2025-6389)
|
|
Critical
|
19 Nov 2025 |
3 Feb 2026 |
CPAI-2025-4661
|
|
CVE-2025-64095
|
DNN Platform Unrestricted File Upload (CVE-2025-64095)
|
|
High
|
11 Aug 2025 |
3 Feb 2026 |
CPAI-2025-0671
|
|
CVE-2025-7407
|
NETGEAR D6400 Command Injection (CVE-2025-7407)
|
|
Critical
|
17 Sep 2025 |
2 Feb 2026 |
CPAI-2025-11624
|
|
CVE-2023-43128
CVE-2024-22651
CVE-2025-7192
CVE-2025-7836
CVE-2025-9026
|
D-Link Multiple Devices Command Injection (CVE-2023-43128; CVE-2024-22651; CVE-2025-7192; CVE-2025-7836; CVE-2025-9026)
|
|
Critical
|
10 Dec 2025 |
29 Jan 2026 |
CPAI-2025-7586
|
|
CVE-2025-13562
|
D-Link DIR-852 Command Injection (CVE-2025-13562)
|
|
Medium
|
16 Jun 2025 |
29 Jan 2026 |
CPAI-2025-0421
|
|
CVE-2025-5447
|
Linksys Multiple Products Command Injection (CVE-2025-5447)
|
|
Critical
|
9 Jun 2025 |
29 Jan 2026 |
CPAI-2025-0380
|
|
CVE-2025-32814
|
Infoblox NETMRI SQL Injection (CVE-2025-32814)
|
|
High
|
27 Jul 2025 |
25 Jan 2026 |
CPAI-2025-0615
|
|
CVE-2025-20337
|
Cisco Identity Services Engine Remote Code Execution (CVE-2025-20337)
|
|
High
|
15 Dec 2025 |
25 Jan 2026 |
CPAI-2025-8521
|
|
CVE-2025-61675
|
FreePBX Endpoint Manager SQL Injection (CVE-2025-61675)
|
|
Critical
|
9 Dec 2025 |
25 Jan 2026 |
CPAI-2025-11282
|
|
CVE-2022-38562
CVE-2022-38563
CVE-2022-38564
CVE-2022-38565
CVE-2022-38566
CVE-2022-38567
CVE-2022-38568
CVE-2022-38569
CVE-2022-38570
CVE-2022-38571
CVE-2023-51090
CVE-2025-9298
CVE-2025-9299
|
Tenda M3 Buffer Overflow (CVE-2022-38562; CVE-2022-38563; CVE-2022-38564; CVE-2022-38565; CVE-2022-38566; CVE-2022-38567; CVE-2022-38568; CVE-2022-38569; CVE-2022-38570; CVE-2022-38571; CVE-2023-51090; CVE-2025-9298; CVE-2025-9299)
|
|
High
|
3 Apr 2025 |
25 Jan 2026 |
CPAI-2025-11300
|
|
CVE-2024-45811
CVE-2025-30208
CVE-2025-31125
|
Vite Information Disclosure (CVE-2024-45811; CVE-2025-30208; CVE-2025-31125)
|
|
High
|
10 Dec 2025 |
22 Jan 2026 |
CPAI-2025-11185
|
|
CVE-2025-50755
CVE-2025-50756
CVE-2025-50757
|
Wavlink WL-WN535K3 Command Injection (CVE-2025-50755; CVE-2025-50756; CVE-2025-50757)
|
|
High
|
23 Jan 2025 |
19 Jan 2026 |
CPAI-2024-5196
|
|
CVE-2024-11651
CVE-2024-11652
CVE-2024-11653
CVE-2024-11654
CVE-2024-11655
CVE-2024-11656
CVE-2024-11657
CVE-2024-11658
CVE-2024-11659
CVE-2024-45242
|
EnGenius Multiple Products Command Injection (CVE-2024-11651; CVE-2024-11652; CVE-2024-11653; CVE-2024-11654; CVE-2024-11655; CVE-2024-11656; CVE-2024-11657; CVE-2024-11658; CVE-2024-11659; CVE-2024-45242)
|
|
High
|
9 Feb 2025 |
19 Jan 2026 |
CPAI-2024-5197
|
|
CVE-2024-36272
CVE-2024-36290
CVE-2024-36493
CVE-2024-37184
CVE-2024-39288
CVE-2024-39299
CVE-2024-39357
CVE-2024-39358
CVE-2024-39359
CVE-2024-39757
CVE-2024-39768
CVE-2024-39769
CVE-2024-39770
CVE-2024-39774
|
Wavlink AC3000 Buffer Overflow (CVE-2024-36272; CVE-2024-36290; CVE-2024-36493; CVE-2024-37184; CVE-2024-39288; CVE-2024-39299; CVE-2024-39357; CVE-2024-39358; CVE-2024-39359; CVE-2024-39757; CVE-2024-39768; CVE-2024-39769; CVE-2024-39770; CVE-2024-39774)
|
|
High
|
27 Jul 2025 |
15 Jan 2026 |
CPAI-2025-10825
|
|
CVE-2025-28023
CVE-2025-28025
CVE-2025-28026
CVE-2025-28027
CVE-2025-28028
CVE-2025-28029
CVE-2025-28032
CVE-2025-28033
CVE-2025-60699
|
TOTOLINK Multiple Routers Buffer Overflow (CVE-2025-28023; CVE-2025-28025; CVE-2025-28026; CVE-2025-28027; CVE-2025-28028; CVE-2025-28029; CVE-2025-28032; CVE-2025-28033; CVE-2025-60699)
|
|
High
|
22 Jun 2025 |
15 Jan 2026 |
CPAI-2025-2439
|
|
CVE-2025-4008
|
Smartbedded Meteobridge Command Injection (CVE-2025-4008)
|
|
High
|
15 May 2025 |
15 Jan 2026 |
CPAI-2025-0271
|
|
CVE-2025-3988
CVE-2025-3989
CVE-2025-3990
CVE-2025-3991
CVE-2025-3992
CVE-2025-3993
CVE-2025-4462
|
TOTOLINK N150RT Buffer Overflow (CVE-2025-3988; CVE-2025-3989; CVE-2025-3990; CVE-2025-3991; CVE-2025-3992; CVE-2025-3993; CVE-2025-4462)
|
|
High
|
12 Oct 2025 |
14 Jan 2026 |
CPAI-2019-3504
|
|
CVE-2019-9515
|
HTTP/2 Denial of Service (CVE-2019-9515)
|
|
Critical
|
11 Nov 2025 |
12 Jan 2026 |
CPAI-2023-3179
|
|
CVE-2022-40861
CVE-2022-44171
CVE-2022-44172
CVE-2022-44174
CVE-2022-44175
CVE-2022-44176
CVE-2022-44177
CVE-2022-44178
CVE-2022-44180
CVE-2022-44183
CVE-2023-24164
CVE-2023-24165
CVE-2023-24166
CVE-2023-24167
|
Tenda AC18 Buffer Overflow (CVE-2022-40861; CVE-2022-44171; CVE-2022-44172; CVE-2022-44174; CVE-2022-44175; CVE-2022-44176; CVE-2022-44177; CVE-2022-44178; CVE-2022-44180; CVE-2022-44183; CVE-2023-24164; CVE-2023-24165; CVE-2023-24166; CVE-2023-24167)
|
|
High
|
25 Dec 2025 |
11 Jan 2026 |
CPAI-2025-10654
|
|
CVE-2025-14878
CVE-2025-14879
CVE-2025-15006
CVE-2025-15160
CVE-2025-15161
|
Tenda WH450 Buffer Overflow (CVE-2025-14878; CVE-2025-14879; CVE-2025-15006; CVE-2025-15160; CVE-2025-15161)
|
|
High
|
12 Nov 2025 |
11 Jan 2026 |
CPAI-2025-4285
|
|
CVE-2025-52665
|
Ubiquiti UniFi Access Application Remote Code Execution (CVE-2025-52665)
|
|
High
|
23 Oct 2025 |
11 Jan 2026 |
CPAI-2024-2248
|
|
CVE-2024-53944
|
Shenzhen Tuoshi Multiple Products Command Injection (CVE-2024-53944)
|
|
Critical
|
30 Jul 2025 |
11 Jan 2026 |
CPAI-2025-10625
|
|
CVE-2025-29227
CVE-2025-29228
CVE-2025-29229
CVE-2025-45489
CVE-2025-45490
CVE-2025-45491
|
Linksys E5600 Command Injection (CVE-2025-29227; CVE-2025-29228; CVE-2025-29229; CVE-2025-45489; CVE-2025-45490; CVE-2025-45491)
|
|
High
|
18 May 2025 |
11 Jan 2026 |
CPAI-2025-1760
|
|
CVE-2025-4427
CVE-2025-4428
|
Ivanti EPMM Remote Code Execution (CVE-2025-4427; CVE-2025-4428)
|
Feedback