Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	24 May 2026	24 May 2026	CPAI-2026-5228	CVE-2026-6988 CVE-2026-7151	Tenda HG Routers Buffer Overflow (CVE-2026-6988; CVE-2026-7151)
High	24 May 2026	24 May 2026	CPAI-2026-4810	CVE-2026-4903	Tenda AC5 Buffer Overflow (CVE-2026-4903)
High	24 May 2026	24 May 2026	CPAI-2026-4805	CVE-2026-33340	ParisNeo LoLLMs WEBUI Server-Side Request Forgery (CVE-2026-33340)
High	24 May 2026	24 May 2026	CPAI-2026-4803	CVE-2026-33484	Langflow Information Disclosure (CVE-2026-33484)
High	24 May 2026	24 May 2026	CPAI-2026-5206	CVE-2026-3715 CVE-2026-5004	Wavlink WL-WN579X3-C Buffer Overflow (CVE-2026-3715; CVE-2026-5004)
Critical	5 Mar 2026	24 May 2026	CPAI-2026-1265	CVE-2026-21902	Juniper Networks Junos OS Evolved Remote Code Execution (CVE-2026-21902)
High	11 May 2026	20 May 2026	CPAI-2026-5167		IKE Unsigned Underflow
Critical	20 May 2026	20 May 2026	CPAI-2026-5159	CVE-2026-45829	Chroma ChromaDB Remote Code Execution (CVE-2026-45829)
High	20 May 2026	20 May 2026	CPAI-2026-5140	CVE-2026-26956	VM2 Remote Code Execution (CVE-2026-26956)
High	20 May 2026	20 May 2026	CPAI-2025-16177	CVE-2025-65958	Open WebUI Server-Side Request Forgery (CVE-2025-65958)
High	20 May 2026	20 May 2026	CPAI-2024-6818	CVE-2024-32965	LobeHub Lobe Chat Server-Side Request Forgery (CVE-2024-32965)
Critical	20 May 2026	20 May 2026	CPAI-2025-16179	CVE-2025-11201	MLflow Tracking Server Directory Traversal (CVE-2025-11201)
High	20 May 2026	20 May 2026	CPAI-2026-5101	CVE-2026-7864	SEPPmail Secure Email Gateway Information Disclosure (CVE-2026-7864)
Critical	20 May 2026	20 May 2026	CPAI-2026-5100	CVE-2026-2743 CVE-2026-44128	SEPPMail Secure Email Gateway Remote Code Execution (CVE-2026-2743; CVE-2026-44128)
High	11 May 2026	19 May 2026	CPAI-2026-5047		IKE Unsigned Underflow
High	19 May 2026	19 May 2026	CPAI-2026-5081	CVE-2026-29205	cPanel Directory Traversal (CVE-2026-29205)
High	19 May 2026	19 May 2026	CPAI-2026-5009	CVE-2026-36356	MeiG Smart FORGE SLT711 Command Injection (CVE-2026-36356)
High	19 May 2026	19 May 2026	CPAI-2026-5022	CVE-2026-4567	Tenda A15 Buffer Overflow (CVE-2026-4567)
Critical	14 May 2026	18 May 2026	CPAI-2026-4923	CVE-2026-42945	Nginx Heap Overflow (CVE-2026-42945)
High	18 May 2026	18 May 2026	CPAI-2026-4870	CVE-2026-44194	OPNsense Remote Code Execution (CVE-2026-44194)
High	18 May 2026	18 May 2026	CPAI-2026-4643	CVE-2026-21510	Microsoft Windows Security Bypass (CVE-2026-21510)
High	18 May 2026	18 May 2026	CPAI-2025-16009	CVE-2025-53679	Fortinet FortiSandbox Command Injection (CVE-2025-53679)
High	18 May 2026	18 May 2026	CPAI-2025-15588	CVE-2025-36527	Zohocorp ManageEngine ADAudit Plus SQL Injection (CVE-2025-36527)
Medium	18 May 2026	18 May 2026	CPAI-2026-3679	CVE-2026-21876	OWASP ModSecurity Core Rule Set Information Disclosure (CVE-2026-21876)
High	18 May 2026	18 May 2026	CPAI-2026-4875	CVE-2026-29000	Pac4j Authentication Bypass (CVE-2026-29000)
High	17 Mar 2026	18 May 2026	CPAI-2026-1779	CVE-2026-20133	Cisco Catalyst SD-WAN Manager Information Disclosure (CVE-2026-20133)
Critical	14 May 2026	17 May 2026	CPAI-2026-4860	CVE-2026-42945	Nginx Heap Overflow (CVE-2026-42945)
High	17 May 2026	17 May 2026	CPAI-2026-4864	CVE-2026-44338	PraisonAI Authentication Bypass (CVE-2026-44338)
Medium	17 May 2026	17 May 2026	CPAI-2026-4665	CVE-2026-20945	Microsoft SharePoint Server Cross-Site Scripting (CVE-2026-20945)
High	17 May 2026	17 May 2026	CPAI-2026-4648	CVE-2026-20186	Cisco Identity Services Engine Command Injection (CVE-2026-20186)
High	17 May 2026	17 May 2026	CPAI-2026-4584	CVE-2026-40688	Fortinet FortiWeb Out Of Bounds Write (CVE-2026-40688)
High	17 May 2026	17 May 2026	CPAI-2026-4574	CVE-2026-3288	Kubernetes ingress-nginx Code Injection (CVE-2026-3288)
Critical	17 May 2026	17 May 2026	CPAI-2026-4512	CVE-2026-41176	Rclone Authentication Bypass (CVE-2026-41176)
Critical	17 May 2026	17 May 2026	CPAI-2026-4390	CVE-2026-41276	FlowiseAI Flowise Authentication Bypass (CVE-2026-41276)
Critical	6 May 2026	17 May 2026	CPAI-2026-4075	CVE-2026-20963	Microsoft SharePoint Server Insecure Deserialization (CVE-2026-20963)
Critical	14 May 2026	14 May 2026	CPAI-2026-4736	CVE-2026-42945	Nginx Heap Overflow (CVE-2026-42945)
Critical	30 Apr 2026	14 May 2026	CPAI-2026-4723	CVE-2026-42208	LiteLLM SQL Injection (CVE-2026-42208)
High	14 May 2026	14 May 2026	CPAI-2026-4651	CVE-2026-27966	Langflow Remote Code Execution (CVE-2026-27966)
High	14 May 2026	14 May 2026	CPAI-2026-4667	CVE-2026-42248 CVE-2026-42249	Ollama Remote Code Execution (CVE-2026-42248; CVE-2026-42249)
High	14 May 2026	14 May 2026	CPAI-2026-4657	CVE-2026-27022	LangChain LangGraph SQL Injection (CVE-2026-27022)
High	14 May 2026	14 May 2026	CPAI-2026-4191	CVE-2026-35029	LiteLLM Remote Code Execution (CVE-2026-35029)
High	14 May 2026	14 May 2026	CPAI-2026-4175	CVE-2026-7857	D-Link DI-8100 Buffer Overflow (CVE-2026-7857)
Critical	14 May 2026	14 May 2026	CPAI-2026-4174	CVE-2026-7853	D-Link DI-8100 Buffer Overflow (CVE-2026-7853)
High	14 May 2026	14 May 2026	CPAI-2026-4173	CVE-2026-7856	D-Link DI-8100 Buffer Overflow (CVE-2026-7856)
High	14 May 2026	14 May 2026	CPAI-2026-4172	CVE-2026-7854	D-Link DI-8100 Buffer Overflow (CVE-2026-7854)
High	14 May 2026	14 May 2026	CPAI-2026-4171	CVE-2026-7851	D-Link DI-8100 Stack Overflow (CVE-2026-7851)
High	14 May 2026	14 May 2026	CPAI-2026-4544	CVE-2026-5351 CVE-2026-5352 CVE-2026-5353 CVE-2026-5354 CVE-2026-5355	TRENDnet TEW-657BRM Command Injection (CVE-2026-5351; CVE-2026-5352; CVE-2026-5353; CVE-2026-5354; CVE-2026-5355)
Medium	15 Mar 2026	14 May 2026	CPAI-2025-13177	CVE-2025-54353	Fortinet FortiSandbox Cross-Site Scripting (CVE-2025-54353)
Critical	13 May 2026	13 May 2026	CPAI-2008-0799	CVE-2008-1083	Microsoft Windows Heap Overflow (CVE-2008-1083)
High	13 May 2026	13 May 2026	CPAI-2026-4536	CVE-2026-31829	Flowise Server-Side Request Forgery (CVE-2026-31829)