# 2026 Advisories Archive

| Severity   | Date Published | Date Updated | Check Point Reference                                              | Source                                                                                               | Industry Reference                                                                                                         | Description                                                                                                          |
|------------|----------------|---------------|-------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------|
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4569](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4569.html)  |                                                                                                     | [CVE-2024-2909](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2909)<br>[CVE-2024-2910](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2910) | [Ruijie RG-EG350 Command Injection (CVE-2024-2909; CVE-2024-2910)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4569.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4581](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4581.html)  |                                                                                                     | [CVE-2024-4115](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4115)<br>[CVE-2024-4116](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4116)<br>[CVE-2024-4117](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4117)<br>[CVE-2024-4118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4118)<br>[CVE-2024-4119](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4119)<br>[CVE-2024-4120](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4120)<br>[CVE-2024-4121](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4121)<br>[CVE-2024-4122](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4122)<br>[CVE-2024-4123](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4123)<br>[CVE-2024-4124](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4124)<br>[CVE-2024-4125](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4125)<br>[CVE-2024-4126](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4126)<br>[CVE-2024-4127](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4127) | [Tenda W15E Buffer Overflow (CVE-2024-4115; CVE-2024-4116; CVE-2024-4117; CVE-2024-4118; CVE-2024-4119; CVE-2024-4120; CVE-2024-4121; CVE-2024-4122; CVE-2024-4123; CVE-2024-4124; CVE-2024-4125; CVE-2024-4126; CVE-2024-4127)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4581.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4566](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4566.html)  |                                                                                                     | [CVE-2024-53939](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53939)<br>[CVE-2024-53940](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53940) | [Victure RX1800 Command Injection (CVE-2024-53939; CVE-2024-53940)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4566.html) |
| **Critical**| 4 Jan 2026    | 4 Jan 2026   | [CPAI-2024-4533](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4533.html)  |                                                                                                     | [CVE-2024-55547](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55547)                                    | [ORing IAP-420 Remote Code Execution (CVE-2024-55547)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4533.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2025-10241](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-10241.html) |                                                                                                     | [CVE-2025-50398](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50398)<br>[CVE-2025-50401](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50401) | [Mercury D196G Buffer Overflow (CVE-2025-50398; CVE-2025-50401)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-10241.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2025-10166](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-10166.html) |                                                                                                     | [CVE-2024-53334](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53334)<br>[CVE-2024-53335](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53335)<br>[CVE-2025-28021](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28021)<br>[CVE-2025-28024](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28024)<br>[CVE-2025-28030](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28030)<br>[CVE-2025-28135](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28135) | [TOTOLINK A810R Buffer Overflow (CVE-2024-53334; CVE-2024-53335; CVE-2025-28021; CVE-2025-28024; CVE-2025-28030; CVE-2025-28135)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-10166.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4535](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4535.html)  |                                                                                                     | [CVE-2024-55544](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55544)                                    | [ORing IAP-420 Command Injection (CVE-2024-55544)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4535.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4530](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4530.html)  |                                                                                                     | [CVE-2024-57376](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57376)                                    | [D-Link DSR Buffer Overflow (CVE-2024-57376)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4530.html) |
| **High**   | 4 Jan 2026     | 4 Jan 2026   | [CPAI-2024-4527](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4527.html)  |                                                                                                     | [CVE-2024-7217](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7217)  | [TOTOLINK CA300-PoE Buffer Overflow (CVE-2024-7217)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4527.html) |
| **High**   | 1 Jan 2026     | 1 Jan 2026   | [CPAI-2025-9914](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9914.html)  |                                                                                                     | [CVE-2025-52691](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52691)                                 | [SmarterMail Arbitrary File Upload (CVE-2025-52691)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9914.html) |
| **High**   | 1 Jan 2026     | 1 Jan 2026   | [CPAI-2025-9911](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9911.html)  |                                                                                                     | [CVE-2025-68645](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68645)                                 | [Zimbra Collaboration Local File Inclusion (CVE-2025-68645)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9911.html) |
| **High**   | 1 Jan 2026     | 1 Jan 2026   | [CPAI-2025-9881](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9881.html)  |                                                                                                     | [CVE-2025-54322](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54322)                                   | [Xspeeder SXZOS Remote Code Execution (CVE-2025-54322)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9881.html) |
| **Critical**| 1 Jan 2026    | 1 Jan 2026   | [CPAI-2025-9897](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9897.html)  |                                                                                                     | [CVE-2025-34515](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-34515)                                   | [Ilevia EVE X1 Server Command Injection (CVE-2025-34515)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9897.html) |
| **Critical**| 1 Jan 2026    | 1 Jan 2026   | [CPAI-2025-9895](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9895.html)  |                                                                                                     | [CVE-2023-33669](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33669)<br>[CVE-2023-33670](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33670)<br>[CVE-2023-33672](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33672)<br>[CVE-2023-33675](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33675)<br>[CVE-2023-39784](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39784)<br>[CVE-2024-4064](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4064)<br>[CVE-2024-4065](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4065)<br>[CVE-2024-4066](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4066)<br>[CVE-2025-1853](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1853)<br>[CVE-2025-29101](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29101)<br>[CVE-2025-29118](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29118)<br>[CVE-2025-4368](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4368)<br>[CVE-2025-5798](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5798) | [Tenda AC8 Buffer Overflow (CVE-2023-33669; CVE-2023-33670; CVE-2023-33672; CVE-2023-33675; CVE-2023-39784; CVE-2024-4064; CVE-2024-4065; CVE-2024-4066; CVE-2025-1853; CVE-2025-29101; CVE-2025-29118; CVE-2025-4368; CVE-2025-5798)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-9895.html) |
| **High**   | 1 Jan 2026     | 1 Jan 2026   | [CPAI-2024-4421](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4421.html) |                                                                                                     | [CVE-2024-54803](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54803)<br>[CVE-2024-54804](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54804)<br>[CVE-2024-54805](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54805)<br>[CVE-2024-54806](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54806)<br>[CVE-2024-54807](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54807) | [NETGEAR WNR854T Command Injection (CVE-2024-54803; CVE-2024-54804; CVE-2024-54805; CVE-2024-54806; CVE-2024-54807)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-4421.html) |
