| Critical |
1 Jul 2026 |
1 Jul 2026 |
CPAI-2024-8201 |
|
CVE-2024-1283 |
Google Chrome Heap Overflow (CVE-2024-1283) |
| High |
1 Jul 2026 |
1 Jul 2026 |
CPAI-2025-17350 |
|
CVE-2025-9605 |
Tenda AC Stack Overflow (CVE-2025-9605) |
| High |
12 Mar 2026 |
1 Jul 2026 |
CPAI-2026-1322 |
|
CVE-2026-26990 |
LibreNMS SQL Injection (CVE-2026-26990) |
| High |
15 Feb 2026 |
1 Jul 2026 |
CPAI-2026-1695 |
|
CVE-2026-1603 |
Ivanti Endpoint Manager Authentication Bypass (CVE-2026-1603) |
| High |
30 Jun 2026 |
30 Jun 2026 |
CPAI-2026-8026 |
|
CVE-2026-28416 |
Gradio Server-Side Request Forgery (CVE-2026-28416) |
| High |
30 Jun 2026 |
30 Jun 2026 |
CPAI-2026-8136 |
|
CVE-2026-2905
CVE-2026-2906
CVE-2026-2907
CVE-2026-2908
CVE-2026-2909 |
Tenda HG9 Stack Overflow (CVE-2026-2905; CVE-2026-2906; CVE-2026-2907; CVE-2026-2908; CVE-2026-2909) |
| High |
30 Jun 2026 |
30 Jun 2026 |
CPAI-2024-7596 |
|
CVE-2024-2625 |
Google Chrome Memory Corruption (CVE-2024-2625) |
| High |
30 Jun 2026 |
30 Jun 2026 |
CPAI-2025-17052 |
|
CVE-2025-5961 |
WordPress Migration Backup Staging Plugin Arbitrary File Upload (CVE-2025-5961) |
| High |
30 Jun 2026 |
30 Jun 2026 |
CPAI-2024-7513 |
|
CVE-2024-5841 |
Google Chrome Use After Free (CVE-2024-5841) |
| High |
24 May 2026 |
30 Jun 2026 |
CPAI-2026-5017 |
|
CVE-2026-25620 |
Arista NG Firewall Command Injection (CVE-2026-25620) |
| High |
27 Apr 2026 |
30 Jun 2026 |
CPAI-2026-3372 |
|
CVE-2026-39813 |
Fortinet FortiSandbox Directory Traversal (CVE-2026-39813) |
| High |
19 Apr 2026 |
30 Jun 2026 |
CPAI-2026-3226 |
|
CVE-2026-1357 |
WordPress WPvivid Backup and Migration Plugin Arbitrary File Upload (CVE-2026-1357) |
| High |
15 Mar 2026 |
30 Jun 2026 |
CPAI-2025-17302 |
|
CVE-2025-53145 |
Microsoft Windows Type Confusion (CVE-2025-53145) |
| High |
24 Feb 2026 |
30 Jun 2026 |
CPAI-2025-17301 |
|
CVE-2025-53144 |
Microsoft Windows Type Confusion (CVE-2025-53144) |
| High |
15 Feb 2026 |
30 Jun 2026 |
CPAI-2025-12037 |
|
CVE-2025-15029 |
Centreon Awie SQL Injection (CVE-2025-15029) |
| High |
29 Jun 2026 |
29 Jun 2026 |
CPAI-2026-8106 |
|
|
SEW-EURODRIVE MOVITOOLS MotionStudio Out of Bounds Read |
| High |
29 Jun 2026 |
29 Jun 2026 |
CPAI-2026-8085 |
|
CVE-2026-0907 |
Google Chrome Spoofing (CVE-2026-0907) |
| High |
29 Jun 2026 |
29 Jun 2026 |
CPAI-2024-7491 |
|
CVE-2024-3156 |
Google Chrome Out Of Bounds Read (CVE-2024-3156) |
| High |
22 Jun 2026 |
29 Jun 2026 |
CPAI-2026-8117 |
|
CVE-2026-20840
CVE-2026-20922 |
Microsoft Windows Heap Overflow (CVE-2026-20840; CVE-2026-20922) |
| High |
2 Mar 2026 |
29 Jun 2026 |
CPAI-2025-17274 |
|
CVE-2025-9713 |
Ivanti Endpoint Manager Directory Traversal (CVE-2025-9713) |
| High |
9 Feb 2026 |
28 Jun 2026 |
CPAI-2025-17236 |
|
CVE-2025-43400 |
Apple Multiple Products Out Of Bounds Write (CVE-2025-43400) |
| Critical |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-8037 |
|
|
Sensitive Files Directory Traversal |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-8061 |
|
CVE-2026-50160 |
Hoppscotch Authentication Bypass (CVE-2026-50160) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2025-17238 |
|
CVE-2025-67038 |
Lantronix EDS5000 Command Injection (CVE-2025-67038) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7933 |
|
CVE-2026-45484 |
Microsoft SharePoint Server Insecure Deserialization (CVE-2026-45484) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2025-17068 |
|
CVE-2025-59538 |
ArgoProj Argo CD Denial of Service (CVE-2025-59538) |
| Medium |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2025-17063 |
|
CVE-2025-55296 |
LibreNMS Cross-Site Scripting (CVE-2025-55296) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2023-4116 |
|
CVE-2023-51448 |
Cacti SQL Injection (CVE-2023-51448) |
| Critical |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2023-4115 |
|
CVE-2023-39475 |
Inductive Automation Ignition Remote Code Execution (CVE-2023-39475) |
| Medium |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2023-4107 |
|
CVE-2023-27293 |
OpenCATS Cross-Site Scripting (CVE-2023-27293) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2022-3365 |
|
CVE-2022-42904 |
Zoho ManageEngine ADManager Plus Command Injection (CVE-2022-42904) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7763 |
|
CVE-2026-9514 |
Totolink CA750-PoE Command Injection (CVE-2026-9514) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7762 |
|
CVE-2026-9531 |
Totolink CA750-PoE Command Injection (CVE-2026-9531) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7761 |
|
CVE-2026-9532 |
Totolink CA750-PoE Command Injection (CVE-2026-9532) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7758 |
|
CVE-2026-9515 |
Totolink CA750-PoE Command Injection (CVE-2026-9515) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7760 |
|
CVE-2026-9534 |
Totolink CA750-PoE Command Injection (CVE-2026-9534) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7759 |
|
CVE-2026-9533 |
Totolink CA750-PoE Command Injection (CVE-2026-9533) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7757 |
|
CVE-2026-10187 |
Totolink N300RH Buffer Overflow (CVE-2026-10187) |
| Medium |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2017-2189 |
|
CVE-2017-3548 |
Oracle PeopleSoft Enterprise PeopleTools XML External Entity Injection (CVE-2017-3548) |
| Medium |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2013-4177 |
|
CVE-2013-3821 |
Oracle PeopleSoft Products Information Disclosure (CVE-2013-3821) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7748 |
|
CVE-2026-49373 |
JetBrains TeamCity Remote Code Execution (CVE-2026-49373) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7747 |
|
CVE-2026-10727 |
Ivanti Endpoint Manager Mobile Command Injection (CVE-2026-10727) |
| High |
28 Jun 2026 |
28 Jun 2026 |
CPAI-2026-7969 |
|
CVE-2026-2652 |
LFProjects MLflow Authentication Bypass (CVE-2026-2652) |
| High |
25 Jun 2026 |
28 Jun 2026 |
CPAI-2026-8040 |
|
CVE-2026-28496 |
FOSSBilling Server-Side Template Injection (CVE-2026-28496) |
| High |
25 Jun 2026 |
25 Jun 2026 |
CPAI-2026-8002 |
|
CVE-2026-28496 |
FOSSBilling Server-Side Template Injection (CVE-2026-28496) |
| High |
25 Jun 2026 |
25 Jun 2026 |
CPAI-2026-7986 |
|
CVE-2026-55450 |
Langflow Arbitrary File Upload (CVE-2026-55450) |
| Critical |
24 Jun 2026 |
24 Jun 2026 |
CPAI-2026-7975 |
|
CVE-2026-20230 |
Cisco Unified Communications Manager Server-Side Request Forgery (CVE-2026-20230) |
| High |
24 Jun 2026 |
24 Jun 2026 |
CPAI-2025-17143 |
|
CVE-2025-7848 |
NI LabVIEW Memory Corruption (CVE-2025-7848) |
| High |
13 Apr 2026 |
24 Jun 2026 |
CPAI-2026-2669 |
|
CVE-2026-20079 |
Cisco Secure Firewall Management Center Authentication Bypass (CVE-2026-20079) |
| High |
23 Jun 2026 |
23 Jun 2026 |
CPAI-2026-7901 |
|
CVE-2026-25089 |
Fortinet FortiSandbox Command Injection (CVE-2026-25089) |