# 2026 Advisories Archive

| Severity | Date Published | Date Updated | Check Point Reference | Source | Industry Reference | Description |
| --- | --- | --- | --- | --- | --- | --- |
| **Critical** | 1 Jul 2026 | 1 Jul 2026 | [CPAI-2024-8201](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8201.html) |  | [CVE-2024-1283](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1283) | [Google Chrome Heap Overflow (CVE-2024-1283)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8201.html) |
| **High** | 1 Jul 2026 | 1 Jul 2026 | [CPAI-2025-17350](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17350.html) |  | [CVE-2025-9605](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9605) | [Tenda AC Stack Overflow (CVE-2025-9605)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17350.html) |
| **High** | 12 Mar 2026 | 1 Jul 2026 | [CPAI-2026-1322](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-1322.html) |  | [CVE-2026-26990](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26990) | [LibreNMS SQL Injection (CVE-2026-26990)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-1322.html) |
| **High** | 15 Feb 2026 | 1 Jul 2026 | [CPAI-2026-1695](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-1695.html) |  | [CVE-2026-1603](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1603) | [Ivanti Endpoint Manager Authentication Bypass (CVE-2026-1603)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-1695.html) |
| **High** | 30 Jun 2026 | 30 Jun 2026 | [CPAI-2026-8026](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8026.html) |  | [CVE-2026-28416](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28416) | [Gradio Server-Side Request Forgery (CVE-2026-28416)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8026.html) |
| **High** | 30 Jun 2026 | 30 Jun 2026 | [CPAI-2026-8136](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8136.html) |  | [CVE-2026-2905](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2905)<br>[CVE-2026-2906](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2906)<br>[CVE-2026-2907](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2907)<br>[CVE-2026-2908](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2908)<br>[CVE-2026-2909](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2909) | [Tenda HG9 Stack Overflow (CVE-2026-2905; CVE-2026-2906; CVE-2026-2907; CVE-2026-2908; CVE-2026-2909)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8136.html) |
| **High** | 30 Jun 2026 | 30 Jun 2026 | [CPAI-2024-7596](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7596.html) |  | [CVE-2024-2625](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2625) | [Google Chrome Memory Corruption (CVE-2024-2625)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7596.html) |
| **High** | 30 Jun 2026 | 30 Jun 2026 | [CPAI-2025-17052](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17052.html) |  | [CVE-2025-5961](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5961) | [WordPress Migration Backup Staging Plugin Arbitrary File Upload (CVE-2025-5961)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17052.html) |
| **High** | 30 Jun 2026 | 30 Jun 2026 | [CPAI-2024-7513](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7513.html) |  | [CVE-2024-5841](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5841) | [Google Chrome Use After Free (CVE-2024-5841)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7513.html) |
| **High** | 24 May 2026 | 30 Jun 2026 | [CPAI-2026-5017](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-5017.html) |  | [CVE-2026-25620](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25620) | [Arista NG Firewall Command Injection (CVE-2026-25620)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-5017.html) |
| **High** | 27 Apr 2026 | 30 Jun 2026 | [CPAI-2026-3372](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-3372.html) |  | [CVE-2026-39813](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39813) | [Fortinet FortiSandbox Directory Traversal (CVE-2026-39813)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-3372.html) |
| **High** | 19 Apr 2026 | 30 Jun 2026 | [CPAI-2026-3226](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-3226.html) |  | [CVE-2026-1357](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1357) | [WordPress WPvivid Backup and Migration Plugin Arbitrary File Upload (CVE-2026-1357)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-3226.html) |
| **High** | 15 Mar 2026 | 30 Jun 2026 | [CPAI-2025-17302](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17302.html) |  | [CVE-2025-53145](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53145) | [Microsoft Windows Type Confusion (CVE-2025-53145)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17302.html) |
| **High** | 24 Feb 2026 | 30 Jun 2026 | [CPAI-2025-17301](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17301.html) |  | [CVE-2025-53144](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53144) | [Microsoft Windows Type Confusion (CVE-2025-53144)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17301.html) |
| **High** | 15 Feb 2026 | 30 Jun 2026 | [CPAI-2025-12037](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-12037.html) |  | [CVE-2025-15029](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15029) | [Centreon Awie SQL Injection (CVE-2025-15029)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-12037.html) |
| **High** | 29 Jun 2026 | 29 Jun 2026 | [CPAI-2026-8106](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8106.html) |  |  | [SEW-EURODRIVE MOVITOOLS MotionStudio Out of Bounds Read](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8106.html) |
| **High** | 29 Jun 2026 | 29 Jun 2026 | [CPAI-2026-8085](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8085.html) |  | [CVE-2026-0907](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0907) | [Google Chrome Spoofing (CVE-2026-0907)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8085.html) |
| **High** | 29 Jun 2026 | 29 Jun 2026 | [CPAI-2024-7491](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7491.html) |  | [CVE-2024-3156](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3156) | [Google Chrome Out Of Bounds Read (CVE-2024-3156)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-7491.html) |
| **High** | 22 Jun 2026 | 29 Jun 2026 | [CPAI-2026-8117](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8117.html) |  | [CVE-2026-20840](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20840)<br>[CVE-2026-20922](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20922) | [Microsoft Windows Heap Overflow (CVE-2026-20840; CVE-2026-20922)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8117.html) |
| **High** | 2 Mar 2026 | 29 Jun 2026 | [CPAI-2025-17274](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17274.html) |  | [CVE-2025-9713](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9713) | [Ivanti Endpoint Manager Directory Traversal (CVE-2025-9713)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17274.html) |
| **High** | 9 Feb 2026 | 28 Jun 2026 | [CPAI-2025-17236](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17236.html) |  | [CVE-2025-43400](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43400) | [Apple Multiple Products Out Of Bounds Write (CVE-2025-43400)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17236.html) |
| **Critical** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-8037](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8037.html) |  |  | [Sensitive Files Directory Traversal](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8037.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-8061](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8061.html) |  | [CVE-2026-50160](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50160) | [Hoppscotch Authentication Bypass (CVE-2026-50160)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8061.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2025-17238](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17238.html) |  | [CVE-2025-67038](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67038) | [Lantronix EDS5000 Command Injection (CVE-2025-67038)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17238.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7933](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7933.html) |  | [CVE-2026-45484](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45484) | [Microsoft SharePoint Server Insecure Deserialization (CVE-2026-45484)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7933.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2025-17068](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17068.html) |  | [CVE-2025-59538](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59538) | [ArgoProj Argo CD Denial of Service (CVE-2025-59538)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17068.html) |
| **Medium** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2025-17063](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17063.html) |  | [CVE-2025-55296](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55296) | [LibreNMS Cross-Site Scripting (CVE-2025-55296)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17063.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2023-4116](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4116.html) |  | [CVE-2023-51448](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51448) | [Cacti SQL Injection (CVE-2023-51448)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4116.html) |
| **Critical** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2023-4115](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4115.html) |  | [CVE-2023-39475](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39475) | [Inductive Automation Ignition Remote Code Execution (CVE-2023-39475)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4115.html) |
| **Medium** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2023-4107](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4107.html) |  | [CVE-2023-27293](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27293) | [OpenCATS Cross-Site Scripting (CVE-2023-27293)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2023-4107.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2022-3365](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2022-3365.html) |  | [CVE-2022-42904](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42904) | [Zoho ManageEngine ADManager Plus Command Injection (CVE-2022-42904)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2022-3365.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7763](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7763.html) |  | [CVE-2026-9514](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9514) | [Totolink CA750-PoE Command Injection (CVE-2026-9514)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7763.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7762](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7762.html) |  | [CVE-2026-9531](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9531) | [Totolink CA750-PoE Command Injection (CVE-2026-9531)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7762.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7761](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7761.html) |  | [CVE-2026-9532](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9532) | [Totolink CA750-PoE Command Injection (CVE-2026-9532)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7761.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7758](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7758.html) |  | [CVE-2026-9515](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9515) | [Totolink CA750-PoE Command Injection (CVE-2026-9515)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7758.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7760](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7760.html) |  | [CVE-2026-9534](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9534) | [Totolink CA750-PoE Command Injection (CVE-2026-9534)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7760.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7759](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7759.html) |  | [CVE-2026-9533](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9533) | [Totolink CA750-PoE Command Injection (CVE-2026-9533)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7759.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7757](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7757.html) |  | [CVE-2026-10187](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10187) | [Totolink N300RH Buffer Overflow (CVE-2026-10187)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7757.html) |
| **Medium** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2017-2189](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2017-2189.html) |  | [CVE-2017-3548](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3548) | [Oracle PeopleSoft Enterprise PeopleTools XML External Entity Injection (CVE-2017-3548)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2017-2189.html) |
| **Medium** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2013-4177](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2013-4177.html) |  | [CVE-2013-3821](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3821) | [Oracle PeopleSoft Products Information Disclosure (CVE-2013-3821)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2013-4177.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7748](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7748.html) |  | [CVE-2026-49373](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49373) | [JetBrains TeamCity Remote Code Execution (CVE-2026-49373)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7748.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7747](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7747.html) |  | [CVE-2026-10727](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10727) | [Ivanti Endpoint Manager Mobile Command Injection (CVE-2026-10727)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7747.html) |
| **High** | 28 Jun 2026 | 28 Jun 2026 | [CPAI-2026-7969](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7969.html) |  | [CVE-2026-2652](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2652) | [LFProjects MLflow Authentication Bypass (CVE-2026-2652)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7969.html) |
| **High** | 25 Jun 2026 | 28 Jun 2026 | [CPAI-2026-8040](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8040.html) |  | [CVE-2026-28496](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28496) | [FOSSBilling Server-Side Template Injection (CVE-2026-28496)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8040.html) |
| **High** | 25 Jun 2026 | 25 Jun 2026 | [CPAI-2026-8002](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8002.html) |  | [CVE-2026-28496](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28496) | [FOSSBilling Server-Side Template Injection (CVE-2026-28496)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8002.html) |
| **High** | 25 Jun 2026 | 25 Jun 2026 | [CPAI-2026-7986](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7986.html) |  | [CVE-2026-55450](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55450) | [Langflow Arbitrary File Upload (CVE-2026-55450)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7986.html) |
| **Critical** | 24 Jun 2026 | 24 Jun 2026 | [CPAI-2026-7975](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7975.html) |  | [CVE-2026-20230](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20230) | [Cisco Unified Communications Manager Server-Side Request Forgery (CVE-2026-20230)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7975.html) |
| **High** | 24 Jun 2026 | 24 Jun 2026 | [CPAI-2025-17143](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17143.html) |  | [CVE-2025-7848](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7848) | [NI LabVIEW Memory Corruption (CVE-2025-7848)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17143.html) |
| **High** | 13 Apr 2026 | 24 Jun 2026 | [CPAI-2026-2669](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-2669.html) |  | [CVE-2026-20079](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20079) | [Cisco Secure Firewall Management Center Authentication Bypass (CVE-2026-20079)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-2669.html) |
| **High** | 23 Jun 2026 | 23 Jun 2026 | [CPAI-2026-7901](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7901.html) |  | [CVE-2026-25089](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25089) | [Fortinet FortiSandbox Command Injection (CVE-2026-25089)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7901.html) |