| Critical |
19 Jun 2025 |
23 Jul 2026 |
CPAI-2025-18055 |
|
CVE-2025-27651
CVE-2025-27652 |
Vasion Print Server-Side Request Forgery (CVE-2025-27651; CVE-2025-27652) |
| Critical |
17 Jul 2025 |
22 Jul 2026 |
CPAI-2025-18053 |
|
CVE-2021-27137
CVE-2025-4448
CVE-2025-4449
CVE-2025-4450
CVE-2025-4451
CVE-2025-55599
CVE-2025-6367
CVE-2025-6368
CVE-2025-6369
CVE-2025-6370
CVE-2025-6371
CVE-2025-6372
CVE-2025-6373
CVE-2025-6374 |
D-Link DIR-619L Buffer Overflow (CVE-2021-27137; CVE-2025-4448; CVE-2025-4449; CVE-2025-4450; CVE-2025-4451; CVE-2025-55599; CVE-2025-6367; CVE-2025-6368; CVE-2025-6369; CVE-2025-6370; CVE-2025-6371; CVE-2025-6372; CVE-2025-6373; CVE-2025-6374) |
| High |
12 Nov 2025 |
21 Jul 2026 |
CPAI-2025-4304 |
|
CVE-2025-64459 |
Django SQL Injection (CVE-2025-64459) |
| Critical |
31 Mar 2025 |
28 Jun 2026 |
CPAI-2025-13138 |
|
CVE-2024-39202
CVE-2024-39962
CVE-2025-10123
CVE-2025-10634
CVE-2025-10814
CVE-2025-11095
CVE-2025-11096
CVE-2025-11097
CVE-2025-11098
CVE-2025-11099
CVE-2025-29040
CVE-2025-29041
CVE-2025-29635 |
D-Link DIR-823X Command Injection (CVE-2024-39202; CVE-2024-39962; CVE-2025-10123; CVE-2025-10634; CVE-2025-10814; CVE-2025-11095; CVE-2025-11096; CVE-2025-11097; CVE-2025-11098; CVE-2025-11099; CVE-2025-29040; CVE-2025-29041; CVE-2025-29635) |
| High |
10 Dec 2025 |
22 Jun 2026 |
CPAI-2025-7566 |
|
CVE-2025-11833 |
WordPress Post SMTP Plugin Information Disclosure (CVE-2025-11833) |
| Critical |
25 Mar 2025 |
22 Jun 2026 |
CPAI-2025-17018 |
|
CVE-2019-10955
CVE-2021-23385
CVE-2021-23393
CVE-2021-32618
CVE-2022-45402
CVE-2025-59775 |
Open Redirect Attempt (CVE-2019-10955; CVE-2021-23385; CVE-2021-23393; CVE-2021-32618; CVE-2022-45402; CVE-2025-59775) |
| Critical |
12 Feb 2025 |
16 Jun 2026 |
CPAI-2026-7310 |
|
CVE-2022-45506
CVE-2023-49403
CVE-2023-49406
CVE-2023-49999
CVE-2024-32292
CVE-2024-3880
CVE-2026-38834
CVE-2026-38835 |
Tenda W30E Command Injection (CVE-2022-45506; CVE-2023-49403; CVE-2023-49406; CVE-2023-49999; CVE-2024-32292; CVE-2024-3880; CVE-2026-38834; CVE-2026-38835) |
| High |
2 Nov 2025 |
11 Jun 2026 |
CPAI-2025-3613 |
|
CVE-2025-62168 |
Squid Information Disclosure (CVE-2025-62168) |
| High |
4 Sep 2025 |
11 Jun 2026 |
CPAI-2025-1038 |
|
CVE-2025-5419 |
Google Chrome V8 Out-Of-Bounds Read (CVE-2025-5419) |
| Critical |
7 Jul 2025 |
11 Jun 2026 |
CPAI-2025-0503 |
|
CVE-2025-6554 |
Google Chrome Type Confusion (CVE-2025-6554) |
| High |
6 Nov 2025 |
9 Jun 2026 |
CPAI-2025-3895 |
|
CVE-2025-48826 |
Planet WGR-500 Memory Corruption (CVE-2025-48826) |
| High |
23 Dec 2025 |
4 Jun 2026 |
CPAI-2026-5858 |
|
|
Dify Information Disclosure |
| High |
16 Jan 2025 |
2 Jun 2026 |
CPAI-2024-6943 |
|
CVE-2024-21182 |
Oracle WebLogic Server Remote Code Execution (CVE-2024-21182) |
| Critical |
21 Jul 2025 |
31 May 2026 |
CPAI-2025-16391 |
|
CVE-2025-49706
CVE-2025-53771 |
Microsoft SharePoint Server Authentication Bypass (CVE-2025-49706; CVE-2025-53771) |
| Critical |
14 Apr 2025 |
28 May 2026 |
CPAI-2026-5553 |
|
CVE-2024-48061
CVE-2025-3248
CVE-2026-0770 |
Langflow Remote Code Execution (CVE-2024-48061; CVE-2025-3248; CVE-2026-0770) |
| Critical |
14 Apr 2025 |
24 May 2026 |
CPAI-2025-16219 |
|
CVE-2024-48061
CVE-2025-3248 |
Langflow Remote Code Execution (CVE-2024-48061; CVE-2025-3248) |
| Critical |
24 Apr 2025 |
14 May 2026 |
CPAI-2021-2789 |
|
CVE-2021-22175
CVE-2021-22214
CVE-2021-39935 |
GitLab Server-Side Request Forgery (CVE-2021-22175; CVE-2021-22214; CVE-2021-39935) |
| High |
10 Dec 2025 |
10 May 2026 |
CPAI-2025-16007 |
|
CVE-2025-51471 |
Ollama Information Disclosure (CVE-2025-51471) |
| High |
11 May 2025 |
7 May 2026 |
CPAI-2025-15945 |
|
CVE-2025-32819
CVE-2025-32820
CVE-2025-32821 |
SonicWall SMA Directory Traversal (CVE-2025-32819; CVE-2025-32820; CVE-2025-32821) |
| Critical |
27 Jul 2025 |
5 May 2026 |
CPAI-2025-15839 |
|
CVE-2025-54309 |
CrushFTP Authentication Bypass (CVE-2025-54309) |
| Critical |
15 Apr 2025 |
4 May 2026 |
CPAI-2026-3866 |
|
|
Sensitive Configuration File Disclosure |
| High |
16 Nov 2025 |
27 Apr 2026 |
CPAI-2025-4745 |
|
CVE-2025-64446 |
Fortinet FortiWeb Path Traversal (CVE-2025-64446) |
| High |
20 Mar 2025 |
27 Apr 2026 |
CPAI-2025-15348 |
|
CVE-2025-2749 |
Kentico Xperience Remote Code Execution (CVE-2025-2749) |
| Critical |
16 Jun 2025 |
26 Apr 2026 |
CPAI-2025-0397 |
|
CVE-2025-32375 |
BentoML Insecure Deserialization (CVE-2025-32375) |
| High |
20 Mar 2025 |
23 Apr 2026 |
CPAI-2025-15306 |
|
CVE-2025-2749 |
Kentico Xperience Remote Code Execution (CVE-2025-2749) |
| High |
27 Jul 2025 |
23 Apr 2026 |
CPAI-2025-15330 |
|
CVE-2025-20337 |
Cisco Multiple Products Remote Code Execution (CVE-2025-20337) |
| Critical |
7 Jan 2025 |
16 Apr 2026 |
CPAI-2025-15151 |
|
CVE-2024-40725
CVE-2025-55315 |
HTTP Requests Smuggling (CVE-2024-40725; CVE-2025-55315) |
| Critical |
7 Jan 2025 |
15 Apr 2026 |
CPAI-2026-3117 |
|
CVE-2024-40725
CVE-2025-55315
CVE-2026-40175 |
HTTP Requests Smuggling (CVE-2024-40725; CVE-2025-55315; CVE-2026-40175) |
| Critical |
14 Dec 2025 |
14 Apr 2026 |
CPAI-2024-5901 |
|
CVE-2024-7440
CVE-2024-7442
CVE-2024-7443 |
Vivotek Multiple Products Command Injection (CVE-2024-7440; CVE-2024-7442; CVE-2024-7443) |
| High |
12 Jun 2025 |
12 Apr 2026 |
CPAI-2025-14711 |
|
CVE-2025-2294 |
WordPress Kubio AI Page Builder Plugin Directory Traversal (CVE-2025-2294) |
| High |
8 Jun 2025 |
12 Apr 2026 |
CPAI-2024-5887 |
|
CVE-2024-13171 |
Ivanti Endpoint Manager Directory Traversal (CVE-2024-13171) |
| High |
13 May 2025 |
12 Apr 2026 |
CPAI-2025-14713 |
Adobe APSB25-52 |
CVE-2025-43560 |
Adobe ColdFusion Remote Code Execution (CVE-2025-43560) |
| High |
7 May 2025 |
12 Apr 2026 |
CPAI-2025-14712 |
|
CVE-2025-1661 |
WordPress HUSKY Products Filter Professional Plugin Local File Inclusion (CVE-2025-1661) |
| High |
27 Jul 2025 |
5 Apr 2026 |
CPAI-2025-0612 |
|
CVE-2025-6558 |
Google Chrome Authentication Bypass (CVE-2025-6558) |
| High |
8 Jun 2025 |
31 Mar 2026 |
CPAI-2025-14132 |
|
CVE-2025-0317 |
Ollama Denial of Service (CVE-2025-0317) |
| Critical |
14 Apr 2025 |
30 Mar 2026 |
CPAI-2025-14086 |
|
CVE-2025-3248 |
Langflow Remote Code Execution (CVE-2025-3248) |
| High |
14 Dec 2025 |
29 Mar 2026 |
CPAI-2025-13954 |
|
CVE-2025-53417 |
Delta Electronics DIAView Directory Traversal (CVE-2025-53417) |
| Medium |
29 May 2025 |
29 Mar 2026 |
CPAI-2025-14029 |
|
CVE-2025-46618 |
JetBrains TeamCity Cross-Site Scripting (CVE-2025-46618) |
| High |
12 Nov 2025 |
26 Mar 2026 |
CPAI-2025-11842 |
|
CVE-2025-64328 |
Sangoma FreePBX Endpoint Manager Command Injection (CVE-2025-64328) |
| Critical |
4 Jun 2025 |
26 Mar 2026 |
CPAI-2025-0367 |
|
CVE-2025-48827
CVE-2025-48828 |
vBulletin Remote Code Execution (CVE-2025-48827; CVE-2025-48828) |
| High |
4 Jun 2025 |
26 Mar 2026 |
CPAI-2014-2850 |
|
CVE-2014-0239 |
Samba Denial of Service (CVE-2014-0239) |
| Critical |
24 Mar 2025 |
23 Mar 2026 |
CPAI-2010-0982 |
|
CVE-2009-0542
CVE-2010-2453 |
FTP Insecure Sanitization in User Name (CVE-2009-0542; CVE-2010-2453) |
| High |
10 Dec 2025 |
23 Mar 2026 |
CPAI-2025-13587 |
|
CVE-2025-61128 |
Wavlink QUANTUM D3G Stack Overflow (CVE-2025-61128) |
| High |
29 Sep 2025 |
23 Mar 2026 |
CPAI-2025-13389 |
|
CVE-2025-47813 |
Wing FTP Server Information Disclosure (CVE-2025-47813) |
| Critical |
26 Jun 2025 |
22 Mar 2026 |
CPAI-2025-0481 |
|
CVE-2025-34037 |
Linksys Multiple Products Command Injection (CVE-2025-34037) |
| High |
4 Aug 2025 |
17 Mar 2026 |
CPAI-2024-5560 |
|
CVE-2024-33603 |
LevelOne WBR-6012 Information Disclosure (CVE-2024-33603) |
| High |
9 Jul 2025 |
17 Mar 2026 |
CPAI-2026-1769 |
|
CVE-2025-5571
CVE-2026-2218
CVE-2026-2227
CVE-2026-2260 |
D-Link DCS Command Injection (CVE-2025-5571; CVE-2026-2218; CVE-2026-2227; CVE-2026-2260) |
| High |
4 Aug 2025 |
16 Mar 2026 |
CPAI-2024-5519 |
|
CVE-2024-33603 |
LevelOne WBR-6012 Information Disclosure (CVE-2024-33603) |
| High |
20 Nov 2025 |
15 Mar 2026 |
CPAI-2025-13171 |
|
CVE-2025-58034 |
Fortinet FortiWeb Command Injection (CVE-2025-58034) |
| Critical |
27 Jul 2025 |
12 Mar 2026 |
CPAI-2025-3080 |
|
CVE-2025-54309 |
CrushFTP Authentication Bypass (CVE-2025-54309) |