| Critical |
26 Jul 2026 |
26 Jul 2026 |
CPAI-2026-9507 |
|
|
Server Authentication Bypass |
| High |
23 Jul 2026 |
23 Jul 2026 |
CPAI-2022-4777 |
|
CVE-2022-34169 |
Apache Xalan-Java Integer Overflow (CVE-2022-34169) |
| High |
23 Jul 2026 |
23 Jul 2026 |
CPAI-2026-9229 |
|
CVE-2026-2045 |
GIMP Out Of Bounds Write (CVE-2026-2045) |
| Critical |
19 Jul 2026 |
23 Jul 2026 |
CPAI-2026-9540 |
|
CVE-2026-60137 |
WordPress SQL Injection (CVE-2026-60137) |
| Critical |
16 Jul 2026 |
23 Jul 2026 |
CPAI-2026-9495 |
|
CVE-2026-6875 |
ServiceNow AI Platform Remote Code Execution (CVE-2026-6875) |
| High |
24 May 2026 |
22 Jul 2026 |
CPAI-2026-9491 |
|
CVE-2026-32255 |
Kan Server-Side Request Forgery (CVE-2026-32255) |
| High |
24 May 2026 |
21 Jul 2026 |
CPAI-2026-9415 |
|
CVE-2026-32255 |
Kan Server-Side Request Forgery (CVE-2026-32255) |
| High |
21 Jul 2026 |
21 Jul 2026 |
CPAI-2013-4188 |
|
CVE-2013-3307 |
Linksys Multiple Products Command Injection (CVE-2013-3307) |
| High |
21 Jul 2026 |
21 Jul 2026 |
CPAI-2026-9376 |
|
CVE-2026-41266 |
Flowise Information Disclosure (CVE-2026-41266) |
| Critical |
21 Jul 2026 |
21 Jul 2026 |
CPAI-2024-8257 |
|
CVE-2024-6779 |
Google Chrome Out of Bounds Read (CVE-2024-6779) |
| High |
12 Apr 2026 |
21 Jul 2026 |
CPAI-2025-14717 |
|
CVE-2025-3833 |
Zohocorp ManageEngine ADSelfService Plus SQL Injection (CVE-2025-3833) |
| High |
24 May 2026 |
20 Jul 2026 |
CPAI-2026-9342 |
|
CVE-2026-32255 |
Kan Server-Side Request Forgery (CVE-2026-32255) |
| Critical |
20 Jul 2026 |
20 Jul 2026 |
CPAI-2026-9289 |
|
CVE-2026-4228 |
LB-LINK BL-WR9000 Command Injection (CVE-2026-4228) |
| High |
20 Jul 2026 |
20 Jul 2026 |
CPAI-2026-9285 |
|
CVE-2026-2182 |
UTT 521G Command Injection (CVE-2026-2182) |
| Critical |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2026-9265 |
|
CVE-2026-60137 |
WordPress SQL Injection (CVE-2026-60137) |
| Critical |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2026-9267 |
|
CVE-2026-63030 |
WordPress Authentication Bypass (CVE-2026-63030) |
| High |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2026-9044 |
|
CVE-2026-41277 |
Flowise Privilege Escalation (CVE-2026-41277) |
| High |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2025-17975 |
|
CVE-2025-61734 |
Apache Kylin Information Disclosure (CVE-2025-61734) |
| High |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2025-17971 |
|
CVE-2025-0453 |
LFProjects MLFlow Denial of Service (CVE-2025-0453) |
| High |
19 Jul 2026 |
19 Jul 2026 |
CPAI-2026-8904 |
|
CVE-2026-3518 |
Progress Software Multiple Products Command Injection (CVE-2026-3518) |
| Critical |
10 Jun 2026 |
19 Jul 2026 |
CPAI-2026-7220 |
|
CVE-2026-10520 |
Ivanti Sentry Remote Code Execution (CVE-2026-10520) |
| Critical |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9183 |
|
CVE-2026-6875 |
ServiceNow AI Platform Remote Code Execution (CVE-2026-6875) |
| High |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9187 |
|
CVE-2026-49049 |
Joomla Helix3 Plugin Directory Traversal (CVE-2026-49049) |
| Critical |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9181 |
|
CVE-2026-15410 |
SonicWall SMA1000 Series Path Traversal (CVE-2026-15410) |
| Critical |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9185 |
|
CVE-2026-15409 |
SonicWall SMA1000 Series Server-Side Request Forgery (CVE-2026-15409) |
| High |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9128 |
Microsoft CVE-2026-49800 |
CVE-2026-49800 |
Microsoft Windows Web Proxy Auto-Discovery Protocol Elevation of Privilege (CVE-2026-49800) |
| Medium |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2024-8253 |
|
CVE-2024-56131 |
Progress LoadMaster Command Injection (CVE-2024-56131) |
| High |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-8776 |
|
CVE-2026-26026 |
GLPI Remote Code Execution (CVE-2026-26026) |
| Critical |
16 Jul 2026 |
16 Jul 2026 |
CPAI-2026-8774 |
|
CVE-2026-20896 |
Gitea Open Source Git Server Authentication Bypass (CVE-2026-20896) |
| Critical |
5 Jul 2026 |
16 Jul 2026 |
CPAI-2026-8444 |
|
CVE-2026-48276
CVE-2026-48282
CVE-2026-48313 |
Adobe ColdFusion Remote Code Execution (CVE-2026-48276; CVE-2026-48282; CVE-2026-48313) |
| High |
2 Jul 2026 |
16 Jul 2026 |
CPAI-2026-9121 |
|
CVE-2026-8451 |
Citrix NetScaler Out Of Bounds Read (CVE-2026-8451) |
| High |
15 Jul 2026 |
15 Jul 2026 |
CPAI-2026-9097 |
Adobe APSB26-73 |
CVE-2026-47997 |
Adobe Commerce Incorrect Authorization (APSB26-73: CVE-2026-47997) |
| High |
15 Jul 2026 |
15 Jul 2026 |
CPAI-2026-9078 |
Adobe APSB26-82 |
CVE-2026-48319 |
Adobe ColdFusion Arbitrary File Read (APSB26-82: CVE-2026-48319) |
| Critical |
22 Mar 2026 |
15 Jul 2026 |
CPAI-2025-18006 |
|
CVE-2025-14659
CVE-2025-69542 |
D-Link DIR Multiple Products Command Injection (CVE-2025-14659; CVE-2025-69542) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9031 |
Adobe APSB26-82 |
CVE-2026-48332 |
Adobe ColdFusion Server-Side Request Forgery (APSB26-82: CVE-2026-48332) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9030 |
Adobe APSB26-73 |
CVE-2026-47992 |
Adobe Commerce Improper Input Validation (APSB26-73: CVE-2026-47992) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9029 |
Adobe APSB26-73 |
CVE-2026-47996 |
Adobe Commerce Incorrect Authorization (APSB26-73: CVE-2026-47996) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9028 |
Adobe APSB26-73 |
CVE-2026-48356 |
Adobe Commerce Arbitrary File Upload (APSB26-73: CVE-2026-48356) |
| Medium |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9026 |
Microsoft CVE-2026-56164 |
CVE-2026-56164 |
Microsoft SharePoint Authentication Bypass (CVE-2026-56164) |
| Critical |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9025 |
Microsoft CVE-2026-50522 |
CVE-2026-50522 |
Microsoft SharePoint Remote Code Execution (CVE-2026-50522) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9023 |
Adobe APSB26-82 |
CVE-2026-48318 |
Adobe ColdFusion Directory Traversal (APSB26-82: CVE-2026-48318) |
| Critical |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9020 |
Microsoft CVE-2026-50518 |
CVE-2026-50518 |
Microsoft Windows DHCP Server Heap Overflow (CVE-2026-50518) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9018 |
Adobe APSB26-82 |
CVE-2026-48320 |
Adobe ColdFusion Cross-site Scripting (APSB26-82: CVE-2026-48320) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9027 |
Adobe APSB26-73 |
CVE-2026-47999 |
Adobe Commerce Cross-Site Scripting (APSB26-73: CVE-2026-47999) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-9011 |
Adobe APSB26-82 |
CVE-2026-48284 |
Adobe ColdFusion Improper Input Validation (APSB26-82: CVE-2026-48284) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-8907 |
Microsoft CVE-2026-58536 |
CVE-2026-58536 |
Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2026-58536) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-8852 |
Microsoft CVE-2026-50667 |
CVE-2026-50667 |
Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2026-50667) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-8833 |
Microsoft CVE-2026-50688 |
CVE-2026-50688 |
Microsoft Windows Win32k Elevation of Privilege (CVE-2026-50688) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-8834 |
Microsoft CVE-2026-54986 |
CVE-2026-54986 |
Microsoft Windows Win32k Elevation of Privilege (CVE-2026-54986) |
| High |
14 Jul 2026 |
14 Jul 2026 |
CPAI-2026-8832 |
Microsoft CVE-2026-54114 |
CVE-2026-54114 |
Microsoft Windows Win32k Elevation of Privilege (CVE-2026-54114) |