# 2026 Advisories Archive

| Severity | Date Published | Date Updated | Check Point Reference | Source | Industry Reference | Description |
| --- | --- | --- | --- | --- | --- | --- |
| **Critical** | 26 Jul 2026 | 26 Jul 2026 | [CPAI-2026-9507](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9507.html) |  |  | [Server Authentication Bypass](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9507.html) |
| **High** | 23 Jul 2026 | 23 Jul 2026 | [CPAI-2022-4777](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2022-4777.html) |  | [CVE-2022-34169](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34169) | [Apache Xalan-Java Integer Overflow (CVE-2022-34169)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2022-4777.html) |
| **High** | 23 Jul 2026 | 23 Jul 2026 | [CPAI-2026-9229](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9229.html) |  | [CVE-2026-2045](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2045) | [GIMP Out Of Bounds Write (CVE-2026-2045)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9229.html) |
| **Critical** | 19 Jul 2026 | 23 Jul 2026 | [CPAI-2026-9540](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9540.html) |  | [CVE-2026-60137](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60137) | [WordPress SQL Injection (CVE-2026-60137)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9540.html) |
| **Critical** | 16 Jul 2026 | 23 Jul 2026 | [CPAI-2026-9495](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9495.html) |  | [CVE-2026-6875](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6875) | [ServiceNow AI Platform Remote Code Execution (CVE-2026-6875)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9495.html) |
| **High** | 24 May 2026 | 22 Jul 2026 | [CPAI-2026-9491](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9491.html) |  | [CVE-2026-32255](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32255) | [Kan Server-Side Request Forgery (CVE-2026-32255)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9491.html) |
| **High** | 24 May 2026 | 21 Jul 2026 | [CPAI-2026-9415](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9415.html) |  | [CVE-2026-32255](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32255) | [Kan Server-Side Request Forgery (CVE-2026-32255)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9415.html) |
| **High** | 21 Jul 2026 | 21 Jul 2026 | [CPAI-2013-4188](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2013-4188.html) |  | [CVE-2013-3307](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3307) | [Linksys Multiple Products Command Injection (CVE-2013-3307)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2013-4188.html) |
| **High** | 21 Jul 2026 | 21 Jul 2026 | [CPAI-2026-9376](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9376.html) |  | [CVE-2026-41266](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41266) | [Flowise Information Disclosure (CVE-2026-41266)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9376.html) |
| **Critical** | 21 Jul 2026 | 21 Jul 2026 | [CPAI-2024-8257](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8257.html) |  | [CVE-2024-6779](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6779) | [Google Chrome Out of Bounds Read (CVE-2024-6779)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8257.html) |
| **High** | 12 Apr 2026 | 21 Jul 2026 | [CPAI-2025-14717](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-14717.html) |  | [CVE-2025-3833](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3833) | [Zohocorp ManageEngine ADSelfService Plus SQL Injection (CVE-2025-3833)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-14717.html) |
| **High** | 24 May 2026 | 20 Jul 2026 | [CPAI-2026-9342](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9342.html) |  | [CVE-2026-32255](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32255) | [Kan Server-Side Request Forgery (CVE-2026-32255)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9342.html) |
| **Critical** | 20 Jul 2026 | 20 Jul 2026 | [CPAI-2026-9289](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9289.html) |  | [CVE-2026-4228](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4228) | [LB-LINK BL-WR9000 Command Injection (CVE-2026-4228)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9289.html) |
| **High** | 20 Jul 2026 | 20 Jul 2026 | [CPAI-2026-9285](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9285.html) |  | [CVE-2026-2182](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2182) | [UTT 521G Command Injection (CVE-2026-2182)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9285.html) |
| **Critical** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2026-9265](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9265.html) |  | [CVE-2026-60137](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60137) | [WordPress SQL Injection (CVE-2026-60137)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9265.html) |
| **Critical** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2026-9267](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9267.html) |  | [CVE-2026-63030](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63030) | [WordPress Authentication Bypass (CVE-2026-63030)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9267.html) |
| **High** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2026-9044](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9044.html) |  | [CVE-2026-41277](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41277) | [Flowise Privilege Escalation (CVE-2026-41277)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9044.html) |
| **High** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2025-17975](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17975.html) |  | [CVE-2025-61734](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61734) | [Apache Kylin Information Disclosure (CVE-2025-61734)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17975.html) |
| **High** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2025-17971](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17971.html) |  | [CVE-2025-0453](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0453) | [LFProjects MLFlow Denial of Service (CVE-2025-0453)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-17971.html) |
| **High** | 19 Jul 2026 | 19 Jul 2026 | [CPAI-2026-8904](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8904.html) |  | [CVE-2026-3518](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3518) | [Progress Software Multiple Products Command Injection (CVE-2026-3518)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8904.html) |
| **Critical** | 10 Jun 2026 | 19 Jul 2026 | [CPAI-2026-7220](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7220.html) |  | [CVE-2026-10520](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10520) | [Ivanti Sentry Remote Code Execution (CVE-2026-10520)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-7220.html) |
| **Critical** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9183](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9183.html) |  | [CVE-2026-6875](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6875) | [ServiceNow AI Platform Remote Code Execution (CVE-2026-6875)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9183.html) |
| **High** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9187](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9187.html) |  | [CVE-2026-49049](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49049) | [Joomla Helix3 Plugin Directory Traversal (CVE-2026-49049)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9187.html) |
| **Critical** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9181](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9181.html) |  | [CVE-2026-15410](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15410) | [SonicWall SMA1000 Series Path Traversal (CVE-2026-15410)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9181.html) |
| **Critical** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9185](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9185.html) |  | [CVE-2026-15409](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15409) | [SonicWall SMA1000 Series Server-Side Request Forgery (CVE-2026-15409)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9185.html) |
| **High** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9128](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9128.html) | Microsoft [CVE-2026-49800](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-49800) | [CVE-2026-49800](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49800) | [Microsoft Windows Web Proxy Auto-Discovery Protocol Elevation of Privilege (CVE-2026-49800)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9128.html) |
| **Medium** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2024-8253](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8253.html) |  | [CVE-2024-56131](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56131) | [Progress LoadMaster Command Injection (CVE-2024-56131)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2024-8253.html) |
| **High** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-8776](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8776.html) |  | [CVE-2026-26026](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26026) | [GLPI Remote Code Execution (CVE-2026-26026)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8776.html) |
| **Critical** | 16 Jul 2026 | 16 Jul 2026 | [CPAI-2026-8774](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8774.html) |  | [CVE-2026-20896](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20896) | [Gitea Open Source Git Server Authentication Bypass (CVE-2026-20896)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8774.html) |
| **Critical** | 5 Jul 2026 | 16 Jul 2026 | [CPAI-2026-8444](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8444.html) |  | [CVE-2026-48276](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48276)<br>[CVE-2026-48282](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48282)<br>[CVE-2026-48313](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48313) | [Adobe ColdFusion Remote Code Execution (CVE-2026-48276; CVE-2026-48282; CVE-2026-48313)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8444.html) |
| **High** | 2 Jul 2026 | 16 Jul 2026 | [CPAI-2026-9121](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9121.html) |  | [CVE-2026-8451](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8451) | [Citrix NetScaler Out Of Bounds Read (CVE-2026-8451)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9121.html) |
| **High** | 15 Jul 2026 | 15 Jul 2026 | [CPAI-2026-9097](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9097.html) | Adobe [APSB26-73](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | [CVE-2026-47997](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47997) | [Adobe Commerce Incorrect Authorization (APSB26-73: CVE-2026-47997)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9097.html) |
| **High** | 15 Jul 2026 | 15 Jul 2026 | [CPAI-2026-9078](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9078.html) | Adobe [APSB26-82](https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html) | [CVE-2026-48319](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48319) | [Adobe ColdFusion Arbitrary File Read (APSB26-82: CVE-2026-48319)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9078.html) |
| **Critical** | 22 Mar 2026 | 15 Jul 2026 | [CPAI-2025-18006](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-18006.html) |  | [CVE-2025-14659](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14659)<br>[CVE-2025-69542](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69542) | [D-Link DIR Multiple Products Command Injection (CVE-2025-14659; CVE-2025-69542)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2025-18006.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9031](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9031.html) | Adobe [APSB26-82](https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html) | [CVE-2026-48332](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48332) | [Adobe ColdFusion Server-Side Request Forgery (APSB26-82: CVE-2026-48332)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9031.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9030](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9030.html) | Adobe [APSB26-73](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | [CVE-2026-47992](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47992) | [Adobe Commerce Improper Input Validation (APSB26-73: CVE-2026-47992)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9030.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9029](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9029.html) | Adobe [APSB26-73](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | [CVE-2026-47996](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47996) | [Adobe Commerce Incorrect Authorization (APSB26-73: CVE-2026-47996)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9029.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9028](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9028.html) | Adobe [APSB26-73](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | [CVE-2026-48356](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48356) | [Adobe Commerce Arbitrary File Upload (APSB26-73: CVE-2026-48356)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9028.html) |
| **Medium** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9026](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9026.html) | Microsoft [CVE-2026-56164](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164) | [CVE-2026-56164](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56164) | [Microsoft SharePoint Authentication Bypass (CVE-2026-56164)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9026.html) |
| **Critical** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9025](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9025.html) | Microsoft [CVE-2026-50522](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50522) | [CVE-2026-50522](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50522) | [Microsoft SharePoint Remote Code Execution (CVE-2026-50522)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9025.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9023](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9023.html) | Adobe [APSB26-82](https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html) | [CVE-2026-48318](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48318) | [Adobe ColdFusion Directory Traversal (APSB26-82: CVE-2026-48318)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9023.html) |
| **Critical** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9020](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9020.html) | Microsoft [CVE-2026-50518](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50518) | [CVE-2026-50518](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50518) | [Microsoft Windows DHCP Server Heap Overflow (CVE-2026-50518)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9020.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9018](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9018.html) | Adobe [APSB26-82](https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html) | [CVE-2026-48320](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48320) | [Adobe ColdFusion Cross-site Scripting (APSB26-82: CVE-2026-48320)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9018.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9027](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9027.html) | Adobe [APSB26-73](https://helpx.adobe.com/security/products/magento/apsb26-73.html) | [CVE-2026-47999](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47999) | [Adobe Commerce Cross-Site Scripting (APSB26-73: CVE-2026-47999)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9027.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-9011](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9011.html) | Adobe [APSB26-82](https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html) | [CVE-2026-48284](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48284) | [Adobe ColdFusion Improper Input Validation (APSB26-82: CVE-2026-48284)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-9011.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-8907](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8907.html) | Microsoft [CVE-2026-58536](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-58536) | [CVE-2026-58536](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58536) | [Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege (CVE-2026-58536)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8907.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-8852](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8852.html) | Microsoft [CVE-2026-50667](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50667) | [CVE-2026-50667](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50667) | [Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2026-50667)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8852.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-8833](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8833.html) | Microsoft [CVE-2026-50688](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-50688) | [CVE-2026-50688](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50688) | [Microsoft Windows Win32k Elevation of Privilege (CVE-2026-50688)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8833.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-8834](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8834.html) | Microsoft [CVE-2026-54986](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-54986) | [CVE-2026-54986](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54986) | [Microsoft Windows Win32k Elevation of Privilege (CVE-2026-54986)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8834.html) |
| **High** | 14 Jul 2026 | 14 Jul 2026 | [CPAI-2026-8832](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8832.html) | Microsoft [CVE-2026-54114](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-54114) | [CVE-2026-54114](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54114) | [Microsoft Windows Win32k Elevation of Privilege (CVE-2026-54114)](https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-8832.html) |