CISA KEV Catalog

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation p

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserial

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Den

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (compo

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior t

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a n

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint a

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated atta

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypas

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenti

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote at

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling function

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate p

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the