CISA KEV Catalog

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation p

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod

A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserial

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypas

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling function

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S

Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Ma

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provide

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, f

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before vers

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote cod

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 thro

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows rem

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, an

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authentic

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker t

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 2

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file s

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrar

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges loc

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arb

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticat

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Br

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compati