Security advisories
Plain-English explanations of named CVEs, with affected versions and sources. Not a vulnerability feed for your products — see firmware security for that.
CVE-2021-22681: Rockwell Logix Controller Key Bypass
CVSS 9.8 · CISA KEV
CVE-2021-22681: CISA KEV flaw lets attackers bypass the key verifying Logix controller connections. Affected models, mitigations, sourced to NVD and CISA ICS.
CVE-2021-44228 (Log4Shell): Apache Log4j2 RCE explained
CVSS 10 · CISA KEV
Log4Shell (CVE-2021-44228): critical CVSS 10.0 Apache Log4j2 JNDI remote code execution, in CISA KEV since 2021 — affected versions, sourced to NVD and CISA.
CVE-2023-20198: Cisco IOS XE Web UI privilege escalation
CVSS 10 · CISA KEV
CVE-2023-20198: critical CVSS 10.0 Cisco IOS XE Web UI flaw for creating privileged accounts; exploited, in CISA KEV. Also hits Rockwell Stratix switches.
CVE-2023-27997: FortiOS SSL-VPN Heap Overflow
CVSS 9.8 · CISA KEV
CVE-2023-27997 ("XORtigate"): KEV pre-auth heap overflow RCE in FortiOS/FortiProxy SSL-VPN. Versions, patches, sourced to NVD, CISA KEV, Fortinet PSIRT.
CVE-2023-34362: MOVEit Transfer SQL injection (Cl0p)
CVSS 9.8 · CISA KEV
CVE-2023-34362: critical CVSS 9.8 SQL injection in MOVEit Transfer, mass-exploited by the Cl0p group. In CISA KEV since June 2023, sourced to NVD and CISA.
CVE-2023-46805: Ivanti Connect Secure Auth Bypass
CVSS 8.2 · CISA KEV
CVE-2023-46805: KEV auth bypass in Ivanti Connect Secure/Policy Secure, chained with CVE-2024-21887 for RCE. Sourced to NVD, CISA KEV, FIRST EPSS.
CVE-2023-4966 (Citrix Bleed): NetScaler session hijack
CVSS 7.5 · CISA KEV
Citrix Bleed (CVE-2023-4966): CISA KEV NetScaler flaw leaking memory, used to hijack sessions. Versions, fixes, scoring, sourced to NVD, CISA and Citrix.
CVE-2024-0012: PAN-OS Management Interface Bypass
CVSS 9.8 · CISA KEV
CVE-2024-0012: CISA KEV auth bypass in the PAN-OS management interface, known ransomware use. Versions, fixes, scoring, sourced to NVD, CISA and Palo Alto.
CVE-2024-11667: Zyxel Firewall Path Traversal (KEV)
CVSS 9.8 · CISA KEV
CVE-2024-11667: CISA KEV path-traversal flaw in Zyxel firewall firmware, known ransomware use. Versions, fixes, scoring, sourced to NVD, CISA and Zyxel.
CVE-2024-1709: ConnectWise ScreenConnect auth bypass
CVSS 10 · CISA KEV
CVE-2024-1709: KEV auth bypass in ConnectWise ScreenConnect letting attackers create admin accounts. Versions, fix, scoring sourced to NVD, CISA, ConnectWise.
CVE-2024-21762: Fortinet FortiOS SSL-VPN RCE
CVSS 9.8 · CISA KEV
CVE-2024-21762: KEV out-of-bounds write in FortiOS/FortiProxy SSL-VPN, unauthenticated RCE. Versions, patches, scoring, sourced to NVD, CISA and Fortinet.
CVE-2024-21887: Ivanti Connect Secure command injection
CVSS 9.1 · CISA KEV
CVE-2024-21887: KEV command injection in Ivanti Connect Secure/Policy Secure, chainable for unauthenticated RCE. Scoring sourced to NVD, CISA.
CVE-2024-21893: Ivanti Connect Secure SSRF
CVSS 8.2 · CISA KEV
CVE-2024-21893: KEV SSRF in Ivanti Connect Secure/Policy Secure/Neurons for ZTA SAML, chained for RCE. Sourced to NVD, CISA KEV, FIRST EPSS.
CVE-2024-3400: PAN-OS GlobalProtect command injection
CVSS 10 · CISA KEV
Critical CVSS 10.0 PAN-OS GlobalProtect flaw in the CISA KEV catalog: affected versions, exploitation status and fixes, sourced to NVD and CISA.
CVE-2024-47575: FortiManager Missing Authentication
CVSS 9.8 · CISA KEV
CVE-2024-47575 ("FortiJump"): KEV missing-auth RCE in FortiManager's fgfmd daemon, exploited in the wild. Sourced to NVD, CISA KEV, Fortinet PSIRT, EPSS.
CVE-2025-5086: Dassault DELMIA Apriso RCE (KEV)
CVSS 9 · CISA KEV
CVE-2025-5086: KEV deserialization flaw in Dassault DELMIA Apriso lets a remote attacker run code on factory MES servers. Sourced to NVD, CISA KEV and Dassault.
CVE-2026-102764: BeyondTrust Remote Support Bypass (KEV)
CVSS 9.8 · CISA KEV
CVE-2026-102764: KEV auth bypass let a China-nexus actor plant files on BeyondTrust Remote Support unauthenticated. Sourced to NVD, CISA KEV, CISA alert, EPSS.
CVE-2026-106931: SiteGuard WAF OS Command Injection
CVSS 7.8 · CISA KEV
CVE-2026-106931: KEV command injection in SiteGuard WAF lets attackers run root/SYSTEM commands; actively exploited. Sourced to NVD, CISA, JVN, FIRST EPSS.
CVE-2026-110936: Siemens Software Center DLL Hijack (KEV)
CVSS 6.7 · CISA KEV
CVE-2026-110936: KEV DLL hijack in Siemens Software Center, actively exploited via a trojanized installer. Sourced to NVD, CISA KEV and Siemens.
CVE-2026-21589: Atlassian Data Center File Access (KEV)
CVSS 7.5 · CISA KEV
CVE-2026-21589: KEV file-read flaw hits Confluence, Jira, Bitbucket and 5 more Atlassian Data Center products, unauthenticated. Sourced to NVD, CISA KEV.
CVE-2026-62927: Eclipse Milo OPC UA Authorization Bypass
CVSS 7.5
CVE-2026-62927: Eclipse Milo OPC UA stack lets an unauthenticated client bypass method-call checks via batched Call requests. Sourced to NVD, CISA, EPSS.
CVE-2026-6866: Schneider EcoStruxure Panel Server Creds
CVSS 7.5
CVE-2026-6866: Schneider Electric Panel Server can revert credentials to known defaults, enabling remote auth bypass. Sourced to NVD, CISA ICS, Schneider.
CVE-2026-76519: Cisco Secure Email Gateway RCE
CVSS 9.8 · CISA KEV
CVE-2026-76519: KEV critical file-write RCE in Cisco Secure Email Gateway AMP scanning. Patch, versions, scoring, sourced to NVD, CISA and Cisco.
CVE-2026-9853: Hitachi Energy MicroSCADA Auth Bypass
CVSS 7.8
CVE-2026-9853: Hitachi Energy MicroSCADA SYS600 flaw lets any OS user bypass SCADA auth to read/modify objects. Sourced to NVD, CISA ICS, FIRST EPSS.