Security advisories

Plain-English explanations of named CVEs, with affected versions and sources. Not a vulnerability feed for your products — see firmware security for that.

Last updated:
Severity
Known exploited
Vendor
Weakness (CWE)
Year

97 results

7.2HighCISA KEV

CVE-2026-15410

CVE-2026-15410: SonicWall SMA1000 Post-Auth Code Injection to Root Commands (KEV)

SonicWall SMA1000 (SMA 6210, 7210, 8200v) firmware

9.8CriticalCISA KEV

CVE-2026-16232

CVE-2026-16232: Check Point SmartConsole Authentication Bypass to Admin Takeover (KEV, Exploited)

Check Point Multi-Domain Security Management

10CriticalCISA KEV

CVE-2026-16812

CVE-2026-16812: Arista VeloCloud Orchestrator OS Command Injection (KEV)

Arista VeloCloud Orchestrator (on-prem)

9.8CriticalCISA KEV

CVE-2026-19490

CVE-2026-19490: Citrix NetScaler ADC/Gateway Authentication Bypass

Citrix NetScaler ADC

10CriticalCISA KEV

CVE-2026-20079

CVE-2026-20079: Cisco Secure FMC Authentication Bypass to Root RCE

Cisco Secure Firewall Management Center (FMC)

10CriticalCISA KEV

CVE-2026-20182

CVE-2026-20182: Cisco Catalyst SD-WAN Controller Auth Bypass (KEV)

Cisco Catalyst SD-WAN Manager

8.6HighCISA KEV

CVE-2026-20230

CVE-2026-20230: Cisco Unified Communications Manager SSRF (KEV, Actively Exploited)

Cisco Unified Communications Manager

7.8HighCISA KEV

CVE-2026-20245

CVE-2026-20245: Cisco Catalyst SD-WAN Manager Root Privilege Escalation (KEV)

Cisco Catalyst SD-WAN Manager (vManage)

5.3MediumCISA KEV

CVE-2026-20316

CVE-2026-20316: Cisco Secure FMC Static Credential Login (KEV, ransomware)

Cisco Secure Firewall Management Center (FMC) Software

8.6HighCISA KEV

CVE-2026-20349

CVE-2026-20349: Cisco Secure Firewall ASA/FTD Remote Access VPN DoS (KEV)

Cisco Secure Firewall ASA Software

10CriticalCISA KEV

CVE-2026-22769

CVE-2026-22769: Dell RecoverPoint for VMs Hard-Coded Credential RCE

Dell RecoverPoint for Virtual Machines (RP4VMs)

9.8CriticalCISA KEV

CVE-2026-24858

CVE-2026-24858: Fortinet FortiCloud SSO Cross-Device Authentication Bypass (KEV, Exploited)

Fortinet FortiOS

8.8HighCISA KEV

CVE-2026-25108

CVE-2026-25108: Soliton Systems FileZen OS Command Injection (KEV)

Soliton Systems FileZen

10CriticalCISA KEV

CVE-2026-34909

CVE-2026-34909: Ubiquiti UniFi OS Path Traversal (KEV, CVSS 10.0)

Ubiquiti UniFi OS (Cloud Gateways, Dream Machine family, UNVR, UNAS, UniFi Express, UniFi OS Server)

10Critical

CVE-2026-3611

CVE-2026-3611: Honeywell IQ4 Series BMS Controller Auth Bypass

Honeywell IQ4E / IQ412 / IQ422 / IQ4NC / IQ41x BMS Controllers

7.8HighCISA KEV

CVE-2026-46300

CVE-2026-46300: Linux Kernel skb_try_coalesce() Shared-Fragment Flaw

Linux Kernel

9.3CriticalCISA KEV

CVE-2026-50751

CVE-2026-50751: Check Point Security Gateway IKEv1 Auth Bypass (KEV)

Check Point Quantum Security Gateway (Gaia OS)

8.8HighCISA KEV

CVE-2026-58704

CVE-2026-58704: Google Pixel Cellular Modem Privilege Escalation (KEV)

Google Pixel devices (cellular modem component)

7.4High

CVE-2026-60007

CVE-2026-60007: Eclipse Milo OPC UA Padding-Oracle Credential Theft

Eclipse Milo (OPC UA SDK)

7.5High

CVE-2026-62927

CVE-2026-62927: Eclipse Milo OPC UA Authorization Bypass

Eclipse Milo

9.8Critical

CVE-2026-65130

CVE-2026-65130: NVIDIA Infrastructure Controller OS Command Injection

NVIDIA Infrastructure Controller

9.8Critical

CVE-2026-6653

CVE-2026-6653: Hitachi Energy RTU500 libxml2 Use-After-Free

Hitachi Energy RTU500 series CMU Firmware

8.2HighCISA KEV

CVE-2026-67277

CVE-2026-67277: MikroTik RouterOS Bandwidth-Test Kernel Memory Disclosure

MikroTik RouterOS

6.5MediumCISA KEV

CVE-2026-67279

CVE-2026-67279: MikroTik RouterOS SSH Auth Bypass (KEV)

MikroTik RouterOS

Questions about this page?

[email protected] Chat with David on WhatsApp

Check if your firmware is affected

Get a firmware scan reportChat with David on WhatsApp