Security advisories

Plain-English explanations of named CVEs, with affected versions and sources. Not a vulnerability feed for your products — see firmware security for that.

Last updated:
Severity
Known exploited
Vendor
Weakness (CWE)
Year

97 results

7.5High

CVE-2026-6866

CVE-2026-6866: Schneider EcoStruxure Panel Server Creds

Schneider Electric EcoStruxure Panel Server

8.8HighCISA KEV

CVE-2026-7273

CVE-2026-7273: Zyxel GS1900 Switch CGI Buffer Overflow RCE

Zyxel GS1900-8

5.8MediumCISA KEV

CVE-2026-7473

CVE-2026-7473: Arista EOS Tunnel Decapsulation Spoofing (KEV)

Arista EOS (7020R, 7280R/R2/R3, 7500R/R2/R3, 7800R3 series switches with VXLAN, decap-groups or GRE tunnel decapsulation configured)

8.6HighCISA KEV

CVE-2026-76418

CVE-2026-76418: Cisco Secure Firewall ASA/FTD SSL VPN Reload DoS (KEV, Exploited)

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

10CriticalCISA KEV

CVE-2026-76460

CVE-2026-76460: Cisco Identity Services Engine Authentication Bypass (KEV)

Cisco Identity Services Engine (ISE) / ISE-PIC

9.8CriticalCISA KEV

CVE-2026-76461

CVE-2026-76461: Cisco Secure Email Gateway SQL Injection to Root RCE (KEV)

Cisco Secure Email Gateway (AsyncOS)

9.8CriticalCISA KEV

CVE-2026-76504

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Auth Bypass (KEV)

Cisco Catalyst SD-WAN Manager

9.8CriticalCISA KEV

CVE-2026-76519

CVE-2026-76519: Cisco Secure Email Gateway RCE

Cisco Secure Email Gateway (AsyncOS)

9.8CriticalCISA KEV

CVE-2026-8037

CVE-2026-8037: Progress Kemp LoadMaster Unauthenticated OS Command Injection RCE

Progress Kemp LoadMaster

9.1Critical

CVE-2026-81535

CVE-2026-81535: wolfSSH Unauthorized Forwarded-TCPIP Channel Opens

wolfSSH

10CriticalCISA KEV

CVE-2026-83548

CVE-2026-83548: SonicWall SMA1000 Pre-Auth SSRF (KEV)

SonicWall SMA1000 Appliances (SMA8200v, SMA6210, SMA7210)

7.8HighCISA KEV

CVE-2026-83549

CVE-2026-83549: SonicWall SMA1000 Post-Auth OS Command Injection (KEV)

SonicWall SMA1000 Appliances (SMA8200v, SMA6210, SMA7210)

9.8CriticalCISA KEV

CVE-2026-8452

CVE-2026-8452: Citrix NetScaler ADC/Gateway Memory Overflow (KEV)

Citrix NetScaler ADC

9.8Critical

CVE-2026-85079

CVE-2026-85079: Silicon Labs EmberZNet Zigbee Out-of-Bounds Write RCE

Silicon Labs EmberZNet (Zigbee stack)

9.8CriticalCISA KEV

CVE-2026-85102

CVE-2026-85102: Check Point Quantum Gateway/Spark VPN Cert-Validation RCE (KEV)

Check Point Security Gateway / Spark Firewall (Gaia Embedded)

9.8CriticalCISA KEV

CVE-2026-86060

CVE-2026-86060: MikroTik RouterOS SSH Privilege Escalation (KEV, "MikroTrick")

MikroTik RouterOS

9.8Critical

CVE-2026-87659

CVE-2026-87659: Brocade Fabric OS Inband Management Authorization Bypass

Brocade Fabric OS

9.8CriticalCISA KEV

CVE-2026-88771

CVE-2026-88771: Citrix NetScaler ADC/Gateway Unauthenticated Command Execution (KEV)

Citrix NetScaler ADC

9.5CriticalCISA KEV

CVE-2026-88772

CVE-2026-88772: Citrix NetScaler ADC/Gateway DTLS Pre-Auth Memory Overflow (KEV)

Citrix NetScaler ADC / NetScaler Gateway

7.5HighCISA KEV

CVE-2026-88779

CVE-2026-88779: Citrix NetScaler ADC/Gateway Memory Buffer DoS (KEV)

Citrix NetScaler ADC

9.8CriticalCISA KEV

CVE-2026-93616

CVE-2026-93616: Check Point Security Management Pre-Auth RCE (KEV)

Check Point Security Management Server

10CriticalCISA KEV

CVE-2026-93952

CVE-2026-93952: Arista VeloCloud Orchestrator Flaw (KEV)

Arista VeloCloud Orchestrator (VCO) On-Prem

9.8CriticalCISA KEV

CVE-2026-94127

CVE-2026-94127: F5 BIG-IP APM OAuth Heap Overflow RCE (KEV)

F5 BIG-IP Access Policy Manager (APM)

9.8CriticalCISA KEV

CVE-2026-9586

CVE-2026-9586: Sangoma Switchvox Unauthenticated SQLi to RCE (KEV)

Sangoma Switchvox

Questions about this page?

[email protected] Chat with David on WhatsApp

Check if your firmware is affected

Get a firmware scan reportChat with David on WhatsApp