CVE Analysis Center
517 posts | Page 1 of 22
CVE Analysis Center
Apple CVE-2024-27834: Pointer Authentication Bypass Added to CISA KEV — What to Check
CVE Analysis Center
ManageEngine Log360 and EventLog Analyzer CVE-2026-13594: Unauthorized Access Flaw — Prepare Now
CVE Analysis Center
Debian and Ubuntu APT CVE-2026-109518: Package Swap to Root — Prepare Now
CVE Analysis Center
SolarWinds Dameware CVE-2026-28336: Authenticated Command Injection (CVSS 9.9) — Prepare Now
CVE Analysis Center
Critical Rails Active Storage ImageMagick Flaw (GHSA-f3w6-w445-fwh9): Prepare Now for Unauthenticated File Write via Uploads
CVE Analysis Center
Xen XSA-523 (CVE-2026-102703, CVE-2026-102704): Grant Copy Flaw Lets One Guest VM Read and Write Other VMs' Memory
CVE Analysis Center
Android November 2026 Security Bulletin: Critical No-Interaction RCE (CVE-2026-58868) — Prepare Mobile Fleets Now
CVE Analysis Center
Barracuda ESG Root Path (CVE-2026-116606 + CVE-2026-111560): Patch Email Gateways, WAF, ADC and Archivers Now
CVE Analysis Center
Langflow OSS CVE-2026-93680 and CVE-2026-110186: Two Unauthenticated Critical Flaws (CVSS 9.8), Fixed Only in 1.13.0
CVE Analysis Center
WSO2 API Manager CVE-2025-11969: System REST API Access Control Flaw Allows Unauthorized Admin Actions (CVSS 9.4)
CVE Analysis Center
Canonical LXD and MicroCloud CVE-2026-112816: Certificate Chain Flaw Lets Attackers Pose as Trusted Clients (CVSS 10.0)
CVE Analysis Center
WatchGuard Fireware OS 2026.4 and 12.12.4 Fix 18 Flaws, Including Pre-Auth Bugs in the Firebox SIP Proxy, Access Portal and FireCluster
CVE Analysis Center
TeamViewer CVE-2026-111585: A Malicious Host Can Run Code on the Viewer. Update to 15.83
CVE Analysis Center
WordPress Core 7.1.4 Fixes an Unauthenticated Upgrade-Window Race RCE (CVE-2026-119977). Update and Block wp-content/upgrade/
CVE Analysis Center
PwnEscape CVE-2026-99999: Linux Kernel Guest-to-Host Escape, Patch VM Hosts Now
CVE Analysis Center
Drupal Commerce Core CVE-2026-118539 Access Bypass Actively Exploited: Patch to 3.3.13 / 8.x-2.41 and Audit Orders
CVE Analysis Center
Trojanized Claude Code 2.1.312 and 2.1.313 in Cursor Marketplace Plants SSH Backdoor
CVE Analysis Center
Cisco Secure Firewall ASA and FTD CVE-2026-76418: Exploited SSL VPN DoS Flaw Added to CISA KEV
CVE Analysis Center
Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell
CVE Analysis Center
Progress WS_FTP Server CVE-2026-84295 and CVE-2026-90868: Critical Flaws Fixed in 2024.0.7 and 2025.0.4
CVE Analysis Center
Linux Kernel CVE-2026-98432: Critical TCP Use-After-Free, RHEL Fixed, Ubuntu Pending
CVE Analysis Center
VMware ESX CVE-2026-41709: Low-Rated Logging Flaw Now in CISA KEV After Zero-Day Use
CVE Analysis Center
FreeSWITCH CVE-2026-116779: Critical SIP MESSAGE Flaw Exploited in the Wild, Fixed in 1.11.3
CVE Analysis Center