Skip to content
Sign in

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
209CVEs this week31in CISA KEV5federal deadlines
50 of 209 CVEs in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityZyxel GS1900-48HPv2 firmware8.8HighExploitedEPSS 2.8%8 articles
CVE-2026-107441Zyxel GS1900-24E firmware vulnerabilityZyxel GS1900-24E firmware8.8HighNot in KEVEPSS 0.3%2 articles
CVE-2026-115732Certificate Name Authorization BypassPerforce Puppet Enterprise9.0CriticalNot in KEVEPSS –1 article
CVE-2026-115731Report Deserialization Code ExecutionPerforce Puppet Enterprise9.4CriticalNot in KEVEPSS –1 article
CVE-2026-95733Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code ExecutionHewlett Packard Enterprise (HPE) Fabric Composer9.6CriticalNot in KEVEPSS –1 article
CVE-2026-95732Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code ExecutionHewlett Packard Enterprise (HPE) Fabric Composer9.6CriticalNot in KEVEPSS –1 article
CVE-2026-95731Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative AccessHewlett Packard Enterprise (HPE) Fabric Composer9.8CriticalNot in KEVEPSS –1 article
CVE-2026-121247Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121246Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121229Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121156Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121126Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121035Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-109594SonicWall Global Management System (GMS) vulnerabilitySonicWall Global Management System (GMS)6.8MediumNot in KEVEPSS –1 article
CVE-2026-109593SonicWall Global Management System (GMS) vulnerabilitySonicWall Global Management System (GMS)9.1CriticalNot in KEVEPSS –1 article
CVE-2026-28336SolarWinds Dameware Command Injection VulnerabilitySolarWinds Dameware9.9CriticalNot in KEVEPSS –1 article
CVE-2026-28335SolarWinds Dameware Buffer Overflow VulnerabilitySolarWinds Dameware8.4HighNot in KEVEPSS –1 article
CVE-2026-28327SolarWinds Dameware DLL Hijacking VulnerabilitySolarWinds Dameware8.2HighNot in KEVEPSS –1 article
CVE-2026-16306CVE-2026-16306INFINITT Healthcare System ManagerUnratedNot in KEVEPSS 0.3%1 article
CVE-2026-16305CVE-2026-16305INFINITT Healthcare System ManagerUnratedNot in KEVEPSS 0.3%1 article
CVE-2026-112445No description published yetVendor not yet namedUnratedNot in KEVEPSS –1 article
CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerSUSE Rancher9.1CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespaceSUSE Rancher7.9HighNot in KEVEPSS 0.2%1 article
CVE-2026-119977WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionWordPress Core8.1HighExploitedDue in 2 daysEPSS 0.6%1 article
CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayBarracuda Networks Barracuda Email Security Gateway (ESG)9.3CriticalNot in KEVEPSS 0.7%2 articles
CVE-2026-111560OS Command Injection in Barracuda AppliancesBarracuda Networks Barracuda Email Security Gateway (ESG)8.6HighNot in KEVEPSS 0.5%2 articles
CVE-2026-67578FURUNO ELECTRIC CO., LTD. FA-50 vulnerabilityFURUNO ELECTRIC CO., LTD. FA-508.7HighNot in KEVEPSS 0.5%2 articles
CVE-2026-59769FURUNO ELECTRIC CO., LTD. FA-50 vulnerabilityFURUNO ELECTRIC CO., LTD. FA-509.1CriticalNot in KEVEPSS 0.6%2 articles
CVE-2024-50629Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)5.3MediumNot in KEVEPSS 35%2 articles
CVE-2024-10445Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)4.3MediumNot in KEVEPSS 0.4%2 articles
CVE-2024-10441Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)9.8CriticalNot in KEVEPSS 1.3%3 articles
CVE-2022-21894Microsoft Windows 10 Version 1809 vulnerabilityMicrosoft Windows 10 Version 18094.4MediumNot in KEVEPSS 8.6%3 articles
CVE-2026-40217BerriAI LiteLLM vulnerabilityBerriAI LiteLLM8.8HighNot in KEVEPSS 16%3 articles
CVE-2025-8088RARLAB WinRAR Path Traversal VulnerabilityRARLAB WinRAR8.4HighExploitedEPSS 94%23 articles
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux9.8CriticalNot in KEVEPSS 0.8%10 articles
CVE-2026-58868Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%2 articles
CVE-2026-58115Siemens SIMATIC IoT2050 Advanced vulnerabilitySiemens SIMATIC IoT2050 Advanced10.0CriticalNot in KEVEPSS 0.9%4 articles
CVE-2026-111585Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowTeamViewer Full Client8.8HighNot in KEVEPSS 0.3%4 articles
CVE-2026-81648CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX RouterVendor not yet named10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-119563phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table NamephpMyAdmin5.4MediumNot in KEVEPSS 0.2%1 article
CVE-2026-119561phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerphpMyAdmin7.6HighNot in KEVEPSS 0.2%1 article
CVE-2026-119429phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/setphpMyAdmin5.3MediumNot in KEVEPSS 0.4%1 article
CVE-2026-119428phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup DisabledphpMyAdmin6.3MediumNot in KEVEPSS 0.3%1 article
CVE-2026-119427phpMyAdmin through 5.2.3 SQL Injection via Designer saveSettingphpMyAdmin4.2MediumNot in KEVEPSS 0.2%1 article
CVE-2026-119426phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sqlphpMyAdmin7.7HighNot in KEVEPSS 0.3%1 article
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe Commerce10.0CriticalExploitedEPSS 4.0%9 articles
CVE-2026-112487Apple macOS vulnerabilityApple macOS7.8HighNot in KEVEPSS 0.2%1 article
CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli9.2CriticalExploitedDue in 6 daysEPSS 83%22 articles
CVE-2026-58984Google Android vulnerabilityGoogle Android8.4HighNot in KEVEPSS 0.1%1 article
CVE-2026-58936Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%1 article

50 of 209 CVEs in the news this week · 392 exploited CVEs in the CISA KEV catalogue.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in