Skip to content
Sign in

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
200CVEs this week34in CISA KEV4federal deadlines
50 of 200 CVEs in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayBarracuda Networks Barracuda Email Security Gateway (ESG)9.3CriticalNot in KEVEPSS 0.7%3 articles
CVE-2026-111560OS Command Injection in Barracuda AppliancesBarracuda Networks Barracuda Email Security Gateway (ESG)8.6HighNot in KEVEPSS 0.5%3 articles
CVE-2026-109518Debian vulnerabilityDebianUnratedNot in KEVEPSS –1 article
CVE-2026-20700Apple Multiple Buffer Overflow VulnerabilityApple Multiple ProductsUnratedExploitedEPSS 1.7%11 articles
CVE-2025-43529Apple Multiple Products Use-After-Free WebKit VulnerabilityApple Multiple ProductsUnratedExploitedEPSS 26%8 articles
CVE-2025-43520Apple Multiple Products Classic Buffer Overflow VulnerabilityApple Multiple ProductsUnratedExploitedEPSS 0.4%8 articles
CVE-2025-43510Apple Multiple Products Improper Locking VulnerabilityApple Multiple ProductsUnratedExploitedEPSS 0.4%8 articles
CVE-2025-14174Google Chromium Out of Bounds Memory Access VulnerabilityGoogle ChromiumUnratedExploitedEPSS 55%6 articles
CVE-2024-27834Apple Safari vulnerabilityApple Safari5.5MediumNot in KEVEPSS 0.6%1 article
CVE-2000-0411No description published yetVendor not yet namedUnratedNot in KEVEPSS 7.5%1 article
CVE-2026-51990No description published yetVendor not yet namedUnratedNot in KEVEPSS 0.9%3 articles
CVE-2026-120422Insecure HTTP configuration retrieval in Sogou Input Method allows arbitrary code executionSogou Input Method8.9HighNot in KEVEPSS –1 article
CVE-2021-38003Google Chromium V8 Memory Corruption VulnerabilityGoogle Chromium V88.8HighExploitedEPSS 39%1 article
CVE-2026-102704arbitrary read/write via grant copyXenUnratedNot in KEVEPSS –1 article
CVE-2026-102703arbitrary read/write via grant copyXenUnratedNot in KEVEPSS –1 article
CVE-2026-121156Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –2 articles
CVE-2026-121035Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –2 articles
CVE-2026-58882Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%3 articles
CVE-2026-58868Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%4 articles
CVE-2026-119977WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code ExecutionWordPress Core8.1HighExploitedDue in 2 daysEPSS 0.6%3 articles
CVE-2026-58936Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%2 articles
CVE-2026-58876Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS 0.2%2 articles
CVE-2026-40217BerriAI LiteLLM vulnerabilityBerriAI LiteLLM8.8HighNot in KEVEPSS 16%4 articles
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityWebPros cPanel & WHM and WP2 (WordPress Squared)9.8CriticalExploitedEPSS 99%17 articles
CVE-2026-7273Zyxel GS1900 Series Switches Stack-Based Buffer Overflow VulnerabilityZyxel GS1900-48HPv2 firmware8.8HighExploitedEPSS 2.8%8 articles
CVE-2026-107441Zyxel GS1900-24E firmware vulnerabilityZyxel GS1900-24E firmware8.8HighNot in KEVEPSS 0.3%2 articles
CVE-2026-115732Certificate Name Authorization BypassPerforce Puppet Enterprise9.0CriticalNot in KEVEPSS –1 article
CVE-2026-115731Report Deserialization Code ExecutionPerforce Puppet Enterprise9.4CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-95733Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code ExecutionHewlett Packard Enterprise (HPE) Fabric Composer9.6CriticalNot in KEVEPSS –1 article
CVE-2026-95732Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code ExecutionHewlett Packard Enterprise (HPE) Fabric Composer9.6CriticalNot in KEVEPSS –1 article
CVE-2026-95731Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative AccessHewlett Packard Enterprise (HPE) Fabric Composer9.8CriticalNot in KEVEPSS –1 article
CVE-2026-121247Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121246Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121229Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-121126Google Chrome vulnerabilityGoogle Chrome9.6CriticalNot in KEVEPSS –1 article
CVE-2026-109594SonicWall Global Management System (GMS) vulnerabilitySonicWall Global Management System (GMS)6.8MediumNot in KEVEPSS –1 article
CVE-2026-109593SonicWall Global Management System (GMS) vulnerabilitySonicWall Global Management System (GMS)9.1CriticalNot in KEVEPSS –1 article
CVE-2026-28336SolarWinds Dameware Command Injection VulnerabilitySolarWinds Dameware9.9CriticalNot in KEVEPSS –1 article
CVE-2026-28335SolarWinds Dameware Buffer Overflow VulnerabilitySolarWinds Dameware8.4HighNot in KEVEPSS –1 article
CVE-2026-28327SolarWinds Dameware DLL Hijacking VulnerabilitySolarWinds Dameware8.2HighNot in KEVEPSS –1 article
CVE-2026-16306CVE-2026-16306INFINITT Healthcare System ManagerUnratedNot in KEVEPSS 0.3%1 article
CVE-2026-16305CVE-2026-16305INFINITT Healthcare System ManagerUnratedNot in KEVEPSS 0.3%1 article
CVE-2026-112445No description published yetVendor not yet namedUnratedNot in KEVEPSS –1 article
CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controllerSUSE Rancher9.1CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespaceSUSE Rancher7.9HighNot in KEVEPSS 0.2%1 article
CVE-2026-67578FURUNO ELECTRIC CO., LTD. FA-50 vulnerabilityFURUNO ELECTRIC CO., LTD. FA-508.7HighNot in KEVEPSS 0.5%2 articles
CVE-2026-59769FURUNO ELECTRIC CO., LTD. FA-50 vulnerabilityFURUNO ELECTRIC CO., LTD. FA-509.1CriticalNot in KEVEPSS 0.6%2 articles
CVE-2024-50629Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)5.3MediumNot in KEVEPSS 35%2 articles
CVE-2024-10445Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)4.3MediumNot in KEVEPSS 0.4%2 articles
CVE-2024-10441Synology DiskStation Manager (DSM) vulnerabilitySynology DiskStation Manager (DSM)9.8CriticalNot in KEVEPSS 1.3%3 articles

50 of 200 CVEs in the news this week · 392 exploited CVEs in the CISA KEV catalogue.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in