Skip to content
Sign in

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
199CVEs this week31in CISA KEV4federal deadlines
50 of 199 CVEs in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-108142Veeam Backup and Replication vulnerabilityVeeam Backup and Replication9.1CriticalNot in KEVEPSS –1 article
CVE-2026-108141Veeam Backup and Replication vulnerabilityVeeam Backup and Replication5.9MediumNot in KEVEPSS –1 article
CVE-2026-108140Veeam Backup and Replication vulnerabilityVeeam Backup and Replication5.9MediumNot in KEVEPSS –1 article
CVE-2026-107671Veeam ONE vulnerabilityVeeam ONE8.5HighNot in KEVEPSS –1 article
CVE-2026-105477Veeam Agent for Linux vulnerabilityVeeam Agent for Linux7.3HighNot in KEVEPSS –1 article
CVE-2026-65151NVIDIA NeMo Agent Toolkit vulnerabilityNVIDIA NeMo Agent Toolkit8.4HighNot in KEVEPSS –1 article
CVE-2026-65145NVIDIA NeMo Agent Toolkit vulnerabilityNVIDIA NeMo Agent Toolkit10.0CriticalNot in KEVEPSS –1 article
CVE-2026-65120NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM7.1HighNot in KEVEPSS –1 article
CVE-2026-65119NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM8.4HighNot in KEVEPSS –1 article
CVE-2026-47486NVIDIA PhysX vulnerabilityNVIDIA PhysX7.8HighNot in KEVEPSS –1 article
CVE-2026-24269NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM7.1HighNot in KEVEPSS –1 article
CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-115495Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard Mobile VPN with SSL Client5.7MediumNot in KEVEPSS –1 article
CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionWatchGuard Fireware OS9.5CriticalNot in KEVEPSS –1 article
CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard Fireware OS9.1CriticalNot in KEVEPSS –1 article
CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce9.3CriticalExploitedDue 10 NovEPSS 31%6 articles
CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli9.2CriticalExploitedDue 10 NovEPSS 55%16 articles
CVE-2026-80097Microsoft Authenticator for Android vulnerabilityMicrosoft Authenticator for Android8.6HighNot in KEVEPSS 0.5%3 articles
CVE-2026-115884No description published yetVendor not yet namedUnratedNot in KEVEPSS –2 articles
CVE-2026-115881No description published yetVendor not yet namedUnratedNot in KEVEPSS –2 articles
CVE-2026-97631Pre-boot RCE in EDK II PXE driverTianoCore EDK29.5CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityOracle PeopleSoft Enterprise PeopleTools9.8CriticalExploitedEPSS 97%29 articles
CVE-2026-110264GitLab vulnerabilityGitLab10.0CriticalNot in KEVEPSS 1.0%4 articles
CVE-2026-102785Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52yootheme.com YOOtheme Pro extension for Joomla10.0CriticalNot in KEVEPSS 0.7%1 article
CVE-2025-54236Adobe Commerce and Magento Improper Input Validation VulnerabilityAdobe Commerce and Magento9.1CriticalExploitedEPSS 95%5 articles
CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut NG/MF9.4CriticalExploitedEPSS 61%23 articles
CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPaperCut NG/MF8.8HighExploitedEPSS 84%24 articles
CVE-2026-42608Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.getgrav grav8.8HighNot in KEVEPSS 0.6%1 article
CVE-2026-79849Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8Hewlett Packard Enterprise (HPE) ArubaOS (AOS)10.0CriticalNot in KEVEPSS 0.7%1 article
CVE-2026-79848Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8Hewlett Packard Enterprise (HPE) ArubaOS (AOS)10.0CriticalNot in KEVEPSS 0.7%2 articles
CVE-2026-79847Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10Hewlett Packard Enterprise (HPE) ArubaOS (AOS)10.0CriticalNot in KEVEPSS 0.8%2 articles
CVE-2026-79846Unauthenticated Command Injection Vulnerabilities in AOS-8Hewlett Packard Enterprise (HPE) ArubaOS (AOS)10.0CriticalNot in KEVEPSS 1.4%2 articles
CVE-2026-79844Authentication Bypass Leading to Remote Code Execution in AOS-10Hewlett Packard Enterprise (HPE) ArubaOS (AOS)10.0CriticalNot in KEVEPSS 0.7%2 articles
CVE-2026-109619RCE via stale global statePHP Group PHP9.2CriticalExploitedDue tomorrowEPSS 99.9%45 articles
CVE-2026-109618RCE via OOM corruptionPHP Group PHP9.2CriticalExploitedDue tomorrowEPSS 99.9%46 articles
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple iOS and iPadOS8.8HighExploitedEPSS 26%16 articles
CVE-2026-30612No description published yetVendor not yet named9.8CriticalNot in KEVEPSS 0.4%3 articles
CVE-2026-88787No description published yetVendor not yet namedUnratedNot in KEVEPSS –1 article
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityNetScaler ADC8.7HighExploitedEPSS 11%10 articles
CVE-2026-88778TCP Initial Sequence Number (ISN) predictionCitrix NetScaler ADC8.8HighNot in KEVEPSS 0.7%5 articles
CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityCitrix NetScaler ADC9.5CriticalExploitedEPSS 82%29 articles
CVE-2021-33045Dahua IP Camera Authentication Bypass VulnerabilityDahua IP Camera Firmware9.8CriticalExploitedEPSS 99.5%3 articles
CVE-2021-33044Dahua IP Camera Authentication Bypass VulnerabilityDahua IP Camera Firmware9.8CriticalExploitedEPSS 99.9%7 articles
CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionbytecodealliance wasmtime9.9CriticalNot in KEVEPSS 0.4%2 articles
CVE-2026-115889Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationbytecodealliance wasmtime9.9CriticalNot in KEVEPSS 0.5%2 articles
CVE-2021-36260Hikvision Improper Input ValidationHikvision Security cameras web serverUnratedExploitedEPSS 99.8%4 articles
CVE-2017-7921Hikvision Multiple Products Improper Authentication VulnerabilityHikvision Multiple ProductsUnratedExploitedEPSS 99.9%10 articles
CVE-2026-86990Apple iOS and iPadOS vulnerabilityApple iOS and iPadOSUnratedNot in KEVEPSS 0.3%2 articles

50 of 199 CVEs in the news this week · 381 exploited CVEs in the CISA KEV catalogue.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in