Skip to content
Sign in

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
200CVEs this week32in CISA KEV4federal deadlines
50 of 200 CVEs in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-105781Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic10.0CriticalNot in KEVEPSS –1 article
CVE-2026-105780Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic9.9CriticalNot in KEVEPSS –1 article
CVE-2026-105489Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic9.9CriticalNot in KEVEPSS –1 article
CVE-2026-104354Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic9.1CriticalNot in KEVEPSS –1 article
CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Campaign Classic9.9CriticalNot in KEVEPSS –1 article
CVE-2026-104351Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic9.9CriticalNot in KEVEPSS –1 article
CVE-2026-46817Oracle E-Business Suite Improper Privilege Management VulnerabilityOracle E-Business Suite9.8CriticalExploitedEPSS 12%8 articles
CVE-2026-101767Oracle Corporation Oracle Application Object Library vulnerabilityOracle Corporation Oracle Application Object Library9.8CriticalNot in KEVEPSS 0.6%3 articles
CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli9.2CriticalExploitedDue 10 NovEPSS 55%19 articles
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux9.8CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-33096HTTP.sys Denial of Service VulnerabilityMicrosoft Windows 11 version 23H27.5HighNot in KEVEPSS 1.3%1 article
CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce9.3CriticalExploitedDue 10 NovEPSS 31%7 articles
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityOracle PeopleSoft Enterprise PeopleTools9.8CriticalExploitedEPSS 97%30 articles
CVE-2026-8467Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playgroundphenixdigital phoenix_storybook9.5CriticalNot in KEVEPSS 2.1%1 article
CVE-2026-118348Google Chrome vulnerabilityGoogle ChromeUnratedNot in KEVEPSS –1 article
CVE-2026-118344Google Chrome vulnerabilityGoogle ChromeUnratedNot in KEVEPSS –1 article
CVE-2026-118331Google Chrome vulnerabilityGoogle ChromeUnratedNot in KEVEPSS –1 article
CVE-2026-118306Google Chrome vulnerabilityGoogle ChromeUnratedNot in KEVEPSS –1 article
CVE-2026-92374Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOSTeamViewer Full Client7.8HighNot in KEVEPSS –1 article
CVE-2026-92372Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code ExecutionTeamViewer Full Client8.8HighNot in KEVEPSS –1 article
CVE-2026-111585Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowTeamViewer Full Client8.8HighNot in KEVEPSS –1 article
CVE-2026-65220Supermicro BMC IPMI feature contains a Privilege escalation vulnerabilitySMCI MBD-X12SPI8.8HighNot in KEVEPSS 0.3%1 article
CVE-2026-65219Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerabilitySMCI MBD-X12SPI7.4HighNot in KEVEPSS 0.5%1 article
CVE-2026-65213Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerabilitySMCI MBD-X12SPI6.6MediumNot in KEVEPSS 0.5%1 article
CVE-2026-65211Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerabilitySMCI MBD-X12SPI7.2HighNot in KEVEPSS 0.3%1 article
CVE-2026-18450Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerabilitySMCI X12SPI9.8CriticalNot in KEVEPSS 0.4%1 article
CVE-2026-18449Supermicro BMC contains a SMCRAKP Fixed Key vulnerabilitySMCI X12SPI7.5HighNot in KEVEPSS 0.3%1 article
CVE-2026-111461SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE SeriesMoxa OnCell G3150A-LTE Series7.5HighNot in KEVEPSS 1.4%1 article
CVE-2026-111460Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE SeriesMoxa OnCell G3150A-LTE Series7.7HighNot in KEVEPSS 0.3%1 article
CVE-2026-111459Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)Moxa Remote Connect Suite (MRC Client)7.6HighNot in KEVEPSS 0.2%1 article
CVE-2026-23111Linux vulnerabilityLinux7.8HighNot in KEVEPSS 0.5%3 articles
CVE-2026-108142Veeam Backup and Replication vulnerabilityVeeam Backup and Replication9.1CriticalNot in KEVEPSS –1 article
CVE-2026-108141Veeam Backup and Replication vulnerabilityVeeam Backup and Replication5.9MediumNot in KEVEPSS –1 article
CVE-2026-108140Veeam Backup and Replication vulnerabilityVeeam Backup and Replication5.9MediumNot in KEVEPSS –1 article
CVE-2026-107671Veeam ONE vulnerabilityVeeam ONE8.5HighNot in KEVEPSS –1 article
CVE-2026-105477Veeam Agent for Linux vulnerabilityVeeam Agent for Linux7.3HighNot in KEVEPSS –1 article
CVE-2026-65151NVIDIA NeMo Agent Toolkit vulnerabilityNVIDIA NeMo Agent Toolkit8.4HighNot in KEVEPSS –1 article
CVE-2026-65145NVIDIA NeMo Agent Toolkit vulnerabilityNVIDIA NeMo Agent Toolkit10.0CriticalNot in KEVEPSS –1 article
CVE-2026-65120NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM7.1HighNot in KEVEPSS –1 article
CVE-2026-65119NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM8.4HighNot in KEVEPSS –1 article
CVE-2026-47486NVIDIA PhysX vulnerabilityNVIDIA PhysX7.8HighNot in KEVEPSS –1 article
CVE-2026-24269NVIDIA TensorRT-LLM vulnerabilityNVIDIA TensorRT-LLM7.1HighNot in KEVEPSS –1 article
CVE-2026-93866Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-93865Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-93857Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionWatchGuard Fireware OS9.2CriticalNot in KEVEPSS –1 article
CVE-2026-115495Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard Mobile VPN with SSL Client5.7MediumNot in KEVEPSS –1 article
CVE-2026-103594Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionWatchGuard Fireware OS9.5CriticalNot in KEVEPSS –1 article
CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard Fireware OS9.1CriticalNot in KEVEPSS –1 article
CVE-2026-80097Microsoft Authenticator for Android vulnerabilityMicrosoft Authenticator for Android8.6HighNot in KEVEPSS 0.5%3 articles
CVE-2026-115884No description published yetVendor not yet namedUnratedNot in KEVEPSS –2 articles

50 of 200 CVEs in the news this week · 381 exploited CVEs in the CISA KEV catalogue.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in