Skip to content
Sign in

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
224CVEs this week35in CISA KEV4federal deadlines
50 of 224 CVEs in the news this week
CVEs in the news: All recent, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2026-111585Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer OverflowTeamViewer Full Client8.8HighNot in KEVEPSS 0.3%4 articles
CVE-2026-81648CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX RouterVendor not yet named10.0CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-58115Siemens SIMATIC IoT2050 Advanced vulnerabilitySiemens SIMATIC IoT2050 Advanced10.0CriticalNot in KEVEPSS 0.9%3 articles
CVE-2026-119563phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table NamephpMyAdmin5.4MediumNot in KEVEPSS 0.2%1 article
CVE-2026-119561phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerphpMyAdmin7.6HighNot in KEVEPSS 0.2%1 article
CVE-2026-119429phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/setphpMyAdmin5.3MediumNot in KEVEPSS 0.4%1 article
CVE-2026-119428phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup DisabledphpMyAdmin6.3MediumNot in KEVEPSS 0.3%1 article
CVE-2026-119427phpMyAdmin through 5.2.3 SQL Injection via Designer saveSettingphpMyAdmin4.2MediumNot in KEVEPSS 0.2%1 article
CVE-2026-119426phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sqlphpMyAdmin7.7HighNot in KEVEPSS 0.3%1 article
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe Commerce10.0CriticalExploitedEPSS 4.0%9 articles
CVE-2026-112487Apple macOS vulnerabilityApple macOS7.8HighNot in KEVEPSS 0.2%1 article
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux9.8CriticalNot in KEVEPSS 0.5%8 articles
CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli9.2CriticalExploitedDue 10 NovEPSS 83%22 articles
CVE-2026-58984Google Android vulnerabilityGoogle Android8.4HighNot in KEVEPSS –1 article
CVE-2026-58936Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS –1 article
CVE-2026-58876Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS –1 article
CVE-2026-58868Google Android vulnerabilityGoogle AndroidUnratedNot in KEVEPSS –1 article
CVE-2026-55283Google Android vulnerabilityGoogle Android8.4HighNot in KEVEPSS –1 article
CVE-2026-55275Google Android vulnerabilityGoogle Android8.4HighNot in KEVEPSS –1 article
CVE-2026-64618Apache Fineract: SQL injection vulnerability in Search APIApache Software Foundation Apache FineractUnratedNot in KEVEPSS 0.2%1 article
CVE-2026-114364Apache Syncope: SQL injection via unsanitized opEvent in Audit Events searchApache Software Foundation Apache SyncopeUnratedNot in KEVEPSS –1 article
CVE-2026-113687Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypassApache Software Foundation Apache SyncopeUnratedNot in KEVEPSS –1 article
CVE-2026-111959Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds readsApache Software Foundation Apache Arrow RustUnratedNot in KEVEPSS –1 article
CVE-2026-88811Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxySUSE Rancher9.1CriticalNot in KEVEPSS –1 article
CVE-2026-88809Rancher meta proxy allowlist bypass leading to server-side request forgerySUSE Rancher7.6HighNot in KEVEPSS –1 article
CVE-2026-104623Authorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management clusterSUSE Rancher6.3MediumNot in KEVEPSS 0.3%1 article
CVE-2026-99185firewire: core: fix race condition in split transaction handlingLinux8.8HighNot in KEVEPSS 0.2%1 article
CVE-2026-99170namespace: a mount that copy_tree() leaves out can't take over a lockLinux8.8HighNot in KEVEPSS 0.1%1 article
CVE-2026-99154scsi: libiscsi: Reject a negative task index from parse_pdu_ittLinux9.8CriticalNot in KEVEPSS 0.5%1 article
CVE-2026-99153scsi: libiscsi: Validate the ITT reflected in a Reject PDULinux9.8CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-99152scsi: libiscsi: Validate the task named by a management responseLinux7.5HighNot in KEVEPSS 0.5%1 article
CVE-2026-63286Axis Communications AB AXIS Camera Station Pro vulnerabilityAxis Communications AB AXIS Camera Station Pro7.1HighNot in KEVEPSS 0.1%1 article
CVE-2025-30026Axis Communications AB AXIS Camera Station Pro vulnerabilityAxis Communications AB AXIS Camera Station Pro5.3MediumNot in KEVEPSS 0.7%1 article
CVE-2025-30023Axis Communications AB AXIS Camera Station Pro vulnerabilityAxis Communications AB AXIS Camera Station Pro9.0CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-91141No description published yetVendor not yet namedUnratedNot in KEVEPSS –1 article
CVE-2026-90975No description published yetVendor not yet namedUnratedNot in KEVEPSS –1 article
CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionbytecodealliance wasmtime9.9CriticalNot in KEVEPSS 1.0%3 articles
CVE-2026-115889Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationbytecodealliance wasmtime9.9CriticalNot in KEVEPSS 0.5%3 articles
CVE-2026-106378Google Chrome vulnerabilityGoogle Chrome8.3HighNot in KEVEPSS 0.3%1 article
CVE-2026-40217BerriAI LiteLLM vulnerabilityBerriAI LiteLLM8.8HighNot in KEVEPSS 16%2 articles
CVE-2026-116606Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayBarracuda Networks Barracuda Email Security Gateway (ESG)9.3CriticalNot in KEVEPSS –1 article
CVE-2026-111560OS Command Injection in Barracuda AppliancesBarracuda Networks Barracuda Email Security Gateway (ESG)8.6HighNot in KEVEPSS –1 article
CVE-2026-93680Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS9.8CriticalNot in KEVEPSS 2.2%1 article
CVE-2026-110193Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS8.8HighNot in KEVEPSS 0.8%1 article
CVE-2026-110192Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS6.5MediumNot in KEVEPSS 0.3%1 article
CVE-2026-110186Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS9.8CriticalNot in KEVEPSS 0.6%1 article
CVE-2026-104339Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS9.8CriticalNot in KEVEPSS 0.8%1 article
CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers VulnerabilityIvanti Connect SecureUnratedExploitedDue 13 NovEPSS –8 articles
CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function VulnerabilityIvanti Connect Secure7.0HighExploitedEPSS 0.5%8 articles
CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityIvanti Connect Secure8.6HighExploitedEPSS 87%21 articles

50 of 224 CVEs in the news this week · 391 exploited CVEs in the CISA KEV catalogue.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in