CVEs in the news
Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
| CVE | Vulnerability | CVSS | Exploitation | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-93866 | Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds WriteWatchGuard Fireware OS | 9.2Critical | Not in KEV | EPSS – | 1 article | |
| CVE-2026-93865 | Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action InjectionWatchGuard Fireware OS | 9.2Critical | Not in KEV | EPSS – | 1 article | |
| CVE-2026-93857 | Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code ExecutionWatchGuard Fireware OS | 9.2Critical | Not in KEV | EPSS – | 1 article | |
| CVE-2026-115495 | Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard Mobile VPN with SSL Client | 5.7Medium | Not in KEV | EPSS – | 1 article | |
| CVE-2026-103594 | Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code ExecutionWatchGuard Fireware OS | 9.5Critical | Not in KEV | EPSS – | 1 article | |
| CVE-2026-103593 | Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard Fireware OS | 9.1Critical | Not in KEV | EPSS – | 1 article |
No CVE on this page matches. Clear the filter, or search every CVE.
All 6 CVEs in the news this week · 381 exploited CVEs in the CISA KEV catalogue.