Skip to content

CVEs in the news

Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
182CVEs this week30in CISA KEV3federal deadlines
All 30 CVEs in this view, from this week’s news
CVEs in the news: In CISA KEV, sorted by most recent
CVEVulnerabilityCVSSExploitationEPSSArticlesSeen
CVE-2017-7921Hikvision Multiple Products Improper Authentication VulnerabilityHikvision Multiple ProductsUnratedExploitedEPSS 99.9%10 articles
CVE-2021-36260Hikvision Improper Input ValidationHikvision Security cameras web serverUnratedExploitedEPSS 99.8%4 articles
CVE-2021-33044Dahua IP Camera Authentication Bypass VulnerabilityDahua IP Camera Firmware9.8CriticalExploitedEPSS 99.9%6 articles
CVE-2021-33045Dahua IP Camera Authentication Bypass VulnerabilityDahua IP Camera Firmware9.8CriticalExploitedEPSS 99.5%2 articles
CVE-2026-86950Apple Multiple Products Out-of-Bounds Write VulnerabilityApple iOS and iPadOS8.8HighExploitedEPSS 26%15 articles
CVE-2025-54236Adobe Commerce and Magento Improper Input Validation VulnerabilityAdobe Commerce and Magento9.1CriticalExploitedEPSS 95%4 articles
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe Commerce10.0CriticalExploitedEPSS 4.0%8 articles
CVE-2026-96654Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex Media Server6.9MediumExploitedEPSS 1.9%6 articles
CVE-2026-96656Plex Media Server External Control of File Name or Path VulnerabilityPlex Media Server8.6HighExploitedEPSS 1.8%6 articles
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista Networks VeloCloud Orchestrator9.9CriticalExploitedEPSS 1.0%8 articles
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora Online - Built-in CODE Server9.2CriticalExploitedEPSS 12%7 articles
CVE-2026-35616Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinet FortiClient EMS9.1CriticalExploitedEPSS 94%15 articles
CVE-2024-57727SimpleHelp Path Traversal VulnerabilitySimpleHelp9.1CriticalExploitedEPSS 97%3 articles
CVE-2026-42208BerriAI LiteLLM SQL Injection VulnerabilityBerriAI LiteLLM9.3CriticalExploitedEPSS 89%9 articles
CVE-2026-41940WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityWebPros cPanel & WHM and WP2 (WordPress Squared)9.8CriticalExploitedEPSS 99%16 articles
CVE-2026-63030WordPress Core Interpretation Conflict VulnerabilityWordPress Core9.8CriticalExploitedEPSS 11%15 articles
CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall SMA1000 Appliances10.0CriticalExploitedEPSS 6.8%19 articles
CVE-2026-0257Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPalo Alto Networks PAN-OS7.8HighExploitedEPSS 95%27 articles
CVE-2025-64446Fortinet FortiWeb Path Traversal VulnerabilityFortinet FortiWeb9.4CriticalExploitedEPSS 91%2 articles
CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityArista VeloCloud Orchestrator10.0CriticalExploitedEPSS 1.0%8 articles
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista VeloCloud Orchestrator10.0CriticalExploitedEPSS 1.4%6 articles
CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityFortinet FortiOS6.5MediumExploitedEPSS 6.6%1 article
CVE-2026-81578PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityPaperCut NG/MF8.8HighExploitedEPSS 84%23 articles
CVE-2026-82078PaperCut NG/MF Unsafe Reflection VulnerabilityPaperCut NG/MF9.4CriticalExploitedEPSS 61%22 articles
CVE-2026-110936Siemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens Software Center8.4HighExploitedDue 3 NovEPSS 1.0%5 articles
CVE-2026-96652Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server5.3MediumExploitedDue 3 NovEPSS 1.8%5 articles
CVE-2026-96655Plex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server5.3MediumExploitedDue 3 NovEPSS 1.6%5 articles
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd8.5HighExploitedEPSS 2.5%4 articles
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office7.8HighExploitedEPSS 71%22 articles
CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS and FortiProxy9.6CriticalExploitedEPSS 94%5 articles

All 30 CVEs in this view, from this week’s news · 377 exploited CVEs tracked overall.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in