脆弱性の確認と記録
CVE検索・脆弱性トラッカー
CVE番号・製品名で探し、KEV掲載情報と対応記事を確認できます。影響版はベンダー公式で照合し、気になるCVEはこのブラウザのウォッチリストへ保存してください。
- 収録CVE
- 269
- CISA KEV
- 261
- 関連記事あり
- 68
- カタログ公開日（日本時間）
検索して、対応を追う
CVEを検索・絞り込み
CVE ID、ベンダー、製品名で絞り込み、対応を追うCVEをこのブラウザに保存できます。
CISA KEV 2026.10.14
公式公開：
サイト取得：
公式カタログ1745件中、今年追加分と関連記事対象261件を保持
この一覧は取得時点のスナップショットで、リアルタイム監視ではありません。検索結果にないCVEを「KEV未掲載」や「安全」と断定せず、CISA公式カタログと製品ベンダーの最新情報を照合してください。保存したCVEの自動通知・端末間同期はありません。
条件に一致するCVEはありません。検索語またはフィルターを解除してください。
- CVE-2026-0322 CISA KEV
Palo Alto Networks PAN-OS Code Injection Vulnerability
Palo Alto Networks / PAN-OS
- CVE-2026-105133 CISA KEV
Ahsay AhsayCBS Improper Authentication Vulnerability
Ahsay / AhsayCBS
- CVE-2026-105134 CISA KEV
Ahsay AhsayCBS Command Injection Vulnerability
Ahsay / AhsayCBS
- CVE-2026-76519 CISA KEV
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Cisco / Secure Email Gateway
- CVE-2026-104935 CISA KEV
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti / Connect Secure
- CVE-2026-96951 CISA KEV
Microsoft Windows Command Injection Vulnerability
Microsoft / Windows
- CVE-2023-22894 CISA KEV
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi / Strapi
- CVE-2021-3199 CISA KEV
ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE / Docs
- CVE-2016-3081 CISA KEV
Apache Struts Command Injection Vulnerability
Apache / Struts
- CVE-2015-3306 CISA KEV
ProFTPD Improper Access Control Vulnerability
ProFTPD / ProFTPD
- CVE-2015-5477 CISA KEV
ISC BIND Data Processing Errors Vulnerability
ISC / BIND
- CVE-2026-88779 CISA KEV
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix / NetScaler
- CVE-2026-102489 CISA KEV
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH / Zammad
- CVE-2026-102490 CISA KEV
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH / Zammad
- CVE-2026-104286 CISA KEV
Fortinet FortiMail Path Traversal Vulnerability
Fortinet / FortiMail
- CVE-2026-76504 CISA KEV
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Cisco / Catalyst SD-WAN Manager
- CVE-2026-86950 CISA KEV
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple / Multiple Products
- CVE-2026-88771 CISA KEV
Citrix NetScaler Improper Input Validation Vulnerability
Citrix / NetScaler
- CVE-2026-88772 CISA KEV
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix / NetScaler
- CVE-2026-65660 CISA KEV
Microsoft SharePoint Code Injection Vulnerability
Microsoft / SharePoint
- CVE-2026-67279 CISA KEV
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
MikroTik / RouterOS
- CVE-2026-87902 CISA KEV
WordPress Core Remote File Inclusion Vulnerability
WordPress / Core
- CVE-2026-5430 CISA KEV
WSO2 Multiple Products Path Traversal Vulnerability
WSO2 / Multiple Products
- CVE-2026-71362 CISA KEV
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe / Commerce and Magento
- CVE-2026-85102 CISA KEV
Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point / Multiple Products
- CVE-2026-93616 CISA KEV
Check Point Multiple Products Path Traversal Vulnerability
Check Point / Multiple Products
- CVE-2026-93952 CISA KEV
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista / VeloCloud Orchestrator
- CVE-2026-94127 CISA KEV
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 / BIG-IP APM
- CVE-2026-7273 CISA KEV
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Zyxel / GS1900 Series Switches
- CVE-2026-53266 CISA KEV
Linux Kernel Out-of-Bounds Write Vulnerability
Linux / Kernel
- CVE-2025-39682 CISA KEV
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
Linux / Kernel
- CVE-2025-39964 CISA KEV
Linux Kernel Race Condition Vulnerability
Linux / Kernel
- CVE-2026-58704 CISA KEV
Google Pixel Improper Authorization Vulnerability
Google / Pixel
- CVE-2026-76460 CISA KEV
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Cisco / Identity Services Engine
- CVE-2026-87886 CISA KEV
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis / Backup
- CVE-2026-76461 CISA KEV
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco / Secure Email Gateway
- CVE-2026-42016 CISA KEV
JFrog Artifactory Incorrect Authorization Vulnerability
JFrog / Artifactory
- CVE-2026-42018 CISA KEV
JFrog Artifactory Improper Authentication Vulnerability
JFrog / Artifactory
- CVE-2026-84869 CISA KEV
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
ConnectWise / ScreenConnect
- CVE-2026-85706 CISA KEV
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
GitLab / Community Edition and Enterprise Edition
- CVE-2026-67277 CISA KEV
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik / RouterOS
- CVE-2026-86060 CISA KEV
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik / RouterOS
- CVE-2026-19490 CISA KEV
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix / NetScaler
- CVE-2026-20079 CISA KEV
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management
- CVE-2026-87491 CISA KEV
Google Chromium V8 Out of Bounds Write Vulnerability
Google / Chromium V8
- CVE-2025-25249 CISA KEV
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet / Multiple Products
- CVE-2026-75650 CISA KEV
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe / Commerce and Magento
- CVE-2026-81963 CISA KEV
Microsoft Windows Link Following Vulnerability
Microsoft / Windows
- CVE-2026-85880 CISA KEV
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft / Windows
- CVE-2026-86218 CISA KEV
N-able N-central Static Code Injection Vulnerability
N-able / N-central
- CVE-2026-85046 CISA KEV
Google Chromium V8 Type Confusion Vulnerability
Google / Chromium V8
- CVE-2026-48710 CISA KEV
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Kludex / Starlette
- CVE-2026-49869 CISA KEV
Kestra OSS OS Command Injection Vulnerability
Kestra / Kestra OSS
- CVE-2026-59822 CISA KEV
BerriAI LiteLLM Improper Authentication Vulnerability
BerriAI / LiteLLM
- CVE-2026-82329 CISA KEV
JFrog Artifactory Improper Authentication Vulnerability
JFrog / Artifactory
- CVE-2026-83548 CISA KEV
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall / SMA1000 Appliances
- CVE-2026-83549 CISA KEV
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall / SMA1000 Appliances
- CVE-2026-9586 CISA KEV
Sangoma Switchvox SQL Injection Vulnerability
Sangoma / Switchvox
- CVE-2026-81578 CISA KEV
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut / NG/MF
- CVE-2026-82078 CISA KEV
PaperCut NG/MF Unsafe Reflection Vulnerability
PaperCut / NG/MF
- CVE-2026-53362 CISA KEV
Linux Kernel Unspecified Vulnerability
Linux / Kernel
- CVE-2026-66384 CISA KEV
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog / Artifactory
- CVE-2023-49105 CISA KEV
ownCloud Improper Authentication Vulnerability
ownCloud / ownCloud
- CVE-2026-8452 CISA KEV
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix / NetScaler ADC and NetScaler Gateway
- CVE-2022-0995 CISA KEV
Linux Kernel Out-of-Bounds Write Vulnerability
Linux / Kernel
- CVE-2021-23758 CISA KEV
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Ajax.NET Professional / Ajax.NET Professional
- CVE-2019-1068 CISA KEV
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft / SQL Server
- CVE-2015-3246 CISA KEV
Red Hat Libuser Race Condition Vulnerability
Red Hat / Libuser
- CVE-2015-5287 CISA KEV
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat / Automatic Bug Reporting Tool
- CVE-2026-60004 CISA KEV
Gitea Code Injection Vulnerability
Gitea / Gitea
- CVE-2026-21962 CISA KEV
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in
- CVE-2026-73570 CISA KEV
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Synacor / Zimbra Collaboration Suite (ZCS)
- CVE-2026-72529 CISA KEV
TrueConf Server Missing Authentication for Critical Function Vulnerability
TrueConf / Server
- CVE-2026-72530 CISA KEV
TrueConf Server Code Injection Vulnerability
TrueConf / Server
- CVE-2026-64849 CISA KEV
MLflow Server-Side Request Forgery Vulnerability
MLflow / MLflow
- CVE-2026-33824 CISA KEV
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft / Internet Key Exchange (IKE) Service Extensions
- CVE-2026-55040 CISA KEV
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft / SharePoint
- CVE-2026-59310 CISA KEV
Broadcom VMware vCenter Path Traversal Vulnerability
Broadcom / VMware vCenter
- CVE-2026-65400 CISA KEV
Apple macOS Improper Authentication Vulnerability
Apple / macOS
- CVE-2025-62593 CISA KEV
Ray-Project Ray Code Injection Vulnerability
Ray-Project / Ray
- CVE-2026-20349 CISA KEV
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
- CVE-2026-68820 CISA KEV
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft / Windows Ancillary Function Driver for WinSock
- CVE-2026-72898 CISA KEV
Metabase SQL Injection Vulnerability
Metabase / Metabase
- CVE-2026-8037 CISA KEV CVSS 9.6
Progress LoadMaster Command Injection Vulnerability
Progress / LoadMaster
- CVE-2026-63077 CISA KEV
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
JetBrains / TeamCity
- CVE-2026-18556 CISA KEV
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able / N-central
- CVE-2026-34486 CISA KEV
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Apache / Tomcat
- CVE-2026-9198 CISA KEV
IBM Langflow Code Injection Vulnerability
IBM / Langflow
- CVE-2026-18577 CISA KEV
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
N-able / N-central
- CVE-2026-20316 CISA KEV
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco / Secure Firewall Management Center (FMC)
- CVE-2026-16812 CISA KEV
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Arista / VeloCloud Orchestrator
- CVE-2025-68686 CISA KEV
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet / FortiOS
- CVE-2026-16232 CISA KEV
Check Point SmartConsole Improper Authentication Vulnerability
Check Point / SmartConsole
- CVE-2026-50522 CISA KEV
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft / SharePoint
- CVE-2026-0770 CISA KEV
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Langflow / Langflow
- CVE-2026-60137 CISA KEV
WordPress Core SQL Injection Vulnerability
WordPress / Core
- CVE-2026-63030 CISA KEV
WordPress Core Interpretation Conflict Vulnerability
WordPress / Core
- CVE-2021-27137 CISA KEV
DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT / DD-WRT
- CVE-2026-25089 CISA KEV
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet / FortiSandbox
- CVE-2026-39808 CISA KEV
Fortinet FortiSandbox OS Command Injection Vulnerability
Fortinet / FortiSandbox
- CVE-2026-58644 CISA KEV
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft / SharePoint
- CVE-2026-46817 CISA KEV
Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle / E-Business Suite
- CVE-2023-4346 CISA KEV
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association / KNX Protocol Connection Authorization Option 1
- CVE-2026-15409 CISA KEV
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall / SMA1000 Appliances
- CVE-2026-15410 CISA KEV
SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall / SMA1000 Appliances
- CVE-2026-54088
File Browserの認証関連脆弱性 ─ CVE-2026-54088／CVE-2026-54089の影響条件と初動対応
File Browser
- CVE-2026-54089
File Browserの認証関連脆弱性 ─ CVE-2026-54088／CVE-2026-54089の影響条件と初動対応
File Browser
- CVE-2026-56155 CISA KEV
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft / Active Directory Federation Services
- CVE-2026-56164 CISA KEV
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Microsoft / SharePoint Server
- CVE-2008-4128 CISA KEV
Cisco IOS Cross-Site Request Forgery Vulnerability
Cisco / IOS
- CVE-2026-48939 CISA KEV
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
iCagenda / iCagenda
- CVE-2026-56291 CISA KEV
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Balbooa / Forms
- CVE-2026-48282 CISA KEV
Adobe ColdFusion Path Traversal Vulnerability
Adobe / ColdFusion
- CVE-2026-48908 CISA KEV
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper / SP Page Builder
- CVE-2026-55255 CISA KEV
Langflow Authorization Bypass Through User-Controlled Key Vulnerability
Langflow / Langflow
- CVE-2026-56290 CISA KEV
Joomlack Page Builder Improper Access Control Vulnerability
Joomlack / Page Builder
- CVE-2026-45659 CISA KEV CVSS 8.8
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft / SharePoint Server
- CVE-2026-48558 CISA KEV
SimpleHelp Authentication Bypass Vulnerability
SimpleHelp / SimpleHelp
- CVE-2026-55698
pnpmの複数アドバイザリ公開：開発端末とCIでまず確認すること
pnpm
- CVE-2026-55700
pnpmの複数アドバイザリ公開：開発端末とCIでまず確認すること
pnpm
- CVE-2026-48493
Snipe-IT 複数脆弱性の初動対応 ─ IT資産管理システムの権限・MFA・更新確認
Snipe-IT
- CVE-2026-48507
Snipe-IT 複数脆弱性の初動対応 ─ IT資産管理システムの権限・MFA・更新確認
Snipe-IT
- CVE-2026-49870
Snipe-IT 複数脆弱性の初動対応 ─ IT資産管理システムの権限・MFA・更新確認
Snipe-IT
- CVE-2026-54329
Snipe-IT 複数脆弱性の初動対応 ─ IT資産管理システムの権限・MFA・更新確認
Snipe-IT
- CVE-2026-12569 CISA KEV
PTC Windchill and FlexPLM Improper Input Validation Vulnerability
PTC / Windchill and FlexPLM
- CVE-2026-20230 CISA KEV
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Cisco / Unified Communications Manager
- CVE-2026-34908 CISA KEV CVSS 10.0
Ubiquiti UniFi OS Improper Access Control Vulnerability
Ubiquiti / UniFi OS
- CVE-2026-34909 CISA KEV CVSS 10.0
Ubiquiti UniFi OS Path Traversal Vulnerability
Ubiquiti / UniFi OS
- CVE-2026-34910 CISA KEV CVSS 10.0
Ubiquiti UniFi OS Improper Input Validation Vulnerability
Ubiquiti / UniFi OS
- CVE-2025-67038 CISA KEV
Lantronix EDS5000 Code Injection Vulnerability
Lantronix / EDS5000
- CVE-2026-20253 CISA KEV
Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Splunk / Enterprise
- CVE-2026-48907 CISA KEV
Widget Factory Joomla Content Editor Improper Access Control Vulnerability
Widget Factory / Joomla Content Editor
- CVE-2026-20262 CISA KEV
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
Cisco / Catalyst SD-WAN Manager
- CVE-2026-54420 CISA KEV
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed / cPanel Plugin
- CVE-2026-35273 CISA KEV
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
Oracle / PeopleSoft Enterprise PeopleTools
- CVE-2026-10520 CISA KEV
Ivanti Sentry OS Command Injection Vulnerability
Ivanti / Sentry
- CVE-2026-11645 CISA KEV
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google / Chromium V8
- CVE-2026-20245 CISA KEV
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco / Catalyst SD-WAN Manager
- CVE-2026-7473 CISA KEV
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista / Extensible Operating System
- CVE-2026-42271 CISA KEV
BerriAI LiteLLM Command Injection Vulnerability
BerriAI / LiteLLM
- CVE-2026-50751 CISA KEV
Check Point Security Gateway Improper Authentication Vulnerability
Check Point / Security Gateway
- CVE-2026-28318 CISA KEV
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
SolarWinds / Serv-U
- CVE-2026-45247 CISA KEV
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
Mirasvit / Mirasvit Full Page Cache Warmer
- CVE-2025-48595 CISA KEV
Android Framework Integer Overflow Vulnerability
Android / Framework
- CVE-2022-0492 CISA KEV
Linux Kernel Improper Authentication Vulnerability
Linux / Kernel
- CVE-2024-21182 CISA KEV
Oracle WebLogic Server Unspecified Vulnerability
Oracle / WebLogic Server
- CVE-2026-0257 CISA KEV
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks / PAN-OS
- CVE-2026-45321 CISA KEV
TanStack Unspecified Vulnerability
TanStack / TanStack
- CVE-2026-48027 CISA KEV
Nx Console Embedded Malicious Code Vulnerability
Nx / Nx Console
- CVE-2026-8398 CISA KEV
Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon / Daemon Tools Lite
- CVE-2026-48172 CISA KEV
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
LiteSpeed / cPanel Plugin
- CVE-2026-9082 CISA KEV
Drupal Core SQL Injection Vulnerability
Drupal / Core
- CVE-2026-34926 CISA KEV
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend Micro / Apex One
- CVE-2025-34291 CISA KEV
Langflow Origin Validation Error Vulnerability
Langflow / Langflow
- CVE-2026-41091 CISA KEV
Microsoft Defender Link Following Vulnerability
Microsoft / Defender
- CVE-2026-45498 CISA KEV
Microsoft Defender Denial of Service Vulnerability
Microsoft / Defender
- CVE-2010-0249 CISA KEV
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft / Internet Explorer
- CVE-2010-0806 CISA KEV
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft / Internet Explorer
- CVE-2009-1537 CISA KEV
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft / DirectX
- CVE-2009-3459 CISA KEV
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Adobe / Acrobat and Reader
- CVE-2008-4250 CISA KEV
Microsoft Windows Buffer Overflow Vulnerability
Microsoft / Windows
- CVE-2026-42897 CISA KEV
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft / Microsoft
- CVE-2026-20182 CISA KEV
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Cisco / Catalyst SD-WAN
- CVE-2026-42208 CISA KEV
BerriAI LiteLLM SQL Injection Vulnerability
BerriAI / LiteLLM
- CVE-2026-6973 CISA KEV
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti / Endpoint Manager Mobile (EPMM)
- CVE-2026-0300 CISA KEV
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
Palo Alto Networks / PAN-OS
- CVE-2026-31431 CISA KEV
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux / Kernel
- CVE-2026-41940 CISA KEV
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability
WebPros / cPanel & WHM and WP2 (WordPress Squared)
- CVE-2026-32202 CISA KEV
Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft / Windows
- CVE-2024-1708 CISA KEV
ConnectWise ScreenConnect Path Traversal Vulnerability
ConnectWise / ScreenConnect
- CVE-2025-29635 CISA KEV
D-Link DIR-823X Command Injection Vulnerability
D-Link / DIR-823X
- CVE-2024-57726 CISA KEV
SimpleHelp Missing Authorization Vulnerability
SimpleHelp / SimpleHelp
- CVE-2024-57728 CISA KEV
SimpleHelp Path Traversal Vulnerability
SimpleHelp / SimpleHelp
- CVE-2024-7399 CISA KEV
Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung / MagicINFO 9 Server
- CVE-2026-39987 CISA KEV
Marimo Remote Code Execution Vulnerability
Marimo / Marimo
- CVE-2026-33825 CISA KEV
Microsoft Defender Insufficient Granularity of Access Control Vulnerability
Microsoft / Defender
- CVE-2026-20122 CISA KEV
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
Cisco / Catalyst SD-WAN Manger
- CVE-2026-20128 CISA KEV
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Cisco / Catalyst SD-WAN Manager
- CVE-2026-20133 CISA KEV
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Cisco / Catalyst SD-WAN Manager
- CVE-2025-2749 CISA KEV
Kentico Xperience Path Traversal Vulnerability
Kentico / Kentico Xperience
- CVE-2025-32975 CISA KEV
Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability
Quest / KACE Systems Management Appliance (SMA)
- CVE-2025-48700 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor / Zimbra Collaboration Suite (ZCS)
- CVE-2024-27199 CISA KEV
JetBrains TeamCity Relative Path Traversal Vulnerability
JetBrains / TeamCity
- CVE-2023-27351 CISA KEV
PaperCut NG/MF Improper Authentication Vulnerability
PaperCut / NG/MF
- CVE-2026-34197 CISA KEV
Apache ActiveMQ Improper Input Validation Vulnerability
Apache / ActiveMQ
- CVE-2026-32201 CISA KEV
Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft / SharePoint Server
- CVE-2009-0238 CISA KEV
Microsoft Office Remote Code Execution
Microsoft / Office
- CVE-2026-21643 CISA KEV
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet / FortiClient EMS
- CVE-2026-34621 CISA KEV
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe / Acrobat and Reader
- CVE-2025-60710 CISA KEV
Microsoft Windows Link Following Vulnerability
Microsoft / Windows
- CVE-2023-21529 CISA KEV
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft / Exchange Server
- CVE-2023-36424 CISA KEV
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft / Windows
- CVE-2020-9715 CISA KEV
Adobe Acrobat Use-After-Free Vulnerability
Adobe / Acrobat
- CVE-2012-1854 CISA KEV
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft / Visual Basic for Applications (VBA)
- CVE-2026-1340 CISA KEV
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti / Endpoint Manager Mobile (EPMM)
- CVE-2026-35616 CISA KEV
Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet / FortiClient EMS
- CVE-2026-3502 CISA KEV
TrueConf Client Download of Code Without Integrity Check Vulnerability
TrueConf / Client
- CVE-2026-5281 CISA KEV
Google Dawn Use-After-Free Vulnerability
Google / Dawn
- CVE-2026-3055 CISA KEV CVSS 9.3
Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix / NetScaler
- CVE-2025-53521 CISA KEV
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 / BIG-IP
- CVE-2026-33634 CISA KEV
Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity / Trivy
- CVE-2026-33017 CISA KEV
Langflow Code Injection Vulnerability
Langflow / Langflow
- CVE-2025-31277 CISA KEV
Apple Multiple Products Buffer Overflow Vulnerability
Apple / Multiple Products
- CVE-2025-32432 CISA KEV
Craft CMS Code Injection Vulnerability
Craft CMS / Craft CMS
- CVE-2025-43510 CISA KEV
Apple Multiple Products Improper Locking Vulnerability
Apple / Multiple Products
- CVE-2025-43520 CISA KEV
Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple / Multiple Products
- CVE-2025-54068 CISA KEV
Laravel Livewire Code Injection Vulnerability
Laravel / Livewire
- CVE-2026-20131 CISA KEV
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco / Secure Firewall Management Center (FMC)
- CVE-2026-20963 CISA KEV
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft / SharePoint
- CVE-2025-66376 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor / Zimbra Collaboration Suite (ZCS)
- CVE-2025-47813 CISA KEV
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server / Wing FTP Server
- CVE-2026-3909 CISA KEV
Google Skia Out-of-Bounds Write Vulnerability
Google / Skia
- CVE-2026-3910 CISA KEV
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google / Chromium V8
- CVE-2025-68613 CISA KEV
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
n8n / n8n
- CVE-2026-1603 CISA KEV
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti / Endpoint Manager (EPM)
- CVE-2025-26399 CISA KEV
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds / Web Help Desk
- CVE-2021-22054 CISA KEV
Omnissa Workspace ONE Server-Side Request Forgery
Omnissa / Workspace One UEM
- CVE-2023-41974 CISA KEV
Apple iOS and iPadOS Use-After-Free Vulnerability
Apple / iOS and iPadOS
- CVE-2023-43000 CISA KEV
Apple Multiple products Use-After-Free Vulnerability
Apple / Multiple Products
- CVE-2021-22681 CISA KEV
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Rockwell / Multiple Products
- CVE-2021-30952 CISA KEV
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple / Multiple Products
- CVE-2017-7921 CISA KEV
Hikvision Multiple Products Improper Authentication Vulnerability
Hikvision / Multiple Products
- CVE-2026-21385 CISA KEV
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Qualcomm / Multiple Chipsets
- CVE-2026-22719 CISA KEV
Broadcom VMware Aria Operations Command Injection Vulnerability
Broadcom / VMware Aria Operations
- CVE-2026-20127 CISA KEV
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Cisco / Catalyst SD-WAN Controller and Manager
- CVE-2022-20775 CISA KEV
Cisco SD-WAN Path Traversal Vulnerability
Cisco / SD-WAN
- CVE-2026-25108 CISA KEV
Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K / FileZen
- CVE-2025-49113 CISA KEV
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Roundcube / Webmail
- CVE-2025-68461 CISA KEV
RoundCube Webmail Cross-site Scripting Vulnerability
Roundcube / Webmail
- CVE-2026-22769 CISA KEV
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Dell / RecoverPoint for Virtual Machines (RP4VMs)
- CVE-2021-22175 CISA KEV
GitLab Server-Side Request Forgery (SSRF) Vulnerability
GitLab / GitLab
- CVE-2026-2441 CISA KEV
Google Chromium CSS Use-After-Free Vulnerability
Google / Chromium
- CVE-2024-7694 CISA KEV
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 / ThreatSonar Anti-Ransomware
- CVE-2020-7796 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Synacor / Zimbra Collaboration Suite
- CVE-2008-0015 CISA KEV
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
Microsoft / Windows
- CVE-2026-1731 CISA KEV
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-20700 CISA KEV
Apple Multiple Buffer Overflow Vulnerability
Apple / Multiple Products
- CVE-2025-15556 CISA KEV
Notepad++ Download of Code Without Integrity Check Vulnerability
Notepad++ / Notepad++
- CVE-2025-40536 CISA KEV
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds / Web Help Desk
- CVE-2024-43468 CISA KEV
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft / Configuration Manager
- CVE-2026-21510 CISA KEV
Microsoft Windows Shell Protection Mechanism Failure Vulnerability
Microsoft / Windows
- CVE-2026-21513 CISA KEV
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
Microsoft / Windows
- CVE-2026-21514 CISA KEV
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Microsoft / Office
- CVE-2026-21519 CISA KEV
Microsoft Windows Type Confusion Vulnerability
Microsoft / Windows
- CVE-2026-21525 CISA KEV
Microsoft Windows NULL Pointer Dereference Vulnerability
Microsoft / Windows
- CVE-2026-21533 CISA KEV
Microsoft Windows Improper Privilege Management Vulnerability
Microsoft / Windows
- CVE-2026-24423 CISA KEV
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
SmarterTools / SmarterMail
- CVE-2025-11953 CISA KEV
React Native Community CLI OS Command Injection Vulnerability
React Native Community / CLI
- CVE-2025-40551 CISA KEV
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds / Web Help Desk
- CVE-2025-64328 CISA KEV
Sangoma FreePBX OS Command Injection Vulnerability
Sangoma / FreePBX
- CVE-2021-39935 CISA KEV
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
GitLab / Community and Enterprise Editions
- CVE-2019-19006 CISA KEV
Sangoma FreePBX Improper Authentication Vulnerability
Sangoma / FreePBX
- CVE-2026-1281 CISA KEV
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti / Endpoint Manager Mobile (EPMM)
- CVE-2026-24858 CISA KEV
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Fortinet / Multiple Products
- CVE-2026-21509 CISA KEV
Microsoft Office Security Feature Bypass Vulnerability
Microsoft / Office
- CVE-2026-23760 CISA KEV
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
SmarterTools / SmarterMail
- CVE-2026-24061 CISA KEV
GNU InetUtils Argument Injection Vulnerability
GNU / InetUtils
- CVE-2025-52691 CISA KEV
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
SmarterTools / SmarterMail
- CVE-2018-14634 CISA KEV
Linux Kernel Integer Overflow Vulnerability
Linux / Kernel
- CVE-2024-37079 CISA KEV
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Broadcom / VMware vCenter Server
- CVE-2025-31125 CISA KEV
Vite Vitejs Improper Access Control Vulnerability
Vite / Vitejs
- CVE-2025-34026 CISA KEV
Versa Concerto Improper Authentication Vulnerability
Versa / Concerto
- CVE-2025-54313 CISA KEV
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettier / eslint-config-prettier
- CVE-2025-68645 CISA KEV
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Synacor / Zimbra Collaboration Suite (ZCS)
- CVE-2026-20045 CISA KEV
Cisco Unified Communications Products Code Injection Vulnerability
Cisco / Unified Communications Manager
- CVE-2026-20805 CISA KEV
Microsoft Windows Information Disclosure Vulnerability
Microsoft / Windows
- CVE-2025-8110 CISA KEV
Gogs Path Traversal Vulnerability
Gogs / Gogs
- CVE-2025-37164 CISA KEV
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
Hewlett Packard Enterprise (HPE) / OneView
- CVE-2009-0556 CISA KEV
Microsoft Office PowerPoint Code Injection Vulnerability
Microsoft / Office
KEVは取得したCISA公式フィードの収録範囲に基づきます。CVSSはCyberLens関連記事に明示された値だけを表示し、値がないCVEを独自採点しません。ウォッチリストはこの端末のブラウザ内だけに保存されます。