آخرین آسیب‌پذیری‌ها

Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

Security Advisory 0199

Out-of-Bounds Write in Google Brotli Decoder

RCE via stale global state

RCE via OOM corruption

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated …

PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-6…

Windows Shell Security Feature Bypass Vulnerability

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

Integer Overflow or Wraparound in GitLab

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File …

Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

Memory overflow vulnerability leading to Denial of Service

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 th…

Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

Undisclosed RCE in Zammad v6.3 and higher

Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a malic…