{ "generated": "2026-10-17", "periodStart": "2026-01-01", "periodEnd": "2026-10-17", "months": [ "2026-01", "2026-02", "2026-03", "2026-04", "2026-05", "2026-06", "2026-07", "2026-08", "2026-09", "2026-10" ], "reading": { "scores": "All factor scores and the total are 0 to 100, higher is better (less perimeter pain). Rank #1 = best.", "raw": "Raw columns CVEs, Critical/High share, pre-auth RCE, auth bypass, KEV, EPSS and patch bypass: lower is better. Fix reference share: higher is better. Coordination days: shorter is better." }, "weightsDefault": { "volume": 10, "severity": 25, "exploitation": 25, "mttr": 25, "engagement": 15 }, "criteria": [ { "key": "cna", "label": "CNA", "weight": 3 }, { "key": "csaf", "label": "CSAF/API", "weight": 1.5 }, { "key": "policy", "label": "Disclosure policy", "weight": 1 }, { "key": "bounty", "label": "Bug bounty", "weight": 1 }, { "key": "pledge", "label": "SbD pledge", "weight": 1 } ], "totals": { "cves": 1467, "kev": 46, "vendors": 24, "cna": 18 }, "top": [ { "id": "CVE-2026-20131", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability", "published": "2026-03-04", "score": 10, "epss": 0.43166, "kev": true, "kevDate": "2026-03-19", "ransomware": true, "preAuthRce": true, "authBypass": false, "eol": false, "products": [ "Cisco Secure Firewall Management Center (FMC)" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh", "pain": 125 }, { "id": "CVE-2026-104935", "vendor": "ivanti", "vendorShort": "Ivanti", "title": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Thi", "published": "2026-10-13", "score": 8.6, "epss": 0.25982, "kev": true, "kevDate": "2026-10-13", "ransomware": false, "preAuthRce": true, "authBypass": true, "eol": false, "products": [ "Connect Secure" ], "advisory": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935", "pain": 115.8 }, { "id": "CVE-2026-50751", "vendor": "checkpoint", "vendorShort": "Check Point", "title": "User Authentication Bypass in VPN Remote Access and Mobile Access", "published": "2026-06-08", "score": 9.3, "epss": 0.85338, "kev": true, "kevDate": "2026-06-08", "ransomware": true, "preAuthRce": false, "authBypass": true, "eol": false, "products": [ "Quantum Security Gateway", "Spark Firewalls" ], "advisory": "https://support.checkpoint.com/results/sk/sk185033", "pain": 112.9 }, { "id": "CVE-2026-34910", "vendor": "ubiquiti", "vendorShort": "Ubiquiti", "title": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a", "published": "2026-05-22", "score": 10, "epss": 0.45768, "kev": true, "kevDate": "2026-06-23", "ransomware": false, "preAuthRce": true, "authBypass": false, "eol": false, "products": [ "EFG", "Express 7", "UCG-Fiber" ], "advisory": "https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b", "pain": 110 }, { "id": "CVE-2026-10520", "vendor": "ivanti", "vendorShort": "Ivanti", "title": "An OS Command Injection vulnerability\u00a0in Ivanti\u00a0Sentry before\u00a0the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a remote unauthenticated user", "published": "2026-06-09", "score": 10, "epss": 0.99915, "kev": true, "kevDate": "2026-06-11", "ransomware": false, "preAuthRce": true, "authBypass": false, "eol": false, "products": [ "Sentry" ], "advisory": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US", "pain": 110 }, { "id": "CVE-2026-85102", "vendor": "checkpoint", "vendorShort": "Check Point", "title": "Improper Certificate Validation in Quantum Security Gateway", "published": "2026-09-09", "score": 9.8, "epss": 0.504, "kev": true, "kevDate": "2026-09-22", "ransomware": false, "preAuthRce": true, "authBypass": false, "eol": false, "products": [ "Quantum Security Gateway" ], "advisory": "https://support.checkpoint.com/results/sk/sk1000117", "pain": 109.4 }, { "id": "CVE-2026-0257", "vendor": "paloalto", "vendorShort": "Palo Alto", "title": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities", "published": "2026-05-13", "score": 7.8, "epss": 0.96895, "kev": true, "kevDate": "2026-05-29", "ransomware": true, "preAuthRce": false, "authBypass": true, "eol": false, "products": [ "Cloud NGFW", "PAN-OS", "Prisma Access" ], "advisory": "https://security.paloaltonetworks.com/CVE-2026-0257", "pain": 108.4 }, { "id": "CVE-2026-15409", "vendor": "sonicwall", "vendorShort": "SonicWall", "title": "A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticat", "published": "2026-07-14", "score": 10, "epss": 0.06795, "kev": true, "kevDate": "2026-07-14", "ransomware": true, "preAuthRce": false, "authBypass": true, "eol": false, "products": [ "SMA1000" ], "advisory": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008", "pain": 101.8 }, { "id": "CVE-2026-94127", "vendor": "f5", "vendorShort": "F5", "title": "BIG-IP APM OAuth vulnerability", "published": "2026-09-22", "score": 9.3, "epss": 0.02226, "kev": true, "kevDate": "2026-09-22", "ransomware": false, "preAuthRce": true, "authBypass": true, "eol": false, "products": [ "BIG-IP" ], "advisory": "https://my.f5.com/manage/s/article/K000162605", "pain": 100.1 }, { "id": "CVE-2026-20127", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "published": "2026-02-25", "score": 10, "epss": 0.88476, "kev": true, "kevDate": "2026-02-25", "ransomware": false, "preAuthRce": false, "authBypass": true, "eol": false, "products": [ "Cisco Catalyst SD-WAN Manager" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk", "pain": 100 } ], "alerts": [ { "id": "CVE-2026-10523", "vendor": "ivanti", "vendorShort": "Ivanti", "title": "An Authentication Bypass vulnerability (CWE-288)\u00a0in Ivanti\u00a0Sentry before the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a remote unauthent", "published": "2026-06-09", "score": 9.9, "epss": 0.53136, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": true, "eol": false, "products": [ "Sentry" ], "advisory": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US", "pain": 59.7 }, { "id": "CVE-2026-22557", "vendor": "ubiquiti", "vendorShort": "Ubiquiti", "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access f", "published": "2026-03-19", "score": 10, "epss": 0.28116, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "UniFi Network Application" ], "advisory": "https://community.ui.com/releases/Security-Advisory-Bulletin-062-062/c29719c0-405e-4d4a-8f26-e343e99f931b", "pain": 50 }, { "id": "CVE-2026-21902", "vendor": "juniper", "vendorShort": "Juniper", "title": "Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root", "published": "2026-02-25", "score": 9.3, "epss": 0.18377, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Junos OS Evolved" ], "advisory": "https://supportportal.juniper.net/JSA107128", "pain": 46.3 }, { "id": "CVE-2026-1125", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-823X set_wifidog_settings sub_412E7C command injection", "published": "2026-01-18", "score": 6.9, "epss": 0.1574, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "DIR-823X" ], "advisory": "https://vuldb.com/?id.341717", "pain": 36.4 }, { "id": "CVE-2026-20147", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine Remote Code Execution Vulnerability", "published": "2026-04-15", "score": 9.9, "epss": 0.10381, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco ISE Passive Identity Connector", "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ", "pain": 40.1 }, { "id": "CVE-2026-20181", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine Remote Code Execution Vulnerability", "published": "2026-06-17", "score": 9.1, "epss": 0.08931, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco ISE Passive Identity Connector", "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv", "pain": 36.2 }, { "id": "CVE-2026-6992", "vendor": "linksys", "vendorShort": "Linksys", "title": "Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection", "published": "2026-04-25", "score": 8.6, "epss": 0.07977, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "MR9600" ], "advisory": "https://vuldb.com/vuln/359544", "pain": 33.8 }, { "id": "CVE-2026-4558", "vendor": "linksys", "vendorShort": "Linksys", "title": "Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection", "published": "2026-03-22", "score": 8.7, "epss": 0.07761, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "MR9600" ], "advisory": "https://vuldb.com/?id.352385", "pain": 33.9 }, { "id": "CVE-2026-3040", "vendor": "draytek", "vendorShort": "DrayTek", "title": "DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection", "published": "2026-02-23", "score": 5.1, "epss": 0.07324, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "Vigor 300B" ], "advisory": "https://vuldb.com/?id.347394", "pain": 27.6 }, { "id": "CVE-2026-3485", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-868L SSDP Service sub_1BF84 os command injection", "published": "2026-03-03", "score": 9.3, "epss": 0.06676, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": true, "authBypass": false, "eol": true, "products": [ "DIR-868L" ], "advisory": "https://vuldb.com/?id.348560", "pain": 59.6 }, { "id": "CVE-2026-2142", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-823X set_qos sub_420688 os command injection", "published": "2026-02-08", "score": 8.6, "epss": 0.06608, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "DIR-823X" ], "advisory": "https://vuldb.com/?id.344777", "pain": 32.4 }, { "id": "CVE-2026-2163", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-600 ssdp.cgi command injection", "published": "2026-02-08", "score": 5.1, "epss": 0.06601, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-600" ], "advisory": "https://vuldb.com/?id.344865", "pain": 26.9 }, { "id": "CVE-2026-20148", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine Path Traversal Vulnerability", "published": "2026-04-15", "score": 4.9, "epss": 0.06537, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco ISE Passive Identity Connector", "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ", "pain": 21.2 }, { "id": "CVE-2026-2081", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-823X set_password os command injection", "published": "2026-02-07", "score": 5.1, "epss": 0.06355, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "DIR-823X" ], "advisory": "https://vuldb.com/?id.344648", "pain": 21.7 }, { "id": "CVE-2026-20029", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability", "published": "2026-01-07", "score": 4.9, "epss": 0.06212, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt", "pain": 20.9 }, { "id": "CVE-2026-5844", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection", "published": "2026-04-09", "score": 8.6, "epss": 0.06171, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-882" ], "advisory": "https://vuldb.com/vuln/356329", "pain": 37 }, { "id": "CVE-2026-20180", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability", "published": "2026-04-15", "score": 9.9, "epss": 0.06024, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv", "pain": 35.7 }, { "id": "CVE-2026-2082", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-823X set_mac_clone os command injection", "published": "2026-02-07", "score": 5.1, "epss": 0.05884, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "DIR-823X" ], "advisory": "https://vuldb.com/?id.344649", "pain": 21.2 }, { "id": "CVE-2026-1448", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection", "published": "2026-01-26", "score": 8.6, "epss": 0.05775, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-615" ], "advisory": "https://vuldb.com/?id.342880", "pain": 36.6 }, { "id": "CVE-2026-19586", "vendor": "tplink", "vendorShort": "TP-Link", "title": "Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways", "published": "2026-08-20", "score": 9.3, "epss": 0.05697, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": true, "authBypass": false, "eol": false, "products": [ "DR3150 v1", "DR3220v-4G v1", "DR3650v v1" ], "advisory": "https://www.omadanetworks.com/en/support/download/", "pain": 53.6 }, { "id": "CVE-2026-20186", "vendor": "cisco", "vendorShort": "Cisco", "title": "Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability", "published": "2026-04-15", "score": 9.9, "epss": 0.05601, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "Cisco Identity Services Engine Software" ], "advisory": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv", "pain": 35.3 }, { "id": "CVE-2026-1506", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection", "published": "2026-01-28", "score": 8.6, "epss": 0.0557, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-615" ], "advisory": "https://vuldb.com/?id.343118", "pain": 36.4 }, { "id": "CVE-2026-2152", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-615 Web Configuration adv_routing.php os command injection", "published": "2026-02-08", "score": 8.6, "epss": 0.05448, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-615" ], "advisory": "https://vuldb.com/?id.344854", "pain": 36.2 }, { "id": "CVE-2026-2151", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection", "published": "2026-02-08", "score": 8.6, "epss": 0.05304, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": true, "products": [ "DIR-615" ], "advisory": "https://vuldb.com/?id.344853", "pain": 36.1 }, { "id": "CVE-2026-2063", "vendor": "dlink", "vendorShort": "D-Link", "title": "D-Link DIR-823X Web Management set_ac_server os command injection", "published": "2026-02-06", "score": 5.1, "epss": 0.0529, "kev": false, "kevDate": null, "ransomware": false, "preAuthRce": false, "authBypass": false, "eol": false, "products": [ "DIR-823X" ], "advisory": "https://vuldb.com/?id.344623", "pain": 20.6 } ], "alertsTotal": 31, "runs": [ { "date": "2026-10-15", "cves": 1097, "kev": 39, "vendors": 19, "ranked": 16, "ranking": [ { "key": "netgear", "short": "Netgear", "total": 81.7 }, { "key": "tplink", "short": "TP-Link", "total": 75.8 }, { "key": "nokia", "short": "Nokia", "total": 74.7 }, { "key": "fortinet", "short": "Fortinet", "total": 72.7 }, { "key": "zyxel", "short": "Zyxel", "total": 67.5 }, { "key": "arista", "short": "Arista", "total": 67.2 }, { "key": "paloalto", "short": "Palo Alto", "total": 66.8 }, { "key": "juniper", "short": "Juniper", "total": 66.3 }, { "key": "ubiquiti", "short": "Ubiquiti", "total": 63.8 }, { "key": "sonicwall", "short": "SonicWall", "total": 60 }, { "key": "cisco", "short": "Cisco", "total": 59.7 }, { "key": "linksys", "short": "Linksys", "total": 48.8 }, { "key": "ivanti", "short": "Ivanti", "total": 41.2 }, { "key": "checkpoint", "short": "Check Point", "total": 40.3 }, { "key": "mikrotik", "short": "MikroTik", "total": 37.5 }, { "key": "dlink", "short": "D-Link", "total": 34.5 } ], "changes": [ "Initial public data run: 19 vendors, network products only, CVE List V5 + NVD 2026 + CISA/ENISA KEV + EPSS", "Low-data rule introduced: vendors with fewer than 10 CVEs get a neutral volume score of 50" ] }, { "date": "2026-10-16", "cves": 1426, "kev": 46, "vendors": 23, "ranked": 19, "ranking": [ { "key": "netgear", "short": "Netgear", "total": 81.7 }, { "key": "tplink", "short": "TP-Link", "total": 75.8 }, { "key": "nokia", "short": "Nokia", "total": 74.7 }, { "key": "fortinet", "short": "Fortinet", "total": 72.7 }, { "key": "f5", "short": "F5", "total": 72 }, { "key": "hpe", "short": "HPE Aruba", "total": 71 }, { "key": "zyxel", "short": "Zyxel", "total": 67.5 }, { "key": "arista", "short": "Arista", "total": 67.2 }, { "key": "paloalto", "short": "Palo Alto", "total": 66.8 }, { "key": "juniper", "short": "Juniper", "total": 66.3 }, { "key": "ubiquiti", "short": "Ubiquiti", "total": 63.8 }, { "key": "sonicwall", "short": "SonicWall", "total": 59.8 }, { "key": "cisco", "short": "Cisco", "total": 59.7 }, { "key": "linksys", "short": "Linksys", "total": 48.8 }, { "key": "citrix", "short": "NetScaler", "total": 46 }, { "key": "ivanti", "short": "Ivanti", "total": 41.8 }, { "key": "checkpoint", "short": "Check Point", "total": 40.3 }, { "key": "mikrotik", "short": "MikroTik", "total": 37.5 }, { "key": "dlink", "short": "D-Link", "total": 34.5 } ], "changes": [ "Vendors added: F5, NetScaler, HPE Aruba, Barracuda", "CVE records in scope: 1097 -> 1426; KEV: 39 -> 46", "Rank changes (default weights): Zyxel #5 -> #7; Arista #6 -> #8; Palo Alto #7 -> #9; Juniper #8 -> #10; Ubiquiti #9 -> #11; SonicWall #10 -> #12; Cisco #11 -> #13; Linksys #12 -> #14; Ivanti #13 -> #16; Check Point #14 -> #17; MikroTik #15 -> #18; D-Link #16 -> #19" ] }, { "date": "2026-10-17", "cves": 1467, "kev": 46, "vendors": 24, "ranked": 20, "ranking": [ { "key": "netgear", "short": "Netgear", "total": 81.7 }, { "key": "tplink", "short": "TP-Link", "total": 75.8 }, { "key": "nokia", "short": "Nokia", "total": 74.7 }, { "key": "fortinet", "short": "Fortinet", "total": 72.7 }, { "key": "f5", "short": "F5", "total": 72 }, { "key": "hpe", "short": "HPE Aruba", "total": 71 }, { "key": "zyxel", "short": "Zyxel", "total": 67.5 }, { "key": "arista", "short": "Arista", "total": 67.2 }, { "key": "paloalto", "short": "Palo Alto", "total": 66.8 }, { "key": "juniper", "short": "Juniper", "total": 66.3 }, { "key": "ubiquiti", "short": "Ubiquiti", "total": 63.8 }, { "key": "draytek", "short": "DrayTek", "total": 63.2 }, { "key": "sonicwall", "short": "SonicWall", "total": 59.8 }, { "key": "cisco", "short": "Cisco", "total": 59.7 }, { "key": "linksys", "short": "Linksys", "total": 48.8 }, { "key": "citrix", "short": "NetScaler", "total": 46 }, { "key": "ivanti", "short": "Ivanti", "total": 41.8 }, { "key": "checkpoint", "short": "Check Point", "total": 40.3 }, { "key": "mikrotik", "short": "MikroTik", "total": 37.5 }, { "key": "dlink", "short": "D-Link", "total": 34.5 } ], "changes": [ "Vendors added: DrayTek", "41 new CVE records in scope", "Rank changes (default weights): SonicWall #12 -> #13; Cisco #13 -> #14; Linksys #14 -> #15; NetScaler #15 -> #16; Ivanti #16 -> #17; Check Point #17 -> #18; MikroTik #18 -> #19; D-Link #19 -> #20" ], "newCves": 41, "newCveIds": [ "CVE-2026-3040", "CVE-2026-71904", "CVE-2026-71905", "CVE-2026-71906", "CVE-2026-71907", "CVE-2026-71908", "CVE-2026-71909", "CVE-2026-71910", "CVE-2026-71911", "CVE-2026-71912", "CVE-2026-71913", "CVE-2026-71914", "CVE-2026-71915", "CVE-2026-71916", "CVE-2026-71917", "CVE-2026-71918", "CVE-2026-71919", "CVE-2026-71920", "CVE-2026-71921", "CVE-2026-71922", "CVE-2026-71923", "CVE-2026-71924", "CVE-2026-71925", "CVE-2026-71926", "CVE-2026-71927", "CVE-2026-71928", "CVE-2026-71929", "CVE-2026-71930", "CVE-2026-71931", "CVE-2026-71932", "CVE-2026-71933", "CVE-2026-71934", "CVE-2026-71935", "CVE-2026-71936", "CVE-2026-71937", "CVE-2026-71938", "CVE-2026-71939", "CVE-2026-71940", "CVE-2026-71941", "CVE-2026-71942", "CVE-2026-71943" ] } ], "vendors": [ { "key": "cisco", "name": "Cisco", "short": "Cisco", "color": "#0891b2", "lowData": false, "n": 265, "scores": { "volume": 2, "severity": 56, "exploitation": 72, "mttr": 50, "engagement": 100 }, "raw": { "cves": 265, "critical": 58, "high": 82, "medium": 123, "low": 1, "unknown": 1, "critHighPct": 52.8, "avgCvss": 7.3, "preAuthRce": 10, "authBypass": 22, "kev": 13, "kevPct": 4.9, "ransomware": 2, "epssAvg": 0.0234, "epssMax": 0.9182, "epssHigh": 11, "coordMedian": 168, "fixRefPct": 100, "workaroundOnly": 1, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": true, "policy": true, "bounty": true, "pledge": true }, "evidence": { "csaf": "https://developer.cisco.com/docs/psirt/", "policy": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html", "bounty": "https://sec.cloudapps.cisco.com/security/center/resources/cisco_bug_bounty_faq.html" }, "notes": "Bug bounty covers Meraki and cloud-managed Catalyst products (Bugcrowd); other product lines private programmes. CSAF via openVuln API.", "assigners": { "cisco": 265 }, "topProducts": { "Cisco Secure Firewall Threat Defense (FTD) Software": 62, "Cisco Identity Services Engine Software": 56, "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software": 43, "Cisco ISE Passive Identity Connector": 31, "Cisco Secure Firewall Management Center (FMC)": 28, "Cisco IOS XE Software": 24, "Cisco Catalyst SD-WAN Manager": 20, "Cisco NX-OS Software": 17 }, "excludedProducts": { "Cisco Secure Endpoint": 15, "Cisco RoomOS Software": 9, "Cisco Unity Connection": 8, "Cisco Secure Email": 8, "Cisco License On-Prem": 8, "Cisco Secure Workload": 6, "Cisco Webex Meetings": 4, "Cisco ThousandEyes Enterprise Agent": 4 }, "monthly": [ 7, 15, 65, 18, 11, 6, 3, 27, 87, 26 ], "kevList": [ { "id": "CVE-2026-20122", "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability", "kevDate": "2026-04-20", "score": 5.4, "products": [ "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20127", "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "kevDate": "2026-02-25", "score": 10, "products": [ "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20128", "title": "Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability", "kevDate": "2026-04-20", "score": 7.5, "products": [ "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20133", "title": "A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive info", "kevDate": "2026-04-20", "score": 6.5, "products": [ "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20079", "title": "Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability", "kevDate": "2026-09-09", "score": 10, "products": [ "Cisco Secure Firewall Management Center (FMC)" ] }, { "id": "CVE-2026-20131", "title": "Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability", "kevDate": "2026-03-19", "score": 10, "products": [ "Cisco Secure Firewall Management Center (FMC)" ] }, { "id": "CVE-2026-20182", "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "kevDate": "2026-05-14", "score": 10, "products": [ "Cisco Catalyst SD-WAN Controller", "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20245", "title": "Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability", "kevDate": "2026-06-09", "score": 7.8, "products": [ "Cisco Catalyst SD-WAN Controller", "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20262", "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability", "kevDate": "2026-06-15", "score": 6.5, "products": [ "Cisco Catalyst SD-WAN Manager" ] }, { "id": "CVE-2026-20316", "title": "Cisco Secure Firewall Management Center Software Static Credential Vulnerability", "kevDate": "2026-07-29", "score": 5.3, "products": [ "Cisco Secure Firewall Management Center (FMC)" ] }, { "id": "CVE-2026-20349", "title": "Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Deni", "kevDate": "2026-08-11", "score": 8.6, "products": [ "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "Cisco Secure Firewall Threat Defense (FTD) Software" ] }, { "id": "CVE-2026-76460", "title": "Cisco Identity Services Engine Authentication Bypass Vulnerability", "kevDate": "2026-09-16", "score": 10, "products": [ "Cisco ISE Passive Identity Connector", "Cisco Identity Services Engine Software" ] }, { "id": "CVE-2026-76504", "title": "Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability", "kevDate": "2026-09-30", "score": 9.8, "products": [ "Cisco Catalyst SD-WAN Manager" ] } ], "events": [ [ "CVE-2026-20026", "01-07", 5.8, 0 ], [ "CVE-2026-20027", "01-07", 5.3, 0 ], [ "CVE-2026-20029", "01-07", 4.9, 0 ], [ "CVE-2026-20047", "01-15", 4.8, 0 ], [ "CVE-2026-20075", "01-15", 4.8, 0 ], [ "CVE-2026-20076", "01-15", 4.8, 0 ], [ "CVE-2026-20080", "01-21", 5.3, 0 ], [ "CVE-2026-20111", "02-04", 4.8, 4 ], [ "CVE-2026-20123", "02-04", 4.3, 0 ], [ "CVE-2026-20010", "02-25", 7.4, 0 ], [ "CVE-2026-20033", "02-25", 7.4, 0 ], [ "CVE-2026-20048", "02-25", 7.7, 0 ], [ "CVE-2026-20051", "02-25", 7.4, 0 ], [ "CVE-2026-20091", "02-25", 4.8, 0 ], [ "CVE-2026-20099", "02-25", 6.7, 0 ], [ "CVE-2026-20107", "02-25", 5.5, 0 ], [ "CVE-2026-20122", "02-25", 5.4, 1 ], [ "CVE-2026-20126", "02-25", 8.8, 0 ], [ "CVE-2026-20127", "02-25", 10, 5 ], [ "CVE-2026-20128", "02-25", 7.5, 1 ], [ "CVE-2026-20129", "02-25", 9.8, 4 ], [ "CVE-2026-20133", "02-25", 6.5, 1 ], [ "CVE-2026-20001", "03-04", 6.5, 0 ], [ "CVE-2026-20002", "03-04", 8.1, 0 ], [ "CVE-2026-20003", "03-04", 4.9, 0 ], [ "CVE-2026-20005", "03-04", 5.8, 0 ], [ "CVE-2026-20006", "03-04", 5.8, 0 ], [ "CVE-2026-20007", "03-04", 5.8, 0 ], [ "CVE-2026-20008", "03-04", 6, 0 ], [ "CVE-2026-20009", "03-04", 5.3, 0 ], [ "CVE-2026-20013", "03-04", 5.8, 0 ], [ "CVE-2026-20014", "03-04", 7.7, 0 ], [ "CVE-2026-20015", "03-04", 5.8, 0 ], [ "CVE-2026-20016", "03-04", 6, 0 ], [ "CVE-2026-20017", "03-04", 6, 0 ], [ "CVE-2026-20018", "03-04", 5.9, 0 ], [ "CVE-2026-20020", "03-04", 6.8, 0 ], [ "CVE-2026-20021", "03-04", 4.3, 0 ], [ "CVE-2026-20022", "03-04", 6.1, 0 ], [ "CVE-2026-20023", "03-04", 6.1, 0 ], [ "CVE-2026-20024", "03-04", 6.8, 0 ], [ "CVE-2026-20025", "03-04", 6.8, 0 ], [ "CVE-2026-20039", "03-04", 8.6, 0 ], [ "CVE-2026-20044", "03-04", 6, 0 ], [ "CVE-2026-20049", "03-04", 7.7, 0 ], [ "CVE-2026-20050", "03-04", 6.8, 0 ], [ "CVE-2026-20052", "03-04", 5.8, 0 ], [ "CVE-2026-20053", "03-04", 5.8, 0 ], [ "CVE-2026-20054", "03-04", 5.8, 0 ], [ "CVE-2026-20057", "03-04", 5.8, 0 ], [ "CVE-2026-20058", "03-04", 5.8, 0 ], [ "CVE-2026-20062", "03-04", 7.2, 0 ], [ "CVE-2026-20063", "03-04", 6, 0 ], [ "CVE-2026-20064", "03-04", 6.5, 0 ], [ "CVE-2026-20065", "03-04", 5.8, 0 ], [ "CVE-2026-20066", "03-04", 5.8, 0 ], [ "CVE-2026-20067", "03-04", 5.8, 0 ], [ "CVE-2026-20068", "03-04", 5.8, 0 ], [ "CVE-2026-20069", "03-04", 4.3, 0 ], [ "CVE-2026-20070", "03-04", 6.1, 0 ], [ "CVE-2026-20073", "03-04", 5.8, 0 ], [ "CVE-2026-20079", "03-04", 10, 5 ], [ "CVE-2026-20082", "03-04", 8.6, 0 ], [ "CVE-2026-20100", "03-04", 7.7, 0 ], [ "CVE-2026-20101", "03-04", 8.6, 0 ], [ "CVE-2026-20102", "03-04", 6.1, 0 ], [ "CVE-2026-20103", "03-04", 8.6, 0 ], [ "CVE-2026-20105", "03-04", 7.7, 0 ], [ "CVE-2026-20106", "03-04", 5.3, 0 ], [ "CVE-2026-20131", "03-04", 10, 35 ], [ "CVE-2026-20040", "03-11", 8.8, 0 ], [ "CVE-2026-20046", "03-11", 8.8, 0 ], [ "CVE-2026-20074", "03-11", 7.4, 0 ], [ "CVE-2026-20118", "03-11", 6.8, 0 ], [ "CVE-2026-20004", "03-25", 7.4, 0 ], [ "CVE-2026-20012", "03-25", 8.6, 0 ], [ "CVE-2026-20083", "03-25", 6.5, 0 ], [ "CVE-2026-20084", "03-25", 8.6, 0 ], [ "CVE-2026-20086", "03-25", 8.6, 0 ], [ "CVE-2026-20104", "03-25", 6.1, 0 ], [ "CVE-2026-20108", "03-25", 5.4, 0 ], [ "CVE-2026-20110", "03-25", 6.5, 0 ], [ "CVE-2026-20112", "03-25", 4.8, 0 ], [ "CVE-2026-20113", "03-25", 5.3, 0 ], [ "CVE-2026-20114", "03-25", 5.4, 0 ], [ "CVE-2026-20115", "03-25", 6.1, 4 ], [ "CVE-2026-20125", "03-25", 7.7, 0 ], [ "CVE-2026-20041", "04-01", 6.1, 0 ], [ "CVE-2026-20042", "04-01", 6.5, 0 ], [ "CVE-2026-20085", "04-01", 6.1, 0 ], [ "CVE-2026-20087", "04-01", 4.8, 0 ], [ "CVE-2026-20088", "04-01", 4.8, 0 ], [ "CVE-2026-20089", "04-01", 4.8, 0 ], [ "CVE-2026-20090", "04-01", 4.8, 0 ], [ "CVE-2026-20093", "04-01", 9.8, 4 ], [ "CVE-2026-20095", "04-01", 6.5, 0 ], [ "CVE-2026-20096", "04-01", 6.5, 0 ], [ "CVE-2026-20155", "04-01", 8, 4 ], [ "CVE-2026-20174", "04-01", 4.9, 0 ], [ "CVE-2026-20132", "04-15", 4.8, 0 ], [ "CVE-2026-20136", "04-15", 6, 0 ], [ "CVE-2026-20147", "04-15", 9.9, 0 ], [ "CVE-2026-20148", "04-15", 4.9, 0 ], [ "CVE-2026-20180", "04-15", 9.9, 0 ], [ "CVE-2026-20186", "04-15", 9.9, 0 ], [ "CVE-2026-20172", "05-06", 4.3, 0 ], [ "CVE-2026-20185", "05-06", 7.7, 0 ], [ "CVE-2026-20188", "05-06", 0, 0 ], [ "CVE-2026-20189", "05-06", 4.3, 4 ], [ "CVE-2026-20193", "05-06", 4.3, 4 ], [ "CVE-2026-20195", "05-06", 5.3, 0 ], [ "CVE-2026-20182", "05-14", 10, 5 ], [ "CVE-2026-20209", "05-14", 5.4, 0 ], [ "CVE-2026-20210", "05-14", 5.4, 0 ], [ "CVE-2026-20224", "05-14", 8.6, 0 ], [ "CVE-2026-20171", "05-20", 6.8, 0 ], [ "CVE-2026-20245", "06-04", 7.8, 1 ], [ "CVE-2026-20262", "06-15", 6.5, 1 ], [ "CVE-2026-20181", "06-17", 9.1, 0 ], [ "CVE-2026-20190", "06-17", 7.5, 0 ], [ "CVE-2026-20220", "06-17", 6.3, 0 ], [ "CVE-2026-20246", "06-17", 6, 0 ], [ "CVE-2026-20191", "07-01", 7.5, 0 ], [ "CVE-2026-20146", "07-15", 5.5, 0 ], [ "CVE-2026-20316", "07-29", 5.3, 33 ], [ "CVE-2026-20124", "08-05", 7.7, 0 ], [ "CVE-2026-20198", "08-05", 4.8, 0 ], [ "CVE-2026-20263", "08-05", 8.6, 0 ], [ "CVE-2026-20267", "08-05", 9, 0 ], [ "CVE-2026-20268", "08-05", 8.6, 2 ], [ "CVE-2026-20269", "08-05", 8.6, 0 ], [ "CVE-2026-20270", "08-05", 8.6, 0 ], [ "CVE-2026-20271", "08-05", 8.6, 0 ], [ "CVE-2026-20272", "08-05", 9.8, 0 ], [ "CVE-2026-20273", "08-05", 8.6, 0 ], [ "CVE-2026-20288", "08-05", 6.5, 0 ], [ "CVE-2026-20294", "08-05", 6.5, 0 ], [ "CVE-2026-20301", "08-05", 8.6, 0 ], [ "CVE-2026-20303", "08-05", 9.9, 0 ], [ "CVE-2026-20304", "08-05", 9.9, 0 ], [ "CVE-2026-20308", "08-05", 4.3, 0 ], [ "CVE-2026-20310", "08-05", 9.1, 0 ], [ "CVE-2026-20311", "08-05", 6.3, 0 ], [ "CVE-2026-20312", "08-05", 8.8, 0 ], [ "CVE-2026-20313", "08-05", 7.7, 0 ], [ "CVE-2026-20349", "08-11", 8.6, 1 ], [ "CVE-2026-20030", "08-19", 10, 0 ], [ "CVE-2026-20177", "08-19", 5.3, 0 ], [ "CVE-2026-20232", "08-19", 5.4, 0 ], [ "CVE-2026-20357", "08-19", 10, 4 ], [ "CVE-2026-20358", "08-19", 10, 0 ], [ "CVE-2026-20359", "08-19", 9.9, 0 ], [ "CVE-2026-20212", "09-02", 9.8, 0 ], [ "CVE-2026-20274", "09-02", 9.8, 0 ], [ "CVE-2026-20275", "09-02", 8.8, 0 ], [ "CVE-2026-20276", "09-02", 8.6, 0 ], [ "CVE-2026-20277", "09-02", 8.2, 0 ], [ "CVE-2026-20278", "09-02", 8.8, 0 ], [ "CVE-2026-20279", "09-02", 9.8, 0 ], [ "CVE-2026-20280", "09-02", 8.8, 0 ], [ "CVE-2026-20293", "09-08", 7.1, 0 ], [ "CVE-2026-20071", "09-16", 3.8, 0 ], [ "CVE-2026-20072", "09-16", 4.9, 4 ], [ "CVE-2026-20120", "09-16", 5.8, 0 ], [ "CVE-2026-20121", "09-16", 5.3, 0 ], [ "CVE-2026-20130", "09-16", 10, 0 ], [ "CVE-2026-20135", "09-16", 8.6, 0 ], [ "CVE-2026-20154", "09-16", 8.6, 0 ], [ "CVE-2026-20176", "09-16", 9.1, 0 ], [ "CVE-2026-20192", "09-16", 10, 0 ], [ "CVE-2026-20194", "09-16", 9.1, 0 ], [ "CVE-2026-20211", "09-16", 9.1, 0 ], [ "CVE-2026-20222", "09-16", 7.4, 0 ], [ "CVE-2026-20234", "09-16", 9.9, 0 ], [ "CVE-2026-20235", "09-16", 4.9, 0 ], [ "CVE-2026-20237", "09-16", 9.1, 0 ], [ "CVE-2026-20242", "09-16", 9.8, 2 ], [ "CVE-2026-20247", "09-16", 7.5, 0 ], [ "CVE-2026-20248", "09-16", 6.8, 0 ], [ "CVE-2026-20249", "09-16", 8.6, 0 ], [ "CVE-2026-20250", "09-16", 8.6, 0 ], [ "CVE-2026-20282", "09-16", 4.9, 0 ], [ "CVE-2026-20283", "09-16", 6.5, 0 ], [ "CVE-2026-20284", "09-16", 9.1, 0 ], [ "CVE-2026-20285", "09-16", 4.3, 0 ], [ "CVE-2026-20286", "09-16", 4.3, 0 ], [ "CVE-2026-20287", "09-16", 6.5, 0 ], [ "CVE-2026-20290", "09-16", 5.8, 0 ], [ "CVE-2026-20295", "09-16", 8.6, 0 ], [ "CVE-2026-20300", "09-16", 7.1, 0 ], [ "CVE-2026-20305", "09-16", 9.1, 0 ], [ "CVE-2026-20306", "09-16", 9.1, 0 ], [ "CVE-2026-20307", "09-16", 9.9, 0 ], [ "CVE-2026-20309", "09-16", 6.1, 0 ], [ "CVE-2026-20322", "09-16", 9.9, 0 ], [ "CVE-2026-20323", "09-16", 8.3, 0 ], [ "CVE-2026-20324", "09-16", 9.9, 4 ], [ "CVE-2026-20325", "09-16", 9.9, 0 ], [ "CVE-2026-20326", "09-16", 9.8, 4 ], [ "CVE-2026-20329", "09-16", 9.9, 0 ], [ "CVE-2026-20330", "09-16", 9.9, 0 ], [ "CVE-2026-20331", "09-16", 9.6, 0 ], [ "CVE-2026-20332", "09-16", 9.9, 0 ], [ "CVE-2026-20333", "09-16", 8.8, 0 ], [ "CVE-2026-20334", "09-16", 8.4, 0 ], [ "CVE-2026-20335", "09-16", 8.1, 0 ], [ "CVE-2026-20336", "09-16", 8.8, 0 ], [ "CVE-2026-20340", "09-16", 8.8, 0 ], [ "CVE-2026-20341", "09-16", 9.1, 0 ], [ "CVE-2026-20342", "09-16", 7.7, 0 ], [ "CVE-2026-20343", "09-16", 7.5, 4 ], [ "CVE-2026-20344", "09-16", 8.8, 0 ], [ "CVE-2026-20352", "09-16", 8.6, 2 ], [ "CVE-2026-20360", "09-16", 8.8, 0 ], [ "CVE-2026-20361", "09-16", 8.8, 0 ], [ "CVE-2026-76409", "09-16", 8.8, 0 ], [ "CVE-2026-76412", "09-16", 8.5, 0 ], [ "CVE-2026-76413", "09-16", 8.2, 0 ], [ "CVE-2026-76420", "09-16", 9, 0 ], [ "CVE-2026-76423", "09-16", 10, 4 ], [ "CVE-2026-76424", "09-16", 7.2, 0 ], [ "CVE-2026-76425", "09-16", 7.6, 0 ], [ "CVE-2026-76426", "09-16", 4.9, 0 ], [ "CVE-2026-76427", "09-16", 4.9, 0 ], [ "CVE-2026-76428", "09-16", 4.9, 0 ], [ "CVE-2026-76431", "09-16", 4.9, 0 ], [ "CVE-2026-76432", "09-16", 4.9, 0 ], [ "CVE-2026-76433", "09-16", 5.3, 4 ], [ "CVE-2026-76434", "09-16", 4.9, 0 ], [ "CVE-2026-76439", "09-16", 5.3, 4 ], [ "CVE-2026-76444", "09-16", 5.3, 4 ], [ "CVE-2026-76446", "09-16", 4.9, 0 ], [ "CVE-2026-76447", "09-16", 5.3, 4 ], [ "CVE-2026-76448", "09-16", 4.9, 0 ], [ "CVE-2026-76449", "09-16", 4.9, 0 ], [ "CVE-2026-76450", "09-16", 4.9, 0 ], [ "CVE-2026-76451", "09-16", 4.9, 0 ], [ "CVE-2026-76460", "09-16", 10, 5 ], [ "CVE-2026-76504", "09-30", 9.8, 5 ], [ "CVE-2026-20032", "10-07", 4.4, 0 ], [ "CVE-2026-20038", "10-07", 5.8, 0 ], [ "CVE-2026-20173", "10-07", 5.8, 0 ], [ "CVE-2026-20321", "10-07", 6.5, 0 ], [ "CVE-2026-76453", "10-07", 8.8, 0 ], [ "CVE-2026-76455", "10-07", 9.8, 0 ], [ "CVE-2026-76456", "10-07", 8.6, 0 ], [ "CVE-2026-76457", "10-07", 8.6, 0 ], [ "CVE-2026-76458", "10-07", 8.6, 0 ], [ "CVE-2026-76459", "10-07", 9.8, 2 ], [ "CVE-2026-76463", "10-07", 8.8, 0 ], [ "CVE-2026-76464", "10-07", 9.6, 0 ], [ "CVE-2026-76465", "10-07", 9.8, 2 ], [ "CVE-2026-76467", "10-07", 7.5, 0 ], [ "CVE-2026-76468", "10-07", 8.2, 0 ], [ "CVE-2026-76469", "10-07", 7.4, 0 ], [ "CVE-2026-76470", "10-07", 8.8, 0 ], [ "CVE-2026-76471", "10-07", 9.8, 2 ], [ "CVE-2026-76472", "10-07", 8.8, 0 ], [ "CVE-2026-76485", "10-07", 9.8, 2 ], [ "CVE-2026-76486", "10-07", 9.8, 2 ], [ "CVE-2026-76488", "10-07", 6.5, 0 ], [ "CVE-2026-76498", "10-07", 9.8, 0 ], [ "CVE-2026-76499", "10-07", 9.8, 0 ], [ "CVE-2026-76500", "10-07", 9.8, 0 ], [ "CVE-2026-76501", "10-07", 9.8, 2 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 1 }, "worst": [ { "id": "CVE-2026-20127", "score": 10, "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability" }, { "id": "CVE-2026-20079", "score": 10, "title": "Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability" }, { "id": "CVE-2026-20131", "score": 10, "title": "Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability" }, { "id": "CVE-2026-20182", "score": 10, "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability" }, { "id": "CVE-2026-20030", "score": 10, "title": "Cisco Crosswork Security Hardening Release: August 2026" } ] }, { "key": "fortinet", "name": "Fortinet", "short": "Fortinet", "color": "#dc2626", "lowData": false, "n": 42, "scores": { "volume": 34, "severity": 53, "exploitation": 89, "mttr": 95, "engagement": 67 }, "raw": { "cves": 42, "critical": 2, "high": 10, "medium": 23, "low": 7, "unknown": 0, "critHighPct": 28.6, "avgCvss": 5.8, "preAuthRce": 2, "authBypass": 10, "kev": 1, "kevPct": 2.4, "ransomware": 0, "epssAvg": 0.0247, "epssMax": 0.858, "epssHigh": 1, "coordMedian": 7.5, "fixRefPct": 97.6, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 97.6 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": true }, "evidence": { "policy": "https://www.fortiguard.com/psirt_policy", "securitytxt": "https://www.fortinet.com/.well-known/security.txt" }, "notes": "RSS feed only, no CSAF provider found. No bug bounty programme found.", "assigners": { "fortinet": 41, "mitre": 1 }, "topProducts": { "FortiOS": 13, "FortiWeb": 10, "FortiManager": 9, "FortiProxy": 9, "FortiAnalyzer": 7, "FortiManager Cloud": 6, "FortiAnalyzer Cloud": 4, "FortiClientWindows": 3 }, "excludedProducts": { "FortiSandbox": 12, "FortiSandbox PaaS": 8, "FortiSOAR PaaS": 8, "FortiSOAR on-premise": 8, "FortiSandbox Cloud": 7, "FortiSIEM": 6, "FortiClientEMS": 5, "FortiDeceptor": 2 }, "monthly": [ 1, 3, 9, 6, 2, 1, 4, 6, 5, 5 ], "kevList": [ { "id": "CVE-2026-24858", "title": "An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnaly", "kevDate": "2026-01-27", "score": 9.4, "products": [ "FortiAnalyzer", "FortiManager", "FortiNAC-F" ] } ], "events": [ [ "CVE-2026-24858", "01-27", 9.4, 5 ], [ "CVE-2026-25815", "02-05", 3.2, 0 ], [ "CVE-2026-21743", "02-10", 6.8, 4 ], [ "CVE-2026-22153", "02-10", 7.5, 4 ], [ "CVE-2026-22572", "03-10", 6.8, 4 ], [ "CVE-2026-22627", "03-10", 7.7, 0 ], [ "CVE-2026-22628", "03-10", 5.1, 0 ], [ "CVE-2026-22629", "03-10", 3.4, 0 ], [ "CVE-2026-24017", "03-10", 7.3, 4 ], [ "CVE-2026-24018", "03-10", 7.4, 0 ], [ "CVE-2026-24640", "03-10", 5.9, 0 ], [ "CVE-2026-24641", "03-10", 2.5, 0 ], [ "CVE-2026-30897", "03-10", 5.9, 0 ], [ "CVE-2026-21741", "04-14", 2.2, 0 ], [ "CVE-2026-22828", "04-14", 7.3, 6 ], [ "CVE-2026-39811", "04-14", 4.4, 0 ], [ "CVE-2026-39814", "04-14", 6.2, 0 ], [ "CVE-2026-39815", "04-14", 7.9, 0 ], [ "CVE-2026-40688", "04-14", 6.7, 0 ], [ "CVE-2026-44277", "05-12", 9.1, 0 ], [ "CVE-2026-44278", "05-12", 2.1, 0 ], [ "CVE-2026-49938", "06-09", 6.2, 0 ], [ "CVE-2026-23573", "07-14", 6.1, 0 ], [ "CVE-2026-59837", "07-14", 5.9, 0 ], [ "CVE-2026-59839", "07-14", 5, 0 ], [ "CVE-2026-59840", "07-14", 4.1, 0 ], [ "CVE-2026-26035", "08-12", 8.8, 4 ], [ "CVE-2026-70465", "08-12", 7.3, 6 ], [ "CVE-2026-70466", "08-12", 4.8, 0 ], [ "CVE-2026-70468", "08-12", 7.3, 4 ], [ "CVE-2026-71407", "08-12", 5.1, 4 ], [ "CVE-2026-71408", "08-12", 5, 0 ], [ "CVE-2026-22575", "09-08", 4.7, 0 ], [ "CVE-2026-84386", "09-08", 4.7, 0 ], [ "CVE-2026-84391", "09-08", 5.9, 0 ], [ "CVE-2026-84392", "09-08", 2.5, 0 ], [ "CVE-2026-84393", "09-08", 7.3, 0 ], [ "CVE-2026-106171", "10-13", 5.3, 0 ], [ "CVE-2026-106175", "10-13", 2.1, 0 ], [ "CVE-2026-23705", "10-13", 6.5, 0 ], [ "CVE-2026-23706", "10-13", 5.9, 0 ], [ "CVE-2026-23707", "10-13", 6.5, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-24858", "score": 9.4, "title": "An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnaly" }, { "id": "CVE-2026-44277", "score": 9.1, "title": "A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticat" }, { "id": "CVE-2026-26035", "score": 8.8, "title": "An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6." }, { "id": "CVE-2026-39815", "score": 7.9, "title": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDD" }, { "id": "CVE-2026-22627", "score": 7.7, "title": "A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1." } ] }, { "key": "paloalto", "name": "Palo Alto Networks", "short": "Palo Alto", "color": "#0d9488", "lowData": false, "n": 66, "scores": { "volume": 26, "severity": 69, "exploitation": 78, "mttr": 50, "engagement": 100 }, "raw": { "cves": 66, "critical": 0, "high": 5, "medium": 48, "low": 13, "unknown": 0, "critHighPct": 7.6, "avgCvss": 4.7, "preAuthRce": 1, "authBypass": 11, "kev": 3, "kevPct": 4.5, "ransomware": 1, "epssAvg": 0.0231, "epssMax": 0.9689, "epssHigh": 2, "coordMedian": 248, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": true, "policy": true, "bounty": true, "pledge": true }, "evidence": { "csaf": "https://security.paloaltonetworks.com/json", "policy": "https://www.paloaltonetworks.com/security-disclosure", "bounty": "https://security.paloaltonetworks.com/bugbounty" }, "notes": "JSON API plus CSAF document per advisory (security.paloaltonetworks.com/csaf/).", "assigners": { "palo_alto": 66 }, "topProducts": { "Cloud NGFW": 37, "PAN-OS": 37, "Prisma Access": 37, "Prisma Access Agent": 14, "GlobalProtect App": 12, "Panorama": 2, "Prisma SD-WAN ION": 2, "GlobalProtect UWP App": 2 }, "excludedProducts": { "Prisma Browser": 6, "Checkov by Prisma Cloud": 4, "Cortex XDR Broker VM": 3, "Trust Protection Foundation": 3, "Idira Endpoint Privilege Manager": 3, "Cortex XDR Agent": 2, "Autonomous Digital Experience Manager": 1, "Broker VM": 1 }, "monthly": [ 1, 2, 0, 0, 18, 8, 12, 10, 6, 9 ], "kevList": [ { "id": "CVE-2026-0300", "title": "PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID\u2122 Authentication Portal", "kevDate": "2026-05-06", "score": 8.7, "products": [ "Cloud NGFW", "PAN-OS", "Prisma Access" ] }, { "id": "CVE-2026-0257", "title": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities", "kevDate": "2026-05-29", "score": 7.8, "products": [ "Cloud NGFW", "PAN-OS", "Prisma Access" ] }, { "id": "CVE-2026-0322", "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface", "kevDate": "2026-10-14", "score": 8.5, "products": [ "Cloud NGFW", "PAN-OS", "Prisma Access" ] } ], "events": [ [ "CVE-2026-0227", "01-15", 6.6, 4 ], [ "CVE-2026-0228", "02-11", 1.3, 0 ], [ "CVE-2026-0229", "02-11", 6.6, 4 ], [ "CVE-2026-0300", "05-06", 8.7, 1 ], [ "CVE-2026-0243", "05-13", 4.9, 0 ], [ "CVE-2026-0244", "05-13", 5.2, 0 ], [ "CVE-2026-0245", "05-13", 4.3, 0 ], [ "CVE-2026-0246", "05-13", 5.9, 0 ], [ "CVE-2026-0247", "05-13", 5.9, 0 ], [ "CVE-2026-0248", "05-13", 6.2, 0 ], [ "CVE-2026-0249", "05-13", 4.9, 0 ], [ "CVE-2026-0250", "05-13", 5.2, 0 ], [ "CVE-2026-0251", "05-13", 5.9, 0 ], [ "CVE-2026-0256", "05-13", 4.4, 0 ], [ "CVE-2026-0257", "05-13", 7.8, 37 ], [ "CVE-2026-0258", "05-13", 4.8, 4 ], [ "CVE-2026-0261", "05-13", 5.7, 0 ], [ "CVE-2026-0262", "05-13", 6.6, 4 ], [ "CVE-2026-0263", "05-13", 7.2, 2 ], [ "CVE-2026-0264", "05-13", 6.6, 4 ], [ "CVE-2026-0265", "05-13", 2.7, 4 ], [ "CVE-2026-0266", "06-10", 0.4, 0 ], [ "CVE-2026-0267", "06-10", 4.4, 0 ], [ "CVE-2026-0268", "06-10", 4.4, 0 ], [ "CVE-2026-0269", "06-10", 4.6, 0 ], [ "CVE-2026-0271", "06-10", 5.9, 0 ], [ "CVE-2026-0272", "06-10", 5.6, 0 ], [ "CVE-2026-0273", "06-10", 5.7, 0 ], [ "CVE-2026-45171", "06-11", 8.7, 0 ], [ "CVE-2026-0288", "07-08", 4.8, 0 ], [ "CVE-2026-0277", "07-09", 5.7, 0 ], [ "CVE-2026-0278", "07-09", 5.8, 0 ], [ "CVE-2026-0279", "07-09", 0.4, 0 ], [ "CVE-2026-0280", "07-09", 1.7, 4 ], [ "CVE-2026-0281", "07-09", 1.7, 0 ], [ "CVE-2026-0282", "07-09", 1.2, 0 ], [ "CVE-2026-0283", "07-09", 4.5, 4 ], [ "CVE-2026-0284", "07-09", 4.7, 4 ], [ "CVE-2026-0285", "07-09", 4.4, 0 ], [ "CVE-2026-0286", "07-09", 6, 0 ], [ "CVE-2026-0287", "07-09", 4.6, 0 ], [ "CVE-2026-0291", "08-13", 1.1, 0 ], [ "CVE-2026-0292", "08-13", 2.1, 0 ], [ "CVE-2026-0293", "08-13", 5.6, 0 ], [ "CVE-2026-0294", "08-13", 6, 0 ], [ "CVE-2026-0295", "08-13", 4.1, 0 ], [ "CVE-2026-0296", "08-13", 4.5, 0 ], [ "CVE-2026-0297", "08-13", 5.2, 0 ], [ "CVE-2026-0298", "08-13", 5.2, 0 ], [ "CVE-2026-0299", "08-13", 5.9, 0 ], [ "CVE-2026-0301", "08-13", 0.5, 0 ], [ "CVE-2026-0305", "09-10", 4.3, 0 ], [ "CVE-2026-0306", "09-10", 5.8, 0 ], [ "CVE-2026-0307", "09-10", 5.9, 0 ], [ "CVE-2026-0308", "09-10", 0.4, 0 ], [ "CVE-2026-0309", "09-10", 4, 0 ], [ "CVE-2026-0310", "09-10", 5.2, 0 ], [ "CVE-2026-0314", "10-14", 4.3, 0 ], [ "CVE-2026-0315", "10-14", 5.9, 0 ], [ "CVE-2026-0316", "10-14", 0.4, 0 ], [ "CVE-2026-0317", "10-14", 1.2, 0 ], [ "CVE-2026-0318", "10-14", 4.6, 0 ], [ "CVE-2026-0319", "10-14", 4.9, 0 ], [ "CVE-2026-0320", "10-14", 5.7, 0 ], [ "CVE-2026-0321", "10-14", 6.6, 4 ], [ "CVE-2026-0322", "10-14", 8.5, 1 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-0300", "score": 8.7, "title": "PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID\u2122 Authentication Portal" }, { "id": "CVE-2026-45171", "score": 8.7, "title": "Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation" }, { "id": "CVE-2026-0322", "score": 8.5, "title": "PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface" }, { "id": "CVE-2026-0257", "score": 7.8, "title": "PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities" }, { "id": "CVE-2026-0263", "score": 7.2, "title": "PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing" } ] }, { "key": "ivanti", "name": "Ivanti", "short": "Ivanti", "color": "#b91c1c", "lowData": true, "n": 9, "scores": { "volume": 50, "severity": 0, "exploitation": 2, "mttr": 97, "engagement": 80 }, "raw": { "cves": 9, "critical": 2, "high": 6, "medium": 1, "low": 0, "unknown": 0, "critHighPct": 88.9, "avgCvss": 8, "preAuthRce": 3, "authBypass": 4, "kev": 2, "kevPct": 22.2, "ransomware": 0, "epssAvg": 0.2065, "epssMax": 0.9991, "epssHigh": 3, "coordMedian": 8, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 88.9 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://www.ivanti.com/support/contact-security", "bounty": "https://www.ivanti.com/support/bug-bounty-program-policy", "securitytxt": "https://www.ivanti.com/.well-known/security.txt" }, "notes": "Private bug bounty (Bugcrowd/HackerOne) with Connect Secure and Policy Secure in scope.", "assigners": { "ivanti": 8, "mitre": 1 }, "topProducts": { "Secure Access Client": 3, "Sentry": 3, "Connect Secure": 2, "Virtual Traffic Manager": 1 }, "excludedProducts": { "Endpoint Manager Mobile": 9, "Xtraction": 8, "Endpoint Manager": 8, "Neurons for ITSM": 5, "Ivanti Neurons for ITSM": 3, "Neurons for ITSM (Cloud)": 3, "Neurons for ITSM (On-Premise)": 2, "Desktop and Server Management": 1 }, "monthly": [ 0, 0, 0, 0, 4, 2, 0, 0, 1, 2 ], "kevList": [ { "id": "CVE-2026-10520", "title": "An OS Command Injection vulnerability\u00a0in Ivanti\u00a0Sentry before\u00a0the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a remote ", "kevDate": "2026-06-11", "score": 10, "products": [ "Sentry" ] }, { "id": "CVE-2026-104935", "title": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb", "kevDate": "2026-10-13", "score": 8.6, "products": [ "Connect Secure" ] } ], "events": [ [ "CVE-2026-7431", "05-12", 4.4, 0 ], [ "CVE-2026-7432", "05-12", 7.8, 0 ], [ "CVE-2026-8051", "05-12", 7.2, 0 ], [ "CVE-2026-8992", "05-22", 8.8, 6 ], [ "CVE-2026-10520", "06-09", 10, 3 ], [ "CVE-2026-10523", "06-09", 9.9, 4 ], [ "CVE-2026-83527", "09-08", 8.1, 4 ], [ "CVE-2026-104935", "10-13", 8.6, 7 ], [ "CVE-2026-111357", "10-15", 7, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-10520", "score": 10, "title": "An OS Command Injection vulnerability\u00a0in Ivanti\u00a0Sentry before\u00a0the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a remote " }, { "id": "CVE-2026-10523", "score": 9.9, "title": "An Authentication Bypass vulnerability (CWE-288)\u00a0in Ivanti\u00a0Sentry before the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allow" }, { "id": "CVE-2026-8992", "score": 8.8, "title": "An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenti" }, { "id": "CVE-2026-104935", "score": 8.6, "title": "Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb" }, { "id": "CVE-2026-83527", "score": 8.1, "title": "An Authentication Bypass vulnerability in Sentry before\u00a0R10.8.2, R10.7.3 and R10.6.4\u00a0allows a remote unauthenticated att" } ] }, { "key": "juniper", "name": "Juniper Networks", "short": "Juniper", "color": "#64748b", "lowData": false, "n": 216, "scores": { "volume": 6, "severity": 39, "exploitation": 99, "mttr": 93, "engagement": 53 }, "raw": { "cves": 216, "critical": 26, "high": 160, "medium": 30, "low": 0, "unknown": 0, "critHighPct": 86.1, "avgCvss": 7.9, "preAuthRce": 19, "authBypass": 7, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0051, "epssMax": 0.1838, "epssHigh": 1, "coordMedian": 16, "fixRefPct": 100, "workaroundOnly": 1, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://support.juniper.net/support/security/report-a-vulnerability/" }, "notes": "Advisories behind support portal search; no public CSAF or API found. Not on CISA pledge list.", "assigners": { "juniper": 216 }, "topProducts": { "Junos OS": 191, "Junos OS Evolved": 142, "JSI LWC": 2, "Junos Space": 2, "CTP OS": 1 }, "excludedProducts": [], "monthly": [ 16, 1, 0, 24, 0, 0, 22, 0, 0, 153 ], "kevList": [], "events": [ [ "CVE-2026-0203", "01-15", 7.1, 0 ], [ "CVE-2026-21903", "01-15", 7.1, 0 ], [ "CVE-2026-21905", "01-15", 8.7, 0 ], [ "CVE-2026-21906", "01-15", 8.7, 0 ], [ "CVE-2026-21907", "01-15", 8.2, 0 ], [ "CVE-2026-21908", "01-15", 7.5, 0 ], [ "CVE-2026-21909", "01-15", 7.1, 0 ], [ "CVE-2026-21910", "01-15", 7.1, 0 ], [ "CVE-2026-21911", "01-15", 7.1, 0 ], [ "CVE-2026-21912", "01-15", 6.8, 0 ], [ "CVE-2026-21913", "01-15", 8.7, 0 ], [ "CVE-2026-21914", "01-15", 8.7, 0 ], [ "CVE-2026-21917", "01-15", 8.7, 0 ], [ "CVE-2026-21918", "01-15", 8.7, 0 ], [ "CVE-2026-21920", "01-15", 8.7, 0 ], [ "CVE-2026-21921", "01-15", 7.1, 0 ], [ "CVE-2026-21902", "02-25", 9.3, 0 ], [ "CVE-2026-21904", "04-09", 5.1, 0 ], [ "CVE-2026-21915", "04-09", 8.4, 0 ], [ "CVE-2026-21916", "04-09", 7, 0 ], [ "CVE-2026-21919", "04-09", 7.1, 0 ], [ "CVE-2026-33771", "04-09", 9.1, 0 ], [ "CVE-2026-33773", "04-09", 6.9, 0 ], [ "CVE-2026-33774", "04-09", 6.9, 0 ], [ "CVE-2026-33775", "04-09", 7.1, 0 ], [ "CVE-2026-33776", "04-09", 6.8, 0 ], [ "CVE-2026-33778", "04-09", 8.7, 0 ], [ "CVE-2026-33779", "04-09", 8.3, 0 ], [ "CVE-2026-33780", "04-09", 7.1, 0 ], [ "CVE-2026-33781", "04-09", 7.1, 0 ], [ "CVE-2026-33782", "04-09", 8.7, 4 ], [ "CVE-2026-33783", "04-09", 7.1, 0 ], [ "CVE-2026-33784", "04-09", 9.3, 0 ], [ "CVE-2026-33785", "04-09", 6.3, 0 ], [ "CVE-2026-33786", "04-09", 6.8, 0 ], [ "CVE-2026-33787", "04-09", 6.8, 0 ], [ "CVE-2026-33788", "04-09", 8.5, 0 ], [ "CVE-2026-33790", "04-09", 8.7, 0 ], [ "CVE-2026-33791", "04-09", 8.4, 0 ], [ "CVE-2026-33793", "04-09", 8.5, 0 ], [ "CVE-2026-33797", "04-09", 7.1, 0 ], [ "CVE-2026-21901", "07-09", 6.7, 0 ], [ "CVE-2026-33794", "07-09", 8.2, 0 ], [ "CVE-2026-33799", "07-09", 5.3, 0 ], [ "CVE-2026-33800", "07-09", 7.1, 0 ], [ "CVE-2026-33801", "07-09", 7.1, 0 ], [ "CVE-2026-33802", "07-09", 6.8, 0 ], [ "CVE-2026-33803", "07-09", 6.9, 0 ], [ "CVE-2026-57019", "07-09", 7.1, 0 ], [ "CVE-2026-57020", "07-09", 7.1, 0 ], [ "CVE-2026-57021", "07-09", 6.9, 0 ], [ "CVE-2026-57022", "07-09", 8.2, 0 ], [ "CVE-2026-57023", "07-09", 8.7, 0 ], [ "CVE-2026-57024", "07-09", 6.9, 0 ], [ "CVE-2026-57025", "07-09", 6.8, 0 ], [ "CVE-2026-57026", "07-09", 8.7, 0 ], [ "CVE-2026-57027", "07-09", 7.1, 0 ], [ "CVE-2026-57028", "07-09", 6.9, 0 ], [ "CVE-2026-57029", "07-09", 6, 0 ], [ "CVE-2026-57030", "07-09", 8.2, 0 ], [ "CVE-2026-57031", "07-09", 5.3, 0 ], [ "CVE-2026-57032", "07-09", 7.1, 0 ], [ "CVE-2026-57054", "07-09", 6.9, 0 ], [ "CVE-2026-101927", "10-14", 8.6, 0 ], [ "CVE-2026-101934", "10-14", 6.7, 0 ], [ "CVE-2026-101936", "10-14", 7.1, 0 ], [ "CVE-2026-101937", "10-14", 7.1, 0 ], [ "CVE-2026-101938", "10-14", 7.1, 0 ], [ "CVE-2026-101939", "10-14", 8.7, 0 ], [ "CVE-2026-101940", "10-14", 8.7, 0 ], [ "CVE-2026-101941", "10-14", 8.7, 0 ], [ "CVE-2026-101942", "10-14", 8.7, 0 ], [ "CVE-2026-101943", "10-14", 8.7, 0 ], [ "CVE-2026-101944", "10-14", 8.7, 0 ], [ "CVE-2026-101945", "10-14", 8.7, 0 ], [ "CVE-2026-101946", "10-14", 5.3, 0 ], [ "CVE-2026-101948", "10-14", 8.7, 0 ], [ "CVE-2026-101949", "10-14", 8.7, 0 ], [ "CVE-2026-101950", "10-14", 9.3, 2 ], [ "CVE-2026-101951", "10-14", 8.7, 0 ], [ "CVE-2026-101952", "10-14", 8.7, 0 ], [ "CVE-2026-101954", "10-14", 9.3, 4 ], [ "CVE-2026-101955", "10-14", 9.2, 2 ], [ "CVE-2026-101956", "10-14", 9.3, 4 ], [ "CVE-2026-101957", "10-14", 8.7, 0 ], [ "CVE-2026-101959", "10-14", 7.1, 0 ], [ "CVE-2026-101960", "10-14", 7.1, 0 ], [ "CVE-2026-101961", "10-14", 8.7, 0 ], [ "CVE-2026-101962", "10-14", 8.7, 0 ], [ "CVE-2026-101963", "10-14", 8.7, 0 ], [ "CVE-2026-101964", "10-14", 7.1, 0 ], [ "CVE-2026-101965", "10-14", 8.7, 0 ], [ "CVE-2026-101966", "10-14", 8.8, 0 ], [ "CVE-2026-101967", "10-14", 9.3, 0 ], [ "CVE-2026-101968", "10-14", 5.3, 0 ], [ "CVE-2026-101969", "10-14", 7.1, 0 ], [ "CVE-2026-101970", "10-14", 7.1, 0 ], [ "CVE-2026-101971", "10-14", 7.1, 0 ], [ "CVE-2026-101972", "10-14", 7.1, 0 ], [ "CVE-2026-101973", "10-14", 8.7, 0 ], [ "CVE-2026-101974", "10-14", 7.1, 0 ], [ "CVE-2026-101975", "10-14", 7.1, 0 ], [ "CVE-2026-101976", "10-14", 8.7, 2 ], [ "CVE-2026-101977", "10-14", 8.7, 0 ], [ "CVE-2026-101978", "10-14", 8.7, 0 ], [ "CVE-2026-101979", "10-14", 8.7, 0 ], [ "CVE-2026-101980", "10-14", 9.3, 0 ], [ "CVE-2026-101981", "10-14", 8.7, 0 ], [ "CVE-2026-101982", "10-14", 9.3, 2 ], [ "CVE-2026-101983", "10-14", 9.3, 2 ], [ "CVE-2026-101984", "10-14", 7.1, 0 ], [ "CVE-2026-101985", "10-14", 7.1, 0 ], [ "CVE-2026-101986", "10-14", 9.3, 4 ], [ "CVE-2026-101987", "10-14", 7.1, 0 ], [ "CVE-2026-101988", "10-14", 7.1, 0 ], [ "CVE-2026-101989", "10-14", 7.1, 0 ], [ "CVE-2026-101990", "10-14", 9.3, 2 ], [ "CVE-2026-101991", "10-14", 5.3, 0 ], [ "CVE-2026-101992", "10-14", 7.1, 0 ], [ "CVE-2026-101993", "10-14", 7.1, 0 ], [ "CVE-2026-101994", "10-14", 7.1, 0 ], [ "CVE-2026-101995", "10-14", 5.3, 0 ], [ "CVE-2026-101996", "10-14", 7.1, 0 ], [ "CVE-2026-101997", "10-14", 9.2, 0 ], [ "CVE-2026-101999", "10-14", 7.1, 0 ], [ "CVE-2026-102000", "10-14", 7.1, 0 ], [ "CVE-2026-102011", "10-14", 7.1, 0 ], [ "CVE-2026-102012", "10-14", 8.7, 4 ], [ "CVE-2026-102013", "10-14", 6.7, 0 ], [ "CVE-2026-102014", "10-14", 8.7, 0 ], [ "CVE-2026-102015", "10-14", 8.7, 0 ], [ "CVE-2026-102016", "10-14", 8.7, 0 ], [ "CVE-2026-102017", "10-14", 7.1, 0 ], [ "CVE-2026-102018", "10-14", 7.1, 0 ], [ "CVE-2026-102019", "10-14", 7.1, 0 ], [ "CVE-2026-102020", "10-14", 8.7, 0 ], [ "CVE-2026-102021", "10-14", 7.1, 0 ], [ "CVE-2026-102022", "10-14", 8.7, 0 ], [ "CVE-2026-102023", "10-14", 8.7, 0 ], [ "CVE-2026-102024", "10-14", 8.7, 0 ], [ "CVE-2026-102025", "10-14", 8.7, 0 ], [ "CVE-2026-102026", "10-14", 8.7, 0 ], [ "CVE-2026-102027", "10-14", 8.7, 0 ], [ "CVE-2026-102028", "10-14", 8.7, 0 ], [ "CVE-2026-102029", "10-14", 8.7, 0 ], [ "CVE-2026-102030", "10-14", 8.7, 0 ], [ "CVE-2026-102031", "10-14", 9.3, 2 ], [ "CVE-2026-102032", "10-14", 7.1, 0 ], [ "CVE-2026-102033", "10-14", 7.1, 0 ], [ "CVE-2026-102034", "10-14", 7.1, 0 ], [ "CVE-2026-102035", "10-14", 7.1, 0 ], [ "CVE-2026-102036", "10-14", 8.7, 0 ], [ "CVE-2026-102037", "10-14", 9.2, 0 ], [ "CVE-2026-102039", "10-14", 7.1, 0 ], [ "CVE-2026-102040", "10-14", 7.1, 0 ], [ "CVE-2026-102041", "10-14", 7.1, 0 ], [ "CVE-2026-102042", "10-14", 7.1, 0 ], [ "CVE-2026-102043", "10-14", 7.1, 0 ], [ "CVE-2026-102044", "10-14", 8.7, 0 ], [ "CVE-2026-102045", "10-14", 7.1, 0 ], [ "CVE-2026-102046", "10-14", 8.7, 0 ], [ "CVE-2026-102047", "10-14", 7.1, 0 ], [ "CVE-2026-102048", "10-14", 7.1, 0 ], [ "CVE-2026-102049", "10-14", 8.7, 0 ], [ "CVE-2026-102050", "10-14", 8.7, 0 ], [ "CVE-2026-102051", "10-14", 7.1, 0 ], [ "CVE-2026-102052", "10-14", 8.7, 0 ], [ "CVE-2026-102053", "10-14", 6.9, 0 ], [ "CVE-2026-102054", "10-14", 5.3, 0 ], [ "CVE-2026-102055", "10-14", 8.7, 0 ], [ "CVE-2026-102056", "10-14", 7.1, 0 ], [ "CVE-2026-102057", "10-14", 8.7, 2 ], [ "CVE-2026-102058", "10-14", 7.1, 0 ], [ "CVE-2026-102059", "10-14", 8.7, 0 ], [ "CVE-2026-102060", "10-14", 7.1, 0 ], [ "CVE-2026-102061", "10-14", 8.7, 0 ], [ "CVE-2026-102062", "10-14", 9.2, 0 ], [ "CVE-2026-102063", "10-14", 7.1, 0 ], [ "CVE-2026-102064", "10-14", 8.7, 0 ], [ "CVE-2026-102065", "10-14", 8.7, 0 ], [ "CVE-2026-102066", "10-14", 7.1, 0 ], [ "CVE-2026-102067", "10-14", 7.1, 0 ], [ "CVE-2026-102068", "10-14", 9.2, 2 ], [ "CVE-2026-102069", "10-14", 8.7, 0 ], [ "CVE-2026-102070", "10-14", 9.2, 0 ], [ "CVE-2026-102071", "10-14", 7.1, 0 ], [ "CVE-2026-102072", "10-14", 7.1, 0 ], [ "CVE-2026-102077", "10-14", 8.7, 0 ], [ "CVE-2026-102078", "10-14", 8.2, 2 ], [ "CVE-2026-102079", "10-14", 8.5, 0 ], [ "CVE-2026-102080", "10-14", 6, 0 ], [ "CVE-2026-102081", "10-14", 8.7, 0 ], [ "CVE-2026-102082", "10-14", 8.2, 4 ], [ "CVE-2026-102083", "10-14", 8.2, 0 ], [ "CVE-2026-102084", "10-14", 9.2, 2 ], [ "CVE-2026-102085", "10-14", 6.9, 0 ], [ "CVE-2026-102086", "10-14", 8.2, 0 ], [ "CVE-2026-102087", "10-14", 7.1, 0 ], [ "CVE-2026-102174", "10-14", 8.7, 0 ], [ "CVE-2026-102175", "10-14", 9.3, 6 ], [ "CVE-2026-102176", "10-14", 8.7, 0 ], [ "CVE-2026-102177", "10-14", 7.2, 0 ], [ "CVE-2026-102178", "10-14", 9.3, 2 ], [ "CVE-2026-102179", "10-14", 8.7, 2 ], [ "CVE-2026-102180", "10-14", 8.7, 2 ], [ "CVE-2026-102182", "10-14", 9.3, 2 ], [ "CVE-2026-102183", "10-14", 8.7, 0 ], [ "CVE-2026-102184", "10-14", 8.7, 0 ], [ "CVE-2026-102185", "10-14", 8.7, 0 ], [ "CVE-2026-103993", "10-14", 6.9, 0 ], [ "CVE-2026-103994", "10-14", 8.7, 0 ], [ "CVE-2026-33789", "10-14", 9.2, 2 ], [ "CVE-2026-33792", "10-14", 9.3, 2 ], [ "CVE-2026-33795", "10-14", 8.7, 0 ], [ "CVE-2026-33796", "10-14", 9.3, 2 ], [ "CVE-2026-33798", "10-14", 8.7, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 1 }, "worst": [ { "id": "CVE-2026-21902", "score": 9.3, "title": "Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root" }, { "id": "CVE-2026-33784", "score": 9.3, "title": "JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privile" }, { "id": "CVE-2026-101950", "score": 9.3, "title": "Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled" }, { "id": "CVE-2026-101954", "score": 9.3, "title": "Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled" }, { "id": "CVE-2026-101956", "score": 9.3, "title": "Junos OS: Unauthorized root command execution when J-Web is enabled" } ] }, { "key": "huawei", "name": "Huawei", "short": "Huawei", "color": "#c2410c", "lowData": true, "n": 0, "scores": { "volume": 50, "severity": null, "exploitation": null, "mttr": null, "engagement": 87 }, "raw": { "cves": 0, "critical": 0, "high": 0, "medium": 0, "low": 0, "unknown": 0, "critHighPct": 0, "avgCvss": null, "preAuthRce": 0, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": null, "epssMax": null, "epssHigh": 0, "coordMedian": null, "fixRefPct": 0, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": true, "csaf": true, "policy": true, "bounty": true, "pledge": false }, "evidence": { "csaf": "https://www.huawei.com/.well-known/csaf/provider-metadata.json", "policy": "https://www.huawei.com/en/psirt/vul-response-process", "bounty": "https://www.huawei.com/en/psirt/report-vulnerabilities", "securitytxt": "https://www.huawei.com/.well-known/security.txt" }, "notes": "Only HarmonyOS and EMUI CVEs published in 2026; no network-product records. CSAF provider listed in the BSI CSAF aggregator.", "assigners": [], "topProducts": [], "excludedProducts": { "HarmonyOS": 112, "EMUI": 31, "Harmony OS": 3, "openBMC": 2, "openUBMC": 1 }, "monthly": [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ], "kevList": [], "events": [], "zombie": { "eol": 0, "pct": null, "workaroundOnly": 0 }, "worst": [] }, { "key": "nokia", "name": "Nokia", "short": "Nokia", "color": "#1e40af", "lowData": true, "n": 3, "scores": { "volume": 50, "severity": 85, "exploitation": 100, "mttr": 50, "engagement": 73 }, "raw": { "cves": 3, "critical": 0, "high": 1, "medium": 2, "low": 0, "unknown": 0, "critHighPct": 33.3, "avgCvss": 6.1, "preAuthRce": 0, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0028, "epssMax": 0.0034, "epssHigh": 0, "coordMedian": 140, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": true, "policy": true, "bounty": false, "pledge": false }, "evidence": { "csaf": "https://www.nokia.com/.well-known/csaf/provider-metadata.json", "policy": "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/", "securitytxt": "https://www.nokia.com/.well-known/security.txt" }, "notes": "", "assigners": { "Nokia": 3 }, "topProducts": { "NSP": 2, "WaveSuite": 1 }, "excludedProducts": [], "monthly": [ 0, 0, 0, 0, 0, 0, 0, 3, 0, 0 ], "kevList": [], "events": [ [ "CVE-2026-40463", "08-31", 7.6, 0 ], [ "CVE-2026-40464", "08-31", 5.4, 0 ], [ "CVE-2026-40465", "08-31", 5.3, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-40463", "score": 7.6, "title": "An Insufficient Role-based Access Control Vulnerability in WaveSuite" }, { "id": "CVE-2026-40464", "score": 5.4, "title": "A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP" }, { "id": "CVE-2026-40465", "score": 5.3, "title": "An Open Re-direct Vulnerability in Nokia NSP" } ] }, { "key": "arista", "name": "Arista Networks", "short": "Arista", "color": "#0f766e", "lowData": false, "n": 80, "scores": { "volume": 23, "severity": 54, "exploitation": 88, "mttr": 86, "engagement": 53 }, "raw": { "cves": 80, "critical": 12, "high": 35, "medium": 26, "low": 7, "unknown": 0, "critHighPct": 58.8, "avgCvss": 6.9, "preAuthRce": 4, "authBypass": 5, "kev": 3, "kevPct": 3.8, "ransomware": 0, "epssAvg": 0.0036, "epssMax": 0.0135, "epssHigh": 0, "coordMedian": 34, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://www.arista.com/en/support/product-security-vulnerability-reporting" }, "notes": "", "assigners": { "Arista": 80 }, "topProducts": { "EOS": 43, "CloudVision CUE": 9, "CloudVision Portal": 8, "Wi-Fi Access Points": 7, "Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)": 5, "VeloCloud Edge": 3, "VeloCloud Orchestrator On-Prem": 3, "VeloCloud Orchestrator (VCO) On-Prem": 1 }, "excludedProducts": [], "monthly": [ 0, 0, 0, 0, 0, 7, 3, 0, 46, 24 ], "kevList": [ { "id": "CVE-2026-7473", "title": "Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass", "kevDate": "2026-06-09", "score": 6.9, "products": [ "EOS" ] }, { "id": "CVE-2026-16812", "title": "VeloCloud Orchestrator OS Command Injection", "kevDate": "2026-07-27", "score": 10, "products": [ "VeloCloud Orchestrator On-Prem" ] }, { "id": "CVE-2026-93952", "title": "Security Advisory 0183", "kevDate": "2026-09-22", "score": 9.5, "products": [ "VeloCloud Orchestrator (VCO) On-Prem" ] } ], "events": [ [ "CVE-2026-2379", "06-05", 8.2, 0 ], [ "CVE-2026-25620", "06-05", 7, 0 ], [ "CVE-2026-25621", "06-05", 7, 0 ], [ "CVE-2026-25622", "06-05", 7, 0 ], [ "CVE-2026-25623", "06-05", 7, 0 ], [ "CVE-2026-25624", "06-05", 5.8, 0 ], [ "CVE-2026-7473", "06-05", 6.9, 1 ], [ "CVE-2026-16812", "07-27", 10, 3 ], [ "CVE-2026-17191", "07-27", 8.5, 0 ], [ "CVE-2026-17192", "07-27", 6.3, 0 ], [ "CVE-2026-73449", "09-14", 5.9, 0 ], [ "CVE-2026-75943", "09-14", 2.1, 0 ], [ "CVE-2026-75944", "09-14", 5.6, 0 ], [ "CVE-2026-75945", "09-14", 2.1, 0 ], [ "CVE-2026-77191", "09-14", 2.1, 0 ], [ "CVE-2026-19641", "09-15", 6.9, 0 ], [ "CVE-2026-19655", "09-15", 7.1, 0 ], [ "CVE-2026-73437", "09-15", 6.5, 0 ], [ "CVE-2026-73444", "09-15", 5.3, 0 ], [ "CVE-2026-73446", "09-15", 7, 0 ], [ "CVE-2026-73451", "09-15", 6.3, 0 ], [ "CVE-2026-73458", "09-15", 9.2, 0 ], [ "CVE-2026-73459", "09-15", 7, 0 ], [ "CVE-2026-73460", "09-15", 7, 0 ], [ "CVE-2026-73465", "09-15", 6, 0 ], [ "CVE-2026-73466", "09-15", 6, 0 ], [ "CVE-2026-73467", "09-15", 6, 0 ], [ "CVE-2026-19640", "09-16", 2.3, 4 ], [ "CVE-2026-2380", "09-16", 5.1, 0 ], [ "CVE-2026-73435", "09-16", 7, 0 ], [ "CVE-2026-73436", "09-16", 6, 0 ], [ "CVE-2026-73438", "09-16", 7, 0 ], [ "CVE-2026-73439", "09-16", 7.7, 0 ], [ "CVE-2026-73440", "09-16", 2.3, 0 ], [ "CVE-2026-73442", "09-16", 2.1, 0 ], [ "CVE-2026-73443", "09-16", 5.3, 0 ], [ "CVE-2026-73445", "09-16", 6.9, 0 ], [ "CVE-2026-73447", "09-16", 9.4, 0 ], [ "CVE-2026-73450", "09-16", 7, 0 ], [ "CVE-2026-73453", "09-16", 9.5, 2 ], [ "CVE-2026-73454", "09-16", 8.6, 0 ], [ "CVE-2026-73455", "09-16", 8.9, 0 ], [ "CVE-2026-73456", "09-16", 9.2, 2 ], [ "CVE-2026-73457", "09-16", 6, 0 ], [ "CVE-2026-73461", "09-16", 9.4, 0 ], [ "CVE-2026-73462", "09-16", 7.1, 0 ], [ "CVE-2026-73463", "09-16", 6, 0 ], [ "CVE-2026-73464", "09-16", 8.7, 0 ], [ "CVE-2026-73468", "09-16", 7.1, 0 ], [ "CVE-2026-73469", "09-16", 6.9, 4 ], [ "CVE-2026-77190", "09-16", 6, 0 ], [ "CVE-2026-86106", "09-16", 8.7, 0 ], [ "CVE-2026-86107", "09-16", 8.2, 2 ], [ "CVE-2026-86108", "09-16", 7.5, 0 ], [ "CVE-2026-86109", "09-16", 7.5, 0 ], [ "CVE-2026-93952", "09-22", 9.5, 1 ], [ "CVE-2026-101149", "10-06", 5.1, 0 ], [ "CVE-2026-101150", "10-06", 5.1, 0 ], [ "CVE-2026-101151", "10-06", 5.3, 4 ], [ "CVE-2026-101152", "10-06", 7.6, 4 ], [ "CVE-2026-101153", "10-06", 7.2, 0 ], [ "CVE-2026-101154", "10-06", 8.6, 0 ], [ "CVE-2026-101155", "10-06", 8.6, 0 ], [ "CVE-2026-101156", "10-06", 6.2, 0 ], [ "CVE-2026-101157", "10-06", 9.3, 0 ], [ "CVE-2026-101158", "10-06", 9.3, 0 ], [ "CVE-2026-102155", "10-06", 7.1, 0 ], [ "CVE-2026-102156", "10-06", 6.9, 0 ], [ "CVE-2026-102157", "10-06", 6.8, 0 ], [ "CVE-2026-102158", "10-06", 7.1, 0 ], [ "CVE-2026-102159", "10-06", 9.3, 4 ], [ "CVE-2026-102160", "10-06", 8.6, 0 ], [ "CVE-2026-102161", "10-06", 8.7, 0 ], [ "CVE-2026-102162", "10-06", 9.4, 0 ], [ "CVE-2026-102163", "10-06", 8.7, 0 ], [ "CVE-2026-102164", "10-06", 2.3, 0 ], [ "CVE-2026-102165", "10-06", 7.7, 0 ], [ "CVE-2026-102167", "10-06", 9, 0 ], [ "CVE-2026-102168", "10-06", 7.1, 0 ], [ "CVE-2026-102169", "10-06", 7.1, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-16812", "score": 10, "title": "VeloCloud Orchestrator OS Command Injection" }, { "id": "CVE-2026-73453", "score": 9.5, "title": "Security Advisory 0174" }, { "id": "CVE-2026-93952", "score": 9.5, "title": "Security Advisory 0183" }, { "id": "CVE-2026-73447", "score": 9.4, "title": "Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request" }, { "id": "CVE-2026-73461", "score": 9.4, "title": "Security Advisory 0163" } ] }, { "key": "mikrotik", "name": "MikroTik", "short": "MikroTik", "color": "#475569", "lowData": false, "n": 16, "scores": { "volume": 50, "severity": 25, "exploitation": 23, "mttr": 74, "engagement": 13 }, "raw": { "cves": 16, "critical": 3, "high": 6, "medium": 7, "low": 0, "unknown": 0, "critHighPct": 56.2, "avgCvss": 7.8, "preAuthRce": 2, "authBypass": 4, "kev": 4, "kevPct": 25, "ransomware": 0, "epssAvg": 0.0134, "epssMax": 0.0645, "epssHigh": 0, "coordMedian": 20.5, "fixRefPct": 87.5, "workaroundOnly": 0, "patchBypass": 1, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://mikrotik.com/supportsec", "securitytxt": "https://mikrotik.com/.well-known/security.txt" }, "notes": "2026 RouterOS CVEs assigned by VulnCheck, CERT-PL, ICS-CERT and others, not by MikroTik.", "assigners": { "CERT-PL": 6, "VulnCheck": 5, "icscert": 3, "ENISA": 1, "VulDB": 1 }, "topProducts": { "RouterOS": 16, "Cloud Hosted Router": 1 }, "excludedProducts": [], "monthly": [ 0, 0, 0, 0, 1, 0, 2, 0, 11, 2 ], "kevList": [ { "id": "CVE-2026-67276", "title": "SSH user impersonation possible in Mikrotik RouterOS", "kevDate": "2026-09-05", "score": 9.2, "products": [ "RouterOS" ] }, { "id": "CVE-2026-67277", "title": "Kernel memory disclosure and denial of service in MikroTik RouterOS btest service", "kevDate": "2026-09-10", "score": 8.8, "products": [ "RouterOS" ] }, { "id": "CVE-2026-67279", "title": "SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS", "kevDate": "2026-09-25", "score": 6.9, "products": [ "RouterOS" ] }, { "id": "CVE-2026-86060", "title": "SSH session privilege manipulation via a crafted username in Mikrotik RouterOS", "kevDate": "2026-09-10", "score": 9.2, "products": [ "RouterOS" ] } ], "events": [ [ "CVE-2026-7668", "05-02", 6.9, 0 ], [ "CVE-2026-16347", "07-28", 8.7, 0 ], [ "CVE-2026-14227", "07-30", 6.9, 0 ], [ "CVE-2026-67276", "09-05", 9.2, 1 ], [ "CVE-2026-67277", "09-05", 8.8, 5 ], [ "CVE-2026-67278", "09-05", 6.3, 16 ], [ "CVE-2026-67279", "09-05", 6.9, 1 ], [ "CVE-2026-67281", "09-05", 8.7, 4 ], [ "CVE-2026-86060", "09-05", 9.2, 1 ], [ "CVE-2026-89020", "09-14", 5.3, 0 ], [ "CVE-2026-89021", "09-14", 6.9, 0 ], [ "CVE-2026-56719", "09-16", 6.3, 4 ], [ "CVE-2026-89028", "09-16", 8.2, 2 ], [ "CVE-2026-93345", "09-22", 8.7, 0 ], [ "CVE-2026-84411", "10-02", 9.3, 2 ], [ "CVE-2026-103903", "10-12", 8.7, 4 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-84411", "score": 9.3, "title": "MikroTik RouterOS Integer Underflow" }, { "id": "CVE-2026-67276", "score": 9.2, "title": "SSH user impersonation possible in Mikrotik RouterOS" }, { "id": "CVE-2026-86060", "score": 9.2, "title": "SSH session privilege manipulation via a crafted username in Mikrotik RouterOS" }, { "id": "CVE-2026-67277", "score": 8.8, "title": "Kernel memory disclosure and denial of service in MikroTik RouterOS btest service" }, { "id": "CVE-2026-16347", "score": 8.7, "title": "Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router" } ] }, { "key": "ubiquiti", "name": "Ubiquiti", "short": "Ubiquiti", "color": "#2563eb", "lowData": false, "n": 41, "scores": { "volume": 35, "severity": 35, "exploitation": 74, "mttr": 92, "engagement": 67 }, "raw": { "cves": 41, "critical": 18, "high": 23, "medium": 0, "low": 0, "unknown": 0, "critHighPct": 100, "avgCvss": 8.7, "preAuthRce": 1, "authBypass": 4, "kev": 3, "kevPct": 7.3, "ransomware": 0, "epssAvg": 0.0278, "epssMax": 0.4577, "epssHigh": 3, "coordMedian": 19, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 39 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": false }, "evidence": { "policy": "https://ui.com/security/", "bounty": "https://hackerone.com/ubiquiti", "securitytxt": "https://ui.com/.well-known/security.txt" }, "notes": "About 60% of 2026 CVEs assigned via HackerOne CNA, the rest by Ubiquiti itself.", "assigners": { "hackerone": 25, "Ubiquiti": 16 }, "topProducts": { "Express 7": 25, "UniFi OS Server": 20, "Cloud Gateways": 18, "Dream Machines": 18, "Dream Routers": 18, "Dream Wall": 18, "Express": 12, "Cloud Keys": 11 }, "excludedProducts": { "UniFi Protect Application": 10, "UniFi Access Application": 7, "UniFi Protect AI Key": 7, "UniFi Play Audio Port": 5, "UniFi Play PowerAmp": 5, "UniFi Talk Application": 4, "UID Enterprise Agent": 2, "UniFi Connect Application": 2 }, "monthly": [ 1, 0, 3, 0, 5, 4, 12, 10, 6, 0 ], "kevList": [ { "id": "CVE-2026-34908", "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de", "kevDate": "2026-06-23", "score": 10, "products": [ "EFG", "Express 7", "UCG-Fiber" ] }, { "id": "CVE-2026-34909", "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to a", "kevDate": "2026-06-23", "score": 10, "products": [ "EFG", "Express", "Express 7" ] }, { "id": "CVE-2026-34910", "title": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS ", "kevDate": "2026-06-23", "score": 10, "products": [ "EFG", "Express 7", "UCG-Fiber" ] } ], "events": [ [ "CVE-2026-21639", "01-08", 8.8, 0 ], [ "CVE-2026-22557", "03-19", 10, 0 ], [ "CVE-2026-22558", "03-19", 7.7, 0 ], [ "CVE-2026-22559", "03-24", 8.8, 0 ], [ "CVE-2026-33000", "05-22", 9.1, 0 ], [ "CVE-2026-34908", "05-22", 10, 1 ], [ "CVE-2026-34909", "05-22", 10, 1 ], [ "CVE-2026-34910", "05-22", 10, 3 ], [ "CVE-2026-34911", "05-22", 7.7, 0 ], [ "CVE-2026-47368", "06-12", 8.6, 0 ], [ "CVE-2026-47369", "06-12", 9.9, 0 ], [ "CVE-2026-47370", "06-12", 9.9, 0 ], [ "CVE-2026-48610", "06-12", 8.1, 0 ], [ "CVE-2026-54401", "07-02", 7.7, 0 ], [ "CVE-2026-54402", "07-02", 9.9, 0 ], [ "CVE-2026-54403", "07-02", 8.6, 4 ], [ "CVE-2026-54404", "07-02", 8.8, 0 ], [ "CVE-2026-54405", "07-02", 7.5, 0 ], [ "CVE-2026-54406", "07-02", 8.7, 0 ], [ "CVE-2026-55110", "07-02", 7.5, 0 ], [ "CVE-2026-55112", "07-02", 7.5, 0 ], [ "CVE-2026-55114", "07-02", 8.8, 0 ], [ "CVE-2026-55116", "07-02", 9, 0 ], [ "CVE-2026-55118", "07-02", 8.3, 0 ], [ "CVE-2026-56842", "07-02", 7.5, 4 ], [ "CVE-2026-77532", "08-26", 8.8, 0 ], [ "CVE-2026-77534", "08-26", 9.9, 0 ], [ "CVE-2026-77535", "08-26", 9.1, 0 ], [ "CVE-2026-77536", "08-26", 9.9, 0 ], [ "CVE-2026-77539", "08-26", 9.1, 0 ], [ "CVE-2026-77540", "08-26", 9.1, 0 ], [ "CVE-2026-77541", "08-26", 9.1, 0 ], [ "CVE-2026-77545", "08-26", 9, 0 ], [ "CVE-2026-77549", "08-26", 9, 4 ], [ "CVE-2026-77550", "08-26", 10, 4 ], [ "CVE-2026-77544", "09-22", 7.5, 0 ], [ "CVE-2026-77555", "09-22", 7.5, 0 ], [ "CVE-2026-77556", "09-22", 7.5, 0 ], [ "CVE-2026-77558", "09-22", 7.5, 0 ], [ "CVE-2026-95861", "09-22", 7.5, 0 ], [ "CVE-2026-95862", "09-22", 7.5, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-22557", "score": 10, "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network App" }, { "id": "CVE-2026-34908", "score": 10, "title": "A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS de" }, { "id": "CVE-2026-34909", "score": 10, "title": "A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to a" }, { "id": "CVE-2026-34910", "score": 10, "title": "A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS " }, { "id": "CVE-2026-77550", "score": 10, "title": "A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability fo" } ] }, { "key": "tplink", "name": "TP-Link", "short": "TP-Link", "color": "#0ea5e9", "lowData": false, "n": 81, "scores": { "volume": 23, "severity": 59, "exploitation": 98, "mttr": 89, "engagement": 80 }, "raw": { "cves": 81, "critical": 1, "high": 50, "medium": 30, "low": 0, "unknown": 0, "critHighPct": 63, "avgCvss": 7.4, "preAuthRce": 2, "authBypass": 4, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0114, "epssMax": 0.057, "epssHigh": 0, "coordMedian": 27, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://www.tp-link.com/us/product-security/", "bounty": "https://www.tp-link.com/us/press/news/21730/" }, "notes": "TP-Link Systems states it sponsors a bug bounty programme; regional product-security pages still say no bounty is operated. Counted on the basis of the vendor statement.", "assigners": { "TPLink": 81 }, "topProducts": { "Archer BE230 v1.2": 12, "TL-WR841N v14": 7, "AX53 v1.0": 5, "Archer C20 v6": 3, "TL-WR940N v6": 3, "DR3150 v1": 3, "DR3220v-4G v1": 3, "DR3650v v1": 3 }, "excludedProducts": { "Tapo C520WS v2": 9, "Tapo C520WS v2.6": 6, "Tapo C200 v5": 6, "Tapo C120 v1": 4, "Tapo C220 v1": 3, "Tapo C260 v1": 3, "Tapo C100 v5": 3, "Tapo C325WB v2": 3 }, "monthly": [ 1, 13, 7, 7, 5, 7, 7, 20, 8, 6 ], "kevList": [], "events": [ [ "CVE-2026-0834", "01-21", 7.2, 0 ], [ "CVE-2026-0630", "02-02", 8.5, 0 ], [ "CVE-2026-0631", "02-02", 8.5, 0 ], [ "CVE-2026-22221", "02-02", 8.5, 0 ], [ "CVE-2026-22222", "02-02", 8.5, 0 ], [ "CVE-2026-22223", "02-02", 8.5, 0 ], [ "CVE-2026-22224", "02-02", 8.5, 0 ], [ "CVE-2026-22225", "02-02", 8.5, 0 ], [ "CVE-2026-22226", "02-02", 8.5, 0 ], [ "CVE-2026-22227", "02-02", 8.5, 0 ], [ "CVE-2026-22229", "02-02", 8.6, 0 ], [ "CVE-2026-22220", "02-03", 6.8, 0 ], [ "CVE-2026-22228", "02-03", 6.8, 0 ], [ "CVE-2026-1571", "02-11", 5.3, 0 ], [ "CVE-2026-0654", "03-02", 8.5, 0 ], [ "CVE-2026-0655", "03-02", 6.9, 0 ], [ "CVE-2026-3841", "03-12", 8.5, 0 ], [ "CVE-2026-1668", "03-13", 7.7, 0 ], [ "CVE-2026-3227", "03-13", 8.5, 0 ], [ "CVE-2026-3622", "03-26", 7.1, 0 ], [ "CVE-2026-4346", "03-26", 5.1, 0 ], [ "CVE-2026-30814", "04-08", 7.3, 0 ], [ "CVE-2026-30815", "04-08", 8.5, 0 ], [ "CVE-2026-30816", "04-08", 6.8, 0 ], [ "CVE-2026-30817", "04-08", 6.8, 0 ], [ "CVE-2026-30818", "04-08", 8.5, 0 ], [ "CVE-2026-5363", "04-15", 5.4, 0 ], [ "CVE-2026-5039", "04-23", 6.1, 0 ], [ "CVE-2026-5511", "05-19", 4.6, 0 ], [ "CVE-2026-3294", "05-22", 8.7, 0 ], [ "CVE-2026-5509", "05-27", 8.5, 0 ], [ "CVE-2026-8697", "05-28", 8.7, 0 ], [ "CVE-2026-34127", "05-29", 5.3, 0 ], [ "CVE-2026-8913", "06-08", 8.5, 0 ], [ "CVE-2026-9151", "06-10", 8.5, 0 ], [ "CVE-2026-11409", "06-16", 8.5, 0 ], [ "CVE-2026-11410", "06-16", 8.5, 0 ], [ "CVE-2026-11834", "06-22", 8.7, 0 ], [ "CVE-2026-9105", "06-29", 6.8, 0 ], [ "CVE-2026-10562", "06-30", 5.9, 4 ], [ "CVE-2026-8699", "07-02", 7, 0 ], [ "CVE-2026-15427", "07-14", 8.6, 0 ], [ "CVE-2026-15428", "07-14", 8.5, 0 ], [ "CVE-2026-15429", "07-14", 5.1, 0 ], [ "CVE-2026-5040", "07-14", 7.1, 0 ], [ "CVE-2026-12001", "07-27", 5.2, 0 ], [ "CVE-2026-12935", "07-29", 8.7, 6 ], [ "CVE-2026-9030", "08-07", 6.8, 0 ], [ "CVE-2026-9031", "08-07", 6.8, 0 ], [ "CVE-2026-12339", "08-10", 6.9, 0 ], [ "CVE-2026-15141", "08-12", 5.3, 0 ], [ "CVE-2026-75616", "08-19", 8.5, 0 ], [ "CVE-2026-8619", "08-19", 7.1, 0 ], [ "CVE-2026-19586", "08-20", 9.3, 2 ], [ "CVE-2026-19683", "08-20", 6.3, 0 ], [ "CVE-2026-9033", "08-20", 6, 0 ], [ "CVE-2026-17250", "08-21", 8.5, 0 ], [ "CVE-2026-17251", "08-21", 7.1, 0 ], [ "CVE-2026-17252", "08-21", 7.1, 0 ], [ "CVE-2026-15469", "08-24", 7.7, 0 ], [ "CVE-2026-16348", "08-24", 8.5, 0 ], [ "CVE-2026-78541", "08-24", 8.5, 0 ], [ "CVE-2026-9254", "08-24", 8.7, 0 ], [ "CVE-2026-75118", "08-28", 8.7, 0 ], [ "CVE-2026-76649", "08-28", 5.3, 0 ], [ "CVE-2026-76650", "08-28", 5.3, 0 ], [ "CVE-2026-76651", "08-28", 5.3, 0 ], [ "CVE-2026-18167", "09-03", 7.7, 0 ], [ "CVE-2026-18330", "09-03", 6.1, 0 ], [ "CVE-2026-81531", "09-08", 6.9, 0 ], [ "CVE-2026-85384", "09-08", 8.5, 0 ], [ "CVE-2026-17176", "09-10", 7.7, 0 ], [ "CVE-2026-76652", "09-10", 4.8, 0 ], [ "CVE-2026-76653", "09-10", 5.3, 0 ], [ "CVE-2026-84941", "09-10", 6.9, 0 ], [ "CVE-2026-102294", "10-01", 8.5, 0 ], [ "CVE-2026-84682", "10-01", 7.7, 0 ], [ "CVE-2026-8618", "10-01", 7.7, 0 ], [ "CVE-2026-102298", "10-14", 7.5, 4 ], [ "CVE-2026-107795", "10-14", 7.5, 4 ], [ "CVE-2026-109506", "10-14", 5.9, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-19586", "score": 9.3, "title": "Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways" }, { "id": "CVE-2026-3294", "score": 8.7, "title": "Authentication Logic Vulnerability on Multiple TP-Link Range Extenders" }, { "id": "CVE-2026-8697", "score": 8.7, "title": "Improper Authentication Rate Limiting on TP-Link's Archer C64" }, { "id": "CVE-2026-11834", "score": 8.7, "title": "Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers" }, { "id": "CVE-2026-12935", "score": 8.7, "title": "Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature" } ] }, { "key": "netgear", "name": "Netgear", "short": "Netgear", "color": "#be185d", "lowData": false, "n": 47, "scores": { "volume": 32, "severity": 95, "exploitation": 99, "mttr": 72, "engagement": 80 }, "raw": { "cves": 47, "critical": 0, "high": 1, "medium": 37, "low": 9, "unknown": 0, "critHighPct": 2.1, "avgCvss": 4.4, "preAuthRce": 1, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0034, "epssMax": 0.0107, "epssHigh": 0, "coordMedian": 63, "fixRefPct": 97.9, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 97.9 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://www.netgear.com/about/security/", "bounty": "https://bugcrowd.com/netgear", "securitytxt": "https://www.netgear.com/.well-known/security.txt" }, "notes": "", "assigners": { "NETGEAR": 46, "jpcert": 1 }, "topProducts": { "RAXE500": 12, "RAX43": 12, "RAX50": 12, "RAX42": 10, "RAX45": 10, "XR1000": 9, "RAX20": 9, "RAX41": 9 }, "excludedProducts": [], "monthly": [ 7, 0, 0, 0, 0, 17, 6, 9, 2, 6 ], "kevList": [], "events": [ [ "CVE-2026-0403", "01-13", 1.1, 0 ], [ "CVE-2026-0404", "01-13", 4.8, 0 ], [ "CVE-2026-0405", "01-13", 6.1, 0 ], [ "CVE-2026-0406", "01-13", 6.1, 0 ], [ "CVE-2026-0407", "01-13", 6.1, 0 ], [ "CVE-2026-0408", "01-13", 6.1, 0 ], [ "CVE-2026-24714", "01-30", 8.7, 8 ], [ "CVE-2026-0409", "06-09", 4.8, 2 ], [ "CVE-2026-0410", "06-09", 1.9, 0 ], [ "CVE-2026-0411", "06-09", 4.2, 0 ], [ "CVE-2026-0412", "06-09", 4.3, 8 ], [ "CVE-2026-0413", "06-09", 4.3, 0 ], [ "CVE-2026-0414", "06-09", 4.3, 0 ], [ "CVE-2026-0415", "06-09", 4.3, 0 ], [ "CVE-2026-0416", "06-09", 4.3, 0 ], [ "CVE-2026-0417", "06-09", 4.3, 0 ], [ "CVE-2026-0418", "06-09", 4.3, 0 ], [ "CVE-2026-0419", "06-09", 4.4, 8 ], [ "CVE-2026-0420", "06-09", 4.6, 0 ], [ "CVE-2026-3088", "06-09", 4.9, 0 ], [ "CVE-2026-9210", "06-09", 4.9, 0 ], [ "CVE-2026-9211", "06-09", 5.2, 0 ], [ "CVE-2026-9212", "06-09", 5.6, 0 ], [ "CVE-2026-9213", "06-09", 6.9, 0 ], [ "CVE-2026-15757", "07-14", 6.3, 0 ], [ "CVE-2026-62655", "07-14", 5.7, 0 ], [ "CVE-2026-62656", "07-14", 5.4, 0 ], [ "CVE-2026-62657", "07-14", 4.9, 0 ], [ "CVE-2026-62658", "07-14", 4.7, 0 ], [ "CVE-2026-62659", "07-14", 4.3, 0 ], [ "CVE-2026-11733", "08-11", 1.1, 0 ], [ "CVE-2026-11734", "08-11", 1.1, 0 ], [ "CVE-2026-11735", "08-11", 1.9, 0 ], [ "CVE-2026-11736", "08-11", 1.9, 0 ], [ "CVE-2026-11737", "08-11", 4.3, 0 ], [ "CVE-2026-11738", "08-11", 4.3, 0 ], [ "CVE-2026-11739", "08-11", 4.9, 0 ], [ "CVE-2026-11814", "08-11", 4.9, 0 ], [ "CVE-2026-9214", "08-11", 4.3, 0 ], [ "CVE-2026-9215", "09-08", 1.8, 0 ], [ "CVE-2026-9216", "09-08", 1.2, 0 ], [ "CVE-2026-107917", "10-13", 4.3, 0 ], [ "CVE-2026-107918", "10-13", 4.3, 0 ], [ "CVE-2026-11730", "10-13", 2.1, 0 ], [ "CVE-2026-11731", "10-13", 6.3, 0 ], [ "CVE-2026-11732", "10-13", 6.3, 0 ], [ "CVE-2026-9218", "10-13", 4.3, 0 ] ], "zombie": { "eol": 3, "pct": 6.4, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-24714", "score": 8.7, "title": "Some end of service NETGEAR products provide \"TelnetEnable\" functionality, which allows a magic packet to activate telne" }, { "id": "CVE-2026-9213", "score": 6.9, "title": "Insufficient input validation in certain NETGEAR routers" }, { "id": "CVE-2026-15757", "score": 6.3, "title": "Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router" }, { "id": "CVE-2026-11731", "score": 6.3, "title": "Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models" }, { "id": "CVE-2026-11732", "score": 6.3, "title": "Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models" } ] }, { "key": "dlink", "name": "D-Link", "short": "D-Link", "color": "#7e22ce", "lowData": false, "n": 146, "scores": { "volume": 13, "severity": 29, "exploitation": 96, "mttr": 0, "engagement": 13 }, "raw": { "cves": 146, "critical": 42, "high": 61, "medium": 42, "low": 1, "unknown": 0, "critHighPct": 70.5, "avgCvss": 8, "preAuthRce": 25, "authBypass": 5, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0244, "epssMax": 0.1574, "epssHigh": 1, "coordMedian": 1, "fixRefPct": 17.1, "workaroundOnly": 45, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://supportannouncement.us.dlink.com/security/" }, "notes": "2026 CVEs almost entirely assigned by VulDB; only 17% of records carry a vendor fix reference.", "assigners": { "VulDB": 122, "VulnCheck": 17, "securin": 5, "twcert": 1, "CERT-PL": 1 }, "topProducts": { "DWR-M960": 20, "DWR-M961": 18, "DIR-823X": 16, "DIR-605L": 9, "DIR-513": 8, "DWR-M921": 8, "DIR-816": 8, "DIR-615": 6 }, "excludedProducts": { "DNS-320": 32, "DNS-340L": 30, "DNS-345": 27, "DNS-327L": 26, "DNS-320L": 25, "DNR-322L": 23, "DNS-1200-05": 23, "DNR-202L": 23 }, "monthly": [ 11, 43, 16, 19, 9, 5, 1, 19, 22, 1 ], "kevList": [], "events": [ [ "CVE-2026-0625", "01-05", 9.3, 12 ], [ "CVE-2026-1125", "01-18", 6.9, 0 ], [ "CVE-2026-1448", "01-26", 8.6, 8 ], [ "CVE-2026-1505", "01-28", 8.6, 8 ], [ "CVE-2026-1506", "01-28", 8.6, 8 ], [ "CVE-2026-1544", "01-28", 5.3, 8 ], [ "CVE-2026-1596", "01-29", 5.3, 0 ], [ "CVE-2026-1624", "01-29", 5.3, 0 ], [ "CVE-2026-1625", "01-29", 5.3, 0 ], [ "CVE-2026-1685", "01-30", 6.3, 0 ], [ "CVE-2026-1705", "01-30", 4.8, 0 ], [ "CVE-2026-1744", "02-02", 4.8, 8 ], [ "CVE-2026-2054", "02-06", 6.9, 8 ], [ "CVE-2026-2055", "02-06", 6.9, 8 ], [ "CVE-2026-2056", "02-06", 6.9, 8 ], [ "CVE-2026-2061", "02-06", 5.1, 0 ], [ "CVE-2026-2063", "02-06", 5.1, 0 ], [ "CVE-2026-2081", "02-07", 5.1, 0 ], [ "CVE-2026-2082", "02-07", 5.1, 0 ], [ "CVE-2026-2084", "02-07", 8.6, 0 ], [ "CVE-2026-2085", "02-07", 8.6, 0 ], [ "CVE-2026-2120", "02-08", 8.6, 0 ], [ "CVE-2026-2129", "02-08", 8.6, 0 ], [ "CVE-2026-2142", "02-08", 8.6, 0 ], [ "CVE-2026-2143", "02-08", 8.6, 0 ], [ "CVE-2026-2151", "02-08", 8.6, 8 ], [ "CVE-2026-2152", "02-08", 8.6, 8 ], [ "CVE-2026-2155", "02-08", 8.6, 0 ], [ "CVE-2026-2157", "02-08", 8.6, 0 ], [ "CVE-2026-2163", "02-08", 5.1, 8 ], [ "CVE-2026-2168", "02-08", 5.3, 0 ], [ "CVE-2026-2169", "02-08", 5.3, 0 ], [ "CVE-2026-2175", "02-08", 8.6, 0 ], [ "CVE-2026-2210", "02-09", 8.6, 0 ], [ "CVE-2026-2853", "02-20", 8.7, 0 ], [ "CVE-2026-2854", "02-20", 8.7, 0 ], [ "CVE-2026-2855", "02-20", 8.7, 0 ], [ "CVE-2026-2856", "02-20", 8.7, 0 ], [ "CVE-2026-2857", "02-20", 8.7, 0 ], [ "CVE-2026-2881", "02-21", 8.7, 0 ], [ "CVE-2026-2882", "02-21", 8.7, 0 ], [ "CVE-2026-2883", "02-21", 8.7, 0 ], [ "CVE-2026-2884", "02-21", 8.7, 0 ], [ "CVE-2026-2885", "02-21", 8.7, 0 ], [ "CVE-2026-2925", "02-22", 8.7, 0 ], [ "CVE-2026-2926", "02-22", 8.7, 0 ], [ "CVE-2026-2927", "02-22", 8.7, 0 ], [ "CVE-2026-2928", "02-22", 8.7, 0 ], [ "CVE-2026-2929", "02-22", 8.7, 0 ], [ "CVE-2026-2958", "02-22", 8.7, 0 ], [ "CVE-2026-2959", "02-22", 8.7, 0 ], [ "CVE-2026-2960", "02-23", 8.7, 0 ], [ "CVE-2026-2961", "02-23", 8.7, 0 ], [ "CVE-2026-2962", "02-23", 8.7, 0 ], [ "CVE-2026-3485", "03-03", 9.3, 10 ], [ "CVE-2026-3978", "03-12", 8.7, 0 ], [ "CVE-2026-4180", "03-15", 6.9, 8 ], [ "CVE-2026-4181", "03-15", 9.3, 10 ], [ "CVE-2026-4182", "03-15", 9.3, 10 ], [ "CVE-2026-4183", "03-15", 9.3, 10 ], [ "CVE-2026-4184", "03-15", 9.3, 10 ], [ "CVE-2026-4188", "03-15", 8.7, 8 ], [ "CVE-2026-4193", "03-15", 6.9, 8 ], [ "CVE-2026-4465", "03-20", 5.3, 8 ], [ "CVE-2026-4486", "03-20", 8.7, 8 ], [ "CVE-2026-4499", "03-20", 6.9, 0 ], [ "CVE-2026-4529", "03-21", 8.7, 8 ], [ "CVE-2026-4555", "03-22", 8.7, 8 ], [ "CVE-2026-4627", "03-24", 8.6, 8 ], [ "CVE-2026-5024", "03-29", 8.7, 8 ], [ "CVE-2026-5815", "04-08", 8.7, 8 ], [ "CVE-2026-5844", "04-09", 8.6, 8 ], [ "CVE-2026-5979", "04-09", 8.7, 8 ], [ "CVE-2026-5980", "04-09", 8.7, 8 ], [ "CVE-2026-5981", "04-09", 8.7, 8 ], [ "CVE-2026-5982", "04-09", 8.7, 8 ], [ "CVE-2026-5983", "04-09", 8.7, 8 ], [ "CVE-2026-5984", "04-09", 8.7, 8 ], [ "CVE-2026-6012", "04-10", 8.7, 8 ], [ "CVE-2026-6013", "04-10", 8.7, 8 ], [ "CVE-2026-6014", "04-10", 8.7, 8 ], [ "CVE-2026-6947", "04-24", 8.7, 0 ], [ "CVE-2026-7026", "04-26", 6.8, 0 ], [ "CVE-2026-7027", "04-26", 4.8, 0 ], [ "CVE-2026-7067", "04-26", 6.9, 8 ], [ "CVE-2026-7068", "04-26", 8.7, 8 ], [ "CVE-2026-7069", "04-27", 8.6, 8 ], [ "CVE-2026-7288", "04-28", 8.7, 0 ], [ "CVE-2026-7289", "04-28", 8.7, 0 ], [ "CVE-2026-42372", "05-04", 8.8, 8 ], [ "CVE-2026-42373", "05-04", 9.8, 12 ], [ "CVE-2026-42374", "05-04", 9.8, 12 ], [ "CVE-2026-42375", "05-04", 9.8, 12 ], [ "CVE-2026-42376", "05-04", 9.8, 12 ], [ "CVE-2026-8344", "05-11", 5.3, 0 ], [ "CVE-2026-8345", "05-11", 5.3, 0 ], [ "CVE-2026-8346", "05-11", 5.3, 0 ], [ "CVE-2026-4377", "05-28", 6, 0 ], [ "CVE-2026-10878", "06-05", 5.3, 0 ], [ "CVE-2026-11339", "06-05", 5.3, 0 ], [ "CVE-2026-11341", "06-05", 5.3, 0 ], [ "CVE-2026-11492", "06-08", 5.3, 0 ], [ "CVE-2026-11555", "06-08", 6.3, 0 ], [ "CVE-2026-15270", "07-09", 7.7, 0 ], [ "CVE-2026-71944", "08-08", 9.3, 2 ], [ "CVE-2026-71945", "08-08", 9.3, 2 ], [ "CVE-2026-71946", "08-08", 9.3, 2 ], [ "CVE-2026-71947", "08-08", 9.3, 2 ], [ "CVE-2026-71948", "08-08", 9.3, 2 ], [ "CVE-2026-71949", "08-08", 9.3, 2 ], [ "CVE-2026-71950", "08-08", 9.3, 2 ], [ "CVE-2026-71951", "08-08", 9.3, 2 ], [ "CVE-2026-71952", "08-08", 9.3, 2 ], [ "CVE-2026-71953", "08-08", 9.3, 2 ], [ "CVE-2026-71954", "08-08", 9.3, 2 ], [ "CVE-2026-71955", "08-08", 9.3, 2 ], [ "CVE-2026-71956", "08-08", 9.3, 2 ], [ "CVE-2026-71957", "08-08", 9.3, 2 ], [ "CVE-2026-71958", "08-08", 9.3, 2 ], [ "CVE-2026-19893", "08-15", 2.3, 0 ], [ "CVE-2026-82592", "08-30", 9.4, 0 ], [ "CVE-2026-82593", "08-30", 9.4, 0 ], [ "CVE-2026-82595", "08-30", 5.3, 0 ], [ "CVE-2026-86295", "09-07", 6.9, 0 ], [ "CVE-2026-86296", "09-07", 10, 2 ], [ "CVE-2026-86297", "09-07", 9.2, 0 ], [ "CVE-2026-86509", "09-08", 9.4, 0 ], [ "CVE-2026-86510", "09-08", 9.4, 0 ], [ "CVE-2026-90680", "09-14", 9.4, 0 ], [ "CVE-2026-90692", "09-14", 9.4, 0 ], [ "CVE-2026-90693", "09-14", 9.4, 0 ], [ "CVE-2026-90699", "09-14", 9.4, 0 ], [ "CVE-2026-90702", "09-14", 9.4, 0 ], [ "CVE-2026-90703", "09-14", 9.4, 0 ], [ "CVE-2026-90704", "09-14", 5.1, 0 ], [ "CVE-2026-90705", "09-14", 5.1, 0 ], [ "CVE-2026-90706", "09-14", 5.1, 0 ], [ "CVE-2026-90880", "09-15", 5.3, 0 ], [ "CVE-2026-90881", "09-15", 6.9, 0 ], [ "CVE-2026-94036", "09-20", 8.7, 0 ], [ "CVE-2026-94050", "09-20", 5.3, 8 ], [ "CVE-2026-94089", "09-20", 10, 2 ], [ "CVE-2026-95675", "09-22", 9.3, 2 ], [ "CVE-2026-96891", "09-24", 9.3, 2 ], [ "CVE-2026-100740", "09-27", 9.4, 0 ], [ "CVE-2026-110536", "10-14", 10, 2 ] ], "zombie": { "eol": 46, "pct": 31.5, "workaroundOnly": 45 }, "worst": [ { "id": "CVE-2026-86296", "score": 10, "title": "D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow" }, { "id": "CVE-2026-94089", "score": 10, "title": "D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow" }, { "id": "CVE-2026-110536", "score": 10, "title": "D-Link DIR-868L HNAP CGI cgibin system os command injection" }, { "id": "CVE-2026-42373", "score": 9.8, "title": "D-Link DIR-605L B2 Hardcoded Telnet Backdoor Credentials" }, { "id": "CVE-2026-42374", "score": 9.8, "title": "D-Link DIR-600L B1 Hardcoded Telnet Backdoor Credentials" } ] }, { "key": "avm", "name": "AVM (FRITZ!)", "short": "AVM", "color": "#dc2626", "lowData": true, "n": 0, "scores": { "volume": 50, "severity": null, "exploitation": null, "mttr": null, "engagement": 13 }, "raw": { "cves": 0, "critical": 0, "high": 0, "medium": 0, "low": 0, "unknown": 0, "critHighPct": 0, "avgCvss": null, "preAuthRce": 0, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": null, "epssMax": null, "epssHigh": 0, "coordMedian": null, "fixRefPct": 0, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://avm.de/sicherheit/" }, "notes": "No CVE records for FRITZ! products published in 2026 in the sources used.", "assigners": [], "topProducts": [], "excludedProducts": { "WPGSI: Spreadsheet Integration": 1 }, "monthly": [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ], "kevList": [], "events": [], "zombie": { "eol": 0, "pct": null, "workaroundOnly": 0 }, "worst": [] }, { "key": "linksys", "name": "Linksys", "short": "Linksys", "color": "#4338ca", "lowData": false, "n": 14, "scores": { "volume": 53, "severity": 26, "exploitation": 97, "mttr": 43, "engagement": 13 }, "raw": { "cves": 14, "critical": 9, "high": 3, "medium": 2, "low": 0, "unknown": 0, "critHighPct": 85.7, "avgCvss": 8.9, "preAuthRce": 3, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0214, "epssMax": 0.0798, "epssHigh": 0, "coordMedian": 1, "fixRefPct": 42.9, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://www.linksys.com/pages/security" }, "notes": "2026 CVEs assigned by VulDB and ENISA.", "assigners": { "VulDB": 8, "ENISA": 6 }, "topProducts": { "MR9600": 8, "MX4200": 6, "E1700": 5, "RE7000": 1 }, "excludedProducts": [], "monthly": [ 0, 6, 1, 1, 0, 0, 0, 0, 1, 5 ], "kevList": [], "events": [ [ "CVE-2026-25603", "02-24", 6.6, 0 ], [ "CVE-2026-27846", "02-25", 6.2, 0 ], [ "CVE-2026-27847", "02-25", 9.8, 0 ], [ "CVE-2026-27848", "02-25", 9.8, 2 ], [ "CVE-2026-27849", "02-25", 9.8, 2 ], [ "CVE-2026-27850", "02-25", 7.5, 0 ], [ "CVE-2026-4558", "03-22", 8.7, 0 ], [ "CVE-2026-6992", "04-25", 8.6, 0 ], [ "CVE-2026-86299", "09-07", 9.4, 0 ], [ "CVE-2026-108892", "10-12", 10, 2 ], [ "CVE-2026-108893", "10-12", 9.4, 0 ], [ "CVE-2026-108894", "10-12", 9.4, 0 ], [ "CVE-2026-108895", "10-12", 9.4, 0 ], [ "CVE-2026-108896", "10-12", 9.4, 0 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-108892", "score": 10, "title": "Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow" }, { "id": "CVE-2026-27847", "score": 9.8, "title": "Missing authentication in Linksys MR9600, Linksys MX4200" }, { "id": "CVE-2026-27848", "score": 9.8, "title": "Missing neutralization in Linksys MR9600, Linksys MX4200" }, { "id": "CVE-2026-27849", "score": 9.8, "title": "Missing neutralization in Linksys MR9600, Linksys MX4200" }, { "id": "CVE-2026-86299", "score": 9.4, "title": "Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection" } ] }, { "key": "sonicwall", "name": "SonicWall", "short": "SonicWall", "color": "#ea580c", "lowData": false, "n": 35, "scores": { "volume": 37, "severity": 39, "exploitation": 53, "mttr": 92, "engagement": 67 }, "raw": { "cves": 35, "critical": 8, "high": 14, "medium": 13, "low": 0, "unknown": 0, "critHighPct": 62.9, "avgCvss": 7.3, "preAuthRce": 2, "authBypass": 5, "kev": 4, "kevPct": 11.4, "ransomware": 2, "epssAvg": 0.0155, "epssMax": 0.1179, "epssHigh": 1, "coordMedian": 18, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": true }, "evidence": { "policy": "https://www.sonicwall.com/support/product-security-incident-response-team" }, "notes": "PSIRT portal is a JavaScript application; no CSAF provider or documented API found.", "assigners": { "sonicwall": 35 }, "topProducts": { "SMA1000": 12, "SonicOS": 9, "GMS": 6, "Network Security Manager (NSM)": 5, "NetExtender": 2, "Global VPN Client": 1 }, "excludedProducts": { "Email Security": 5 }, "monthly": [ 0, 4, 1, 7, 0, 0, 2, 10, 5, 6 ], "kevList": [ { "id": "CVE-2026-15409", "title": "A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A ", "kevDate": "2026-07-14", "score": 10, "products": [ "SMA1000" ] }, { "id": "CVE-2026-15410", "title": "Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S", "kevDate": "2026-07-14", "score": 7.2, "products": [ "SMA1000" ] }, { "id": "CVE-2026-83548", "title": "A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern", "kevDate": "2026-09-02", "score": 10, "products": [ "SMA1000" ] }, { "id": "CVE-2026-83549", "title": "Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi", "kevDate": "2026-09-02", "score": 7.8, "products": [ "SMA1000" ] } ], "events": [ [ "CVE-2026-0399", "02-24", 4.9, 0 ], [ "CVE-2026-0400", "02-24", 4.9, 0 ], [ "CVE-2026-0401", "02-24", 4.9, 0 ], [ "CVE-2026-0402", "02-24", 4.9, 0 ], [ "CVE-2026-3439", "03-04", 4.9, 0 ], [ "CVE-2026-4112", "04-09", 7.2, 0 ], [ "CVE-2026-4113", "04-09", 7.2, 0 ], [ "CVE-2026-4114", "04-09", 6.6, 0 ], [ "CVE-2026-4116", "04-09", 7.2, 0 ], [ "CVE-2026-0204", "04-29", 8, 0 ], [ "CVE-2026-0205", "04-29", 6.8, 0 ], [ "CVE-2026-0206", "04-29", 4.9, 0 ], [ "CVE-2026-15409", "07-14", 10, 37 ], [ "CVE-2026-15410", "07-14", 7.2, 33 ], [ "CVE-2026-0516", "08-05", 6.5, 0 ], [ "CVE-2026-66151", "08-07", 5.5, 0 ], [ "CVE-2026-18634", "08-11", 8.4, 0 ], [ "CVE-2026-66145", "08-11", 9.1, 2 ], [ "CVE-2026-66146", "08-11", 6.1, 0 ], [ "CVE-2026-66147", "08-11", 9.4, 2 ], [ "CVE-2026-66148", "08-11", 6.3, 0 ], [ "CVE-2026-66154", "08-11", 8.3, 0 ], [ "CVE-2026-66152", "08-25", 8.8, 0 ], [ "CVE-2026-66153", "08-25", 7, 0 ], [ "CVE-2026-83548", "09-01", 10, 5 ], [ "CVE-2026-83549", "09-01", 7.8, 1 ], [ "CVE-2026-78327", "09-04", 9.1, 0 ], [ "CVE-2026-78328", "09-04", 9.1, 4 ], [ "CVE-2026-81939", "09-04", 9.1, 0 ], [ "CVE-2026-102255", "10-07", 10, 4 ], [ "CVE-2026-102256", "10-07", 7.8, 0 ], [ "CVE-2026-102257", "10-07", 7.2, 0 ], [ "CVE-2026-102258", "10-07", 6.1, 0 ], [ "CVE-2026-100232", "10-14", 7.2, 0 ], [ "CVE-2026-96540", "10-14", 8.8, 4 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-15409", "score": 10, "title": "A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A " }, { "id": "CVE-2026-83548", "score": 10, "title": "A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern" }, { "id": "CVE-2026-102255", "score": 10, "title": "A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern" }, { "id": "CVE-2026-66147", "score": 9.4, "title": "An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier" }, { "id": "CVE-2026-66145", "score": 9.1, "title": "An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier version" } ] }, { "key": "zyxel", "name": "Zyxel", "short": "Zyxel", "color": "#65a30d", "lowData": false, "n": 20, "scores": { "volume": 47, "severity": 65, "exploitation": 84, "mttr": 62, "engagement": 67 }, "raw": { "cves": 20, "critical": 1, "high": 10, "medium": 9, "low": 0, "unknown": 0, "critHighPct": 55, "avgCvss": 7.1, "preAuthRce": 1, "authBypass": 0, "kev": 1, "kevPct": 5, "ransomware": 0, "epssAvg": 0.0084, "epssMax": 0.0268, "epssHigh": 0, "coordMedian": 55.5, "fixRefPct": 80, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 80 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": true }, "evidence": { "policy": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-vulnerability-reporting-policy", "securitytxt": "https://www.zyxel.com/.well-known/security.txt" }, "notes": "", "assigners": { "Zyxel": 16, "TR-CERT": 4 }, "topProducts": { "WAH7601": 4, "WRE6505 v2 firmware": 4, "VMG4005-B50B firmware": 2, "WAX650S firmware": 2, "ATP series firmware": 1, "USG FLEX 50(W) series firmware": 1, "USG FLEX series firmware": 1, "USG20(W)-VPN series firmware": 1 }, "excludedProducts": [], "monthly": [ 0, 1, 0, 3, 5, 3, 1, 7, 0, 0 ], "kevList": [ { "id": "CVE-2026-7273", "title": "A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through\u00a02.90(ABT", "kevDate": "2026-09-21", "score": 8.8, "products": [ "GS1900-10HP firmware", "GS1900-16 firmware", "GS1900-24 firmware" ] } ], "events": [ [ "CVE-2026-1459", "02-24", 7.2, 0 ], [ "CVE-2026-6058", "04-21", 4.5, 8 ], [ "CVE-2026-0711", "04-28", 6.8, 0 ], [ "CVE-2026-1460", "04-28", 7.2, 0 ], [ "CVE-2026-7255", "05-12", 6.5, 8 ], [ "CVE-2026-7256", "05-12", 8.8, 8 ], [ "CVE-2026-7257", "05-12", 4.4, 8 ], [ "CVE-2026-7287", "05-12", 7.5, 8 ], [ "CVE-2026-4795", "05-26", 6.5, 0 ], [ "CVE-2026-3870", "06-02", 6.5, 0 ], [ "CVE-2026-3871", "06-02", 6.5, 0 ], [ "CVE-2026-7273", "06-16", 8.8, 1 ], [ "CVE-2026-6952", "07-21", 7.2, 0 ], [ "CVE-2026-14818", "08-04", 7.2, 0 ], [ "CVE-2026-6837", "08-04", 7.2, 0 ], [ "CVE-2026-8508", "08-04", 6.5, 0 ], [ "CVE-2026-12984", "08-10", 8.2, 0 ], [ "CVE-2026-13206", "08-10", 9.8, 2 ], [ "CVE-2026-6373", "08-10", 6.5, 0 ], [ "CVE-2026-6374", "08-10", 7.3, 0 ] ], "zombie": { "eol": 5, "pct": 25, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-13206", "score": 9.8, "title": "Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection" }, { "id": "CVE-2026-7256", "score": 8.8, "title": "** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware versio" }, { "id": "CVE-2026-7273", "score": 8.8, "title": "A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through\u00a02.90(ABT" }, { "id": "CVE-2026-12984", "score": 8.2, "title": "Exposure of Sensitive Information to an Unauthorized Actor in Zyxel's WAH7601" }, { "id": "CVE-2026-7287", "score": 7.5, "title": "** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formU" } ] }, { "key": "checkpoint", "name": "Check Point", "short": "Check Point", "color": "#2563eb", "lowData": false, "n": 16, "scores": { "volume": 50, "severity": 3, "exploitation": 0, "mttr": 98, "engagement": 67 }, "raw": { "cves": 16, "critical": 8, "high": 5, "medium": 3, "low": 0, "unknown": 0, "critHighPct": 81.2, "avgCvss": 8.1, "preAuthRce": 6, "authBypass": 6, "kev": 5, "kevPct": 31.2, "ransomware": 1, "epssAvg": 0.1866, "epssMax": 0.8534, "epssHigh": 4, "coordMedian": 6, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": true }, "evidence": { "policy": "https://www.checkpoint.com/about-us/report-security-issue/", "bounty": "https://www.checkpoint.com/check-point-bug-bounty-program-policy/" }, "notes": "Private HackerOne programme covers the customer portal only; products are explicitly out of scope, so bounty is not counted.", "assigners": { "checkpoint": 16 }, "topProducts": { "Quantum Security Gateway": 10, "Quantum Security Management": 7, "Spark Firewalls": 2, "Multi-Domain Security Management": 2, "Multi-Domain Security Management Server": 1, "Security Management Server": 1 }, "excludedProducts": { "Identity Agent": 1 }, "monthly": [ 0, 0, 0, 0, 6, 2, 3, 1, 4, 0 ], "kevList": [ { "id": "CVE-2026-50751", "title": "User Authentication Bypass in VPN Remote Access and Mobile Access", "kevDate": "2026-06-08", "score": 9.3, "products": [ "Quantum Security Gateway", "Spark Firewalls" ] }, { "id": "CVE-2026-16232", "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token", "kevDate": "2026-07-22", "score": 9.3, "products": [ "Multi-Domain Security Management", "Quantum Security Management" ] }, { "id": "CVE-2026-85102", "title": "Improper Certificate Validation in Quantum Security Gateway", "kevDate": "2026-09-22", "score": 9.8, "products": [ "Quantum Security Gateway" ] }, { "id": "CVE-2026-85103", "title": "Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding", "kevDate": "2026-09-25", "score": 9.8, "products": [ "Quantum Security Gateway", "Quantum Security Management" ] }, { "id": "CVE-2026-93616", "title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server", "kevDate": "2026-09-22", "score": 9.8, "products": [ "Quantum Security Management" ] } ], "events": [ [ "CVE-2026-48131", "05-26", 8.1, 2 ], [ "CVE-2026-48132", "05-26", 8.1, 0 ], [ "CVE-2026-48133", "05-26", 7.5, 0 ], [ "CVE-2026-48134", "05-26", 5.6, 0 ], [ "CVE-2026-48135", "05-26", 5.3, 0 ], [ "CVE-2026-48136", "05-26", 4.1, 0 ], [ "CVE-2026-50751", "06-08", 9.3, 37 ], [ "CVE-2026-50752", "06-08", 7.4, 4 ], [ "CVE-2026-16232", "07-22", 9.3, 5 ], [ "CVE-2026-62144", "07-22", 9.1, 6 ], [ "CVE-2026-62145", "07-22", 7.5, 0 ], [ "CVE-2026-18574", "08-03", 9.3, 6 ], [ "CVE-2026-85102", "09-09", 9.8, 3 ], [ "CVE-2026-85103", "09-09", 9.8, 3 ], [ "CVE-2026-91843", "09-16", 9.8, 2 ], [ "CVE-2026-93616", "09-22", 9.8, 5 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-85102", "score": 9.8, "title": "Improper Certificate Validation in Quantum Security Gateway" }, { "id": "CVE-2026-85103", "score": 9.8, "title": "Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding" }, { "id": "CVE-2026-91843", "score": 9.8, "title": "Stack overflow in login process to the Security Management and Log Servers" }, { "id": "CVE-2026-93616", "score": 9.8, "title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server" }, { "id": "CVE-2026-50751", "score": 9.3, "title": "User Authentication Bypass in VPN Remote Access and Mobile Access" } ] }, { "key": "f5", "name": "F5", "short": "F5", "color": "#e11d48", "lowData": false, "n": 53, "scores": { "volume": 30, "severity": 47, "exploitation": 94, "mttr": 95, "engagement": 67 }, "raw": { "cves": 53, "critical": 1, "high": 37, "medium": 12, "low": 3, "unknown": 0, "critHighPct": 71.7, "avgCvss": 7.6, "preAuthRce": 4, "authBypass": 2, "kev": 1, "kevPct": 1.9, "ransomware": 0, "epssAvg": 0.0045, "epssMax": 0.0223, "epssHigh": 0, "coordMedian": 13, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": false, "pledge": true }, "evidence": { "policy": "https://my.f5.com/manage/s/article/K4602", "securitytxt": "https://www.f5.com/.well-known/security.txt", "pledge": "https://www.f5.com/company/blog/cloud-security-challenges-solutions" }, "notes": "Reports accepted via form, e-mail and HackerOne, but F5 stated on 2026-10-14 that a paid bug bounty programme will be launched in the coming weeks; not counted until live. Advisories behind MyF5 (K-articles), no public CSAF provider.", "assigners": { "f5": 53 }, "topProducts": { "BIG-IP": 51, "BIG-IQ": 10, "BIG-IP Next CNF": 5, "BIG-IP Next for Kubernetes": 5, "BIG-IP Next SPK": 4, "SSL Orchestrator": 1, "BIG-IP Edge Client": 1 }, "excludedProducts": { "NGINX Open Source": 26, "NGINX Plus": 24, "NGINX Gateway Fabric": 6, "NGINX JavaScript": 6, "NGINX Ingress Controller": 5, "F5 BIG-IP Container Ingress Services": 1, "NGINX Instance Manager": 1, "NGINX Agent": 1 }, "monthly": [ 0, 4, 0, 0, 45, 0, 1, 0, 3, 0 ], "kevList": [ { "id": "CVE-2026-94127", "title": "BIG-IP APM OAuth vulnerability", "kevDate": "2026-09-22", "score": 9.3, "products": [ "BIG-IP" ] } ], "events": [ [ "CVE-2026-20730", "02-04", 2, 0 ], [ "CVE-2026-20732", "02-04", 2.3, 0 ], [ "CVE-2026-22548", "02-04", 8.2, 0 ], [ "CVE-2026-2507", "02-18", 8.7, 0 ], [ "CVE-2026-20916", "05-13", 7.2, 0 ], [ "CVE-2026-24464", "05-13", 6.9, 0 ], [ "CVE-2026-28758", "05-13", 6.7, 0 ], [ "CVE-2026-32643", "05-13", 8.5, 0 ], [ "CVE-2026-32673", "05-13", 8.5, 0 ], [ "CVE-2026-34019", "05-13", 6.3, 0 ], [ "CVE-2026-34176", "05-13", 8.5, 0 ], [ "CVE-2026-35062", "05-13", 7.1, 0 ], [ "CVE-2026-39455", "05-13", 8.7, 0 ], [ "CVE-2026-39458", "05-13", 8.7, 0 ], [ "CVE-2026-39459", "05-13", 8.6, 0 ], [ "CVE-2026-40060", "05-13", 8.7, 0 ], [ "CVE-2026-40061", "05-13", 8.5, 0 ], [ "CVE-2026-40067", "05-13", 8.7, 2 ], [ "CVE-2026-40423", "05-13", 8.7, 0 ], [ "CVE-2026-40435", "05-13", 6.9, 0 ], [ "CVE-2026-40462", "05-13", 7.1, 0 ], [ "CVE-2026-40618", "05-13", 8.7, 0 ], [ "CVE-2026-40629", "05-13", 8.7, 0 ], [ "CVE-2026-40631", "05-13", 8.5, 0 ], [ "CVE-2026-40698", "05-13", 8.5, 0 ], [ "CVE-2026-40699", "05-13", 7.1, 0 ], [ "CVE-2026-40703", "05-13", 5.3, 0 ], [ "CVE-2026-41217", "05-13", 8.3, 0 ], [ "CVE-2026-41218", "05-13", 8.7, 2 ], [ "CVE-2026-41219", "05-13", 7.1, 0 ], [ "CVE-2026-41225", "05-13", 8.6, 0 ], [ "CVE-2026-41227", "05-13", 8.7, 0 ], [ "CVE-2026-41953", "05-13", 8.5, 0 ], [ "CVE-2026-41954", "05-13", 6.9, 0 ], [ "CVE-2026-41956", "05-13", 8.7, 2 ], [ "CVE-2026-41957", "05-13", 8.7, 0 ], [ "CVE-2026-41959", "05-13", 6.8, 0 ], [ "CVE-2026-42058", "05-13", 5.3, 0 ], [ "CVE-2026-42063", "05-13", 6.9, 0 ], [ "CVE-2026-42406", "05-13", 8.5, 0 ], [ "CVE-2026-42408", "05-13", 6.7, 0 ], [ "CVE-2026-42409", "05-13", 8.7, 0 ], [ "CVE-2026-42780", "05-13", 6.9, 0 ], [ "CVE-2026-42781", "05-13", 7.1, 0 ], [ "CVE-2026-42919", "05-13", 7.1, 0 ], [ "CVE-2026-42920", "05-13", 8.7, 0 ], [ "CVE-2026-42924", "05-13", 8.5, 0 ], [ "CVE-2026-42930", "05-13", 8.5, 0 ], [ "CVE-2026-42937", "05-13", 6.8, 0 ], [ "CVE-2026-59762", "07-15", 8.7, 4 ], [ "CVE-2026-63020", "09-02", 2.3, 0 ], [ "CVE-2026-66842", "09-02", 8.7, 0 ], [ "CVE-2026-94127", "09-22", 9.3, 7 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-94127", "score": 9.3, "title": "BIG-IP APM OAuth vulnerability" }, { "id": "CVE-2026-2507", "score": 8.7, "title": "BIG-IP TMM Vulnerability" }, { "id": "CVE-2026-39455", "score": 8.7, "title": "BIG-IP Configuration utility vulnerability" }, { "id": "CVE-2026-39458", "score": 8.7, "title": "BIG-IP DNS Cache vulnerability" }, { "id": "CVE-2026-40060", "score": 8.7, "title": "BIG-IP Advanced WAF and ASM vulnerability" } ] }, { "key": "citrix", "name": "Citrix / NetScaler", "short": "NetScaler", "color": "#0369a1", "lowData": false, "n": 22, "scores": { "volume": 45, "severity": 10, "exploitation": 15, "mttr": 93, "engagement": 80 }, "raw": { "cves": 22, "critical": 6, "high": 14, "medium": 2, "low": 0, "unknown": 0, "critHighPct": 90.9, "avgCvss": 8.6, "preAuthRce": 10, "authBypass": 2, "kev": 6, "kevPct": 27.3, "ransomware": 0, "epssAvg": 0.0184, "epssMax": 0.2316, "epssHigh": 1, "coordMedian": 17, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://www.cloud.com/trust-center/product-security/vulnerability-response", "bounty": "https://hackerone.com/netscaler_public_program" }, "notes": "CVE IDs assigned under the NetScaler and Citrix CNAs (Cloud Software Group). Public NetScaler bug bounty on HackerOne since September 2025. Pledge signed as Cloud Software Group - Citrix. No CSAF found.", "assigners": { "NetScaler": 20, "Citrix": 2 }, "topProducts": { "ADC": 20, "Gateway": 20, "Secure Access Client for Windows": 1, "Citrix Secure Access Client for Windows": 1 }, "excludedProducts": { "UniconOS": 3, "Citrix Workspace app for Windows": 1, "Workspace app for Windows": 1, "WorkSpace App": 1 }, "monthly": [ 0, 0, 2, 0, 0, 6, 2, 2, 8, 2 ], "kevList": [ { "id": "CVE-2026-3055", "title": "Insufficient input validation leading to memory overread", "kevDate": "2026-03-30", "score": 9.3, "products": [ "ADC", "Gateway" ] }, { "id": "CVE-2026-8452", "title": "Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service", "kevDate": "2026-08-26", "score": 8.8, "products": [ "ADC", "Gateway" ] }, { "id": "CVE-2026-19490", "title": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490", "kevDate": "2026-09-09", "score": 9.3, "products": [ "ADC", "Gateway" ] }, { "id": "CVE-2026-88771", "title": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attack", "kevDate": "2026-09-27", "score": 9.5, "products": [ "ADC", "Gateway" ] }, { "id": "CVE-2026-88772", "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service", "kevDate": "2026-09-27", "score": 9.5, "products": [ "ADC", "Gateway" ] }, { "id": "CVE-2026-88779", "title": "Memory overflow vulnerability leading to Denial of Service", "kevDate": "2026-10-04", "score": 8.7, "products": [ "ADC", "Gateway" ] } ], "events": [ [ "CVE-2026-3055", "03-23", 9.3, 1 ], [ "CVE-2026-4368", "03-23", 7.7, 0 ], [ "CVE-2026-10816", "06-30", 7.1, 0 ], [ "CVE-2026-10817", "06-30", 6.9, 0 ], [ "CVE-2026-13474", "06-30", 8.7, 0 ], [ "CVE-2026-8451", "06-30", 8.8, 0 ], [ "CVE-2026-8452", "06-30", 8.8, 3 ], [ "CVE-2026-8655", "06-30", 8.8, 2 ], [ "CVE-2026-53565", "07-14", 8.5, 0 ], [ "CVE-2026-53566", "07-14", 6.8, 0 ], [ "CVE-2026-19489", "08-19", 8.8, 2 ], [ "CVE-2026-19490", "08-19", 9.3, 5 ], [ "CVE-2026-88771", "09-27", 9.5, 7 ], [ "CVE-2026-88772", "09-27", 9.5, 3 ], [ "CVE-2026-88773", "09-27", 9.3, 0 ], [ "CVE-2026-88774", "09-27", 7, 0 ], [ "CVE-2026-88775", "09-27", 8.8, 2 ], [ "CVE-2026-88776", "09-27", 8.8, 2 ], [ "CVE-2026-88777", "09-27", 8.8, 2 ], [ "CVE-2026-88778", "09-27", 8.8, 0 ], [ "CVE-2026-88779", "10-04", 8.7, 3 ], [ "CVE-2026-107406", "10-08", 9.5, 2 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-88771", "score": 9.5, "title": "A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attack" }, { "id": "CVE-2026-88772", "score": 9.5, "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service" }, { "id": "CVE-2026-107406", "score": 9.5, "title": "Memory overflow vulnerability leading to Remote Code Execution or Denial of Service" }, { "id": "CVE-2026-3055", "score": 9.3, "title": "Insufficient input validation leading to memory overread" }, { "id": "CVE-2026-19490", "score": 9.3, "title": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490" } ] }, { "key": "hpe", "name": "HPE Aruba Networking", "short": "HPE Aruba", "color": "#01a982", "lowData": false, "n": 254, "scores": { "volume": 3, "severity": 35, "exploitation": 99, "mttr": 89, "engagement": 100 }, "raw": { "cves": 254, "critical": 39, "high": 130, "medium": 76, "low": 9, "unknown": 0, "critHighPct": 66.5, "avgCvss": 7.3, "preAuthRce": 20, "authBypass": 32, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0052, "epssMax": 0.0453, "epssHigh": 0, "coordMedian": 27, "fixRefPct": 100, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 100 }, "engagement": { "cna": true, "csaf": true, "policy": true, "bounty": true, "pledge": true }, "evidence": { "csaf": "https://csaf.arubanetworking.hpe.com/2026/", "policy": "https://www.hpe.com/info/report-security-vulnerability", "bounty": "https://bugcrowd.com/engagements/hpe-networking-product-public", "securitytxt": "https://www.hpe.com/.well-known/security.txt" }, "notes": "Scope limited to HPE Aruba Networking products (AOS-CX, AOS-S, ArubaOS, EdgeConnect, ClearPass, Instant On, Fabric Composer, Comware, iMC); servers and storage excluded. CSAF JSON per advisory on csaf.arubanetworking.hpe.com (no provider-metadata.json). Public Bugcrowd programme for networking products.", "assigners": { "hpe": 254 }, "topProducts": { "Fabric Composer": 52, "AOS-CX": 42, "EdgeConnect SD-WAN Gateways": 38, "ClearPass Policy Manager (CPPM)": 33, "HPE Aruba Networking Wireless Operating System (AOS)": 27, "Instant ON": 18, "ALE": 10, "AOS-Switch (AOS-S)": 9 }, "excludedProducts": { "HPE NonStop EXPAND": 4, "HPE OneView": 3, "HPE NonStop TELSERV": 2, "HPE NonStop TCP/IP UTILITIES": 2, "HPE NonStop SNMP Trap Multiplexer": 2, "HPE IceWall products": 2, "HPE NonStop Debug Utilities": 1, "HPE NonStop HTTP WEBSERVER": 1 }, "monthly": [ 2, 5, 11, 1, 32, 0, 6, 2, 157, 38 ], "kevList": [], "events": [ [ "CVE-2026-23592", "01-27", 7.2, 0 ], [ "CVE-2026-23593", "01-27", 7.5, 0 ], [ "CVE-2026-23595", "02-17", 8.8, 0 ], [ "CVE-2026-23596", "02-17", 6.5, 0 ], [ "CVE-2026-23597", "02-17", 6.5, 0 ], [ "CVE-2026-23598", "02-17", 6.5, 0 ], [ "CVE-2026-23599", "02-17", 7.8, 0 ], [ "CVE-2026-23601", "03-04", 5.4, 0 ], [ "CVE-2026-23808", "03-04", 5.4, 0 ], [ "CVE-2026-23809", "03-04", 5.4, 0 ], [ "CVE-2026-23810", "03-04", 4.3, 0 ], [ "CVE-2026-23811", "03-04", 4.3, 0 ], [ "CVE-2026-23812", "03-04", 4.3, 0 ], [ "CVE-2026-23813", "03-11", 9.8, 4 ], [ "CVE-2026-23814", "03-11", 8.8, 0 ], [ "CVE-2026-23815", "03-11", 7.2, 0 ], [ "CVE-2026-23816", "03-11", 7.2, 0 ], [ "CVE-2026-23817", "03-11", 6.5, 0 ], [ "CVE-2026-23818", "04-07", 8.8, 0 ], [ "CVE-2026-23819", "05-12", 8.8, 0 ], [ "CVE-2026-23820", "05-12", 7.2, 0 ], [ "CVE-2026-23821", "05-12", 7.2, 0 ], [ "CVE-2026-23822", "05-12", 5.3, 0 ], [ "CVE-2026-23823", "05-12", 7.2, 0 ], [ "CVE-2026-23824", "05-12", 7.5, 4 ], [ "CVE-2026-23825", "05-12", 7.5, 4 ], [ "CVE-2026-23826", "05-12", 7.5, 0 ], [ "CVE-2026-23827", "05-12", 7.5, 4 ], [ "CVE-2026-44852", "05-12", 7.2, 0 ], [ "CVE-2026-44853", "05-12", 7.2, 0 ], [ "CVE-2026-44854", "05-12", 7.2, 0 ], [ "CVE-2026-44855", "05-12", 7.2, 0 ], [ "CVE-2026-44856", "05-12", 7.2, 0 ], [ "CVE-2026-44857", "05-12", 7.2, 0 ], [ "CVE-2026-44858", "05-12", 7.2, 0 ], [ "CVE-2026-44859", "05-12", 7.2, 0 ], [ "CVE-2026-44860", "05-12", 7.2, 0 ], [ "CVE-2026-44861", "05-12", 7.2, 0 ], [ "CVE-2026-44862", "05-12", 7.2, 0 ], [ "CVE-2026-44863", "05-12", 7.2, 0 ], [ "CVE-2026-44864", "05-12", 7.2, 0 ], [ "CVE-2026-44865", "05-12", 7.2, 0 ], [ "CVE-2026-44866", "05-12", 7.2, 0 ], [ "CVE-2026-44867", "05-12", 7.2, 0 ], [ "CVE-2026-44868", "05-12", 7.2, 0 ], [ "CVE-2026-44869", "05-12", 7.2, 0 ], [ "CVE-2026-44870", "05-12", 7.2, 0 ], [ "CVE-2026-44871", "05-12", 7.2, 0 ], [ "CVE-2026-44872", "05-12", 7.2, 0 ], [ "CVE-2026-44873", "05-12", 5.4, 0 ], [ "CVE-2026-44874", "05-12", 4.9, 0 ], [ "CVE-2026-44877", "07-07", 6.5, 0 ], [ "CVE-2026-44878", "07-21", 7.2, 0 ], [ "CVE-2026-44879", "07-21", 7.2, 0 ], [ "CVE-2026-44880", "07-21", 8.8, 0 ], [ "CVE-2026-63453", "07-21", 7.2, 0 ], [ "CVE-2026-63454", "07-21", 7.2, 0 ], [ "CVE-2026-63455", "08-04", 9.8, 4 ], [ "CVE-2026-63456", "08-04", 9.8, 4 ], [ "CVE-2026-19766", "09-01", 9.6, 0 ], [ "CVE-2026-73700", "09-01", 9, 0 ], [ "CVE-2026-73701", "09-01", 9, 2 ], [ "CVE-2026-73702", "09-01", 8.8, 4 ], [ "CVE-2026-73703", "09-01", 8.8, 0 ], [ "CVE-2026-73704", "09-01", 8.8, 0 ], [ "CVE-2026-73705", "09-01", 8.8, 0 ], [ "CVE-2026-73706", "09-01", 8.6, 4 ], [ "CVE-2026-73707", "09-01", 8.5, 4 ], [ "CVE-2026-73708", "09-01", 8.3, 4 ], [ "CVE-2026-73709", "09-01", 8.3, 0 ], [ "CVE-2026-73710", "09-01", 8.2, 4 ], [ "CVE-2026-73711", "09-01", 8.1, 0 ], [ "CVE-2026-73712", "09-01", 8.1, 2 ], [ "CVE-2026-73713", "09-01", 7.8, 0 ], [ "CVE-2026-73714", "09-01", 7.6, 0 ], [ "CVE-2026-73715", "09-01", 7.5, 0 ], [ "CVE-2026-73716", "09-01", 7.5, 2 ], [ "CVE-2026-73717", "09-01", 7.5, 2 ], [ "CVE-2026-73718", "09-01", 7.4, 0 ], [ "CVE-2026-73719", "09-01", 7.2, 0 ], [ "CVE-2026-73720", "09-01", 7.2, 0 ], [ "CVE-2026-73721", "09-01", 7.2, 0 ], [ "CVE-2026-73722", "09-01", 7.2, 0 ], [ "CVE-2026-73723", "09-01", 7.1, 0 ], [ "CVE-2026-73724", "09-01", 7.1, 0 ], [ "CVE-2026-73725", "09-01", 7, 0 ], [ "CVE-2026-73726", "09-01", 6.8, 0 ], [ "CVE-2026-73727", "09-01", 6.5, 0 ], [ "CVE-2026-73728", "09-01", 6.5, 0 ], [ "CVE-2026-73729", "09-01", 6.5, 0 ], [ "CVE-2026-73730", "09-01", 6.5, 0 ], [ "CVE-2026-73731", "09-01", 6.1, 0 ], [ "CVE-2026-73732", "09-01", 5.6, 0 ], [ "CVE-2026-73733", "09-01", 5.4, 4 ], [ "CVE-2026-73734", "09-01", 5.4, 0 ], [ "CVE-2026-73735", "09-01", 5.4, 0 ], [ "CVE-2026-73736", "09-01", 5.3, 0 ], [ "CVE-2026-73737", "09-01", 4.8, 0 ], [ "CVE-2026-73738", "09-01", 4.7, 0 ], [ "CVE-2026-73739", "09-01", 4.4, 0 ], [ "CVE-2026-73740", "09-01", 4.4, 0 ], [ "CVE-2026-73741", "09-01", 4.3, 0 ], [ "CVE-2026-73742", "09-01", 4.3, 4 ], [ "CVE-2026-73743", "09-01", 3.7, 0 ], [ "CVE-2026-73744", "09-01", 3.5, 0 ], [ "CVE-2026-73745", "09-01", 3.1, 0 ], [ "CVE-2026-73746", "09-01", 3.1, 0 ], [ "CVE-2026-73747", "09-01", 2.5, 0 ], [ "CVE-2026-73748", "09-01", 2.2, 0 ], [ "CVE-2026-73749", "09-01", 9.8, 2 ], [ "CVE-2026-73750", "09-01", 8.8, 0 ], [ "CVE-2026-73751", "09-01", 8.8, 0 ], [ "CVE-2026-73752", "09-01", 8.8, 0 ], [ "CVE-2026-73753", "09-01", 8.8, 0 ], [ "CVE-2026-73754", "09-01", 5.3, 0 ], [ "CVE-2026-73755", "09-01", 5.7, 0 ], [ "CVE-2026-73756", "09-01", 5.9, 4 ], [ "CVE-2026-73757", "09-01", 6.4, 0 ], [ "CVE-2026-73758", "09-01", 6.5, 0 ], [ "CVE-2026-73759", "09-01", 6.5, 0 ], [ "CVE-2026-73760", "09-01", 6.5, 0 ], [ "CVE-2026-73761", "09-01", 6.5, 0 ], [ "CVE-2026-73762", "09-01", 6.6, 0 ], [ "CVE-2026-73763", "09-01", 7.1, 0 ], [ "CVE-2026-73764", "09-01", 7.1, 0 ], [ "CVE-2026-73765", "09-01", 7.2, 0 ], [ "CVE-2026-73766", "09-01", 7.2, 0 ], [ "CVE-2026-73767", "09-01", 7.2, 0 ], [ "CVE-2026-73768", "09-01", 7.3, 0 ], [ "CVE-2026-73770", "09-01", 7.3, 0 ], [ "CVE-2026-73771", "09-01", 7.5, 4 ], [ "CVE-2026-73772", "09-01", 6.5, 0 ], [ "CVE-2026-73773", "09-01", 7.5, 0 ], [ "CVE-2026-73774", "09-01", 7.6, 0 ], [ "CVE-2026-73775", "09-01", 7.7, 0 ], [ "CVE-2026-73776", "09-01", 7.9, 0 ], [ "CVE-2026-73777", "09-01", 8.1, 4 ], [ "CVE-2026-73778", "09-01", 8.1, 0 ], [ "CVE-2026-73779", "09-01", 8.2, 0 ], [ "CVE-2026-73780", "09-01", 8.3, 4 ], [ "CVE-2026-73781", "09-01", 8.4, 0 ], [ "CVE-2026-73782", "09-01", 8.8, 0 ], [ "CVE-2026-73783", "09-01", 4.9, 0 ], [ "CVE-2026-76657", "09-01", 10, 4 ], [ "CVE-2026-76658", "09-01", 10, 6 ], [ "CVE-2026-73769", "09-09", 7.2, 0 ], [ "CVE-2026-73786", "09-09", 7.5, 0 ], [ "CVE-2026-73787", "09-09", 7.2, 0 ], [ "CVE-2026-73788", "09-09", 6.5, 0 ], [ "CVE-2026-73789", "09-09", 5.3, 0 ], [ "CVE-2026-76669", "09-15", 9.9, 0 ], [ "CVE-2026-76670", "09-15", 9.9, 0 ], [ "CVE-2026-76672", "09-15", 9.9, 0 ], [ "CVE-2026-76673", "09-15", 9.8, 4 ], [ "CVE-2026-76674", "09-15", 9.8, 2 ], [ "CVE-2026-76675", "09-15", 9.1, 0 ], [ "CVE-2026-76676", "09-15", 8.8, 0 ], [ "CVE-2026-76677", "09-15", 8.8, 0 ], [ "CVE-2026-76678", "09-15", 8.8, 0 ], [ "CVE-2026-76679", "09-15", 8.6, 0 ], [ "CVE-2026-76680", "09-15", 8.5, 0 ], [ "CVE-2026-76681", "09-15", 8.5, 0 ], [ "CVE-2026-76682", "09-15", 8.2, 2 ], [ "CVE-2026-76683", "09-15", 8.1, 2 ], [ "CVE-2026-76684", "09-15", 8.1, 4 ], [ "CVE-2026-76685", "09-15", 8.1, 2 ], [ "CVE-2026-76686", "09-15", 7.5, 0 ], [ "CVE-2026-76687", "09-15", 7.5, 0 ], [ "CVE-2026-76688", "09-15", 7.5, 4 ], [ "CVE-2026-76689", "09-15", 7.2, 0 ], [ "CVE-2026-76690", "09-15", 7.2, 0 ], [ "CVE-2026-76691", "09-15", 7.2, 0 ], [ "CVE-2026-76692", "09-15", 7.1, 0 ], [ "CVE-2026-76693", "09-15", 7, 0 ], [ "CVE-2026-76694", "09-15", 6.6, 0 ], [ "CVE-2026-76695", "09-15", 6.5, 0 ], [ "CVE-2026-76696", "09-15", 6.5, 0 ], [ "CVE-2026-76697", "09-15", 6.5, 0 ], [ "CVE-2026-76698", "09-15", 6.5, 0 ], [ "CVE-2026-76699", "09-15", 6.4, 0 ], [ "CVE-2026-76700", "09-15", 5.9, 0 ], [ "CVE-2026-76701", "09-15", 5.9, 4 ], [ "CVE-2026-76702", "09-15", 5.8, 0 ], [ "CVE-2026-76703", "09-15", 5.5, 0 ], [ "CVE-2026-76704", "09-15", 5.5, 0 ], [ "CVE-2026-76705", "09-15", 5.5, 0 ], [ "CVE-2026-76706", "09-15", 5.3, 0 ], [ "CVE-2026-76707", "09-15", 4.3, 0 ], [ "CVE-2026-76708", "09-22", 9.8, 4 ], [ "CVE-2026-76709", "09-22", 9.8, 0 ], [ "CVE-2026-76710", "09-22", 7.5, 0 ], [ "CVE-2026-76711", "09-22", 7.5, 0 ], [ "CVE-2026-76712", "09-22", 7.3, 0 ], [ "CVE-2026-76713", "09-22", 7.2, 0 ], [ "CVE-2026-76714", "09-22", 7.2, 0 ], [ "CVE-2026-76715", "09-22", 7.1, 0 ], [ "CVE-2026-76716", "09-22", 5.3, 0 ], [ "CVE-2026-76717", "09-22", 5.3, 0 ], [ "CVE-2026-76721", "09-29", 9.8, 2 ], [ "CVE-2026-76722", "09-29", 9.8, 2 ], [ "CVE-2026-76723", "09-29", 9.6, 0 ], [ "CVE-2026-76724", "09-29", 9.6, 0 ], [ "CVE-2026-76725", "09-29", 9.6, 0 ], [ "CVE-2026-76726", "09-29", 8.1, 4 ], [ "CVE-2026-76727", "09-29", 7.2, 0 ], [ "CVE-2026-76728", "09-29", 7.2, 0 ], [ "CVE-2026-76729", "09-29", 6.6, 0 ], [ "CVE-2026-76730", "09-29", 6.5, 0 ], [ "CVE-2026-76731", "09-29", 6.5, 4 ], [ "CVE-2026-76732", "09-29", 6.4, 0 ], [ "CVE-2026-76733", "09-29", 4.9, 0 ], [ "CVE-2026-76734", "09-29", 4.8, 0 ], [ "CVE-2026-76735", "09-29", 4.1, 0 ], [ "CVE-2026-76736", "09-29", 3.3, 0 ], [ "CVE-2026-76737", "09-29", 3, 0 ], [ "CVE-2026-76738", "09-29", 2.7, 0 ], [ "CVE-2026-76741", "10-06", 6.5, 0 ], [ "CVE-2026-76742", "10-06", 9.8, 4 ], [ "CVE-2026-76743", "10-06", 9.8, 4 ], [ "CVE-2026-76744", "10-06", 9.8, 2 ], [ "CVE-2026-76745", "10-06", 9.6, 0 ], [ "CVE-2026-76746", "10-06", 9.3, 0 ], [ "CVE-2026-76747", "10-06", 9.1, 2 ], [ "CVE-2026-76748", "10-06", 8.8, 0 ], [ "CVE-2026-76749", "10-06", 6.5, 0 ], [ "CVE-2026-76750", "10-06", 9.8, 2 ], [ "CVE-2026-76751", "10-06", 9.8, 2 ], [ "CVE-2026-76752", "10-06", 9.8, 4 ], [ "CVE-2026-76753", "10-06", 9.8, 2 ], [ "CVE-2026-76754", "10-06", 9.8, 2 ], [ "CVE-2026-79794", "10-06", 9.1, 0 ], [ "CVE-2026-79796", "10-06", 9.8, 4 ], [ "CVE-2026-79797", "10-06", 8.8, 0 ], [ "CVE-2026-79798", "10-06", 9.9, 0 ], [ "CVE-2026-79799", "10-06", 8.8, 0 ], [ "CVE-2026-79800", "10-06", 8.8, 0 ], [ "CVE-2026-79801", "10-06", 9.8, 2 ], [ "CVE-2026-79802", "10-06", 8.8, 2 ], [ "CVE-2026-79803", "10-06", 8.8, 0 ], [ "CVE-2026-79805", "10-06", 9.8, 0 ], [ "CVE-2026-79806", "10-06", 7.8, 0 ], [ "CVE-2026-79807", "10-06", 7.8, 0 ], [ "CVE-2026-79808", "10-06", 7.8, 0 ], [ "CVE-2026-79809", "10-06", 7.3, 0 ], [ "CVE-2026-79810", "10-06", 7.2, 0 ], [ "CVE-2026-79811", "10-06", 7.2, 0 ], [ "CVE-2026-79812", "10-06", 6.1, 0 ], [ "CVE-2026-79813", "10-06", 6.7, 0 ], [ "CVE-2026-79814", "10-06", 6.7, 0 ], [ "CVE-2026-79815", "10-06", 6.5, 0 ], [ "CVE-2026-79816", "10-06", 5.4, 0 ], [ "CVE-2026-79817", "10-06", 5.5, 0 ], [ "CVE-2026-79818", "10-06", 5.3, 4 ], [ "CVE-2026-79842", "10-08", 9.1, 4 ] ], "zombie": { "eol": 0, "pct": 0, "workaroundOnly": 0 }, "worst": [ { "id": "CVE-2026-76657", "score": 10, "title": "Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access" }, { "id": "CVE-2026-76658", "score": 10, "title": "Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon" }, { "id": "CVE-2026-76669", "score": 9.9, "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator" }, { "id": "CVE-2026-76670", "score": 9.9, "title": "Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator" }, { "id": "CVE-2026-76672", "score": 9.9, "title": "Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator" } ] }, { "key": "barracuda", "name": "Barracuda", "short": "Barracuda", "color": "#1d4ed8", "lowData": true, "n": 0, "scores": { "volume": 50, "severity": null, "exploitation": null, "mttr": null, "engagement": 40 }, "raw": { "cves": 0, "critical": 0, "high": 0, "medium": 0, "low": 0, "unknown": 0, "critHighPct": 0, "avgCvss": null, "preAuthRce": 0, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": null, "epssMax": null, "epssHigh": 0, "coordMedian": null, "fixRefPct": 0, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://trust.barracuda.com/security", "bounty": "https://bugcrowd.com/engagements/barracuda" }, "notes": "Not a CNA; recent Barracuda CVEs were assigned by VulnCheck. Long-running Bugcrowd programme for appliances (bounties limited to high-impact classes). Pledge signed as Barracuda Networks.", "assigners": [], "topProducts": [], "excludedProducts": { "RMM": 1 }, "monthly": [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ], "kevList": [], "events": [], "zombie": { "eol": 0, "pct": null, "workaroundOnly": 0 }, "worst": [] }, { "key": "draytek", "name": "DrayTek", "short": "DrayTek", "color": "#a21caf", "lowData": false, "n": 41, "scores": { "volume": 35, "severity": 45, "exploitation": 97, "mttr": 89, "engagement": 13 }, "raw": { "cves": 41, "critical": 2, "high": 36, "medium": 3, "low": 0, "unknown": 0, "critHighPct": 92.7, "avgCvss": 8.5, "preAuthRce": 2, "authBypass": 1, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": 0.0179, "epssMax": 0.0732, "epssHigh": 0, "coordMedian": 16, "fixRefPct": 97.6, "workaroundOnly": 1, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": false, "csaf": false, "policy": true, "bounty": false, "pledge": false }, "evidence": { "policy": "https://www.draytek.com/security-policy/" }, "notes": "Not a CNA (2026 CVEs assigned by VulnCheck and VulDB). Public PSIRT disclosure policy with 90-day fix target; rewards are letters and gifts, no HackerOne or Bugcrowd programme. Not on the CISA Secure by Design pledge list.", "assigners": { "VulnCheck": 40, "VulDB": 1 }, "topProducts": { "VigorSwitch FX2120": 29, "VigorSwitch G1280": 29, "VigorSwitch G1282": 29, "VigorSwitch G2100": 29, "VigorSwitch G2121": 29, "VigorSwitch G2280x": 29, "VigorSwitch G2282x": 29, "VigorSwitch G2540x": 29 }, "excludedProducts": [], "monthly": [ 0, 1, 0, 0, 0, 0, 0, 40, 0, 0 ], "kevList": [], "events": [ [ "CVE-2026-3040", "02-23", 5.1, 8 ], [ "CVE-2026-71904", "08-24", 8.6, 0 ], [ "CVE-2026-71905", "08-24", 8.6, 0 ], [ "CVE-2026-71906", "08-24", 8.6, 0 ], [ "CVE-2026-71907", "08-24", 8.6, 0 ], [ "CVE-2026-71908", "08-24", 8.6, 0 ], [ "CVE-2026-71909", "08-24", 8.6, 0 ], [ "CVE-2026-71910", "08-24", 8.6, 0 ], [ "CVE-2026-71911", "08-24", 8.6, 0 ], [ "CVE-2026-71912", "08-24", 8.6, 0 ], [ "CVE-2026-71913", "08-24", 8.6, 0 ], [ "CVE-2026-71914", "08-24", 9.3, 2 ], [ "CVE-2026-71915", "08-24", 8.6, 0 ], [ "CVE-2026-71916", "08-24", 8.6, 0 ], [ "CVE-2026-71917", "08-24", 8.6, 0 ], [ "CVE-2026-71918", "08-24", 8.6, 0 ], [ "CVE-2026-71919", "08-24", 8.6, 0 ], [ "CVE-2026-71920", "08-24", 6.9, 0 ], [ "CVE-2026-71921", "08-24", 9.3, 2 ], [ "CVE-2026-71922", "08-24", 8.7, 0 ], [ "CVE-2026-71923", "08-24", 8.6, 0 ], [ "CVE-2026-71924", "08-24", 8.6, 0 ], [ "CVE-2026-71925", "08-24", 8.6, 0 ], [ "CVE-2026-71926", "08-24", 8.6, 0 ], [ "CVE-2026-71927", "08-24", 8.6, 0 ], [ "CVE-2026-71928", "08-24", 8.6, 0 ], [ "CVE-2026-71929", "08-24", 8.6, 0 ], [ "CVE-2026-71930", "08-24", 8.6, 0 ], [ "CVE-2026-71931", "08-24", 8.6, 0 ], [ "CVE-2026-71932", "08-24", 6.9, 0 ], [ "CVE-2026-71933", "08-24", 8.8, 4 ], [ "CVE-2026-71934", "08-24", 8.6, 0 ], [ "CVE-2026-71935", "08-24", 8.6, 0 ], [ "CVE-2026-71936", "08-24", 8.6, 0 ], [ "CVE-2026-71937", "08-24", 8.6, 0 ], [ "CVE-2026-71938", "08-24", 8.6, 0 ], [ "CVE-2026-71939", "08-24", 8.6, 0 ], [ "CVE-2026-71940", "08-24", 8.6, 0 ], [ "CVE-2026-71941", "08-24", 8.6, 0 ], [ "CVE-2026-71942", "08-24", 8.6, 0 ], [ "CVE-2026-71943", "08-24", 8.6, 0 ] ], "zombie": { "eol": 1, "pct": 2.4, "workaroundOnly": 1 }, "worst": [ { "id": "CVE-2026-71914", "score": 9.3, "title": "DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm" }, { "id": "CVE-2026-71921", "score": 9.3, "title": "DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi" }, { "id": "CVE-2026-71933", "score": 8.8, "title": "DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions" }, { "id": "CVE-2026-71922", "score": 8.7, "title": "DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi" }, { "id": "CVE-2026-71904", "score": 8.6, "title": "DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform" } ] }, { "key": "sophos", "name": "Sophos", "short": "Sophos", "color": "#7c3aed", "lowData": true, "n": 0, "scores": { "volume": 50, "severity": null, "exploitation": null, "mttr": null, "engagement": 80 }, "raw": { "cves": 0, "critical": 0, "high": 0, "medium": 0, "low": 0, "unknown": 0, "critHighPct": 0, "avgCvss": null, "preAuthRce": 0, "authBypass": 0, "kev": 0, "kevPct": 0, "ransomware": 0, "epssAvg": null, "epssMax": null, "epssHigh": 0, "coordMedian": null, "fixRefPct": 0, "workaroundOnly": 0, "patchBypass": 0, "selfAssignedPct": 0 }, "engagement": { "cna": true, "csaf": false, "policy": true, "bounty": true, "pledge": true }, "evidence": { "policy": "https://www.sophos.com/en-us/legal/sophos-responsible-disclosure-policy", "bounty": "https://bugcrowd.com/sophos" }, "notes": "No CVE records for Sophos Firewall or network products published in 2026 in the sources used.", "assigners": [], "topProducts": [], "excludedProducts": { "Sophos Endpoint for macOS": 1, "Sophos Home for macOS": 1 }, "monthly": [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ], "kevList": [], "events": [], "zombie": { "eol": 0, "pct": null, "workaroundOnly": 0 }, "worst": [] } ], "site": "https://riskacceptedperimeter.com/", "license": "Scores and aggregates: CC BY 4.0. Underlying records belong to their sources (NVD, CVE Program, CISA, ENISA, FIRST, vendor PSIRTs).", "contact": "RAP@johanneskresse.com", "factors": { "volume": { "label": "Volume", "color": "#6b7280", "role": "Indicator", "desc": "Disclosed CVEs, network products only" }, "severity": { "label": "Severity", "color": "#ef4444", "role": "Risk", "desc": "Crit/High share, pre-auth RCE, auth bypass" }, "exploitation": { "label": "Exploitation", "color": "#8b5cf6", "role": "Risk", "desc": "KEV share, EPSS, ransomware use" }, "mttr": { "label": "MTTR (proxy)", "color": "#2563eb", "role": "Vendor behaviour", "desc": "Fix reference, coordination window, bypasses" }, "engagement": { "label": "Engagement", "color": "#10b981", "role": "Vendor behaviour", "desc": "CNA, CSAF/API, policy, bounty, pledge" } } }