| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2026-86950
Apple Multiple Products Out-of-Bounds Write Vulnerability |
Apple · Multiple Products | Sep 29, 2026 | Oct 13, 2026 | 26.2% | 1 last Oct 5 |
| CVE-2026-88771
Citrix NetScaler Improper Input Validation Vulnerability |
Citrix · NetScaler | Sep 27, 2026 | Sep 30, 2026 | 81.9% | 1 last Oct 5 |
| CVE-2026-88772
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memo… |
Citrix · NetScaler | Sep 27, 2026 | Sep 30, 2026 | 76.6% | 1 last Oct 5 |
| CVE-2026-65660
Microsoft SharePoint Code Injection Vulnerability |
Microsoft · SharePoint | Sep 25, 2026 | Sep 28, 2026 | 9.9% | — |
| CVE-2026-67279
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability |
MikroTik · RouterOS | Sep 25, 2026 | Sep 28, 2026 | 2.3% | — |
| CVE-2026-87902
WordPress Core Remote File Inclusion Vulnerability |
WordPress · Core | Sep 25, 2026 | Sep 28, 2026 | 95.8% | — |
| CVE-2026-5430
WSO2 Multiple Products Path Traversal Vulnerability |
WSO2 · Multiple Products | Sep 24, 2026 | Sep 27, 2026 | 22.4% | — |
| CVE-2026-71362
Adobe Commerce and Magento Incorrect Authorization Vulnerability |
Adobe · Commerce and Magento | Sep 24, 2026 | Sep 27, 2026 | 91.7% | — |
| CVE-2026-85102
Check Point Multiple Products Improper Certificate Validation Vulnerability |
Check Point · Multiple Products | Sep 22, 2026 | Sep 25, 2026 | 54.1% | — |
| CVE-2026-93616
Check Point Multiple Products Path Traversal Vulnerability |
Check Point · Multiple Products | Sep 22, 2026 | Sep 25, 2026 | 91.6% | — |
| CVE-2026-93952
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability |
Arista · VeloCloud Orchestrator | Sep 22, 2026 | Sep 25, 2026 | 1.4% | — |
| CVE-2026-94127
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability |
F5 · BIG-IP APM | Sep 22, 2026 | Sep 25, 2026 | 26.6% | — |
| CVE-2026-7273
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |
Zyxel · GS1900 Series Switches | Sep 21, 2026 | Sep 24, 2026 | 2.7% | — |
| CVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability |
Linux · Kernel | Sep 18, 2026 | Sep 21, 2026 | 3.3% | — |
| CVE-2025-39964
Linux Kernel Race Condition Vulnerability |
Linux · Kernel | Sep 18, 2026 | Sep 21, 2026 | 1.6% | — |
| CVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerability |
Linux · Kernel | Sep 18, 2026 | Sep 21, 2026 | 0.9% | — |
| CVE-2026-58704
Google Pixel Improper Authorization Vulnerability |
Google · Pixel | Sep 16, 2026 | Sep 19, 2026 | 0.6% | — |
| CVE-2026-76460
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability |
Cisco · Identity Services Engine | Sep 16, 2026 | Sep 19, 2026 | 75.6% | — |
| CVE-2026-87886
Acronis Backup Incorrect Default Permissions Vulnerability |
Acronis · Backup | Sep 16, 2026 | Sep 19, 2026 | 0.2% | — |
| CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability |
Cisco · Secure Email Gateway | Sep 14, 2026 | Sep 17, 2026 | 40.2% | — |
| CVE-2026-42016
JFrog Artifactory Incorrect Authorization Vulnerability |
JFrog · Artifactory | Sep 11, 2026 | Sep 25, 2026 | 8.6% | — |
| CVE-2026-42018
JFrog Artifactory Improper Authentication Vulnerability |
JFrog · Artifactory | Sep 11, 2026 | Sep 25, 2026 | 10.0% | — |
| CVE-2026-84869
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorizati… |
ConnectWise · ScreenConnect | Sep 11, 2026 | Sep 14, 2026 | 0.9% | — |
| CVE-2026-85706
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability |
GitLab · Community Edition and Enterprise Edition | Sep 11, 2026 | Sep 14, 2026 | 97.4% | — |
| CVE-2026-67277
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability |
MikroTik · RouterOS | Sep 10, 2026 | Sep 13, 2026 | 1.6% | — |
| CVE-2026-86060
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command V… |
MikroTik · RouterOS | Sep 10, 2026 | Sep 13, 2026 | 6.4% | — |
| CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability |
Fortinet · Multiple Products | Sep 9, 2026 | Sep 12, 2026 | 3.7% | — |
| CVE-2026-19490
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulne… |
Citrix · NetScaler | Sep 9, 2026 | Sep 12, 2026 | 33.3% | — |
| CVE-2026-20079
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path … |
Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Sep 9, 2026 | Sep 12, 2026 | 88.7% | — |
| CVE-2026-87491
Google Chromium V8 Out of Bounds Write Vulnerability |
Google · Chromium V8 | Sep 9, 2026 | Sep 23, 2026 | 3.5% | 4 last Oct 16 |
| CVE-2026-75650
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in … |
Adobe · Commerce and Magento | Sep 8, 2026 | Sep 11, 2026 | 99.4% | — |
| CVE-2026-81963
Microsoft Windows Link Following Vulnerability |
Microsoft · Windows | Sep 8, 2026 | Sep 22, 2026 | 7.1% | — |
| CVE-2026-85880
Microsoft Windows Heap-Based Buffer Overflow Vulnerability |
Microsoft · Windows | Sep 8, 2026 | Sep 22, 2026 | 0.4% | 4 last Oct 16 |
| CVE-2026-86218
N-able N-central Static Code Injection Vulnerability |
N-able · N-central | Sep 8, 2026 | Sep 11, 2026 | 15.4% | — |
| CVE-2026-85046
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Sep 4, 2026 | Sep 18, 2026 | 1.8% | 4 last Oct 16 |
| CVE-2026-48710
Kludex Starlette HTTP Request/Response Smuggling Vulnerability |
Kludex · Starlette | Sep 2, 2026 | Sep 16, 2026 | 70.3% | — |
| CVE-2026-49869
Kestra OSS OS Command Injection Vulnerability |
Kestra · Kestra OSS | Sep 2, 2026 | Sep 5, 2026 | 2.1% | — |
| CVE-2026-59822
BerriAI LiteLLM Improper Authentication Vulnerability |
BerriAI · LiteLLM | Sep 2, 2026 | Sep 16, 2026 | 0.8% | — |
| CVE-2026-82329
JFrog Artifactory Improper Authentication Vulnerability |
JFrog · Artifactory | Sep 2, 2026 | Sep 5, 2026 | 14.4% | — |
| CVE-2026-83548
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
SonicWall · SMA1000 Appliances | Sep 2, 2026 | Sep 5, 2026 | 8.0% | — |
| CVE-2026-83549
SonicWall SMA1000 Appliances OS Command Injection Vulnerability |
SonicWall · SMA1000 Appliances | Sep 2, 2026 | Sep 5, 2026 | 9.9% | — |
| CVE-2026-9586
Sangoma Switchvox SQL Injection Vulnerability |
Sangoma · Switchvox | Sep 2, 2026 | Sep 5, 2026 | 19.0% | — |
| CVE-2026-81578
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability |
PaperCut · NG/MF | Aug 31, 2026 | Sep 14, 2026 | 84.7% | — |
| CVE-2026-82078
PaperCut NG/MF Unsafe Reflection Vulnerability |
PaperCut · NG/MF | Aug 31, 2026 | Sep 14, 2026 | 63.0% | — |
| CVE-2023-49105
ownCloud Improper Authentication Vulnerability |
ownCloud · ownCloud | Aug 27, 2026 | Aug 30, 2026 | 43.2% | — |
| CVE-2026-53362
Linux Kernel Unspecified Vulnerability |
Linux · Kernel | Aug 27, 2026 | Aug 30, 2026 | 0.7% | — |
| CVE-2026-66384
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory V… |
JFrog · Artifactory | Aug 27, 2026 | Sep 10, 2026 | 0.7% | — |
| CVE-2015-3246
Red Hat Libuser Race Condition Vulnerability |
Red Hat · Libuser | Aug 26, 2026 | Sep 9, 2026 | 8.5% | — |
| CVE-2015-5287
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability |
Red Hat · Automatic Bug Reporting Tool | Aug 26, 2026 | Sep 9, 2026 | 5.0% | — |
| CVE-2019-1068
Microsoft SQL Server Remote Code Execution Vulnerability |
Microsoft · SQL Server | Aug 26, 2026 | Aug 29, 2026 | 57.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.