| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2021-23758
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability |
Ajax.NET Professional · Ajax.NET Professional | Aug 26, 2026 | Sep 9, 2026 | 82.6% | — |
| CVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability |
Linux · Kernel | Aug 26, 2026 | Aug 29, 2026 | 8.9% | — |
| CVE-2026-8452
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations w… |
Citrix · NetScaler ADC and NetScaler Gateway | Aug 26, 2026 | Aug 29, 2026 | 1.0% | — |
| CVE-2026-60004
Gitea Code Injection Vulnerability |
Gitea · Gitea | Aug 25, 2026 | Aug 28, 2026 | 24.0% | — |
| CVE-2026-21962
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Con… |
Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in | Aug 24, 2026 | Aug 27, 2026 | 73.2% | — |
| CVE-2026-73570
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 21, 2026 | Aug 24, 2026 | 76.6% | — |
| CVE-2026-72529
TrueConf Server Missing Authentication for Critical Function Vulnerability |
TrueConf · Server | Aug 20, 2026 | Aug 23, 2026 | 1.5% | — |
| CVE-2026-72530
TrueConf Server Code Injection Vulnerability |
TrueConf · Server | Aug 20, 2026 | Sep 3, 2026 | 1.7% | — |
| CVE-2026-64849
MLflow Server-Side Request Forgery Vulnerability |
MLflow · MLflow | Aug 19, 2026 | Sep 2, 2026 | 10.0% | — |
| CVE-2026-33824
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerabil… |
Microsoft · Internet Key Exchange (IKE) Service Extensions | Aug 18, 2026 | Aug 21, 2026 | 77.4% | — |
| CVE-2026-55040
Microsoft SharePoint Weak Authentication Vulnerability |
Microsoft · SharePoint | Aug 18, 2026 | Aug 21, 2026 | 69.5% | — |
| CVE-2026-59310 Ransomware
Broadcom VMware vCenter Path Traversal Vulnerability |
Broadcom · VMware vCenter | Aug 18, 2026 | Aug 21, 2026 | 61.7% | 1 last Nov 10 |
| CVE-2026-65400
Apple macOS Improper Authentication Vulnerability |
Apple · macOS | Aug 18, 2026 | Aug 21, 2026 | 18.1% | — |
| CVE-2025-62593
Ray-Project Ray Code Injection Vulnerability |
Ray-Project · Ray | Aug 17, 2026 | Aug 20, 2026 | 60.2% | — |
| CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Thr… |
Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Aug 11, 2026 | Aug 14, 2026 | 1.0% | — |
| CVE-2026-68820
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerab… |
Microsoft · Windows Ancillary Function Driver for WinSock | Aug 11, 2026 | Aug 25, 2026 | 8.6% | — |
| CVE-2026-72898
Metabase SQL Injection Vulnerability |
Metabase · Metabase | Aug 11, 2026 | Aug 14, 2026 | 98.2% | — |
| CVE-2026-8037
Progress LoadMaster Command Injection Vulnerability |
Progress · LoadMaster | Aug 7, 2026 | Aug 10, 2026 | 99.8% | — |
| CVE-2026-63077 Ransomware
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability |
JetBrains · TeamCity | Aug 5, 2026 | Aug 8, 2026 | 94.9% | 1 last Nov 10 |
| CVE-2026-18556
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulne… |
N-able · N-central | Aug 4, 2026 | Aug 7, 2026 | 43.9% | — |
| CVE-2026-34486
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability |
Apache · Tomcat | Aug 4, 2026 | Aug 7, 2026 | 98.5% | — |
| CVE-2026-9198
IBM Langflow Code Injection Vulnerability |
IBM · Langflow | Aug 4, 2026 | Aug 7, 2026 | 28.7% | — |
| CVE-2026-18577
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulne… |
N-able · N-central | Aug 3, 2026 | Aug 6, 2026 | 14.6% | — |
| CVE-2026-20316 Ransomware
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability |
Cisco · Secure Firewall Management Center (FMC) | Jul 29, 2026 | Aug 1, 2026 | 35.1% | — |
| CVE-2025-68686
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vul… |
Fortinet · FortiOS | Jul 27, 2026 | Aug 10, 2026 | 29.5% | — |
| CVE-2026-16812
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability |
Arista · VeloCloud Orchestrator | Jul 27, 2026 | Jul 30, 2026 | 1.8% | — |
| CVE-2026-16232
Check Point SmartConsole Improper Authentication Vulnerability |
Check Point · SmartConsole | Jul 22, 2026 | Jul 25, 2026 | 3.5% | — |
| CVE-2026-50522
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint | Jul 22, 2026 | Jul 25, 2026 | 3.0% | — |
| CVE-2021-27137
DD-WRT Stack-Based Buffer Overflow Vulnerability |
DD-WRT · DD-WRT | Jul 21, 2026 | Jul 24, 2026 | 4.0% | — |
| CVE-2026-0770
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
Langflow · Langflow | Jul 21, 2026 | Jul 24, 2026 | 62.6% | — |
| CVE-2026-60137
WordPress Core SQL Injection Vulnerability |
WordPress · Core | Jul 21, 2026 | Aug 4, 2026 | 5.3% | — |
| CVE-2026-63030
WordPress Core Interpretation Conflict Vulnerability |
WordPress · Core | Jul 21, 2026 | Jul 24, 2026 | 10.6% | — |
| CVE-2026-25089
Fortinet FortiSandbox OS Command Injection Vulnerability |
Fortinet · FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | 76.1% | — |
| CVE-2026-39808
Fortinet FortiSandbox OS Command Injection Vulnerability |
Fortinet · FortiSandbox | Jul 16, 2026 | Jul 19, 2026 | 93.2% | — |
| CVE-2026-58644
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint | Jul 16, 2026 | Jul 19, 2026 | 15.9% | — |
| CVE-2023-4346
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restricti… |
KNX Association · KNX Protocol Connection Authorization Option 1 | Jul 15, 2026 | Jul 29, 2026 | 1.4% | — |
| CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability |
Oracle · E-Business Suite | Jul 15, 2026 | Jul 18, 2026 | 12.3% | — |
| CVE-2026-15409 Ransomware
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
SonicWall · SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | 6.8% | 1 last Nov 10 |
| CVE-2026-15410 Ransomware
SonicWall SMA1000 Appliances Code Injection Vulnerability |
SonicWall · SMA1000 Appliances | Jul 14, 2026 | Jul 17, 2026 | 11.8% | 1 last Nov 10 |
| CVE-2026-56155
Microsoft Active Directory Federation Services Insufficient Granularity of Acce… |
Microsoft · Active Directory Federation Services | Jul 14, 2026 | Jul 28, 2026 | 0.3% | — |
| CVE-2026-56164
Microsoft SharePoint Server Missing Authentication for Critical Function Vulner… |
Microsoft · SharePoint Server | Jul 14, 2026 | Jul 17, 2026 | 27.3% | — |
| CVE-2008-4128
Cisco IOS Cross-Site Request Forgery Vulnerability |
Cisco · IOS | Jul 13, 2026 | Jul 16, 2026 | 33.9% | — |
| CVE-2026-48939
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability |
iCagenda · iCagenda | Jul 10, 2026 | Jul 13, 2026 | 20.1% | — |
| CVE-2026-56291
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability |
Balbooa · Forms | Jul 10, 2026 | Jul 13, 2026 | 14.9% | — |
| CVE-2026-48282
Adobe ColdFusion Path Traversal Vulnerability |
Adobe · ColdFusion | Jul 7, 2026 | Jul 10, 2026 | 42.4% | — |
| CVE-2026-48908
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vuln… |
JoomShaper · SP Page Builder | Jul 7, 2026 | Jul 10, 2026 | 89.2% | — |
| CVE-2026-55255
Langflow Authorization Bypass Through User-Controlled Key Vulnerability |
Langflow · Langflow | Jul 7, 2026 | Jul 10, 2026 | 0.9% | — |
| CVE-2026-56290
Joomlack Page Builder Improper Access Control Vulnerability |
Joomlack · Page Builder | Jul 7, 2026 | Jul 10, 2026 | 30.9% | — |
| CVE-2026-45659 Ransomware
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability |
Microsoft · SharePoint Server | Jul 1, 2026 | Jul 4, 2026 | 80.2% | 1 last Nov 10 |
| CVE-2026-48558
SimpleHelp Authentication Bypass Vulnerability |
SimpleHelp · SimpleHelp | Jun 29, 2026 | Jul 2, 2026 | 80.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.