INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global phishing Multiple sectors HIGH 1h Global insider Cybersecurity Services CRITICAL 1h Global ransomware Multiple sectors (U.S. companies) CRITICAL 1h Global malware Financial Services, Cryptocurrency CRITICAL 2h Global malware Technology and Cloud Services HIGH 2h Global general Financial Services and E-commerce MEDIUM 2h Global data_breach Social Media and Communications CRITICAL 2h Global general Cybersecurity Operations HIGH 3h Global phishing Technology and Consumer Services HIGH 3h Global data_breach Multiple sectors HIGH 3h Global phishing Multiple sectors HIGH 1h Global insider Cybersecurity Services CRITICAL 1h Global ransomware Multiple sectors (U.S. companies) CRITICAL 1h Global malware Financial Services, Cryptocurrency CRITICAL 2h Global malware Technology and Cloud Services HIGH 2h Global general Financial Services and E-commerce MEDIUM 2h Global data_breach Social Media and Communications CRITICAL 2h Global general Cybersecurity Operations HIGH 3h Global phishing Technology and Consumer Services HIGH 3h Global data_breach Multiple sectors HIGH 3h Global phishing Multiple sectors HIGH 1h Global insider Cybersecurity Services CRITICAL 1h Global ransomware Multiple sectors (U.S. companies) CRITICAL 1h Global malware Financial Services, Cryptocurrency CRITICAL 2h Global malware Technology and Cloud Services HIGH 2h Global general Financial Services and E-commerce MEDIUM 2h Global data_breach Social Media and Communications CRITICAL 2h Global general Cybersecurity Operations HIGH 3h Global phishing Technology and Consumer Services HIGH 3h Global data_breach Multiple sectors HIGH 3h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2026-0841
UTT 520W Router Remote Buffer Overflow Vulnerability (CVE-2026-08…
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function str…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0840
UTT 520W Router Remote Buffer Overflow Vulnerability (CVE-2026-08…
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerabili…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0839
UTT 520W Router Buffer Overflow Vulnerability in APSecurity Funct…
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the f…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0838
UTT 520W Router Buffer Overflow Vulnerability via SSID Parameter …
A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0837
UTT 520W Router Buffer Overflow Vulnerability in Firewall Configu…
A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the …
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0836
UTT 520W Router Buffer Overflow Vulnerability (CVE-2026-0836)
A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function str…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-22609
Fickling Python Pickle Analyzer Bypass Vulnerability (CVE-2026-22…
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imp…
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22607
Fickling Python Pickle Analyzer Misclassifies Malicious cProfile …
Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including …
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22606
Fickling Python Pickle Analyzer Misclassifies Malicious runpy Mod…
Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including …
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22026
NASA CryptoLib KMC Client Unbounded Memory Allocation Vulnerabili…
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte…
HIGH
7.5
AI Jan 10, 2026
CVE-2026-22023
Out-of-Bounds Read Vulnerability in NASA CryptoLib SDLS-EP Implem…
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte…
HIGH
7.5
AI Jan 10, 2026
CVE-2026-22244
OpenMetadata Server-Side Template Injection Enables Remote Code E…
OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code …
HIGH
7.2
AI Jan 8, 2026
CVE-2026-22241
Critical File Upload Vulnerability in Open eClass Platform Enable…
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Pr…
HIGH
7.2
AI Jan 8, 2026
CVE-2026-22042
RustFS IAM Permission Validation Bypass Enables Privilege Escalat…
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `Im…
HIGH
8.8
AI Jan 8, 2026
CVE-2026-22035
Greenshot OS Command Injection via Unsanitized Filename Processin…
Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to O…
HIGH
7.7
AI Jan 8, 2026
CVE-2019-25279
FaceSentry Access Control System Cleartext Password Storage Vulne…
FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allo…
HIGH
7.5
AI Jan 8, 2026
CVE-2026-22190
Panda3D egg-mkfont Uncontrolled Format String Vulnerability (CVE-…
Panda3D versions up to and including 1.10.16 egg-mkfont contains an uncontrolled format string vulne…
HIGH
7.5
AI Jan 7, 2026
CVE-2026-21856
Time-Based Blind SQL Injection in Tarkov Data Manager Webhook and…
The Tarkov Data Manager is a tool to manage the Tarkov item data. Prior to commit 9bdb3a75a98a7047b6…
HIGH
7.2
AI Jan 7, 2026
CVE-2026-21678
Heap Buffer Overflow in iccDEV Color Management Library (CVE-2026…
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appli…
HIGH
7.8
AI Jan 7, 2026
CVE-2025-69263
pnpm HTTP Tarball Integrity Bypass Vulnerability (CVE-2025-69263)
pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies (and git-hoste…
HIGH
7.5
AI Jan 7, 2026
CVE-2025-69262
Critical Command Injection in pnpm Package Manager via Environmen…
pnpm is a package manager. Versions 6.25.0 through 10.26.2 have a Command Injection vulnerability wh…
HIGH
7.5
AI Jan 7, 2026
CVE-2020-36922
Sony BRAVIA Digital Signage API Information Disclosure Vulnerabil…
Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unaut…
HIGH
7.5
AI Jan 6, 2026
CVE-2026-0621
ReDoS Vulnerability in Anthropic MCP TypeScript SDK URI Template …
Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression deni…
HIGH
7.5
AI Jan 5, 2026
CVE-2026-0589
Authentication Bypass in Online Product Reservation System 1.0 Ad…
A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unk…
HIGH
7.3
AI Jan 5, 2026
CVE-2025-68455
Craft CMS Authenticated Remote Code Execution via Malicious Behav…
Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC…
HIGH
7.2
AI Jan 5, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.