🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2009-0238 |
Microsoft Office — CVE-2009-0238
Microsoft Office Excel contains a remote code execution vulnerabili…
|
CRITICAL |
9.8
|
KEV AI | Apr 14, 2026 |
| CVE-2023-21529 |
Microsoft Exchange Server — CVE-2023-21529
Microsoft Exchange Server contains a deserialization of u…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2012-1854 |
Microsoft Visual Basic for Applications (VBA) — CVE-2012-1854
Microsoft Visual Basic for Application…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2026-1340 |
Ivanti Endpoint Manager Mobile (EPMM) — CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) contains…
|
CRITICAL |
9.8
|
KEV AI | Apr 8, 2026 |
| CVE-2025-53521 |
F5 BIG-IP APM Stack-Based Buffer Overflow Remote Code Execution
F5 BIG-IP — CVE-2025-53521
F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that c…
|
CRITICAL |
9.8
|
KEV AI | Mar 27, 2026 |
| CVE-2025-32432 |
Craft CMS Remote Code Execution Vulnerability (CVE-2025-32432)
Craft CMS Craft CMS — CVE-2025-32432
Craft CMS contains a code injection vulnerability that allows a…
|
CRITICAL |
9.8
|
KEV AI | Mar 20, 2026 |
| CVE-2026-20131 |
Cisco Secure Firewall Management Center Unauthenticated Remote Co…
Cisco Secure Firewall Management Center (FMC) — CVE-2026-20131
Cisco Secure Firewall Management Cent…
|
CRITICAL |
9.8
|
KEV AI | Mar 19, 2026 |
| CVE-2025-68613 |
n8n Workflow Expression Evaluation Remote Code Execution (CVE-202…
n8n n8n — CVE-2025-68613
n8n contains an improper control of dynamically managed code resources vuln…
|
CRITICAL |
9.8
|
KEV AI | Mar 11, 2026 |
| CVE-2026-28495 |
GetSimple CMS is a content management system. The massiveAdmin pl…
GetSimple CMS is a content management system. The massiveAdmin plugin (v6.0.3) bundled with GetSimpl…
|
CRITICAL |
9.6
|
⚡ ✅ AI | Mar 10, 2026 |
| CVE-2026-2251 |
Critical Path Traversal Vulnerability in Xerox FreeFlow Core Lead…
Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox …
|
CRITICAL |
9.8
|
✅ AI | Feb 27, 2026 |
| CVE-2026-27510 |
Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used wit…
Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android applicati…
|
CRITICAL |
9.6
|
✅ AI | Feb 26, 2026 |
| CVE-2025-49113 |
RoundCube Webmail Deserialization of Untrusted Data Vulnerability…
RoundCube Webmail Deserialization of Untrusted Data Vulnerability — RoundCube Webmail contains a des…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 20, 2026 |
| CVE-2008-0015 |
Microsoft Windows Video ActiveX Control Remote Code Execution Vul…
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability — Microsoft Windows Vid…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 17, 2026 |
| CVE-2026-25539 |
CVE-2026-25539: Path Traversal Vulnerability in SiYuan Knowledge …
SiYuan is a personal knowledge management system. Prior to version 3.5.5, the /api/file/copyFile end…
|
CRITICAL |
9.1
|
⚡ ✅ AI | Feb 4, 2026 |
| CVE-2026-25510 |
CVE-2026-25510: Remote Code Execution via File Editor in CI4MS CM…
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w…
|
CRITICAL |
9.9
|
⚡ ✅ AI | Feb 3, 2026 |
| CVE-2025-40551 |
SolarWinds Web Help Desk Critical Deserialization Vulnerability E…
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 3, 2026 |
| CVE-2026-0963 |
Critical Path Traversal Vulnerability in Crafty Controller File O…
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Contro…
|
CRITICAL |
9.9
|
✅ AI | Jan 30, 2026 |
| CVE-2026-1281 |
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code…
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 29, 2026 |
| CVE-2026-24897 |
Critical Path Traversal Vulnerability in Erugo File-Sharing Platf…
Erugo is a self-hosted file-sharing platform. In versions up to and including 0.2.14, an authenticat…
|
CRITICAL |
10.0
|
⚡ ✅ AI | Jan 28, 2026 |
| CVE-2025-52691 |
SmarterTools SmarterMail Critical Unrestricted File Upload Vulner…
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability — SmarterTool…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 26, 2026 |
| CVE-2024-37079 |
Broadcom VMware vCenter Server Out-of-Bounds Write Vulnerability …
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability — Broadcom VMware vCenter Server co…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 23, 2026 |
| CVE-2026-23836 |
HotCRP Critical Remote Code Execution via Formula Injection (CVE-…
HotCRP is conference review software. A problem introduced in April 2024 in version 3.1 led to inade…
|
CRITICAL |
9.9
|
✅ AI | Jan 19, 2026 |
| CVE-2026-0500 |
SAP Wily Introscope Enterprise Manager Critical Remote Code Execu…
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (Work…
|
CRITICAL |
9.6
|
✅ AI | Jan 13, 2026 |
| CVE-2025-8110 |
Gogs Path Traversal Vulnerability Leading to Remote Code Executio…
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 12, 2026 |
| CVE-2026-22244 |
OpenMetadata Server-Side Template Injection Enables Remote Code E…
OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code …
|
HIGH |
7.2
|
⚡ ✅ AI | Jan 8, 2026 |
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
🔴 Recent Critical CVEs
CVE-2026-20133
Apr 20, 2026
CVE-2026-20128
Apr 20, 2026
CVE-2026-20122
Apr 20, 2026
CVE-2025-48700
Apr 20, 2026
CVE-2025-32975
Apr 20, 2026
💡 Search Tips
CVE-2024-12345
Search by exact ID
apache
Search by product name
remote code execution
Search by vulnerability type
log4j
Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron