🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-20133 |
Cisco Catalyst SD-WAN Manager — CVE-2026-20133
Cisco Catalyst SD-WAN Manager contains an exposure of…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2026-20128 |
Cisco Catalyst SD-WAN Manager — CVE-2026-20128
Cisco Catalyst SD-WAN Manager contains a storing pass…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2026-20122 |
Cisco Catalyst SD-WAN Manger — CVE-2026-20122
Cisco Catalyst SD-WAN Manager contains an incorrect us…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2025-48700 |
Synacor Zimbra Collaboration Suite (ZCS) — CVE-2025-48700
Synacor Zimbra Collaboration Suite (ZCS) c…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2025-32975 |
Quest KACE Systems Management Appliance (SMA) — CVE-2025-32975
Quest KACE Systems Management Applian…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2025-2749 |
Kentico Kentico Xperience — CVE-2025-2749
Kentico Xperience contains a path traversal vulnerability …
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2024-27199 |
JetBrains TeamCity — CVE-2024-27199
JetBrains TeamCity contains a relative path traversal vulnerabil…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2023-27351 |
PaperCut NG/MF — CVE-2023-27351
PaperCut NG/MF contains an improper authentication vulnerability tha…
|
CRITICAL |
9.8
|
KEV AI | Apr 20, 2026 |
| CVE-2026-34197 |
Apache ActiveMQ — CVE-2026-34197
Apache ActiveMQ contains an improper input validation vulnerability…
|
CRITICAL |
9.8
|
KEV AI | Apr 16, 2026 |
| CVE-2009-0238 |
Microsoft Office — CVE-2009-0238
Microsoft Office Excel contains a remote code execution vulnerabili…
|
CRITICAL |
9.8
|
KEV AI | Apr 14, 2026 |
| CVE-2026-34621 |
Adobe Acrobat and Reader — CVE-2026-34621
Adobe Acrobat and Reader contain a prototype pollution vul…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2026-21643 |
Fortinet FortiClient EMS — CVE-2026-21643
Fortinet FortiClient EMS contains a SQL injection vulnerab…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2025-60710 |
Microsoft Windows — CVE-2025-60710
Microsoft Windows contains a link following vulnerability that al…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2023-36424 |
Microsoft Windows — CVE-2023-36424
Microsoft Windows Common Log File System Driver contains an out-o…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2023-21529 |
Microsoft Exchange Server — CVE-2023-21529
Microsoft Exchange Server contains a deserialization of u…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2020-9715 |
Adobe Acrobat — CVE-2020-9715
Adobe Acrobat contains a use-after-free vulnerability that allows for …
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2012-1854 |
Microsoft Visual Basic for Applications (VBA) — CVE-2012-1854
Microsoft Visual Basic for Application…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2026-39860 |
Nix is a package manager for Linux and other Unix systems. A bug in the fix for CVE-2024-27297 allow…
|
CRITICAL |
9.0
|
✅ AI | Apr 8, 2026 |
| CVE-2026-1346 |
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10…
|
CRITICAL |
9.3
|
AI | Apr 8, 2026 |
| CVE-2026-1340 |
Ivanti Endpoint Manager Mobile (EPMM) — CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) contains…
|
CRITICAL |
9.8
|
KEV AI | Apr 8, 2026 |
| CVE-2026-39355 |
Genealogy is a family tree PHP application. Prior to 5.9.1, a critical broken access control vulnera…
|
CRITICAL |
9.9
|
⚡ AI | Apr 7, 2026 |
| CVE-2026-35616 |
Fortinet FortiClient EMS — CVE-2026-35616
Fortinet FortiClient EMS contains an improper access contr…
|
CRITICAL |
9.8
|
KEV AI | Apr 6, 2026 |
| CVE-2026-26026 |
GLPI is a free asset and IT management software package. From 11.0.0 to before 11.0.6, template inje…
|
CRITICAL |
9.1
|
AI | Apr 6, 2026 |
| CVE-2026-32211 |
Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to …
|
CRITICAL |
9.1
|
AI | Apr 3, 2026 |
| CVE-2026-26135 |
Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an author…
|
CRITICAL |
9.6
|
AI | Apr 3, 2026 |
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
🔴 Recent Critical CVEs
CVE-2026-20133
Apr 20, 2026
CVE-2026-20128
Apr 20, 2026
CVE-2026-20122
Apr 20, 2026
CVE-2025-48700
Apr 20, 2026
CVE-2025-32975
Apr 20, 2026
💡 Search Tips
CVE-2024-12345
Search by exact ID
apache
Search by product name
remote code execution
Search by vulnerability type
log4j
Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron