INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2026-0855
Merit LILIN IP Camera OS Command Injection Vulnerability (CVE-202…
Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing…
HIGH
8.8
AI Jan 12, 2026
CVE-2026-0854
Merit LILIN DVR/NVR OS Command Injection Vulnerability (CVE-2026-…
Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing a…
HIGH
8.8
AI Jan 12, 2026
CVE-2025-69276
Critical Deserialization Vulnerability in Broadcom DX NetOps Spec…
Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux all…
HIGH
8.8
AI Jan 12, 2026
CVE-2025-69274
Broadcom DX NetOps Spectrum Authorization Bypass Vulnerability (C…
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Win…
HIGH
8.8
AI Jan 12, 2026
CVE-2025-69273
Broadcom DX NetOps Spectrum Authentication Bypass Vulnerability (…
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authen…
HIGH
7.5
AI Jan 12, 2026
CVE-2025-69272
Broadcom DX NetOps Spectrum Cleartext Transmission Vulnerability …
Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Wind…
HIGH
7.5
AI Jan 12, 2026
CVE-2025-69271
Broadcom DX NetOps Spectrum Credential Exposure Vulnerability (CV…
Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux …
HIGH
7.5
AI Jan 12, 2026
CVE-2025-41078
Viafirma Documents Authorization Bypass Enabling Privilege Escala…
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated use…
HIGH
8.1
AI Jan 12, 2026
CVE-2025-41077
Critical IDOR Vulnerability in Viafirma Inbox Enables Account Tak…
IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user witho…
HIGH
8.1
AI Jan 12, 2026
CVE-2026-0841
UTT 520W Router Remote Buffer Overflow Vulnerability (CVE-2026-08…
A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Affected by this issue is the function str…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0840
UTT 520W Router Remote Buffer Overflow Vulnerability (CVE-2026-08…
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerabili…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0839
UTT 520W Router Buffer Overflow Vulnerability in APSecurity Funct…
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the f…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0838
UTT 520W Router Buffer Overflow Vulnerability via SSID Parameter …
A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy of…
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0837
UTT 520W Router Buffer Overflow Vulnerability in Firewall Configu…
A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the …
HIGH
8.8
AI Jan 11, 2026
CVE-2026-0836
UTT 520W Router Buffer Overflow Vulnerability (CVE-2026-0836)
A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function str…
HIGH
8.8
AI Jan 11, 2026
CVE-2025-68493
Apache Struts Missing XML Validation Vulnerability (CVE-2025-6849…
Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Str…
HIGH
8.1
AI Jan 11, 2026
CVE-2026-22612
Fickling Python Pickle Analyzer Detection Bypass via Builtins Bli…
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vu…
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22609
Fickling Python Pickle Analyzer Bypass Vulnerability (CVE-2026-22…
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imp…
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22608
Fickling Python Pickle Scanner RCE Bypass via ctypes and pydoc Ch…
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes an…
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22607
Fickling Python Pickle Analyzer Misclassifies Malicious cProfile …
Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including …
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22606
Fickling Python Pickle Analyzer Misclassifies Malicious runpy Mod…
Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including …
HIGH
7.8
AI Jan 10, 2026
CVE-2026-22601
OpenProject Command Injection via Sendmail Configuration (CVE-202…
OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1…
HIGH
7.2
AI Jan 10, 2026
CVE-2026-22026
NASA CryptoLib KMC Client Unbounded Memory Allocation Vulnerabili…
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte…
HIGH
7.5
AI Jan 10, 2026
CVE-2026-22023
Out-of-Bounds Read Vulnerability in NASA CryptoLib SDLS-EP Implem…
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte…
HIGH
7.5
AI Jan 10, 2026
CVE-2025-13457
WooCommerce Square Plugin IDOR Vulnerability Exposes Payment Card…
The WooCommerce Square plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…
HIGH
7.5
AI Jan 10, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.