INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2009-0238
Microsoft Office — CVE-2009-0238 Microsoft Office Excel contains a remote code execution vulnerabili…
CRITICAL
9.8
KEV AI Apr 14, 2026
CVE-2023-21529
Microsoft Exchange Server — CVE-2023-21529 Microsoft Exchange Server contains a deserialization of u…
CRITICAL
9.8
KEV AI Apr 13, 2026
CVE-2012-1854
Microsoft Visual Basic for Applications (VBA) — CVE-2012-1854 Microsoft Visual Basic for Application…
CRITICAL
9.8
KEV AI Apr 13, 2026
CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) — CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) contains…
CRITICAL
9.8
KEV AI Apr 8, 2026
CVE-2025-53521
F5 BIG-IP APM Stack-Based Buffer Overflow Remote Code Execution
F5 BIG-IP — CVE-2025-53521 F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that c…
CRITICAL
9.8
KEV AI Mar 27, 2026
CVE-2025-32432
Craft CMS Remote Code Execution Vulnerability (CVE-2025-32432)
Craft CMS Craft CMS — CVE-2025-32432 Craft CMS contains a code injection vulnerability that allows a…
CRITICAL
9.8
KEV AI Mar 20, 2026
CVE-2026-20131
Cisco Secure Firewall Management Center Unauthenticated Remote Co…
Cisco Secure Firewall Management Center (FMC) — CVE-2026-20131 Cisco Secure Firewall Management Cent…
CRITICAL
9.8
KEV AI Mar 19, 2026
CVE-2025-68613
n8n Workflow Expression Evaluation Remote Code Execution (CVE-202…
n8n n8n — CVE-2025-68613 n8n contains an improper control of dynamically managed code resources vuln…
CRITICAL
9.8
KEV AI Mar 11, 2026
CVE-2026-22719
VMware Aria Operations contains a command injection vulnerability…
VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor…
HIGH
8.1
KEV Feb 25, 2026
CVE-2025-49113
RoundCube Webmail Deserialization of Untrusted Data Vulnerability…
RoundCube Webmail Deserialization of Untrusted Data Vulnerability — RoundCube Webmail contains a des…
CRITICAL
9.0
KEV AI Feb 20, 2026
CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vul…
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability — Microsoft Windows Vid…
CRITICAL
9.0
KEV AI Feb 17, 2026
CVE-2025-40551
SolarWinds Web Help Desk Critical Deserialization Vulnerability E…
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk …
CRITICAL
9.0
KEV AI Feb 3, 2026
CVE-2026-1281
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code…
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile …
CRITICAL
9.0
KEV AI Jan 29, 2026
CVE-2025-52691
SmarterTools SmarterMail Critical Unrestricted File Upload Vulner…
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability — SmarterTool…
CRITICAL
9.0
KEV AI Jan 26, 2026
CVE-2024-37079
Broadcom VMware vCenter Server Out-of-Bounds Write Vulnerability …
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability — Broadcom VMware vCenter Server co…
CRITICAL
9.0
KEV AI Jan 23, 2026
CVE-2025-8110
Gogs Path Traversal Vulnerability Leading to Remote Code Executio…
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper …
CRITICAL
9.0
KEV AI Jan 12, 2026
CVE-2025-37164
HPE OneView Critical Code Injection Vulnerability Enabling Remote…
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (…
CRITICAL
9.0
KEV AI Jan 7, 2026
CVE-2009-0556
Microsoft PowerPoint Remote Code Execution via OutlineTextRefAtom…
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a co…
CRITICAL
9.0
KEV AI Jan 7, 2026
CVE-2025-55182
Meta React Server Components Remote Code Execution Vulnerability …
Meta React Server Components Remote Code Execution Vulnerability — Meta React Server Components cont…
CRITICAL
9.0
KEV AI Dec 5, 2025
CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability Enabling Rem…
WatchGuard Firebox Out-of-Bounds Write Vulnerability — WatchGuard Firebox contains an out-of-bounds …
CRITICAL
9.0
KEV AI Nov 12, 2025
CVE-2025-48703
CWP Control Web Panel Critical OS Command Injection Vulnerability…
CWP Control Web Panel OS Command Injection Vulnerability — CWP Control Web Panel (formerly CentOS We…
CRITICAL
9.0
KEV AI Nov 4, 2025
CVE-2025-24893
XWiki Platform Eval Injection Vulnerability Enabling Remote Code …
XWiki Platform Eval Injection Vulnerability — XWiki Platform contains an eval injection vulnerabilit…
CRITICAL
9.0
KEV AI Oct 30, 2025
CVE-2025-59287
Microsoft Windows Server Update Service (WSUS) Deserialization Re…
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability — Mic…
CRITICAL
9.0
KEV AI Oct 24, 2025
CVE-2016-7836
SKYSEA Client View Improper Authentication Vulnerability — SKYSEA…
SKYSEA Client View Improper Authentication Vulnerability — SKYSEA Client View contains an improper a…
CRITICAL
9.0
KEV AI Oct 14, 2025
CVE-2025-61882
Oracle E-Business Suite BI Publisher Integration Remote Code Exec…
Oracle E-Business Suite Unspecified Vulnerability — Oracle E-Business Suite contains an unspecified …
CRITICAL
9.0
KEV AI Oct 6, 2025
12318
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.