INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2025-71280
XenForo before 2.3.7 allows information disclosure via local acco…
XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems.…
MEDIUM
6.2
Apr 1, 2026
CVE-2026-1491
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM …
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10…
MEDIUM
5.3
Apr 1, 2026
CVE-2026-1879
A vulnerability was detected in Harvard University IQSS Dataverse…
A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown…
MEDIUM
6.3
Apr 1, 2026
CVE-2026-20041
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboar…
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthent…
MEDIUM
6.1
Apr 1, 2026
CVE-2026-20042
A vulnerability in the configuration backup feature of Cisco Nexu…
A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker…
MEDIUM
6.5
Apr 1, 2026
CVE-2026-20085
A vulnerability in the web-based management interface of Cisco IM…
A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, r…
MEDIUM
6.1
Apr 1, 2026
CVE-2026-20095
A vulnerability in the web-based management interface of Cisco IM…
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem…
MEDIUM
6.5
Apr 1, 2026
CVE-2026-20096
A vulnerability in the web-based management interface of Cisco IM…
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem…
MEDIUM
6.5
Apr 1, 2026
CVE-2026-20097
A vulnerability in the web-based management interface of Cisco IM…
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem…
MEDIUM
6.5
Apr 1, 2026
CVE-2026-2862
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM …
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10…
MEDIUM
5.3
Apr 1, 2026
CVE-2026-30522
A Business Logic vulnerability exists in SourceCodester Loan Mana…
A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper …
MEDIUM
6.5
Apr 1, 2026
CVE-2026-34510
OpenClaw before 2026.3.22 contains a path traversal vulnerability…
OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that acce…
MEDIUM
5.3
Apr 1, 2026
CVE-2026-34999
OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authe…
OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot …
MEDIUM
5.3
Apr 1, 2026
CVE-2026-35000
ChangeDetection.io versions prior to 0.54.7 contain a protection …
ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPa…
MEDIUM
6.5
Apr 1, 2026
CVE-2026-35054
XenForo before 2.3.9 is vulnerable to stored cross-site scripting…
XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering…
MEDIUM
6.4
Apr 1, 2026
CVE-2026-35055
XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-sit…
XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightb…
MEDIUM
6.1
Apr 1, 2026
CVE-2026-35057
XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored c…
XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in struct…
MEDIUM
6.4
Apr 1, 2026
CVE-2026-3877
A reflected cross-site scripting (XSS) vulnerability in the dashb…
A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the Ve…
MEDIUM
6.1
Apr 1, 2026
CVE-2026-4364
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM …
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10…
MEDIUM
5.4
Apr 1, 2026
CVE-2026-30521
A Business Logic vulnerability exists in SourceCodester Loan Mana…
A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper …
MEDIUM
6.5
Mar 31, 2026
CVE-2026-30879
baserCMS is a website development framework. Prior to version 5.2…
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scrip…
MEDIUM
6.1
Mar 31, 2026
CVE-2026-3191
The Minify HTML plugin for WordPress is vulnerable to Cross-Site …
The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up …
MEDIUM
5.4
Mar 31, 2026
CVE-2026-32921
OpenClaw before 2026.3.8 contains an approval bypass vulnerabilit…
OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable scrip…
MEDIUM
6.3
Mar 31, 2026
CVE-2026-32976
OpenClaw before 2026.3.11 contains an authorization bypass vulner…
OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands t…
MEDIUM
6.5
Mar 31, 2026
CVE-2026-32977
OpenClaw before 2026.3.11 contains a sandbox boundary bypass vuln…
OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFil…
MEDIUM
6.3
Mar 31, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.