INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h Global data_breach Government CRITICAL 9h Global ransomware Financial Services / Cybersecurity CRITICAL 9h Global vulnerability Information Technology / Cybersecurity CRITICAL 11h Global malware Energy and Utilities CRITICAL 12h Global ransomware Multiple sectors CRITICAL 12h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 15h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 15h Global phishing Multiple sectors HIGH 16h Global insider Cybersecurity Services CRITICAL 16h Global ransomware Multiple sectors (U.S. companies) CRITICAL 16h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2026-1877
The Auto Post Scheduler plugin for WordPress is vulnerable to Cro…
The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers…
MEDIUM
6.1
Mar 31, 2026
CVE-2026-20915
Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta)…
Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticate…
MEDIUM
5.4
Mar 31, 2026
CVE-2026-2480
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPre…
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Si…
MEDIUM
6.4
Mar 31, 2026
CVE-2018-25226
FTPShell Server 6.83 contains a buffer overflow vulnerability tha…
FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash t…
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25227
Valentina Studio 9.0.4 contains a denial of service vulnerability…
Valentina Studio 9.0.4 contains a denial of service vulnerability that allows local attackers to cra…
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25228
NetSetMan 4.7.1 contains a buffer overflow vulnerability in the W…
NetSetMan 4.7.1 contains a buffer overflow vulnerability in the Workgroup feature that allows local …
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25229
BulletProof FTP Server 2019.0.0.50 contains a denial of service v…
BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configurat…
MEDIUM
5.5
Mar 30, 2026
CVE-2018-25230
Free IP Switcher 3.1 contains a buffer overflow vulnerability tha…
Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash t…
MEDIUM
5.5
Mar 30, 2026
CVE-2018-25231
HeidiSQL 9.5.0.5196 contains a denial of service vulnerability th…
HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash …
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25232
Softros LAN Messenger 9.2 contains a denial of service vulnerabil…
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to …
MEDIUM
5.5
Mar 30, 2026
CVE-2018-25233
WebDrive 18.00.5057 contains a denial of service vulnerability th…
WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash …
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25234
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerabi…
SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to…
MEDIUM
6.2
Mar 30, 2026
CVE-2018-25235
NetworkActiv Web Server 4.0 contains a buffer overflow vulnerabil…
NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Se…
MEDIUM
6.2
Mar 30, 2026
CVE-2019-25653
Navicat for Oracle 12.1.15 contains a denial of service vulnerabi…
Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to…
MEDIUM
6.2
Mar 30, 2026
CVE-2019-25655
Device Monitoring Studio 8.10.00.8925 contains a denial of servic…
Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local a…
MEDIUM
6.2
Mar 30, 2026
CVE-2026-26352
Smoothwall Express versions prior to 3.1 Update 13 contain a stor…
Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerabili…
MEDIUM
5.4
Mar 30, 2026
CVE-2026-27508
Smoothwall Express versions prior to 3.1 Update 13 contain a refl…
Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerab…
MEDIUM
5.4
Mar 30, 2026
CVE-2026-33027
Nginx UI is a web user interface for the Nginx web server. Prior …
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui conf…
MEDIUM
6.5
Mar 30, 2026
CVE-2026-33952
FreeRDP is a free implementation of the Remote Desktop Protocol. …
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalid…
MEDIUM
6.5
Mar 30, 2026
CVE-2026-33977
FreeRDP is a free implementation of the Remote Desktop Protocol. …
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a maliciou…
MEDIUM
6.5
Mar 30, 2026
CVE-2026-5119
A flaw was found in libsoup. When establishing HTTPS tunnels thro…
A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensit…
MEDIUM
5.9
Mar 30, 2026
CVE-2026-5125
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3…
A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is…
MEDIUM
5.3
Mar 30, 2026
CVE-2026-5126
A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affe…
A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function …
MEDIUM
6.3
Mar 30, 2026
CVE-2026-5153
A flaw has been found in Tenda CH22 1.0.0.1. The affected element…
A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of…
MEDIUM
6.3
Mar 30, 2026
CVE-2026-5020
A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B202…
A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102. Affected by this issue is th…
MEDIUM
6.3
Mar 29, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.