INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global malware Technology and Software Development CRITICAL 9m Global ddos Technology and Social Media HIGH 31m Global phishing Financial Services, Telecommunications, General Public HIGH 56m Global supply_chain Software Development and Technology CRITICAL 1h Global apt Multiple sectors / Critical Infrastructure CRITICAL 2h Global malware Financial Services CRITICAL 2h Global general Software/Technology LOW 2h Global malware Energy CRITICAL 2h Global spyware Software/Technology HIGH 3h Global malware Telecommunications and ISP HIGH 3h Global malware Technology and Software Development CRITICAL 9m Global ddos Technology and Social Media HIGH 31m Global phishing Financial Services, Telecommunications, General Public HIGH 56m Global supply_chain Software Development and Technology CRITICAL 1h Global apt Multiple sectors / Critical Infrastructure CRITICAL 2h Global malware Financial Services CRITICAL 2h Global general Software/Technology LOW 2h Global malware Energy CRITICAL 2h Global spyware Software/Technology HIGH 3h Global malware Telecommunications and ISP HIGH 3h Global malware Technology and Software Development CRITICAL 9m Global ddos Technology and Social Media HIGH 31m Global phishing Financial Services, Telecommunications, General Public HIGH 56m Global supply_chain Software Development and Technology CRITICAL 1h Global apt Multiple sectors / Critical Infrastructure CRITICAL 2h Global malware Financial Services CRITICAL 2h Global general Software/Technology LOW 2h Global malware Energy CRITICAL 2h Global spyware Software/Technology HIGH 3h Global malware Telecommunications and ISP HIGH 3h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2026-4975
A vulnerability has been found in Tenda AC15 15.03.05.19. This af…
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of th…
HIGH
8.8
Mar 27, 2026
CVE-2026-25099
Bludit’s API plugin allows an authenticated attacker with a valid…
Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any t…
HIGH
8.8
Mar 27, 2026
CVE-2026-26060
Fleet is open source device management software. Prior to 4.81.0,…
Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s passwor…
HIGH
8.8
Mar 27, 2026
CVE-2026-26061
Fleet is open source device management software. Prior to 4.81.0,…
Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthent…
HIGH
7.5
Mar 27, 2026
CVE-2026-27309
Substance3D - Stager versions 3.1.7 and earlier are affected by a…
Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that …
HIGH
7.8
Mar 27, 2026
CVE-2026-29180
Fleet is open source device management software. Prior to 4.81.1,…
Fleet is open source device management software. Prior to 4.81.1, a broken access control vulnerabil…
HIGH
8.8
Mar 27, 2026
CVE-2026-33699
pypdf is a free and open-source pure-python PDF library. Versions…
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerabilit…
HIGH
7.5
Mar 27, 2026
CVE-2026-33735
MyTube is a self-hosted downloader and player for several video w…
MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an…
HIGH
8.8
Mar 27, 2026
CVE-2026-33745
cpp-httplib is a C++11 single-file header-only cross platform HTT…
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.39.0, t…
HIGH
7.4
Mar 27, 2026
CVE-2026-33767
WWBN AVideo is an open source video platform. In versions up to a…
WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `objects/like…
HIGH
8.8
Mar 27, 2026
CVE-2026-33867
WWBN AVideo is an open source video platform. In versions up to a…
WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows co…
HIGH
7.5
Mar 27, 2026
CVE-2026-33871
Netty is an asynchronous, event-driven network application framew…
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.F…
HIGH
7.5
Mar 27, 2026
CVE-2026-33935
MyTube is a self-hosted downloader and player for several video w…
MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an…
HIGH
7.5
Mar 27, 2026
CVE-2026-33941
Handlebars provides the power necessary to let users build semant…
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr…
HIGH
8.2
Mar 27, 2026
CVE-2026-34386
Fleet is open source device management software. Prior to 4.81.0,…
Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in F…
HIGH
8.8
Mar 27, 2026
CVE-2026-34388
Fleet is open source device management software. Prior to 4.81.0,…
Fleet is open source device management software. Prior to 4.81.0, a denial-of-service vulnerability …
HIGH
7.5
Mar 27, 2026
CVE-2026-34391
Fleet is open source device management software. Prior to 4.81.1,…
Fleet is open source device management software. Prior to 4.81.1, a vulnerability in Fleet's Windows…
HIGH
7.5
Mar 27, 2026
CVE-2019-25651
Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6…
Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC…
HIGH
8.3
Mar 27, 2026
CVE-2019-25652
UniFi Network Controller before version 5.10.22 and 5.11.x before…
UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certi…
HIGH
7.5
Mar 27, 2026
CVE-2018-25202
SAT CFDI 3.3 contains an SQL injection vulnerability that allows …
SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database qu…
HIGH
8.2
Mar 26, 2026
CVE-2018-25203
Online Store System CMS 1.0 contains an SQL injection vulnerabili…
Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated atta…
HIGH
8.2
Mar 26, 2026
CVE-2018-25205
ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability th…
ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers…
HIGH
8.2
Mar 26, 2026
CVE-2018-25206
KomSeo Cart 1.3 contains an SQL injection vulnerability that allo…
KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands…
HIGH
8.2
Mar 26, 2026
CVE-2018-25207
Online Quiz Maker 1.0 contains SQL injection vulnerabilities in t…
Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that …
HIGH
7.1
Mar 26, 2026
CVE-2018-25208
qdPM 9.1 contains an SQL injection vulnerability that allows unau…
qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract da…
HIGH
8.2
Mar 26, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.