INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global apt Multiple sectors HIGH 1h Global general Digital Content & Intellectual Property MEDIUM 1h Global malware Technology and Software Development CRITICAL 1h Global ddos Technology and Social Media HIGH 2h Global phishing Financial Services, Telecommunications, General Public HIGH 2h Global supply_chain Software Development and Technology CRITICAL 3h Global apt Multiple sectors / Critical Infrastructure CRITICAL 3h Global malware Financial Services CRITICAL 4h Global general Software/Technology LOW 4h Global malware Energy CRITICAL 4h Global apt Multiple sectors HIGH 1h Global general Digital Content & Intellectual Property MEDIUM 1h Global malware Technology and Software Development CRITICAL 1h Global ddos Technology and Social Media HIGH 2h Global phishing Financial Services, Telecommunications, General Public HIGH 2h Global supply_chain Software Development and Technology CRITICAL 3h Global apt Multiple sectors / Critical Infrastructure CRITICAL 3h Global malware Financial Services CRITICAL 4h Global general Software/Technology LOW 4h Global malware Energy CRITICAL 4h Global apt Multiple sectors HIGH 1h Global general Digital Content & Intellectual Property MEDIUM 1h Global malware Technology and Software Development CRITICAL 1h Global ddos Technology and Social Media HIGH 2h Global phishing Financial Services, Telecommunications, General Public HIGH 2h Global supply_chain Software Development and Technology CRITICAL 3h Global apt Multiple sectors / Critical Infrastructure CRITICAL 3h Global malware Financial Services CRITICAL 4h Global general Software/Technology LOW 4h Global malware Energy CRITICAL 4h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2025-12805
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-oper…
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows una…
HIGH
8.1
Mar 26, 2026
CVE-2025-15101
A Cross-Site Request Forgery (CSRF) vulnerability has been identi…
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Web management interfac…
HIGH
8.8
AI Mar 26, 2026
CVE-2025-41359
Vulnerability related to an unquoted service path in Small HTTP S…
Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecti…
HIGH
7.8
Mar 26, 2026
CVE-2025-41368
Problem in the Small HTTP Server v3.06.36 service. An authenticat…
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in …
HIGH
8.1
Mar 26, 2026
CVE-2025-55262
HCL Aftermarket DPC is affected by SQL Injection which allows att…
HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability…
HIGH
8.3
Mar 26, 2026
CVE-2025-55263
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which…
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to …
HIGH
7.3
Mar 26, 2026
CVE-2026-26008
EVerest is an EV charging software stack. Versions prior to 2026.…
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (…
HIGH
7.5
Mar 26, 2026
CVE-2026-27664
A vulnerability has been identified in CPCI85 Central Processing/…
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.1…
HIGH
7.5
Mar 26, 2026
CVE-2026-27828
EVerest is an EV charging software stack. Prior to version 2026.0…
EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_s…
HIGH
7.5
Mar 26, 2026
CVE-2026-2931
The Amelia Booking plugin for WordPress is vulnerable to Insecure…
The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versio…
HIGH
8.8
Mar 26, 2026
CVE-2026-3108
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x…
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail t…
HIGH
8.0
Mar 26, 2026
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due t…
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource dur…
HIGH
7.5
Mar 26, 2026
CVE-2026-32846
OpenClaw through 2026.3.23 (fixed in commit 4797bbc) contains a p…
OpenClaw through 2026.3.23 (fixed in commit 4797bbc) contains a path traversal vulnerability in medi…
HIGH
7.5
Mar 26, 2026
CVE-2026-32857
Firecrawl version 2.8.0 and prior contain a server-side request f…
Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vul…
HIGH
8.6
Mar 26, 2026
CVE-2026-33182
Saloon is a PHP library that gives users tools to build API integ…
Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version …
HIGH
7.5
Mar 26, 2026
CVE-2026-3328
The Frontend Admin by DynamiApps plugin for WordPress is vulnerab…
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via dese…
HIGH
7.2
Mar 26, 2026
CVE-2026-33413
etcd is a distributed key-value store for the data of a distribut…
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42…
HIGH
8.8
Mar 26, 2026
CVE-2026-33526
Squid is a caching proxy for the Web. Prior to version 7.5, due t…
Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vul…
HIGH
7.5
Mar 26, 2026
CVE-2026-33622
PinchTab is a standalone HTTP server that gives AI agents direct …
PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Pinc…
HIGH
8.8
Mar 26, 2026
CVE-2026-33645
Fireshare facilitates self-hosted media and link sharing. In vers…
Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path tr…
HIGH
7.1
Mar 26, 2026
CVE-2026-33661
Pay is an open-source payment SDK extension package for various C…
Pay is an open-source payment SDK extension package for various Chinese payment services. Prior to v…
HIGH
8.6
Mar 26, 2026
CVE-2026-33711
Incus is a system container and virtual machine manager. Incus pr…
Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screen…
HIGH
7.8
Mar 26, 2026
CVE-2026-33932
OpenEMR is a free and open source electronic health records and m…
OpenEMR is a free and open source electronic health records and medical practice management applicat…
HIGH
7.6
Mar 26, 2026
CVE-2026-34055
OpenEMR is a free and open source electronic health records and m…
OpenEMR is a free and open source electronic health records and medical practice management applicat…
HIGH
8.1
Mar 26, 2026
CVE-2026-34056
OpenEMR is a free and open source electronic health records and m…
OpenEMR is a free and open source electronic health records and medical practice management applicat…
HIGH
7.7
Mar 26, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.