INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global vulnerability Mobile Devices / Consumer Electronics HIGH 6h Global ransomware Multiple sectors CRITICAL 6h Global malware Networking / Infrastructure CRITICAL 7h Global ransomware Information Technology, Virtualization Infrastructure CRITICAL 8h Global supply_chain Software Development and DevOps CRITICAL 9h Global supply_chain Software Development and Technology CRITICAL 10h Global apt Multiple sectors HIGH 12h Global general Digital Content & Intellectual Property MEDIUM 12h Global malware Technology and Software Development CRITICAL 12h Global ddos Technology and Social Media HIGH 13h Global vulnerability Mobile Devices / Consumer Electronics HIGH 6h Global ransomware Multiple sectors CRITICAL 6h Global malware Networking / Infrastructure CRITICAL 7h Global ransomware Information Technology, Virtualization Infrastructure CRITICAL 8h Global supply_chain Software Development and DevOps CRITICAL 9h Global supply_chain Software Development and Technology CRITICAL 10h Global apt Multiple sectors HIGH 12h Global general Digital Content & Intellectual Property MEDIUM 12h Global malware Technology and Software Development CRITICAL 12h Global ddos Technology and Social Media HIGH 13h Global vulnerability Mobile Devices / Consumer Electronics HIGH 6h Global ransomware Multiple sectors CRITICAL 6h Global malware Networking / Infrastructure CRITICAL 7h Global ransomware Information Technology, Virtualization Infrastructure CRITICAL 8h Global supply_chain Software Development and DevOps CRITICAL 9h Global supply_chain Software Development and Technology CRITICAL 10h Global apt Multiple sectors HIGH 12h Global general Digital Content & Intellectual Property MEDIUM 12h Global malware Technology and Software Development CRITICAL 12h Global ddos Technology and Social Media HIGH 13h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2026-26861
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cro…
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.…
HIGH
8.3
Feb 27, 2026
CVE-2026-26862
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM…
CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) v…
HIGH
8.3
Feb 27, 2026
CVE-2026-2751
Blind SQL Injection via unsanitized array keys in Service Depende…
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Ce…
HIGH
8.3
Feb 27, 2026
CVE-2026-27707
Seerr is an open-source media request and discovery manager for J…
Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting i…
HIGH
7.3
Feb 27, 2026
CVE-2026-27757
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contai…
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability t…
HIGH
7.1
Feb 27, 2026
CVE-2026-27776
IM-LogicDesigner module of intra-mart Accel Platform contains ins…
IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue. This c…
HIGH
7.2
Feb 27, 2026
CVE-2026-27836
phpMyFAQ is an open source FAQ web application. Prior to version …
phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoi…
HIGH
7.5
Feb 27, 2026
CVE-2026-28272
Kiteworks is a private data network (PDN). Prior to version 9.2.0…
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Emai…
HIGH
8.1
Feb 27, 2026
CVE-2026-28364
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read i…
In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/…
HIGH
7.9
Feb 27, 2026
CVE-2026-28372
telnetd in GNU inetutils through 2.7 allows privilege escalation …
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing sy…
HIGH
7.4
Feb 27, 2026
CVE-2026-28426
Statmatic is a Laravel and Git powered content management system …
Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.11 an…
HIGH
8.7
Feb 27, 2026
CVE-2026-3037
An OS command injection vulnerability exists in XWEB Pro version …
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an auth…
HIGH
8.0
Feb 27, 2026
CVE-2026-3274
A security flaw has been discovered in Tenda F453 1.0.0.3. Affect…
A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function fr…
HIGH
8.8
AI Feb 27, 2026
CVE-2026-3275
A weakness has been identified in Tenda F453 1.0.0.3. This affect…
A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of th…
HIGH
8.8
AI Feb 27, 2026
CVE-2019-25489
Homey BNB V4 contains a SQL injection vulnerability that allows u…
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipul…
HIGH
8.2
Feb 27, 2026
CVE-2019-25490
Homey BNB V4 contains a SQL injection vulnerability that allows u…
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipul…
HIGH
8.2
Feb 27, 2026
CVE-2019-25491
Homey BNB V4 contains an SQL injection vulnerability that allows …
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu…
HIGH
8.2
Feb 27, 2026
CVE-2019-25492
Homey BNB V4 contains an SQL injection vulnerability that allows …
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu…
HIGH
8.2
Feb 27, 2026
CVE-2019-25493
Homey BNB V4 contains an SQL injection vulnerability that allows …
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipu…
HIGH
8.2
Feb 27, 2026
CVE-2019-25494
Homey BNB V4 contains an SQL injection vulnerability in the admin…
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows u…
HIGH
8.2
Feb 27, 2026
CVE-2019-25495
osCommerce 2.3.4.1 contains a SQL injection vulnerability that al…
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to m…
HIGH
8.2
Feb 27, 2026
CVE-2019-25496
osCommerce 2.3.4.1 contains a SQL injection vulnerability that al…
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to m…
HIGH
8.2
Feb 27, 2026
CVE-2019-25497
osCommerce 2.3.4.1 contains a SQL injection vulnerability that al…
osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to m…
HIGH
8.2
Feb 27, 2026
CVE-2026-1565
The User Frontend: AI Powered Frontend Posting, User Directory, P…
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registrat…
HIGH
8.8
AI Feb 26, 2026
CVE-2026-1779
The User Registration & Membership plugin for WordPress is vulner…
The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in ve…
HIGH
8.1
Feb 26, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.