INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government CRITICAL 7h Global ransomware Financial Services / Cybersecurity CRITICAL 8h Global vulnerability Information Technology / Cybersecurity CRITICAL 10h Global malware Energy and Utilities CRITICAL 11h Global ransomware Multiple sectors CRITICAL 11h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 13h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 14h Global phishing Multiple sectors HIGH 14h Global insider Cybersecurity Services CRITICAL 14h Global ransomware Multiple sectors (U.S. companies) CRITICAL 15h Global data_breach Government CRITICAL 7h Global ransomware Financial Services / Cybersecurity CRITICAL 8h Global vulnerability Information Technology / Cybersecurity CRITICAL 10h Global malware Energy and Utilities CRITICAL 11h Global ransomware Multiple sectors CRITICAL 11h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 13h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 14h Global phishing Multiple sectors HIGH 14h Global insider Cybersecurity Services CRITICAL 14h Global ransomware Multiple sectors (U.S. companies) CRITICAL 15h Global data_breach Government CRITICAL 7h Global ransomware Financial Services / Cybersecurity CRITICAL 8h Global vulnerability Information Technology / Cybersecurity CRITICAL 10h Global malware Energy and Utilities CRITICAL 11h Global ransomware Multiple sectors CRITICAL 11h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 13h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 14h Global phishing Multiple sectors HIGH 14h Global insider Cybersecurity Services CRITICAL 14h Global ransomware Multiple sectors (U.S. companies) CRITICAL 15h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2020-36953
MiniTool ShadowMaker 3.2 contains an unquoted service path vulner…
MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that …
HIGH
7.8
Jan 26, 2026
CVE-2020-36957
PDF Complete 3.5.310.2002 contains an unquoted service path vulne…
PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service …
HIGH
7.8
Jan 26, 2026
CVE-2020-36958
Kite 1.2020.1119.0 contains an unquoted service path vulnerabilit…
Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows servic…
HIGH
7.8
Jan 26, 2026
CVE-2020-36959
IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnera…
IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to p…
HIGH
7.8
Jan 26, 2026
CVE-2020-36933
HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerab…
HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service confi…
HIGH
7.8
Jan 25, 2026
CVE-2020-36934
Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service…
Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetw…
HIGH
7.8
Jan 25, 2026
CVE-2020-36935
KMSpico 17.1.0.0 contains an unquoted service path vulnerability …
KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuratio…
HIGH
7.8
Jan 25, 2026
CVE-2020-36936
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vu…
Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service …
HIGH
7.8
Jan 25, 2026
CVE-2020-36937
Microvirt MEMU Play 3.7.0 contains an unquoted service path vulne…
Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows ser…
HIGH
7.8
Jan 25, 2026
CVE-2025-71162
In the Linux kernel, the following vulnerability has been resolve…
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-…
HIGH
7.8
Jan 25, 2026
CVE-2026-0800
The User Submitted Posts – Enable Users to Submit Posts from the …
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is v…
HIGH
7.2
Jan 24, 2026
CVE-2026-0807
The Frontis Blocks plugin for WordPress is vulnerable to Server-S…
The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions…
HIGH
7.2
Jan 24, 2026
CVE-2026-0911
The Hustle – Email Marketing, Lead Generation, Optins, Popups plu…
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to …
HIGH
7.5
Jan 24, 2026
CVE-2026-1257
The Administrative Shortcodes plugin for WordPress is vulnerable …
The Administrative Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all vers…
HIGH
7.5
Jan 24, 2026
CVE-2026-24136
Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109…
Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.…
HIGH
7.5
Jan 24, 2026
CVE-2026-24403
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-24404
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-24407
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-24409
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-24410
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-24411
iccDEV provides libraries and tools for interacting with, manipul…
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color manag…
HIGH
7.1
Jan 24, 2026
CVE-2026-22980
In the Linux kernel, the following vulnerability has been resolve…
In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_en…
HIGH
7.8
Jan 23, 2026
CVE-2026-22984
In the Linux kernel, the following vulnerability has been resolve…
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-…
HIGH
7.1
Jan 23, 2026
CVE-2026-22995
In the Linux kernel, the following vulnerability has been resolve…
In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ubl…
HIGH
7.8
Jan 23, 2026
CVE-2025-11002
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution …
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability a…
HIGH
7.8
Jan 23, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.