CVE-2026-0320 - A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated ad

CVE-2026-0318 - A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Network

CVE-2026-0316 - A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a m

CVE-2026-0321 - Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated at

CVE-2026-0322 - A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS

CVE-2026-102023 - A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authe

CVE-2026-101936 - A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series

CVE-2026-83679 - Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privile

CVE-2026-41508 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 unt

CVE-2026-41504 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-41510 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-104774 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-107835 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1

CVE-2026-107834 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-107833 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-107826 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-107825 - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt

CVE-2026-92542 - The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic V

CVE-2026-102162 - On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at le

CVE-2026-96825 - Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

CVE-2026-82932 - mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listenin

CVE-2026-100871 - Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identif

CVE-2026-97730 - In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulne

CVE-2026-76980 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-76979 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-76978 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to

CVE-2026-84791 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-84789 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-84787 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to

CVE-2026-14913 - ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to

CVE-2026-7527 - The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Red

CVE-2026-59163 - Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in

CVE-2026-86796 - The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooC

CVE-2026-20336 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20335 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20334 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20333 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20332 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20290 - A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firew

CVE-2026-20250 - A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security A

CVE-2026-20249 - A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv

CVE-2026-20248 - A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Applia

CVE-2026-20222 - A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (AS

CVE-2026-20154 - A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewa

CVE-2026-20135 - A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software

CVE-2026-20121 - A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco S

CVE-2026-20120 - A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco S

CVE-2026-20330 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20329 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20324 - A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Managem

CVE-2026-20242 - A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (

CVE-2026-20331 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-52827 - Kimai is an open-source time tracking application. Prior to 2.59.0, the KIMAI_SESSION cookie issued

CVE-2026-15634 - IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vul

CVE-2026-15396 - IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vul

CVE-2026-90651 - Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify u

CVE-2026-81754 - The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPres

CVE-2026-65639 - OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote

CVE-2026-65638 - Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated re

CVE-2026-0310 - A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® so

CVE-2026-0308 - A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a m

CVE-2026-53581 - OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core

CVE-2026-78560 - The Okta Access Gateway includes an optional pass-through authentication source that accepts user id

CVE-2026-70568 - Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to ele

CVE-2026-68831 - Files or directories accessible to external parties in Windows Defender Firewall Service allows an a

CVE-2026-77654 - Improper Privilege Management vulnerability in Horizon Security Analyzer (formerly AlgoSec Firewall

CVE-2026-67402 - An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs t

CVE-2026-56128 - pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules

CVE-2026-56127 - pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Ed

CVE-2026-80515 - In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects ev

CVE-2026-81892 - EasyAdmin is a fast and modern admin generator for Symfony applications. From 4.0.0 until 4.29.16 an

CVE-2026-51720 - Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-51702 - Incorrect access control in the setIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 a

CVE-2026-54085 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-54083 - Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints an

CVE-2026-48106 - Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterpr

CVE-2026-48105 - Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterpr

CVE-2026-48050 - Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go

CVE-2026-47735 - Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-

CVE-2026-75514 - BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklis

CVE-2026-67189 - pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnera

CVE-2026-19982 - A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability af

CVE-2026-19846 - A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function s

CVE-2026-19815 - A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is th

CVE-2026-19814 - A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setM

CVE-2026-19813 - A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts th

CVE-2026-19811 - A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element i

CVE-2026-61936 - Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a

CVE-2026-20349 - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security App

CVE-2026-20028 - A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authentica

CVE-2026-0516 - A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow

CVE-2026-49131 - OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticate

CVE-2026-23985 - A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.

CVE-2026-44108 - Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematur

CVE-2026-44098 - This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via

CVE-2026-44090 - Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which

CVE-2026-11870 - The WP Ghost (Hide My WP Ghost) WordPress plugin before 7.0.05 does not verify that client IP infor

CVE-2026-20316 - A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could

CVE-2026-65437 - Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.

CVE-2026-47724 - nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to v

CVE-2026-62144 - An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security

CVE-2026-46415 - The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate request