Security Radar

CVE-2026-20316 Severity under analysis Ransomware added on 07/29/2026

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-259

Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

CVE-2026-15410 Severity under analysis Ransomware added on 07/14/2026

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · SMA1000 Appliances · CWE-94

SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

CVE-2026-15409 Severity under analysis Ransomware added on 07/14/2026

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliances · CWE-918

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.

CVE-2026-45659 Severity under analysis Ransomware added on 07/01/2026

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint Server · CWE-502

Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.

CVE-2026-35273 Severity under analysis Ransomware added on 06/12/2026

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle · PeopleSoft Enterprise PeopleTools · CWE-306

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.

CVE-2026-0257 Severity under analysis Ransomware added on 05/29/2026

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-565

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

CVE-2026-33825 Severity under analysis Ransomware added on 04/22/2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft · Defender · CWE-1220

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

CVE-2025-60710 Severity under analysis Ransomware added on 04/13/2026

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · CWE-59

Microsoft Windows contains a link following vulnerability that allows for privilege escalation

CVE-2023-21529 Severity under analysis Ransomware added on 04/13/2026

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.

CVE-2026-20131 Severity under analysis Ransomware added on 03/19/2026

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-502

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.

CVE-2025-61884 Severity under analysis Ransomware added on 10/20/2025

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Oracle · E-Business Suite · CWE-918

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.

CVE-2025-61882 Severity under analysis Ransomware added on 10/06/2025

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

CVE-2021-43226 Severity under analysis Ransomware added on 10/06/2025

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

CVE-2025-49706 Severity under analysis Ransomware added on 07/22/2025

Microsoft SharePoint Improper Authentication Vulnerability

Microsoft · SharePoint · CWE-287

Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be chained with CVE-2025-49704. CVE-2025-53771 is a patch bypass for CVE-2025-49706, and the updates for CVE-2025-53771 include more robust protection than those for CVE-2025-49706.

CVE-2025-49704 Severity under analysis Ransomware added on 07/22/2025

Microsoft SharePoint Code Injection Vulnerability

Microsoft · SharePoint · CWE-94

Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

CVE-2025-53770 Severity under analysis Ransomware added on 07/20/2025

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than those for CVE-2025-49704.

CVE-2025-5777 Severity under analysis Ransomware added on 07/10/2025

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Citrix · NetScaler ADC and Gateway · CWE-125

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.

CVE-2019-6693 Severity under analysis Ransomware added on 06/25/2025

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Fortinet · FortiOS · CWE-798

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.

CVE-2025-42999 Severity under analysis Ransomware added on 05/15/2025

SAP NetWeaver Deserialization Vulnerability

SAP · NetWeaver · CWE-502

SAP NetWeaver Visual Composer Metadata Uploader contains a deserialization vulnerability that allows a privileged attacker to compromise the confidentiality, integrity, and availability of the host system by deserializing untrusted or malicious content.

CVE-2025-31324 Severity under analysis Ransomware added on 04/29/2025

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver · CWE-434

SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability that allows an unauthenticated agent to upload potentially malicious executable binaries.

CVE-2025-29824 Severity under analysis Ransomware added on 04/08/2025

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft · Windows · CWE-416

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

CVE-2025-22457 Severity under analysis Ransomware added on 04/04/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

CVE-2025-24472 Severity under analysis Ransomware added on 03/18/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · CWE-288

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.

CVE-2025-26633 Severity under analysis Ransomware added on 03/11/2025

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Microsoft · Windows · CWE-707

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.