Security Radar

CVE-2026-59310 Severity under analysis Ransomware added on 08/18/2026

Broadcom VMware vCenter Path Traversal Vulnerability

Broadcom · VMware vCenter · CWE-22

Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.

CVE-2026-63077 Severity under analysis Ransomware added on 08/05/2026

JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

JetBrains · TeamCity · CWE-502

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

CVE-2026-20316 Severity under analysis Ransomware added on 07/29/2026

Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-259

Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

CVE-2026-15410 Severity under analysis Ransomware added on 07/14/2026

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall · SMA1000 Appliances · CWE-94

SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

CVE-2026-15409 Severity under analysis Ransomware added on 07/14/2026

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall · SMA1000 Appliances · CWE-918

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.

CVE-2026-45659 Severity under analysis Ransomware added on 07/01/2026

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

Microsoft · SharePoint Server · CWE-502

Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.

CVE-2026-12569 Severity under analysis Ransomware added on 06/25/2026

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC · Windchill and FlexPLM · CWE-20, CWE-502

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

CVE-2026-35273 Severity under analysis Ransomware added on 06/12/2026

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

Oracle · PeopleSoft Enterprise PeopleTools · CWE-306

Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools.

CVE-2026-50751 Severity under analysis Ransomware added on 06/08/2026

Check Point Security Gateway Improper Authentication Vulnerability

Check Point · Security Gateway · CWE-287

Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

CVE-2026-0257 Severity under analysis Ransomware added on 05/29/2026

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-565

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorized VPN connection.

CVE-2026-48027 Severity under analysis Ransomware added on 05/27/2026

Nx Console Embedded Malicious Code Vulnerability

Nx · Nx Console · CWE-506

Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.

CVE-2026-45321 Severity under analysis Ransomware added on 05/27/2026

TanStack Unspecified Vulnerability

TanStack · TanStack

TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.

CVE-2026-41940 Severity under analysis Ransomware added on 04/30/2026

WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

WebPros · cPanel & WHM and WP2 (WordPress Squared) · CWE-306

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

CVE-2024-1708 Severity under analysis Ransomware added on 04/28/2026

ConnectWise ScreenConnect Path Traversal Vulnerability

ConnectWise · ScreenConnect · CWE-22

ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and critical systems.

CVE-2024-57728 Severity under analysis Ransomware added on 04/24/2026

SimpleHelp Path Traversal Vulnerability

SimpleHelp · SimpleHelp · CWE-22

SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

CVE-2024-57726 Severity under analysis Ransomware added on 04/24/2026

SimpleHelp Missing Authorization Vulnerability

SimpleHelp · SimpleHelp · CWE-862

SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

CVE-2026-33825 Severity under analysis Ransomware added on 04/22/2026

Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft · Defender · CWE-1220

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

CVE-2024-27199 Severity under analysis Ransomware added on 04/20/2026

JetBrains TeamCity Relative Path Traversal Vulnerability

JetBrains · TeamCity · CWE-23

JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.

CVE-2023-27351 Severity under analysis Ransomware added on 04/20/2026

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut · NG/MF · CWE-287

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class.

CVE-2025-60710 Severity under analysis Ransomware added on 04/13/2026

Microsoft Windows Link Following Vulnerability

Microsoft · Windows · CWE-59

Microsoft Windows contains a link following vulnerability that allows for privilege escalation

CVE-2023-21529 Severity under analysis Ransomware added on 04/13/2026

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.

CVE-2026-20131 Severity under analysis Ransomware added on 03/19/2026

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

Cisco · Secure Firewall Management Center (FMC) · CWE-502

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deserialization of untrusted data vulnerability in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.

CVE-2025-26399 Severity under analysis Ransomware added on 03/09/2026

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds · Web Help Desk · CWE-502

SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.

CVE-2026-1731 Severity under analysis Ransomware added on 02/13/2026

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) · CWE-78

BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.