CVE Repository
All vulnerabilities tracked across every issue.
PaperCut NG and PaperCut MF (all unpatched versions)
PaperCut NG and MF are print management platforms used by universities, corporations, and governments to control and monitor printing across Canon, Epson, Xerox, Brother, and other devices.
Evooo1Bot Linux Botnet (Multiple Edge Devices)
Evooo1Bot is a new botnet — a network of hijacked devices secretly controlled by an attacker — built on leaked source code from the notorious Mirai malware. Researchers at Fortinet's FortiGuard Labs identified it after seeing coordinated attacks on edge devices across multiple regions since July 2026, as reported by Infosecurity Magazine.
Connective eID Browser Extension (Belgium, all versions prior to late July 2026 patch)
A browser extension used by over two million people in Belgium to authenticate their identity and sign documents digitally with their national electronic ID card. It is used by eight of Belgium's ten largest banks and more than 60 government agencies.
Atlassian Rovo (RovoBlast, parameter-to-prompt injection)
An enterprise AI assistant embedded across Jira, Confluence, and Bitbucket that can autonomously conduct multi-step research tasks and interact with third-party tools including Slack, Microsoft 365, and Google Workspace.
Microsoft Active Directory Certificate Services (Windows Server 2012 through 2025)
Microsoft's built-in system for issuing digital certificates inside a corporate Windows network — used to prove that computers and users are who they claim to be.
Windmill (versions prior to 1.603.3)
Windmill is an open-source developer platform that lets teams build and run automated scripts, workflows, and internal tools through a web interface.
7-Zip (versions below 26.02)
7-Zip is a free, widely used file compression and extraction tool for Windows that handles formats including ZIP, RAR, and XZ archives.
CMS Platforms (globally targeted, unpatched installs)
A content management system (CMS) is software that powers websites, letting users publish and manage content without writing code directly. WordPress, Drupal, and Joomla are common examples.
Windows Defender (Microsoft Malware Protection Engine versions prior to 1.1.26060.3008)
Microsoft's built-in antivirus and security tool included with every modern Windows installation.
Linux Kernel (versions with futex code dating to 2011)
The kernel is the core of the Linux operating system — the layer that manages memory, processes, and hardware on behalf of every program running on the machine.
ClamAV (versions affected across multiple release branches)
ClamAV is a free, open-source antivirus scanning engine maintained by Cisco's Talos group, widely used inside email gateways, file upload systems, and security tooling at organisations of all sizes.
SimpleHelp RMM (versions prior to the patched release)
SimpleHelp is a remote support and monitoring tool used by IT teams and managed service providers to access and manage computers remotely.
FatFs (no upstream fix available for this CVE)
FatFs is a tiny open-source library that lets embedded devices — security cameras, drones, hardware crypto wallets, industrial controllers — read and write USB drives and SD cards using the FAT and exFAT formats found on most removable storage.
Citrix NetScaler ADC and NetScaler Gateway (versions prior to 14.1-72.61 and 13.1-63.18)
Citrix NetScaler products are network appliances used by organisations to manage, secure, and accelerate traffic flowing into their applications and services.
Cisco Unified Communications Manager (active exploitation, patch version unconfirmed)
Cisco Unified Communications Manager (Unified CM) is enterprise software that manages phone calls, video conferencing, and messaging for large organisations — essentially the switchboard that ties all internal communications together.
Amazon Q Developer (versions before the May 12 patch)
Amazon Q Developer is an AI-powered coding assistant, built as a Visual Studio Code extension, that offers code suggestions, automated refactoring, and the ability to connect to external tools and services.
FFmpeg / libavcodec MagicYUV decoder (all versions before 8.1.2)
FFmpeg is an open-source library used by hundreds of applications — including Kodi, OBS Studio, Jellyfin, Nextcloud, PhotoPrism, and messaging platforms like Slack and Telegram — to process, decode, and encode video files.
Squid Proxy (versions before 7.6 / before patch merged in Squid 8)
Squid is a widely used open-source web proxy that organisations run to cache web traffic, reduce bandwidth, and speed up browsing for everyone sharing that network connection.
Palo Alto PAN-OS GlobalProtect (actively exploited)
PAN-OS is the operating system running Palo Alto Networks firewalls and network security appliances — the software layer that decides what traffic enters and leaves an organisation's network.
Google Chrome (versions below 149.0.7827.102)
The world's most widely used web browser, built by Google and installed on most Windows, Mac, and Linux computers.
Cisco Catalyst SD-WAN Manager (unpatched)
A network management platform that lets organisations centrally control and monitor their wide-area network (the system connecting offices, branches, and cloud services together).