| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2022-20775
Cisco SD-WAN Path Traversal Vulnerability |
Cisco · SD-WAN | Feb 25, 2026 | Feb 27, 2026 | 12.0% | — |
| CVE-2026-20127
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability |
Cisco · Catalyst SD-WAN Controller and Manager | Feb 25, 2026 | Feb 27, 2026 | 87.6% | — |
| CVE-2026-25108
Soliton Systems K.K FileZen OS Command Injection Vulnerability |
Soliton Systems K.K · FileZen | Feb 24, 2026 | Mar 17, 2026 | 5.2% | — |
| CVE-2025-49113
RoundCube Webmail Deserialization of Untrusted Data Vulnerability |
Roundcube · Webmail | Feb 20, 2026 | Mar 13, 2026 | 99.6% | — |
| CVE-2025-68461
RoundCube Webmail Cross-site Scripting Vulnerability |
Roundcube · Webmail | Feb 20, 2026 | Mar 13, 2026 | 27.4% | — |
| CVE-2021-22175
GitLab Server-Side Request Forgery (SSRF) Vulnerability |
GitLab · GitLab | Feb 18, 2026 | Mar 11, 2026 | 53.4% | — |
| CVE-2026-22769
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials V… |
Dell · RecoverPoint for Virtual Machines (RP4VMs) | Feb 18, 2026 | Feb 21, 2026 | 13.5% | — |
| CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability |
Microsoft · Windows | Feb 17, 2026 | Mar 10, 2026 | 76.6% | — |
| CVE-2020-7796
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerabil… |
Synacor · Zimbra Collaboration Suite | Feb 17, 2026 | Mar 10, 2026 | 93.6% | — |
| CVE-2024-7694
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous T… |
TeamT5 · ThreatSonar Anti-Ransomware | Feb 17, 2026 | Mar 10, 2026 | 1.8% | — |
| CVE-2026-2441
Google Chromium CSS Use-After-Free Vulnerability |
Google · Chromium | Feb 17, 2026 | Mar 10, 2026 | 54.5% | — |
| CVE-2026-1731 Ransomware
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command I… |
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA) | Feb 13, 2026 | Feb 16, 2026 | 93.9% | — |
| CVE-2024-43468
Microsoft Configuration Manager SQL Injection Vulnerability |
Microsoft · Configuration Manager | Feb 12, 2026 | Mar 5, 2026 | 81.0% | — |
| CVE-2025-15556
Notepad++ Download of Code Without Integrity Check Vulnerability |
Notepad++ · Notepad++ | Feb 12, 2026 | Mar 5, 2026 | 1.7% | — |
| CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability |
SolarWinds · Web Help Desk | Feb 12, 2026 | Feb 15, 2026 | 73.6% | — |
| CVE-2026-20700
Apple Multiple Buffer Overflow Vulnerability |
Apple · Multiple Products | Feb 12, 2026 | Mar 5, 2026 | 1.7% | — |
| CVE-2026-21510
Microsoft Windows Shell Protection Mechanism Failure Vulnerability |
Microsoft · Windows | Feb 10, 2026 | Mar 3, 2026 | 61.2% | — |
| CVE-2026-21513
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability |
Microsoft · Windows | Feb 10, 2026 | Mar 3, 2026 | 15.9% | — |
| CVE-2026-21514
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulne… |
Microsoft · Office | Feb 10, 2026 | Mar 3, 2026 | 1.6% | — |
| CVE-2026-21519
Microsoft Windows Type Confusion Vulnerability |
Microsoft · Windows | Feb 10, 2026 | Mar 3, 2026 | 2.6% | — |
| CVE-2026-21525
Microsoft Windows NULL Pointer Dereference Vulnerability |
Microsoft · Windows | Feb 10, 2026 | Mar 3, 2026 | 5.0% | — |
| CVE-2026-21533
Microsoft Windows Improper Privilege Management Vulnerability |
Microsoft · Windows | Feb 10, 2026 | Mar 3, 2026 | 4.3% | — |
| CVE-2025-11953
React Native Community CLI OS Command Injection Vulnerability |
React Native Community · CLI | Feb 5, 2026 | Feb 26, 2026 | 94.0% | — |
| CVE-2026-24423 Ransomware
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerabi… |
SmarterTools · SmarterMail | Feb 5, 2026 | Feb 26, 2026 | 88.2% | — |
| CVE-2019-19006
Sangoma FreePBX Improper Authentication Vulnerability |
Sangoma · FreePBX | Feb 3, 2026 | Feb 24, 2026 | 54.9% | — |
| CVE-2021-39935
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vul… |
GitLab · Community and Enterprise Editions | Feb 3, 2026 | Feb 24, 2026 | 36.1% | — |
| CVE-2025-40551
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability |
SolarWinds · Web Help Desk | Feb 3, 2026 | Feb 6, 2026 | 84.2% | — |
| CVE-2025-64328
Sangoma FreePBX OS Command Injection Vulnerability |
Sangoma · FreePBX | Feb 3, 2026 | Feb 24, 2026 | 84.6% | — |
| CVE-2026-1281
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Jan 29, 2026 | Feb 1, 2026 | 98.7% | — |
| CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Cha… |
Fortinet · Multiple Products | Jan 27, 2026 | Jan 30, 2026 | 86.6% | — |
| CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability |
Linux · Kernel | Jan 26, 2026 | Feb 16, 2026 | 14.7% | — |
| CVE-2025-52691 Ransomware
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulner… |
SmarterTools · SmarterMail | Jan 26, 2026 | Feb 16, 2026 | 85.7% | — |
| CVE-2026-21509
Microsoft Office Security Feature Bypass Vulnerability |
Microsoft · Office | Jan 26, 2026 | Feb 16, 2026 | 70.8% | — |
| CVE-2026-23760 Ransomware
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Chann… |
SmarterTools · SmarterMail | Jan 26, 2026 | Feb 16, 2026 | 96.4% | — |
| CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability |
GNU · InetUtils | Jan 26, 2026 | Feb 16, 2026 | 99.0% | — |
| CVE-2024-37079
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability |
Broadcom · VMware vCenter Server | Jan 23, 2026 | Feb 13, 2026 | 22.4% | — |
| CVE-2025-31125
Vite Vitejs Improper Access Control Vulnerability |
Vite · Vitejs | Jan 22, 2026 | Feb 12, 2026 | 74.9% | — |
| CVE-2025-34026
Versa Concerto Improper Authentication Vulnerability |
Versa · Concerto | Jan 22, 2026 | Feb 12, 2026 | 81.8% | — |
| CVE-2025-54313
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability |
Prettier · eslint-config-prettier | Jan 22, 2026 | Feb 12, 2026 | 5.1% | — |
| CVE-2025-68645
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Jan 22, 2026 | Feb 12, 2026 | 50.6% | — |
| CVE-2026-20045
Cisco Unified Communications Products Code Injection Vulnerability |
Cisco · Unified Communications Manager | Jan 21, 2026 | Feb 11, 2026 | 4.5% | — |
| CVE-2026-20805
Microsoft Windows Information Disclosure Vulnerability |
Microsoft · Windows | Jan 13, 2026 | Feb 3, 2026 | 7.5% | — |
| CVE-2025-8110
Gogs Path Traversal Vulnerability |
Gogs · Gogs | Jan 12, 2026 | Feb 2, 2026 | 80.3% | — |
| CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability |
Microsoft · Office | Jan 7, 2026 | Jan 28, 2026 | 67.3% | — |
| CVE-2025-37164
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability |
Hewlett Packard Enterprise (HPE) · OneView | Jan 7, 2026 | Jan 28, 2026 | 90.2% | — |
| CVE-2025-14847
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency … |
MongoDB · MongoDB and MongoDB Server | Dec 29, 2025 | Jan 19, 2026 | 83.2% | — |
| CVE-2023-52163
Digiever DS-2105 Pro Missing Authorization Vulnerability |
Digiever · DS-2105 Pro | Dec 22, 2025 | Jan 12, 2026 | 97.1% | — |
| CVE-2025-14733 Ransomware
WatchGuard Firebox Out of Bounds Write Vulnerability |
WatchGuard · Firebox | Dec 19, 2025 | Dec 26, 2025 | 29.4% | 1 last Nov 10 |
| CVE-2025-20393
Cisco Multiple Products Improper Input Validation Vulnerability |
Cisco · Multiple Products | Dec 17, 2025 | Dec 24, 2025 | 32.4% | — |
| CVE-2025-40602
SonicWall SMA1000 Missing Authorization Vulnerability |
SonicWall · SMA1000 appliance | Dec 17, 2025 | Dec 24, 2025 | 2.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.