May 2026
Published in May 2026
- unknownLink following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOSjvn
- unknownJenkins Security Advisory 2026-05-27jenkins
- known exploitedpublic exploitCVE-2008-4250
- criticalGitLab Patch Release: 19.0.1, 18.11.4, 18.10.7gitlab
- unknownGitLab Patch Release: 18.9.8, 18.8.10, 18.7.7, 18.6.8, 18.5.7gitlab
- known exploitedCVE-2009-1537
- criticalGitLab Patch Release: 19.0.1, 18.11.4, 18.10.7gitlab
- unknownGitLab Patch Release: 18.9.8, 18.8.10, 18.7.7, 18.6.8, 18.5.7gitlab
- known exploitedpublic exploitCVE-2009-3459
- criticalexploitedCVE-2026-48027: Nx Console Embedded Malicious Code Vulnerabilitycisa-kev
- criticalexploitedCVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2010-0249
- unknownexploitedSecurity Alert: [Updated] Alert Regarding Multiple Vulnerabilities in Trend Micro Products Including TrendAI A…jpcert
- criticalexploitedCVE-2025-34291: Langflow Origin Validation Error Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2010-0806
- criticalexploitedCVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerabilitycisa-kev
- criticalexploitedDrupal core - Highly critical - SQL injection - SA-CORE-2026-004drupal
- known exploitedpublic exploitCVE-2025-20333
- mediumCisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerabilitycisco-psirt
- mediumCisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerabilitycisco-psirt
- known exploitedpublic exploitCVE-2025-20362
- criticalCisco Secure Workload Unauthorized API Access Vulnerabilitycisco-psirt
- mediumCisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerabilitycisco-psirt
- known exploitedpublic exploitCVE-2025-34291
- criticalexploitedCVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerabilitycisa-kev
- criticalexploitedCVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-0257
- criticalexploitedCVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerabilitycisa-kev
- criticalexploitedCVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-0300
- unknownexploitedContinued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Sec…cisco-psirt
- criticalexploitedCVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-20182
- unknownexploited[Update] Vulnerability in Microsoft Exchange Server (May 15, 2026)cert-fr-alerte
- criticalCisco Catalyst SD-WAN Manager Vulnerabilitiescisco-psirt
- known exploitedpublic exploitCVE-2026-31431
- unknownCisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisorycisco-psirt
- criticalexploitedCVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2026-34926
- unknownexploitedLinux Kernel Vulnerability copy.fail - CVE-2026-31431fortinet
- unknownSecurity Alert: Microsoft Releases May 2026 Security Updatesjpcert
- known exploitedpublic exploitCVE-2026-41091
- criticalGitLab Patch Release: 18.11.3, 18.10.6, 18.9.7gitlab
- criticalGitLab Patch Release: 18.11.3, 18.10.6, 18.9.7gitlab
- known exploitedpublic exploitCVE-2026-42208
- unknownUser controlled SQL commandsfortinet
- unknownSQL command injection in administrative portalfortinet
- known exploitedpublic exploitCVE-2026-42897
- unknownOut-of-bounds access in CAPWAP daemonfortinet
- unknownOTP Disclosure via Exported TokenContentProviderfortinet
- known exploitedpublic exploitCVE-2026-45321
- unknownOS command injection in CLIfortinet
- unknownIncorrect global authorizationfortinet
- known exploitedpublic exploitCVE-2026-45498
- unknownImproper access control on API endpointsfortinet
- unknownHardcoded Encryption Key Used for VPN Saved Passwordsfortinet
- known exploitedCVE-2026-48027
- unknownDoS due to unsafe function in signal handlerfortinet
- unknownCommand injection in CLIfortinet
- known exploitedpublic exploitCVE-2026-48172
- unknownArbitrary log file read in administrative interfacefortinet
- criticalexploitedCVE-2026-42208: BerriAI LiteLLM SQL Injection Vulnerabilitycisa-kev
- known exploitedCVE-2026-6973
- mediumCisco Enterprise Chat and Email Lite Agent File Upload Vulnerabilitycisco-psirt
- highCisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerabilitycisco-psirt
- known exploitedCVE-2026-8398
- highCisco IoT Field Network Director Vulnerabilitiescisco-psirt
- mediumCisco Slido Insecure Direct Object Reference Vulnerabilitycisco-psirt
- known exploitedpublic exploitCVE-2026-9082
- mediumCisco Prime Infrastructure Information Disclosure Vulnerabilitycisco-psirt
- mediumCisco Identity Services Engine Authentication Bypass Vulnerabilitiescisco-psirt
- highCisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilitiescisco-psirt
- criticalexploited2026-006: Critical Vulnerability in PAN-OScert-eu
- criticalexploitedCVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerabilitycisa-kev