https://exploit-radar.com/en/flux/categories/pare-feu-vpn.xml Exploit Radar: Firewalls, VPNs and remote access The latest additions to CISA’s catalog of exploited vulnerabilities in the “Firewalls, VPNs and remote access” category (indicative classification). 2026-09-22T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-85102/ CVE-2026-85102 — Check Point Quantum Security Gateway 2026-09-22T00:00:00Z Apply the patches or mitigations from Check Point; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-93616/ CVE-2026-93616 — Check Point Security Management / SmartConsole 2026-09-22T00:00:00Z Apply the patches or mitigations from Check Point; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-20079/ CVE-2026-20079 — Cisco Secure Firewall Management Center (FMC) 2026-09-09T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2026. https://exploit-radar.com/en/cve/CVE-2025-25249/ CVE-2025-25249 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-09-09T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-83548/ CVE-2026-83548 — SonicWall SMA 1000 2026-09-02T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-83549/ CVE-2026-83549 — SonicWall SMA 1000 2026-09-02T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-20349/ CVE-2026-20349 — Cisco ASA / Firepower (FTD) 2026-08-11T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 11, 2026. https://exploit-radar.com/en/cve/CVE-2026-20316/ CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) 2026-07-29T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2026. https://exploit-radar.com/en/cve/CVE-2025-68686/ CVE-2025-68686 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-07-27T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on July 27, 2026. https://exploit-radar.com/en/cve/CVE-2026-16232/ CVE-2026-16232 — Check Point Security Management / SmartConsole 2026-07-22T00:00:00Z Apply the patches or mitigations from Check Point; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-15409/ CVE-2026-15409 — SonicWall SMA 1000 2026-07-14T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-15410/ CVE-2026-15410 — SonicWall SMA 1000 2026-07-14T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-50751/ CVE-2026-50751 — Check Point Quantum Security Gateway 2026-06-08T00:00:00Z Apply the patches or mitigations from Check Point; if none are available, stop using the product. For cloud services, follow the guidance from Check Point. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-0257/ CVE-2026-0257 — Palo Alto Networks PAN-OS / GlobalProtect 2026-05-29T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. For cloud services, follow the guidance from Palo Alto Networks. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 29, 2026. https://exploit-radar.com/en/cve/CVE-2026-0300/ CVE-2026-0300 — Palo Alto Networks PAN-OS / GlobalProtect 2026-05-06T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. For cloud services, follow the guidance from Palo Alto Networks. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 6, 2026. https://exploit-radar.com/en/cve/CVE-2026-20131/ CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) 2026-03-19T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 19, 2026. https://exploit-radar.com/en/cve/CVE-2026-24858/ CVE-2026-24858 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-01-27T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on January 27, 2026. https://exploit-radar.com/en/cve/CVE-2025-14733/ CVE-2025-14733 — WatchGuard Firebox / XTM (Fireware) 2025-12-19T00:00:00Z Apply the patches or mitigations from WatchGuard; if none are available, stop using the product. For cloud services, follow the guidance from WatchGuard. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on December 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-40602/ CVE-2025-40602 — SonicWall SMA 1000 2025-12-17T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 17, 2025. https://exploit-radar.com/en/cve/CVE-2025-59718/ CVE-2025-59718 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-12-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 16, 2025. https://exploit-radar.com/en/cve/CVE-2025-66644/ CVE-2025-66644 — Array Networks ArrayOS AG / vxAG 2025-12-08T00:00:00Z Apply the patches or mitigations from Array Networks; if none are available, stop using the product. For cloud services, follow the guidance from Array Networks. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 8, 2025. https://exploit-radar.com/en/cve/CVE-2025-9242/ CVE-2025-9242 — WatchGuard Firebox / XTM (Fireware) 2025-11-12T00:00:00Z Apply the patches or mitigations from WatchGuard; if none are available, stop using the product. For cloud services, follow the guidance from WatchGuard. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2025. https://exploit-radar.com/en/cve/CVE-2015-7755/ CVE-2015-7755 — Juniper ScreenOS (NetScreen) 2025-10-02T00:00:00Z Apply the patches or mitigations from Juniper; if none are available, stop using the product. For cloud services, follow the guidance from Juniper. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 2, 2025. https://exploit-radar.com/en/cve/CVE-2025-20333/ CVE-2025-20333 — Cisco ASA / Firepower (FTD) 2025-09-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-20362/ CVE-2025-20362 — Cisco ASA / Firepower (FTD) 2025-09-25T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 1 day. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2025. https://exploit-radar.com/en/cve/CVE-2019-6693/ CVE-2019-6693 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-06-25T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2025. https://exploit-radar.com/en/cve/CVE-2023-44221/ CVE-2023-44221 — SonicWall SMA 100 (ex-SRA) 2025-05-01T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2025. https://exploit-radar.com/en/cve/CVE-2021-20035/ CVE-2021-20035 — SonicWall SMA 100 (ex-SRA) 2025-04-16T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 16, 2025. https://exploit-radar.com/en/cve/CVE-2025-22457/ CVE-2025-22457 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2025-04-04T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 4, 2025. https://exploit-radar.com/en/cve/CVE-2025-24472/ CVE-2025-24472 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-03-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-0111/ CVE-2025-0111 — Palo Alto Networks PAN-OS / GlobalProtect 2025-02-20T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 20, 2025. https://exploit-radar.com/en/cve/CVE-2024-53704/ CVE-2024-53704 — SonicWall SonicOS 2025-02-18T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-0108/ CVE-2025-0108 — Palo Alto Networks PAN-OS / GlobalProtect 2025-02-18T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 18, 2025. https://exploit-radar.com/en/cve/CVE-2020-15069/ CVE-2020-15069 — Sophos Firewall (SFOS, ex-XG) 2025-02-06T00:00:00Z Apply the patches or mitigations from Sophos; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 6, 2025. https://exploit-radar.com/en/cve/CVE-2020-29574/ CVE-2020-29574 — Sophos CyberoamOS (Cyberoam) 2025-02-06T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. Used in ransomware campaigns. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on February 6, 2025. https://exploit-radar.com/en/cve/CVE-2025-23006/ CVE-2025-23006 — SonicWall SMA 1000 2025-01-24T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 24, 2025. https://exploit-radar.com/en/cve/CVE-2024-55591/ CVE-2024-55591 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-01-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-0282/ CVE-2025-0282 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2025-01-08T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 8, 2025. https://exploit-radar.com/en/cve/CVE-2024-3393/ CVE-2024-3393 — Palo Alto Networks PAN-OS / GlobalProtect 2024-12-30T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 30, 2024. https://exploit-radar.com/en/cve/CVE-2024-11667/ CVE-2024-11667 — Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG) 2024-12-03T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on December 3, 2024. https://exploit-radar.com/en/cve/CVE-2023-28461/ CVE-2023-28461 — Array Networks ArrayOS AG / vxAG 2024-11-25T00:00:00Z Apply the patches or mitigations from Array Networks; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 25, 2024. https://exploit-radar.com/en/cve/CVE-2024-0012/ CVE-2024-0012 — Palo Alto Networks PAN-OS / GlobalProtect 2024-11-18T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-9474/ CVE-2024-9474 — Palo Alto Networks PAN-OS / GlobalProtect 2024-11-18T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-9465/ CVE-2024-9465 — Palo Alto Networks Expedition 2024-11-14T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 14, 2024. https://exploit-radar.com/en/cve/CVE-2024-9463/ CVE-2024-9463 — Palo Alto Networks Expedition 2024-11-14T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 14, 2024. https://exploit-radar.com/en/cve/CVE-2014-2120/ CVE-2014-2120 — Cisco ASA / Firepower (FTD) 2024-11-12T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 12, 2024. https://exploit-radar.com/en/cve/CVE-2024-5910/ CVE-2024-5910 — Palo Alto Networks Expedition 2024-11-07T00:00:00Z Apply the patches or mitigations from Palo Alto Networks; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 7, 2024. https://exploit-radar.com/en/cve/CVE-2024-20481/ CVE-2024-20481 — Cisco ASA / Firepower (FTD) 2024-10-24T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2024. https://exploit-radar.com/en/cve/CVE-2024-47575/ CVE-2024-47575 — Fortinet FortiManager / FortiAnalyzer 2024-10-23T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 23, 2024. https://exploit-radar.com/en/cve/CVE-2024-23113/ CVE-2024-23113 — Fortinet FortiOS / FortiProxy (FortiGate) 2024-10-09T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024.