Network and edge
Firewalls, VPNs and remote access
Devices that filter traffic and provide remote access to the network: attackers’ first target, because they are exposed to the internet.
For example: FortiGate, PAN-OS, Cisco ASA, SonicWall, Ivanti Connect Secure.
-
22 vulnerabilities added in the last 12 months
-
111 exploited vulnerabilities in the catalog, in total
-
4 added in the last 30 days
Pace of additions
| Period | Vulnerabilities added |
|---|---|
| Sep 9, 2025 to Oct 8, 2025 | 3 |
| Oct 9, 2025 to Nov 7, 2025 | 0 |
| Nov 8, 2025 to Dec 7, 2025 | 1 |
| Dec 8, 2025 to Jan 6, 2026 | 4 |
| Jan 7, 2026 to Feb 5, 2026 | 1 |
| Feb 6, 2026 to Mar 7, 2026 | 0 |
| Mar 8, 2026 to Apr 6, 2026 | 1 |
| Apr 7, 2026 to May 6, 2026 | 1 |
| May 7, 2026 to Jun 5, 2026 | 1 |
| Jun 6, 2026 to Jul 5, 2026 | 1 |
| Jul 6, 2026 to Aug 4, 2026 | 5 |
| Aug 5, 2026 to Sep 3, 2026 | 3 |
| Sep 4, 2026 to Oct 3, 2026 (in progress) | 4 |
Affected brands
In alphabetical order, with their number of vulnerabilities in this category.
- Array Networks 2 vulnerabilities · 1 in the last 12 months
- Check Point 5 vulnerabilities · 4 in the last 12 months
- Cisco 19 vulnerabilities · 4 in the last 12 months
- FatPipe 1 vulnerability
- Fortinet 21 vulnerabilities · 4 in the last 12 months
- Ivanti 14 vulnerabilities
- Juniper 1 vulnerability
- Microsoft 1 vulnerability
- Palo Alto Networks 15 vulnerabilities · 2 in the last 12 months
- SonicWall 16 vulnerabilities · 5 in the last 12 months
- Sophos 6 vulnerabilities
- WatchGuard 4 vulnerabilities · 2 in the last 12 months
- Zyxel 6 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
See also
- Load balancers and access gateways (ADC) 31 vulnerabilities
- Remote monitoring and management (RMM) 20 vulnerabilities
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.
- Rank 1
Check Point Quantum Security GatewayCVE-2026-85102
Check Point Multiple Products Improper Certificate Validation Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 22, 2026
- Rank 2
Check Point Security Management / SmartConsoleCVE-2026-93616
Check Point Multiple Products Path Traversal Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 22, 2026
- Rank 3
Cisco Secure Firewall Management Center (FMC)CVE-2026-20079
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 10.0critical
Added Sep 9, 2026
- Rank 4
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 9, 2026
- Rank 5
SonicWall SMA 1000CVE-2026-83548
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Active CERT-FR alertHunt for compromise (CISA)
CVSS severity 10.0critical
Added Sep 2, 2026
- Rank 6
SonicWall SMA 1000CVE-2026-15409
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Hunt for compromise (CISA)Ransomware
CVSS severity 10.0critical
Added Jul 14, 2026
- Rank 7
Cisco Secure Firewall Management Center (FMC)CVE-2026-20131
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Ransomware
CVSS severity 10.0critical
Added Mar 19, 2026
- Rank 8
Check Point Security Management / SmartConsoleCVE-2026-16232
Check Point SmartConsole Improper Authentication Vulnerability
Hunt for compromise (CISA)
CVSS severity 9.8critical
Added Jul 22, 2026
- Rank 9
Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0300
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
CVSS severity 9.8critical
Added May 6, 2026
- Rank 10
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVSS severity 9.8critical
Added Jan 27, 2026
Show 99 more vulnerabilities
- Rank 11
WatchGuard Firebox / XTM (Fireware)CVE-2025-14733
WatchGuard Firebox Out of Bounds Write Vulnerability
Ransomware
CVSS severity 9.8critical
Added Dec 19, 2025
- Rank 12
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVSS severity 9.8critical
Added Dec 16, 2025
- Rank 13
Array Networks ArrayOS AG / vxAGCVE-2025-66644
Array Networks ArrayOS AG OS Command Injection Vulnerability
CVSS severity 9.8critical
Added Dec 8, 2025
- Rank 14
WatchGuard Firebox / XTM (Fireware)CVE-2025-9242
WatchGuard Firebox Out-of-Bounds Write Vulnerability
CVSS severity 9.8critical
Added Nov 12, 2025
- Rank 15
Check Point Quantum Security GatewayCVE-2026-50751
Check Point Security Gateway Improper Authentication Vulnerability
Ransomware
CVSS severity 9.3critical
Added Jun 8, 2026
- Rank 16
Palo Alto Networks PAN-OS / GlobalProtectCVE-2026-0257
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Ransomware
CVSS severity 9.1critical
Added May 29, 2026
- Rank 17
Cisco ASA / Firepower (FTD)CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
CVSS severity 8.6high
Added Aug 11, 2026
- Rank 18
SonicWall SMA 1000CVE-2026-83549
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
Active CERT-FR alertHunt for compromise (CISA)
CVSS severity 7.8high
Added Sep 2, 2026
- Rank 19
SonicWall SMA 1000CVE-2026-15410
SonicWall SMA1000 Appliances Code Injection Vulnerability
Hunt for compromise (CISA)Ransomware
CVSS severity 7.2high
Added Jul 14, 2026
- Rank 20
SonicWall SMA 1000CVE-2025-40602
SonicWall SMA1000 Missing Authorization Vulnerability
CVSS severity 6.6medium
Added Dec 17, 2025
- Rank 21
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-68686
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVSS severity 5.9medium
Added Jul 27, 2026
- Rank 22
Cisco Secure Firewall Management Center (FMC)CVE-2026-20316
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Ransomware
CVSS severity 5.3medium
Added Jul 29, 2026
- Rank 23
Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3400
Palo Alto Networks PAN-OS Command Injection Vulnerability
Ransomware
CVSS severity 10.0critical
Added Apr 12, 2024
- Rank 24
Palo Alto Networks PAN-OS / GlobalProtectCVE-2020-2021
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
RansomwareCVE from 2020, added in 2022
CVSS severity 10.0critical
Added Mar 25, 2022
- Rank 25
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2019-11510
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 10.0critical
Added Nov 3, 2021
- Rank 26
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22893
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Ransomware
CVSS severity 10.0critical
Added Nov 3, 2021
- Rank 27
Cisco ASA / Firepower (FTD)CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVSS severity 9.9critical
Added Sep 25, 2025
- Rank 28
Juniper ScreenOS (NetScreen)CVE-2015-7755
Juniper ScreenOS Improper Authentication Vulnerability
CVE from 2015, added in 2025
CVSS severity 9.8critical
Added Oct 2, 2025
- Rank 29
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2025-22457
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ransomware
CVSS severity 9.8critical
Added Apr 4, 2025
- Rank 30
SonicWall SonicOSCVE-2024-53704
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Ransomware
CVSS severity 9.8critical
Added Feb 18, 2025
- Rank 31
Sophos Firewall (SFOS, ex-XG)CVE-2020-15069
Sophos XG Firewall Buffer Overflow Vulnerability
CVE from 2020, added in 2025
CVSS severity 9.8critical
Added Feb 6, 2025
- Rank 32
SonicWall SMA 1000CVE-2025-23006
SonicWall SMA1000 Appliances Deserialization Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jan 24, 2025
- Rank 33
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jan 14, 2025
- Rank 34
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2024-11667
Zyxel Multiple Firewalls Path Traversal Vulnerability
Ransomware
CVSS severity 9.8critical
Added Dec 3, 2024
- Rank 35
Array Networks ArrayOS AG / vxAGCVE-2023-28461
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 25, 2024
- Rank 36
Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-0012
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 18, 2024
- Rank 37
Palo Alto Networks ExpeditionCVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerability
CVSS severity 9.8critical
Added Nov 7, 2024
- Rank 38
Fortinet FortiManager / FortiAnalyzerCVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability
CVSS severity 9.8critical
Added Oct 23, 2024
- Rank 39
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability
CVSS severity 9.8critical
Added Oct 9, 2024
- Rank 40
SonicWall SonicOSCVE-2024-40766
SonicWall SonicOS Improper Access Control Vulnerability
Ransomware
CVSS severity 9.8critical
Added Sep 9, 2024
- Rank 41
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2024-21762
Fortinet FortiOS Out-of-Bound Write Vulnerability
Ransomware
CVSS severity 9.8critical
Added Feb 9, 2024
- Rank 42
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2023-27997
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jun 13, 2023
- Rank 43
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-33009
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Jun 5, 2023
- Rank 44
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-33010
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Jun 5, 2023
- Rank 45
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2023-28771
Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS severity 9.8critical
Added May 31, 2023
- Rank 46
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-42475
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Ransomware
CVSS severity 9.8critical
Added Dec 13, 2022
- Rank 47
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-40684
Fortinet Multiple Products Authentication Bypass Vulnerability
Ransomware
CVSS severity 9.8critical
Added Oct 11, 2022
- Rank 48
Sophos Firewall (SFOS, ex-XG)CVE-2022-3236
Sophos Firewall Code Injection Vulnerability
CVSS severity 9.8critical
Added Sep 23, 2022
- Rank 49
Palo Alto Networks PAN-OS / GlobalProtectCVE-2017-15944
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVE from 2017, added in 2022
CVSS severity 9.8critical
Added Aug 18, 2022
- Rank 50
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2022-30525
Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS severity 9.8critical
Added May 16, 2022
- Rank 51
Sophos Firewall (SFOS, ex-XG)CVE-2022-1040
Sophos Firewall Authentication Bypass Vulnerability
CVSS severity 9.8critical
Added Mar 31, 2022
- Rank 52
Sophos SG UTMCVE-2020-25223
Sophos SG UTM Remote Code Execution Vulnerability
CVE from 2020, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 53
WatchGuard Firebox / XTM (Fireware)CVE-2022-26318
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 54
SonicWall SonicOSCVE-2020-5135
SonicWall SonicOS Buffer Overflow Vulnerability
RansomwareCVE from 2020, added in 2022
CVSS severity 9.8critical
Added Mar 15, 2022
- Rank 55
Microsoft Forefront TMGCVE-2011-1889
Microsoft Forefront TMG Remote Code Execution Vulnerability
CVE from 2011, added in 2022
CVSS severity 9.8critical
Added Mar 3, 2022
- Rank 56
SonicWall SMA 100 (ex-SRA)CVE-2021-20038
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jan 28, 2022
- Rank 57
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13379
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
RansomwareCVE from 2018, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 58
Sophos Firewall (SFOS, ex-XG)CVE-2020-12271
Sophos SFOS SQL Injection Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 59
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2020-12812
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 60
Zyxel Firewalls (ATP, USG FLEX, ZyWALL/USG)CVE-2020-29583
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 61
SonicWall SMA 100 (ex-SRA)CVE-2021-20016
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
Ransomware
CVSS severity 9.8critical
Added Nov 3, 2021
- Rank 62
Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0108
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CVSS severity 9.1critical
Added Feb 18, 2025
- Rank 63
Palo Alto Networks ExpeditionCVE-2024-9465
Palo Alto Networks Expedition SQL Injection Vulnerability
CVSS severity 9.1critical
Added Nov 14, 2024
- Rank 64
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2024-21887
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
Ransomware
CVSS severity 9.1critical
Added Jan 10, 2024
- Rank 65
Cisco ASA / Firepower (FTD)CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
Ransomware
CVSS severity 9.1critical
Added Sep 13, 2023
- Rank 66
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2025-0282
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ransomware
CVSS severity 9.0critical
Added Jan 8, 2025
- Rank 67
Cisco ASA / Firepower (FTD)CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
CVE from 2016, added in 2022
CVSS severity 8.8high
Added May 24, 2022
- Rank 68
WatchGuard Firebox / XTM (Fireware)CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
CVSS severity 8.8high
Added Apr 11, 2022
- Rank 69
FatPipe WARP, IPVPN, and MPVPN softwareCVE-2021-27860
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
CVSS severity 8.8high
Added Jan 10, 2022
- Rank 70
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22894
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 71
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22899
Ivanti Pulse Connect Secure Command Injection Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
- Rank 72
Cisco ASA / Firepower (FTD)CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
CVSS severity 8.6high
Added Sep 25, 2025
- Rank 73
Check Point Quantum Security GatewayCVE-2024-24919
Check Point Quantum Security Gateways Information Disclosure Vulnerability
Ransomware
CVSS severity 8.6high
Added May 30, 2024
- Rank 74
Cisco ASA / Firepower (FTD)CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability
CVSS severity 8.6high
Added Apr 24, 2024
- Rank 75
Palo Alto Networks PAN-OS / GlobalProtectCVE-2022-0028
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
CVSS severity 8.6high
Added Aug 22, 2022
- Rank 76
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2024-21893
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Ransomware
CVSS severity 8.2high
Added Jan 31, 2024
- Rank 77
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2023-46805
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
Ransomware
CVSS severity 8.2high
Added Jan 10, 2024
- Rank 78
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2025-24472
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Ransomware
CVSS severity 8.1high
Added Mar 18, 2025
- Rank 79
Palo Alto Networks PAN-OS / GlobalProtectCVE-2019-1579
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
RansomwareCVE from 2019, added in 2022
CVSS severity 8.1high
Added Jan 10, 2022
- Rank 80
Cisco AnyConnect Secure Mobility ClientCVE-2020-3433
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
RansomwareCVE from 2020, added in 2022
CVSS severity 7.8high
Added Oct 24, 2022
- Rank 81
Cisco ASA / Firepower (FTD)CVE-2016-6367
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
CVE from 2016, added in 2022
CVSS severity 7.8high
Added May 24, 2022
- Rank 82
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2021-44168
Fortinet FortiOS Arbitrary File Download
CVSS severity 7.8high
Added Dec 10, 2021
- Rank 83
Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-3393
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
CVSS severity 7.5high
Added Dec 30, 2024
- Rank 84
Palo Alto Networks ExpeditionCVE-2024-9463
Palo Alto Networks Expedition OS Command Injection Vulnerability
CVSS severity 7.5high
Added Nov 14, 2024
- Rank 85
Cisco ASA / Firepower (FTD)CVE-2020-3259
Cisco ASA and FTD Information Disclosure Vulnerability
RansomwareCVE from 2020, added in 2024
CVSS severity 7.5high
Added Feb 15, 2024
- Rank 86
SonicWall SMA 100 (ex-SRA)CVE-2019-7483
SonicWall SMA100 Directory Traversal Vulnerability
CVE from 2019, added in 2022
CVSS severity 7.5high
Added Mar 28, 2022
- Rank 87
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13382
Fortinet FortiOS and FortiProxy Improper Authorization
RansomwareCVE from 2018, added in 2022
CVSS severity 7.5high
Added Jan 10, 2022
- Rank 88
Cisco ASA / Firepower (FTD)CVE-2018-0296
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
CVE from 2018, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
- Rank 89
SonicWall SMA 100 (ex-SRA)CVE-2019-7481
SonicWall SMA100 SQL Injection Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 7.5high
Added Nov 3, 2021
- Rank 90
Cisco ASA / Firepower (FTD)CVE-2020-3452
Cisco ASA and FTD Read-Only Path Traversal Vulnerability
CVSS severity 7.5high
Added Nov 3, 2021
- Rank 91
SonicWall SMA 100 (ex-SRA)CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE from 2023, added in 2025
CVSS severity 7.2high
Added May 1, 2025
- Rank 92
Palo Alto Networks PAN-OS / GlobalProtectCVE-2024-9474
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Ransomware
CVSS severity 7.2high
Added Nov 18, 2024
- Rank 93
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8218
Pulse Connect Secure Code Injection Vulnerability
CVE from 2020, added in 2022
CVSS severity 7.2high
Added Mar 7, 2022
- Rank 94
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2019-11539
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 7.2high
Added Nov 3, 2021
- Rank 95
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8243
Ivanti Pulse Connect Secure Code Execution Vulnerability
CVSS severity 7.2high
Added Nov 3, 2021
- Rank 96
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2020-8260
Ivanti Pulse Connect Secure Code Execution Vulnerability
CVSS severity 7.2high
Added Nov 3, 2021
- Rank 97
Ivanti Connect Secure / Policy Secure (ex-Pulse Secure)CVE-2021-22900
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
CVSS severity 7.2high
Added Nov 3, 2021
- Rank 98
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2022-41328
Fortinet FortiOS Path Traversal Vulnerability
CVSS severity 7.1high
Added Mar 14, 2023
- Rank 99
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2019-6693
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
RansomwareCVE from 2019, added in 2025
CVSS severity 6.5medium
Added Jun 25, 2025
- Rank 100
SonicWall SMA 100 (ex-SRA)CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVE from 2021, added in 2025
CVSS severity 6.5medium
Added Apr 16, 2025
- Rank 101
Palo Alto Networks PAN-OS / GlobalProtectCVE-2025-0111
Palo Alto Networks PAN-OS File Read Vulnerability
CVSS severity 6.5medium
Added Feb 20, 2025
- Rank 102
Cisco AnyConnect Secure Mobility ClientCVE-2020-3153
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
RansomwareCVE from 2020, added in 2022
CVSS severity 6.5medium
Added Oct 24, 2022
- Rank 103
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13383
Fortinet FortiOS and FortiProxy Out-of-bounds Write
RansomwareCVE from 2018, added in 2022
CVSS severity 6.5medium
Added Jan 10, 2022
- Rank 104
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2019-5591
Fortinet FortiOS Default Configuration Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 6.5medium
Added Nov 3, 2021
- Rank 105
Cisco ASA / Firepower (FTD)CVE-2014-2120
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
CVE from 2014, added in 2024
CVSS severity 6.1medium
Added Nov 12, 2024
- Rank 106
Cisco ASA / Firepower (FTD)CVE-2020-3580
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
Ransomware
CVSS severity 6.1medium
Added Nov 3, 2021
- Rank 107
Cisco ASA / Firepower (FTD)CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability
CVSS severity 6.0medium
Added Apr 24, 2024
- Rank 108
Cisco ASA / Firepower (FTD)CVE-2024-20481
Cisco ASA and FTD Denial-of-Service Vulnerability
CVSS severity 5.8medium
Added Oct 24, 2024
- Rank 109
Fortinet FortiOS / FortiProxy (FortiGate)CVE-2018-13374
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
RansomwareCVE from 2018, added in 2022
CVSS severity 4.3medium
Added Sep 8, 2022
Filed under another category
These 23 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.
Citrix NetScaler ADC / GatewayCVE-2026-88771
Citrix NetScaler Improper Input Validation Vulnerability
Recently addedActive CERT-FR alertHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 27, 2026
Citrix NetScaler ADC / GatewayCVE-2026-88772
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Recently addedActive CERT-FR alertHunt for compromise (CISA)
CVSS severity 8.1high
Added Sep 27, 2026
F5 BIG-IPCVE-2026-94127
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 22, 2026
Citrix NetScaler ADC / GatewayCVE-2026-19490
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Sep 9, 2026
Citrix NetScaler ADC / GatewayCVE-2026-8452
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
CVSS severity 9.8critical
Added Aug 26, 2026
Show 18 more vulnerabilities
Citrix NetScaler ADC / GatewayCVE-2026-3055
Citrix NetScaler Out-of-Bounds Read Vulnerability
CVSS severity 9.8critical
Added Mar 30, 2026
F5 BIG-IPCVE-2025-53521
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Mar 27, 2026
Citrix NetScaler ADC / GatewayCVE-2025-7775
Citrix NetScaler Memory Overflow Vulnerability
CVSS severity 9.8critical
Added Aug 26, 2025
Citrix NetScaler ADC / GatewayCVE-2025-6543
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
CVSS severity 9.8critical
Added Jun 30, 2025
Juniper Junos OSCVE-2023-36845
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
CVSS severity 9.8critical
Added Nov 13, 2023
Citrix NetScaler ADC / GatewayCVE-2023-3519
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Ransomware
CVSS severity 9.8critical
Added Jul 19, 2023
Citrix NetScaler ADC / GatewayCVE-2022-27518
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
CVSS severity 9.8critical
Added Dec 13, 2022
Juniper Junos OSCVE-2020-1631
Juniper Junos OS Path Traversal Vulnerability
CVE from 2020, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Citrix NetScaler ADC / GatewayCVE-2019-19781
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
RansomwareCVE from 2019, added in 2021
CVSS severity 9.8critical
Added Nov 3, 2021
Citrix NetScaler ADC / GatewayCVE-2023-6548
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS severity 8.8high
Added Jan 17, 2024
Citrix NetScaler ADC / GatewayCVE-2025-5777
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
Ransomware
CVSS severity 7.5high
Added Jul 10, 2025
Citrix NetScaler ADC / GatewayCVE-2023-6549
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
CVSS severity 7.5high
Added Jan 17, 2024
Citrix NetScaler ADC / GatewayCVE-2023-4966
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Ransomware
CVSS severity 7.5high
Added Oct 18, 2023
Citrix NetScaler ADC / GatewayCVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
CVSS severity 6.5medium
Added Nov 3, 2021
Citrix NetScaler ADC / GatewayCVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVSS severity 6.5medium
Added Nov 3, 2021
Juniper Junos OSCVE-2023-36846
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
Juniper Junos OSCVE-2023-36851
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
CVSS severity 5.3medium
Added Nov 13, 2023
Citrix NetScaler ADC / GatewayCVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVSS severity 4.3medium
Added Nov 3, 2021
End of life: remove
These products are no longer supported: no patch is coming. Remove them or isolate them from the network.
Sophos CyberoamOS (Cyberoam)CVE-2020-29574
CyberoamOS (CROS) SQL Injection Vulnerability
RansomwareEnd of lifeCVE from 2020, added in 2025
CVSS severity 9.8critical
Added Feb 6, 2025
SonicWall SMA 100 (ex-SRA)CVE-2021-20028
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
RansomwareEnd of life
CVSS severity 9.8critical
Added Mar 28, 2022
Follow and verify
Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.