Skip to content
Exploit Radar Choose my productsProducts My radar

Products › IT administration and security

IT administration and security

Security products

Antivirus, EDR, SIEM, sandboxes and other security tools: attackers target them too.

For example: Microsoft Defender, Trend Micro, FortiSandbox, Splunk.

Category RSS feed

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

  • Fortinet 2 vulnerabilities · 2 in the last 12 months
  • Fortra 2 vulnerabilities
  • IBM 3 vulnerabilities
  • McAfee 1 vulnerability
  • Microsoft 6 vulnerabilities · 3 in the last 12 months
  • Sophos 1 vulnerability
  • Splunk 1 vulnerability · 1 in the last 12 months
  • TeamT5 1 vulnerability · 1 in the last 12 months
  • Trend Micro 12 vulnerabilities · 1 in the last 12 months
  • Wazuh 1 vulnerability

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

See also

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

  1. Rank 1

    Fortinet FortiSandboxCVE-2026-25089

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 16, 2026

  2. Rank 2

    Fortinet FortiSandboxCVE-2026-39808

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Jul 16, 2026

  3. Rank 3

    Splunk EnterpriseCVE-2026-20253

    Splunk Enterprise Missing Authentication for Critical Function Vulnerability

    CVSS severity 9.8critical

    Added Jun 18, 2026

  4. Rank 4

    Microsoft DefenderCVE-2026-41091

    Microsoft Defender Link Following Vulnerability

    CVSS severity 7.8high

    Added May 20, 2026

  5. Rank 5

    Microsoft DefenderCVE-2026-33825

    Microsoft Defender Insufficient Granularity of Access Control Vulnerability

    Ransomware

    CVSS severity 7.8high

    Added Apr 22, 2026

  6. Rank 6

    Microsoft DefenderCVE-2026-45498

    Microsoft Defender Denial of Service Vulnerability

    CVSS severity 7.5high

    Added May 20, 2026

  7. Rank 7

    TeamT5 ThreatSonar Anti-RansomwareCVE-2024-7694

    TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

    CVE from 2024, added in 2026

    CVSS severity 7.2high

    Added Feb 17, 2026

  8. Rank 8

    Trend Micro Apex One (ex-OfficeScan)CVE-2026-34926

    Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

    CVSS severity 6.7medium

    Added May 21, 2026

  9. Rank 9

    Wazuh ServerCVE-2025-24016

    Wazuh Server Deserialization of Untrusted Data Vulnerability

    CVSS severity 9.9critical

    Added Jun 10, 2025

  10. Rank 10

    Trend Micro Apex One (ex-OfficeScan)CVE-2025-54948

    Trend Micro Apex One OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Aug 18, 2025

Show 20 more vulnerabilities
  1. Rank 11

    Sophos Web ApplianceCVE-2023-1671

    Sophos Web Appliance Command Injection Vulnerability

    CVSS severity 9.8critical

    Added Nov 16, 2023

  2. Rank 12

    Fortra Cobalt StrikeCVE-2022-42948

    Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Mar 30, 2023

  3. Rank 13

    Trend Micro Apex CentralCVE-2022-26871

    Trend Micro Apex Central Arbitrary File Upload Vulnerability

    CVSS severity 9.8critical

    Added Mar 31, 2022

  4. Rank 14

    IBM Data Risk ManagerCVE-2020-4427

    IBM Data Risk Manager Security Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  5. Rank 15

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8599

    Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  6. Rank 16

    IBM Data Risk ManagerCVE-2020-4428

    IBM Data Risk Manager Remote Code Execution Vulnerability

    CVSS severity 9.1critical

    Added Nov 3, 2021

  7. Rank 17

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8467

    Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  8. Rank 18

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-8468

    Trend Micro Multiple Products Content Validation Escape Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  9. Rank 19

    Trend Micro Apex One (ex-OfficeScan)CVE-2021-36741

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  10. Rank 20

    Microsoft DefenderCVE-2017-8540

    Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 7.8high

    Added Mar 3, 2022

  11. Rank 21

    Trend Micro Apex One (ex-OfficeScan)CVE-2020-24557

    Trend Micro Multiple Products Improper Access Control Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  12. Rank 22

    Microsoft DefenderCVE-2021-1647

    Microsoft Defender Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  13. Rank 23

    McAfee Total Protection (MTP)CVE-2021-23874

    McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  14. Rank 24

    Trend Micro Apex One (ex-OfficeScan)CVE-2021-36742

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  15. Rank 25

    Trend Micro Apex One (ex-OfficeScan)CVE-2019-18187

    Trend Micro OfficeScan Directory Traversal Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  16. Rank 26

    Trend Micro Apex One (ex-OfficeScan)CVE-2023-41179

    Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

    CVSS severity 7.2high

    Added Sep 21, 2023

  17. Rank 27

    Trend Micro Apex One (ex-OfficeScan)CVE-2022-40139

    Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

    CVSS severity 7.2high

    Added Sep 15, 2022

  18. Rank 28

    Fortra Cobalt StrikeCVE-2022-39197

    Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Mar 30, 2023

  19. Rank 29

    Microsoft DefenderCVE-2022-44698

    Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

    Ransomware

    CVSS severity 5.4medium

    Added Dec 13, 2022

  20. Rank 30

    IBM Data Risk ManagerCVE-2020-4430

    IBM Data Risk Manager Directory Traversal Vulnerability

    CVSS severity 4.3medium

    Added Nov 3, 2021

Follow and verify

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.