Vulnerability Intelligence

Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.

Published records349
Critical309
High30
Known exploited77

CVE-2026-83548

Critical10.0

Sonicwall Sma8200v < 12.4.3-03526

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access…

Known exploited (KEV)Server-side request forgery (SSRF)Remote (network)No login neededNo user action

Sonicwall Sma8200v < 12.4.3-03526

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable…

Known exploited (KEV)OS command injectionLocal accessLogin neededNo user action

CVE-2026-84135

Critical9.8

Mozilla Firefox Mobile < 155.0

Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.

Improper input validationRemote (network)No login neededNo user action

CVE-2026-84140

Critical9.8

Mozilla Firefox < 153.2.0

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

CWE-346Remote (network)No login neededNo user action

CVE-2026-84142

Critical9.8

Mozilla Firefox < 155.0.0

Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have…

Memory corruptionRemote (network)No login neededNo user action

CVE-2026-79687

Critical10.0

Dell Powerstoreos 4.1.0.0

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.

Missing authenticationRemote (network)No login neededNo user action

CVE-2026-73749

Critical9.8

Hpe Arubaos-cx < 10.10.1181

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the…

Improper access controlRemote (network)No login neededNo user action

CVE-2026-73778

Critical9.8

Hpe Arubaos-cx = 10.13.0000, = 10.16.0000, = 10.17.0000, <= 10.17.1021

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state…

CWE-521Remote (network)No login neededNo user action

CVE-2026-84141

Critical9.8

Mozilla Firefox < 153.2.0

Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

Integer overflowRemote (network)No login neededNo user action

CVE-2026-84143

Critical9.8

Mozilla Firefox < 140.15.0

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with…

Memory corruptionRemote (network)No login neededNo user action