Public catalog
Vulnerabilities
Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.
Intelligence updated 1 Oct 2026 at 13:38 UTC
Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.
260 vulnerabilities · sorted by Publication date — newest first
1–30 of 260
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
CiscoCisco Catalyst SD-WAN Manager
Severity · CVSSCritical9.8Known exploitationKEVDue 3 Oct 2026EPSSNo scorePublishedFix statedDirectory Traversal and File upload allows execution of arbitrary script on the Management Server
Check PointCheck Point Quantum Security Management
Severity · CVSSCritical9.8Known exploitationKEVDue 25 Sept 2026EPSS20%PublishedFix statedCisco Identity Services Engine Authentication Bypass Vulnerability
CiscoCisco Identity Services Engine Software, Cisco ISE Passive Identity Connector
Severity · CVSSCritical10Known exploitationKEVDue 19 Sept 2026EPSS14%PublishedFix statedCisco Secure Email Gateway SQL Injection Vulnerability
CiscoCisco Secure Email
Severity · CVSSCritical9.8Known exploitationKEVDue 17 Sept 2026EPSS28%PublishedFix statedImproper Certificate Validation in Quantum Security Gateway
Check PointCheck Point Quantum Security Gateway
Severity · CVSSCritical9.8Known exploitationKEVDue 25 Sept 2026EPSS8%PublishedFix statedPAN-OS: Information Disclosure Vulnerability in URL Filtering
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.32%PublishedFix statedFortinetFortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh8.1Known exploitationNone knownEPSS0.46%PublishedFix statedFortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh8.1Known exploitationNone knownEPSS0.42%PublishedFix statedCiscoCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)
Severity · CVSSHigh8.6Known exploitationKEVDue 14 Aug 2026EPSS1%PublishedFix statedCisco Secure Firewall Management Center Software Static Credential Vulnerability
CiscoCisco Secure Firewall Management Center (FMC)
Severity · CVSSMedium5.3Known exploitationKEVRansomwareDue 1 Aug 2026EPSS35%PublishedFix statedAuthentication Bypass in the SmartConsole Login Process Using an Application Token
Check PointCheck Point Quantum Security Management
Severity · CVSSCritical9.8Known exploitationKEVDue 25 Jul 2026EPSS78%PublishedNo fix statedPAN-OS: IPv6 Firewall Policy Bypass
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access
Severity · CVSSHigh7.2Known exploitationNone knownEPSS0.34%PublishedFix statedPAN-OS: Information Disclosure Vulnerability in Management Web Interface
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.1Known exploitationNone knownEPSS0.28%PublishedFix statedPAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS0.38%PublishedFix statedPAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical9.9Known exploitationNone knownEPSS0.47%PublishedFix statedPAN-OS: Authenticated Command Injection in CLI
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS2%PublishedFix statedPAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.62%PublishedFix statedPAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Cloud NGFW, Palo Alto Networks Prisma Access
Severity · CVSSHigh7.5Known exploitationNone knownEPSS0.83%PublishedFix statedCisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
CiscoCisco Catalyst SD-WAN Manager
Severity · CVSSMedium6.5Known exploitationKEVDue 29 Jun 2026EPSS28%PublishedFix statedPAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS1%PublishedFix statedPAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS0.26%PublishedFix statedFortinet FortiSandbox OS Command Injection Vulnerability
FortinetFortinet FortiSandbox, Fortinet FortiSandbox Cloud, Fortinet FortiSandbox PaaS
Severity · CVSSCritical9.8Known exploitationKEVDue 19 Jul 2026EPSS76%PublishedFix statedUser Authentication Bypass in VPN Remote Access and Mobile Access
Check PointCheck Point Quantum Security Gateway, Check Point Spark Firewalls
Severity · CVSSCritical9.3Known exploitationKEVRansomwareDue 11 Jun 2026EPSS6%PublishedNo fix statedCisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
CiscoCisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager
Severity · CVSSHigh7.8Known exploitationKEVDue 23 Jun 2026EPSS25%PublishedFix statedCisco Unified Communications Manager Server-Side Request Forgery Vulnerability
CiscoCisco Unified Communications Manager
Severity · CVSSHigh8.6Known exploitationKEVDue 28 Jun 2026EPSS88%PublishedFix statedCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CiscoCisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager
Severity · CVSSCritical10Known exploitationKEVDue 17 May 2026EPSS92%PublishedFix statedPAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Palo Alto NetworksPalo Alto Networks PAN-OS, Palo Alto Networks Prisma Access
Severity · CVSSCritical9.1Known exploitationKEVRansomwareDue 1 Jun 2026EPSS96%PublishedFix statedPAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical9.1Known exploitationNone knownEPSS0.33%PublishedFix statedPalo Alto NetworksPalo Alto Networks WildFire WF-500 and WF-500-B
Severity · CVSSHigh8.8Known exploitationNone knownEPSS0.34%PublishedFix statedPAN-OS: Authenticated Admin Command Injection Vulnerability
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.2Known exploitationNone knownEPSS1%PublishedFix stated