Security
40 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Security, a product in the Security products space. Use it to gauge the current risk picture and drill into individual advisories.
Security CVEs per month
| Month | CVEs |
|---|---|
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 1 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 2 |
| 2026-10 | 0 |
| 2026-11 | 0 |
Severity
How the 40 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High20
- Medium17
Latest CVEs
The 15 most recently published vulnerabilities affecting Security.
- CVE-2026-55176Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token9.0
- CVE-2026-46711Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network8.3
- CVE-2025-64113Emby Server allows attackers to gain administrative server access without preconditions9.8
- CVE-2024-3779Denial of Service in ESET products for Windows6.1
- CVE-2024-1619Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to per...6.1
- CVE-2024-0353Local privilege escalation in Windows products7.8
- CVE-2023-5594Improper following of a certificate's chain of trust in ESET security products7.5
- CVE-2023-48795The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (fr...5.9
- CVE-2023-45807OpenSearch Issue with tenant read-only permissions5.4
- CVE-2023-3160Local privilege escalation in security products for Windows7.8
- CVE-2023-33193Emby Server Proxy Header Spoofing Vulnerability9.1
- CVE-2023-31141OpenSearch issue with fine-grained access control during extremely rare race conditions4.8
- CVE-2023-25806Time discrepancy in authentication responses in OpenSearch5.3
- CVE-2023-23612Issue with whitespace in JWT roles in OpenSearch4.7
- CVE-2023-23613Field-level security issue with .keyword fields in OpenSearch5.7
Product grouping is registry-driven, with AI assist and human review. How it works