JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,754 entries Clear search

cisa-kev-archive.log

  1. CVE-2018-4063

    Sierra Wireless AirLink ALEOS

    Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

    Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An...

    Read the full description

    Sierra Wireless AirLink ALEOS contains an unrestricted upload of file with dangerous type vulnerability. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an authenticated HTTP request to trigger this vulnerability. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-12-12
    Federal due date
    2026-01-02
    NVD entry

  2. CVE-2025-58360

    OSGeo GeoServer

    OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

    OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to...

    Read the full description

    OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that occurs when the application accepts XML input through a specific endpoint /geoserver/wms operation GetMap and could allow an attacker to define external entities within the XML request.

    Added
    2025-12-11
    Federal due date
    2026-01-01
    NVD entryquyenheu on GitHub

  3. CVE-2025-62221

    Microsoft Windows

    Microsoft Windows Use After Free Vulnerability

    Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.

    Added
    2025-12-09
    Federal due date
    2025-12-30
    NVD entry

  4. CVE-2025-6218

    RARLAB WinRAR

    RARLAB WinRAR Path Traversal Vulnerability

    RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user.

    Added
    2025-12-09
    Federal due date
    2025-12-30
    NVD entryskimask1690 on GitHubabsholi7ly on GitHub

  5. CVE-2025-66644

    Array Networks ArrayOS AG

    Array Networks ArrayOS AG OS Command Injection Vulnerability

    Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.

    Added
    2025-12-08
    Federal due date
    2025-12-29
    NVD entry

  6. CVE-2022-37055

    D-Link Routers

    D-Link Routers Buffer Overflow Vulnerability

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    Added
    2025-12-08
    Federal due date
    2025-12-29
    NVD entry

  7. CVE-2025-55182

    Ransomware

    Meta React Server Components

    Meta React Server Components Remote Code Execution Vulnerability

    Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note...

    Read the full description

    Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.

    Added
    2025-12-05
    Federal due date
    2025-12-12
    NVD entryExploit-DBassetnote on GitHub

  8. CVE-2021-26828

    OpenPLC ScadaBR

    OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

    OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

    Added
    2025-12-03
    Federal due date
    2025-12-24
    NVD entryhev0x on GitHubridpath on GitHub

  9. CVE-2025-48633

    Android Framework

    Android Framework Information Disclosure Vulnerability

    Android Framework contains an unspecified vulnerability that allows for information disclosure.

    Added
    2025-12-02
    Federal due date
    2025-12-23
    NVD entry

  10. CVE-2025-48572

    Android Framework

    Android Framework Privilege Escalation Vulnerability

    Android Framework contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2025-12-02
    Federal due date
    2025-12-23
    NVD entry

  11. CVE-2021-26829

    OpenPLC ScadaBR

    OpenPLC ScadaBR Cross-site Scripting Vulnerability

    OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.

    Added
    2025-11-28
    Federal due date
    2025-12-19
    NVD entry

  12. CVE-2025-61757

    Oracle Fusion Middleware

    Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

    Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

    Added
    2025-11-21
    Federal due date
    2025-12-12
    NVD entry

  13. CVE-2025-13223

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability

    Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

    Added
    2025-11-19
    Federal due date
    2025-12-10
    NVD entry

  14. CVE-2025-58034

    Fortinet FortiWeb

    Fortinet FortiWeb OS Command Injection Vulnerability

    Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

    Added
    2025-11-18
    Federal due date
    2025-11-25
    NVD entry

  15. CVE-2025-64446

    Fortinet FortiWeb

    Fortinet FortiWeb Path Traversal Vulnerability

    Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

    Added
    2025-11-14
    Federal due date
    2025-11-21
    NVD entryExploit-DBsensepost on GitHub

  16. CVE-2025-9242

    WatchGuard Firebox

    WatchGuard Firebox Out-of-Bounds Write Vulnerability

    WatchGuard Firebox contains an out-of-bounds write vulnerability in the OS iked process that may allow a remote unauthenticated attacker to execute arbitrary code.

    Added
    2025-11-12
    Federal due date
    2025-12-03
    NVD entrywatchtowrlabs on GitHub

  17. CVE-2025-62215

    Microsoft Windows

    Microsoft Windows Race Condition Vulnerability

    Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access.

    Added
    2025-11-12
    Federal due date
    2025-12-03
    NVD entryabrewer251 on GitHubgowonisgood on GitHub

  18. CVE-2025-12480

    Gladinet Triofox

    Gladinet Triofox Improper Access Control Vulnerability

    Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

    Added
    2025-11-12
    Federal due date
    2025-12-03
    NVD entry

  19. CVE-2025-21042

    Samsung Mobile Devices

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.

    Added
    2025-11-10
    Federal due date
    2025-12-01
    NVD entry

  20. CVE-2025-48703

    CWP Control Web Panel

    CWP Control Web Panel OS Command Injection Vulnerability

    CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A...

    Read the full description

    CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command Injection vulnerability that allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.

    Added
    2025-11-04
    Federal due date
    2025-11-25
    NVD entry

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON