CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,462 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,462
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product siemens:ruggedcom_ape1808. Show all products

75 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2022-1271High 8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
Assigned by redhat
Aug 31, 2022
CVE-2022-37454Critical 9.8The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic…
Assigned by mitre
Oct 21, 2022
CVE-2023-0286High 7.4X.400 address type confusion in X.509 GeneralName
Assigned by openssl
Feb 8, 2023
CVE-2023-44487
Known exploited
High 7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Assigned by mitre
Oct 10, 2023
CVE-2023-38546Not yet scoredThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.
Assigned by hackerone
Oct 18, 2023
CVE-2023-38545High 8.8This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.
Assigned by hackerone
Oct 18, 2023
CVE-2023-48795Medium 5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
Assigned by mitre
Dec 18, 2023
CVE-2024-3596Critical 9.0RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
Assigned by certcc
Jul 9, 2024
CVE-2024-52963Low 3.5A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via spec…
Assigned by fortinet
Jan 14, 2025
CVE-2024-32122Low 2.1A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclo…
Assigned by fortinet
Apr 8, 2025
CVE-2024-50562Medium 4.4An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacke…
Assigned by fortinet
Jun 10, 2025
CVE-2025-24471Medium 6.0An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked ce…
Assigned by fortinet
Jun 10, 2025
CVE-2025-25250Low 3.9An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all v…
Assigned by fortinet
Jun 10, 2025
CVE-2024-55599Medium 4.9An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and be…
Assigned by fortinet
Jul 8, 2025
CVE-2025-53744Medium 6.8An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow…
Assigned by fortinet
Aug 12, 2025
CVE-2025-25248Medium 4.8An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version…
Assigned by fortinet
Aug 12, 2025
CVE-2025-22862Medium 6.3An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 th…
Assigned by fortinet
Oct 2, 2025
CVE-2025-58903Low 2.5An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the h…
Assigned by fortinet
Oct 14, 2025
CVE-2025-47890Low 2.5An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…
Assigned by fortinet
Oct 14, 2025
CVE-2025-57740Medium 6.7An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0…
Assigned by fortinet
Oct 14, 2025
CVE-2025-25253Medium 6.8An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version…
Assigned by fortinet
Oct 14, 2025
CVE-2025-31366Medium 4.5An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, For…
Assigned by fortinet
Oct 14, 2025
CVE-2025-31514Low 2.6A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…
Assigned by fortinet
Oct 14, 2025
CVE-2025-58413Medium 6.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS…
Assigned by fortinet
Nov 18, 2025
CVE-2025-54821Low 1.8An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Forti…
Assigned by fortinet
Nov 18, 2025
CVE-2025-53843Medium 6.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows a…
Assigned by fortinet
Nov 18, 2025
CVE-2025-59719Critical 9.1An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypas…
Assigned by fortinet
Dec 9, 2025
CVE-2025-59718
Known exploited
Critical 9.1A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, Fort…
Assigned by fortinet
Dec 9, 2025
CVE-2025-25249
Known exploited
High 7.4A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions,…
Assigned by fortinet
Jan 13, 2026
CVE-2026-24858
Known exploited
Critical 9.4An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0…
Assigned by fortinet
Jan 27, 2026
CVE-2025-61624
Known exploited
Medium 5.4An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions…
Assigned by fortinet
Apr 14, 2026
CVE-2026-0300
Known exploited
Critical 9.3PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
Assigned by palo_alto
May 6, 2026
CVE-2025-53844High 8.3A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via spe…
Assigned by fortinet
May 12, 2026
CVE-2026-0265High 7.2PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
Assigned by palo_alto
May 13, 2026
CVE-2026-0264High 7.2PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
Assigned by palo_alto
May 13, 2026
CVE-2026-0262Medium 6.6PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
Assigned by palo_alto
May 13, 2026
CVE-2026-0261Medium 6.1PAN-OS: Authenticated Admin Command Injection Vulnerability
Assigned by palo_alto
May 13, 2026
CVE-2026-0258Medium 4.8PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
Assigned by palo_alto
May 13, 2026
CVE-2026-0257
Known exploited
High 7.8PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Assigned by palo_alto
May 13, 2026
CVE-2026-0256Medium 4.4PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
Assigned by palo_alto
May 13, 2026
CVE-2025-67862Medium 6.0An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.…
Assigned by fortinet
Jun 9, 2026
CVE-2026-0266Low 1.1PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
Assigned by palo_alto
Jun 10, 2026
CVE-2026-0269Medium 4.6PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
Assigned by palo_alto
Jun 10, 2026
CVE-2026-0272Medium 6.0PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
Assigned by palo_alto
Jun 10, 2026
CVE-2026-0273Medium 6.1PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
Assigned by palo_alto
Jun 10, 2026
CVE-2026-0288High 7.2PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Assigned by palo_alto
Jul 8, 2026
CVE-2026-0287Medium 6.6PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Assigned by palo_alto
Jul 9, 2026
CVE-2026-0286Medium 6.0PAN-OS: Authenticated Command Injection in CLI
Assigned by palo_alto
Jul 9, 2026
CVE-2026-0285Medium 4.7PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
Assigned by palo_alto
Jul 9, 2026
CVE-2026-0284Medium 4.7PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
Assigned by palo_alto
Jul 9, 2026
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.