Explain and orient
Cybersecurity Vulnerabilities
Track CISA advisories, CVE alerts, and security bulletins critical to government contractors. Stay compliant with CMMC and prioritize patching for CUI systems.
100M+ government records · 110+ gov/news sources · Sourced from official federal systems
100M+ records · 110+ sources
Recent Vulnerabilities Records
VulnerabilityNewcisa_kev
CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability
CISA
Posted 3d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability
CISA
Posted 3d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
CISA
Posted 3d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
CISA
Posted 3d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
CISA
Posted 5d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-81963: Microsoft Windows Link Following Vulnerability
CISA
Posted 6d agoNAICS 541110NONE
View intelligence →
VulnerabilityNewcisa_kev
CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CISA
Posted 6d agoNAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability
CISA
Posted Sep 4, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
CISA
Posted Sep 2, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
CISA
Posted Sep 2, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
CISA
Posted Aug 31, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability
CISA
Posted Aug 31, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
CISA
Posted Aug 27, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability
CISA
Posted Aug 26, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CISA
Posted Aug 26, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
CISA
Posted Aug 26, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability
CISA
Posted Aug 26, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
CISA
Posted Aug 21, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-72530: TrueConf Server Code Injection Vulnerability
CISA
Posted Aug 20, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability
CISA
Posted Aug 19, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
CISA
Posted Aug 11, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability
CISA
Posted Aug 7, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CISA
Posted Jul 27, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-60137: WordPress Core SQL Injection Vulnerability
CISA
Posted Jul 21, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CISA
Posted Jul 15, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-56155: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
CISA
Posted Jul 14, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
CISA
Posted Jul 10, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
CISA
Posted Jul 10, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CISA
Posted Jun 15, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CISA
Posted Jun 12, 2026NAICS 541110NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CISA
Posted Jun 9, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CISA
Posted Jun 9, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
CISA
Posted Jun 9, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerability
CISA
Posted Jun 8, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CISA
Posted May 29, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-45321: TanStack Unspecified Vulnerability
CISA
Posted May 27, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability
CISA
Posted May 27, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-9082: Drupal Core SQL Injection Vulnerability
CISA
Posted May 22, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2025-34291: Langflow Origin Validation Error Vulnerability
CISA
Posted May 21, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CISA
Posted May 21, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability
CISA
Posted May 20, 2026NAICS 221118 Other Electric Power GenerationNONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-41091: Microsoft Defender Link Following Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability
CISA
Posted May 20, 2026NONE
View intelligence →
Vulnerabilitycisa_kev
CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability
CISA
Posted May 15, 2026NONE
View intelligence →
All Records
VulnerabilityNew
CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability
CISAPosted 3d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability
CISAPosted 3d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
CISAPosted 3d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
CISAPosted 3d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
CISAPosted 5d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-81963: Microsoft Windows Link Following Vulnerability
CISAPosted 6d agoNAICS 541110NONEcisa_kev
VulnerabilityNew
CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CISAPosted 6d agoNAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability
CISAPosted Sep 4, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
CISAPosted Sep 2, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
CISAPosted Sep 2, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
CISAPosted Aug 31, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability
CISAPosted Aug 31, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
CISAPosted Aug 27, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability
CISAPosted Aug 26, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CISAPosted Aug 26, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
CISAPosted Aug 26, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability
CISAPosted Aug 26, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
CISAPosted Aug 21, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-72530: TrueConf Server Code Injection Vulnerability
CISAPosted Aug 20, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability
CISAPosted Aug 19, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
CISAPosted Aug 11, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability
CISAPosted Aug 7, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CISAPosted Jul 27, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-60137: WordPress Core SQL Injection Vulnerability
CISAPosted Jul 21, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CISAPosted Jul 15, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-56155: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
CISAPosted Jul 14, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
CISAPosted Jul 10, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
CISAPosted Jul 10, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CISAPosted Jun 15, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CISAPosted Jun 12, 2026NAICS 541110NONEcisa_kev
Vulnerability
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CISAPosted Jun 9, 2026NONEcisa_kev
Vulnerability
CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CISAPosted Jun 9, 2026NONEcisa_kev
Vulnerability
CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
CISAPosted Jun 9, 2026NONEcisa_kev
Vulnerability
CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerability
CISAPosted Jun 8, 2026NONEcisa_kev
Vulnerability
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CISAPosted May 29, 2026NONEcisa_kev
Vulnerability
CVE-2026-45321: TanStack Unspecified Vulnerability
CISAPosted May 27, 2026NONEcisa_kev
Vulnerability
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability
CISAPosted May 27, 2026NONEcisa_kev
Vulnerability
CVE-2026-9082: Drupal Core SQL Injection Vulnerability
CISAPosted May 22, 2026NONEcisa_kev
Vulnerability
CVE-2025-34291: Langflow Origin Validation Error Vulnerability
CISAPosted May 21, 2026NONEcisa_kev
Vulnerability
CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CISAPosted May 21, 2026NONEcisa_kev
Vulnerability
CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability
CISAPosted May 20, 2026NAICS 221118 Other Electric Power GenerationNONEcisa_kev
Vulnerability
CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2026-41091: Microsoft Defender Link Following Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability
CISAPosted May 20, 2026NONEcisa_kev
Vulnerability
CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability
CISAPosted May 15, 2026NONEcisa_kev
VulnerabilityNew
CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability
CISA
Posted 3d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability
CISA
Posted 3d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-84869: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
CISA
Posted 3d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
CISA
Posted 3d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
CISA
Posted 5d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-81963: Microsoft Windows Link Following Vulnerability
CISA
Posted 6d ago
OFFICES OF LAWYERS
VulnerabilityNew
CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CISA
Posted 6d ago
OFFICES OF LAWYERS
Vulnerability
CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability
CISA
Posted Sep 4, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability
CISA
Posted Sep 2, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability
CISA
Posted Sep 2, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-81578: PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
CISA
Posted Aug 31, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-82078: PaperCut NG/MF Unsafe Reflection Vulnerability
CISA
Posted Aug 31, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
CISA
Posted Aug 27, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability
CISA
Posted Aug 26, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CISA
Posted Aug 26, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
CISA
Posted Aug 26, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability
CISA
Posted Aug 26, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
CISA
Posted Aug 21, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-72530: TrueConf Server Code Injection Vulnerability
CISA
Posted Aug 20, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability
CISA
Posted Aug 19, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-68820: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
CISA
Posted Aug 11, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability
CISA
Posted Aug 7, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CISA
Posted Jul 27, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-60137: WordPress Core SQL Injection Vulnerability
CISA
Posted Jul 21, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
CISA
Posted Jul 15, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-56155: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
CISA
Posted Jul 14, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-48939: iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability
CISA
Posted Jul 10, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-56291: Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
CISA
Posted Jul 10, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CISA
Posted Jun 15, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability
CISA
Posted Jun 12, 2026
OFFICES OF LAWYERS
Vulnerability
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CISA
Posted Jun 9, 2026
Vulnerability
CVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CISA
Posted Jun 9, 2026
Vulnerability
CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
CISA
Posted Jun 9, 2026
Vulnerability
CVE-2026-42271: BerriAI LiteLLM Command Injection Vulnerability
CISA
Posted Jun 8, 2026
Vulnerability
CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CISA
Posted May 29, 2026
Vulnerability
CVE-2026-45321: TanStack Unspecified Vulnerability
CISA
Posted May 27, 2026
Vulnerability
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability
CISA
Posted May 27, 2026
Vulnerability
CVE-2026-9082: Drupal Core SQL Injection Vulnerability
CISA
Posted May 22, 2026
Vulnerability
CVE-2025-34291: Langflow Origin Validation Error Vulnerability
CISA
Posted May 21, 2026
Vulnerability
CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CISA
Posted May 21, 2026
Vulnerability
CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability
CISA
Posted May 20, 2026
NAICS 221118 Other Electric Power Generation
Vulnerability
CVE-2009-1537: Microsoft DirectX NULL Byte Overwrite Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2010-0249: Microsoft Internet Explorer Use-After-Free Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2010-0806: Microsoft Internet Explorer Use-After-Free Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2026-41091: Microsoft Defender Link Following Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2026-45498: Microsoft Defender Denial of Service Vulnerability
CISA
Posted May 20, 2026
Vulnerability
CVE-2026-42897: Microsoft Exchange Server Cross-Site Scripting Vulnerability
CISA
Posted May 15, 2026
Frequently Asked Questions
Why does Bureauify track CVEs?▾
Common Vulnerabilities and Exposures (CVEs) from the National Vulnerability Database (NVD) are directly relevant to government cybersecurity contracting. Agencies must remediate known vulnerabilities per CISA's Known Exploited Vulnerabilities catalog, creating demand for cybersecurity services. Tracking CVEs helps contractors anticipate remediation contract opportunities.
What is CISA's KEV catalog?▾
CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilities actively exploited in the wild. Federal agencies are required to remediate KEV entries within specified timeframes under BOD 22-01. Each KEV entry typically drives urgent procurement for patching, monitoring, or incident response services.
How do CVEs relate to government contracts?▾
Agencies issue contracts to remediate vulnerabilities, conduct security assessments, deploy patches, and monitor systems. High-severity CVEs affecting government systems often lead to urgent task orders under existing cybersecurity IDIQs. Bureauify links CVE data to related contract activity and agency spending patterns.
Browse More
NIST
Security frameworks
Agencies
95+ organizations
Certifications
CMMI, ISO, FedRAMP
Regulations
Federal Register
FAR Parts
53 regulation parts
DFARS
Defense supplements
Clearances
Security clearance levels
States
56 states & territories
NAICS Codes
1,051 industry codes
Set-Asides
Small business programs
Contracts
Active opportunities
Glossary
11,464 terms
Track & Save Vulnerability Alerts
Get alerts for CVEs affecting your tech stack, stay compliant with CMMC requirements, and prioritize patching with intelligence assistance.
Get cybersecurity updates in your inbox
Free weekly digest — new opportunities, closing deadlines, and market trends.
No spam. Unsubscribe anytime.