CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“3 of 3 advisories (Page 1/1)
CVE-2026-587048.8/HIGHEPSS 0.6%CISA KEV
2026-09-15

Google Pixel Cellular Modem Privilege Escalation Vulnerability (CVE-2026-58704) Security Advisory

[Affected Scope] Google Pixel devices and Android hardware utilizing specific cellular modem chipsets.

[Impact] Remote (proximal/adjacent) attackers can bypass permissions to escalate privileges without user interaction, leading to full modem compromise.

[Mitigation] Immediately apply the September 2026 or later Android security patches (2026-09-01).

CVE-2021-287999.8/CRITICALEPSS 78.3%CISA KEV
2021-05-13

QNAP HBS 3 (Hybrid Backup Sync) Improper Authorization Vulnerability (CVE-2021-28799) Security Advisory

[Affected Scope] QNAP HBS 3 (Hybrid Backup Sync) running on QTS, QuTS hero, and QuTScloud operating systems

[Impact] Unauthenticated remote attackers can exploit improper authorization to log in to the device with administrative privileges, potentially leading to full system compromise

[Mitigation] Immediately update HBS 3 to the patched versions and restrict external internet access to the NAS management interface

CVE-2020-269199.8/CRITICALEPSS 57.5%CISA KEV
2020-10-09

NETGEAR JGS516PE Missing Function-Level Access Control Vulnerability (CVE-2020-26919) Analysis and Mitigation Guide

[Affected Scope] NETGEAR JGS516PE devices running firmware versions prior to 2.6.0.43

[Impact] Unauthenticated remote attackers can bypass authentication to access sensitive management functions, potentially leading to arbitrary command execution and full device compromise

[Mitigation] Immediately upgrade the JGS516PE firmware to version 2.6.0.43 or later and restrict access to the management interface

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse