CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-815789.8/CRITICALEPSS 84.7%CISA KEV
2026-08-28

PaperCut MF/NG Web Management Interface Improper Access Control Vulnerability (CVE-2026-81578) Advisory

[Affected Scope] Web management interface of PaperCut MF and PaperCut NG.

[Impact] Unauthenticated remote attackers can trigger backend actions and modify system configurations before access validation checks complete, potentially leading to Remote Code Execution (RCE).

[Mitigation] Apply the official vendor security patches immediately and restrict external access to the web management ports (default 9191, 9192).

CVE-2024-407669.8/CRITICALEPSS 18.4%CISA KEV
2024-08-23

SonicWall SonicOS Management Access Improper Access Control Vulnerability (CVE-2024-40766) Analysis and Mitigation Guide

[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions

[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse