CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Palo Alto Networks PAN-OS Management Interface Remote Code Execution (RCE) Vulnerability (CVE-2026-0322)
[Affected Scope] Management interfaces of PA-Series, VM-Series firewalls, and Panorama (Virtual and M-Series) running PAN-OS
[Impact] An authenticated attacker with network access can execute arbitrary code with root privileges, leading to full system compromise
[Mitigation] Apply the latest security patches immediately and restrict management interface access to trusted internal IP addresses only
Cisco Secure Email Gateway and Secure Email and Web Manager Remote Code Execution (RCE) Vulnerability Advisory (CVE-2025-20393)
[Affected Scope] Cisco Secure Email Gateway and Cisco Secure Email and Web Manager running Cisco AsyncOS Software with the Spam Quarantine feature enabled
[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the underlying operating system
[Mitigation] Apply official Cisco security patches immediately, or restrict/disable external access to the Spam Quarantine feature as a temporary workaround
Cisco ISE and ISE-PIC Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2025-20281)
[Affected Scope] Specific API endpoints of Cisco Identity Services Engine (ISE) and Cisco ISE-PIC
[Impact] An unauthenticated, remote attacker can execute arbitrary code with root privileges on the underlying operating system by sending a crafted API request
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the management API ports