Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (381219 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-13376 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-1071. This issue affects Fireware OS 12.0 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
CVE-2026-13373 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13936.
CVE-2026-13374 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13937.
CVE-2026-13375 1 Watchguard 40 Firebox M270, Firebox M290, Firebox M295 and 37 more 2026-08-10 4.8 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13938. This issue affects Fireware OS 12.4 up to and including 12.12, 12.5 up to and including 12.5.18, and 2025.1 up to and including 2026.2.
CVE-2026-6788 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.
CVE-2026-40512 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-6787 1 Watchguard 3 Agent, Single Watchguard Agent, Watchguard Agent 2026-08-10 7.8 High
Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.
CVE-2026-35006 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35005 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22653 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22654 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22655 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22656 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22657 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22658 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22652 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-22651 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35028 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35027 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35026 2026-08-10 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.