Skip to content
OpenAdvisories

Archive

25 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /25 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2026-22719 Exploited EPSS 18%

    VMware Aria Operations command injection vulnerability

    VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote code execution in VMware Aria Operations while support-assisted product migratio…

    VMware Telco Cloud Platform VMware Aria Operations Telco Cloud Infrastructure
    KEV Mar 3, 2026
  • Medium 5.4
    CVE-2026-20122 Exploited EPSS 26%

    Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

    A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • Critical 10.0
    CVE-2026-20127 Exploited Public exploit EPSS 88%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Feb 25, 2026
  • High 7.5
    CVE-2026-20128 Exploited

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for t…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • Medium 6.5
    CVE-2026-20133 Exploited EPSS 35%

    A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive inf…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026