February 2026

9 results · Clear filters · Feed

• Critical 10.0
  CVE-2026-20127 Exploited Public exploit EPSS 88%

  Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

  Cisco Cisco Catalyst SD-WAN Manager Network devices
  Feb 25, 2026

  KEV Feb 25, 2026
• High 8.8
  CVE-2026-2441 Exploited Public exploit EPSS 54%

  Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code insid…

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Feb 13, 2026

  KEV Feb 17, 2026
• High 7.8
  CVE-2026-20700 Exploited Public exploit

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Feb 11, 2026

  KEV Feb 12, 2026
• High 7.8
  CVE-2026-21514 Exploited Public exploit

  Microsoft Word Security Feature Bypass Vulnerability

  Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.8
  CVE-2026-21510 Exploited Public exploit EPSS 61%

  Windows Shell Security Feature Bypass Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 7.8
  CVE-2026-21533 Exploited Public exploit

  Windows Remote Desktop Services Elevation of Privilege Vulnerability

  Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• Critical 9.9
  CVE-2026-1731 Exploited · Ransomware Public exploit EPSS 94%

  Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

  BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to ex…

  BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)
  Feb 6, 2026

  KEV Feb 13, 2026
• Critical 9.1
  CVE-2026-21643 Exploited Public exploit EPSS 98%

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet Forti…

  Fortinet FortiClientEMS Network devices
  Feb 6, 2026

  KEV Apr 13, 2026
• High 7.7
  CVE-2025-15556 Exploited Public exploit

  Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

  Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cryptographically verified. An attacker able to intercept or redirect update traff…

  notepad-plus-plus notepad-plus-plus
  Feb 3, 2026

  KEV Feb 12, 2026