auren-research/cyber-sec huggingface dataset:
cveID: CVE-2026-3909
vendorProject: Google
product: Skia
vulnerabilityName: Google Skia Out-of-Bounds Write Vulnerability
dateAdded: 2026-03-13
shortDescription: Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-27
knownRansomwareCampaignUse: Unknown
notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-3909
cwes: CWE-787
cveID: CVE-2025-68613
vendorProject: n8n
product: n8n
vulnerabilityName: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
dateAdded: 2026-03-11
shortDescription: n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-25
knownRansomwareCampaignUse: Unknown
notes: https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp ; https://nvd.nist.gov/vuln/detail/CVE-2025-68613
cwes: CWE-913
cveID: CVE-2021-22054
vendorProject: Omnissa
product: Workspace One UEM
vulnerabilityName: Omnissa Workspace ONE Server-Side Request Forgery
dateAdded: 2026-03-09
shortDescription: Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-23
knownRansomwareCampaignUse: Unknown
notes: https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html ; https://nvd.nist.gov/vuln/detail/CVE-2021-22054
cwes: CWE-918
cveID: CVE-2025-26399
vendorProject: SolarWinds
product: Web Help Desk
vulnerabilityName: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
dateAdded: 2026-03-09
shortDescription: SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on the host machine.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-12
knownRansomwareCampaignUse: Unknown
notes: https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26399 ; https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2025-26399
cwes: CWE-502
cveID: CVE-2026-1603
vendorProject: Ivanti
product:  Endpoint Manager (EPM)
vulnerabilityName: Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
dateAdded: 2026-03-09
shortDescription: Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-23
knownRansomwareCampaignUse: Unknown
notes: https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2026-1603
cwes: CWE-288
cveID: CVE-2017-7921
vendorProject: Hikvision
product: Multiple Products
vulnerabilityName: Hikvision Multiple Products Improper Authentication Vulnerability
dateAdded: 2026-03-05
shortDescription: Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-26
knownRansomwareCampaignUse: Unknown
notes: https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/ ; https://nvd.nist.gov/vuln/detail/CVE-2017-7921
cwes: CWE-287
cveID: CVE-2021-22681
vendorProject: Rockwell
product: Multiple Products
vulnerabilityName: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
dateAdded: 2026-03-05
shortDescription: Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-26
knownRansomwareCampaignUse: Unknown
notes: https://support.rockwellautomation.com/app/answers/answer_view/a_id/1130301/~/cve-2021-22681%3A-authentication-bypass-vulnerability-found-in-logix-controllers- ; https://www.cisa.gov/news-events/ics-advisories/icsa-21-056-03 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22681
cwes: CWE-522
cveID: CVE-2023-43000
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple products Use-After-Free Vulnerability
dateAdded: 2026-03-05
shortDescription: Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-26
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/120324 ; https://support.apple.com/en-us/120331 ; https://support.apple.com/en-us/120338 ; https://nvd.nist.gov/vuln/detail/CVE-2023-43000
cwes: CWE-416
cveID: CVE-2021-30952
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Integer Overflow or Wraparound Vulnerability
dateAdded: 2026-03-05
shortDescription: Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-26
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT212975 ; https://support.apple.com/en-us/HT212976 ; https://support.apple.com/en-us/HT212978 ; https://support.apple.com/en-us/HT212980 ; https://support.apple.com/en-us/HT212982 ; https://nvd.nist.gov/vuln/detail/CVE-2021-30952
cwes: CWE-190
cveID: CVE-2023-41974
vendorProject: Apple
product: iOS and iPadOS
vulnerabilityName: Apple iOS and iPadOS Use-After-Free Vulnerability
dateAdded: 2026-03-05
shortDescription: Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-26
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213938 ; https://support.apple.com/kb/HT213938 ; https://nvd.nist.gov/vuln/detail/CVE-2023-41974
cwes: CWE-416
cveID: CVE-2026-22719
vendorProject: Broadcom
product: VMware Aria Operations
vulnerabilityName: Broadcom VMware Aria Operations Command Injection Vulnerability
dateAdded: 2026-03-03
shortDescription: Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection vulnerability that allows an unauthenticated attacker to execute arbitrary commands, potentially leading to remote code execution during support‑assisted product migration.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-24
knownRansomwareCampaignUse: Unknown
notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ; https://knowledge.broadcom.com/external/article/430349 ; https://nvd.nist.gov/vuln/detail/CVE-2026-22719
cwes: CWE-77
cveID: CVE-2026-21385
vendorProject: Qualcomm
product: Multiple Chipsets
vulnerabilityName: Qualcomm Multiple Chipsets Memory Corruption Vulnerability
dateAdded: 2026-03-03
shortDescription: Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation. 
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-24
knownRansomwareCampaignUse: Unknown
notes: Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2026/2026-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21385
cwes: CWE-190
cveID: CVE-2022-20775
vendorProject: Cisco
product: SD-WAN
vulnerabilityName: Cisco SD-WAN Path Traversal Vulnerability
dateAdded: 2026-02-25
shortDescription: Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.
requiredAction: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2026-02-27
knownRansomwareCampaignUse: Unknown
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sd-wan-priv-E6e8tEdF.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-20775
cwes: CWE-25
CWE-282
cveID: CVE-2026-20127
vendorProject: Cisco
product: Catalyst SD-WAN Controller and Manager
vulnerabilityName: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
dateAdded: 2026-02-25
shortDescription: Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
requiredAction: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2026-02-27
knownRansomwareCampaignUse: Unknown
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20127
cwes: CWE-287
cveID: CVE-2026-25108
vendorProject: Soliton Systems K.K
product: FileZen
vulnerabilityName: Soliton Systems K.K FileZen OS Command Injection Vulnerability
dateAdded: 2026-02-24
shortDescription: Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-17
knownRansomwareCampaignUse: Unknown
notes: https://jvn.jp/en/jp/JVN84622767/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-25108
cwes: CWE-78
cveID: CVE-2025-49113
vendorProject: Roundcube
product: Webmail
vulnerabilityName: RoundCube Webmail Deserialization of Untrusted Data Vulnerability
dateAdded: 2026-02-20
shortDescription: RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-13
knownRansomwareCampaignUse: Unknown
notes: https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10 ; https://github.com/roundcube/roundcubemail/releases/tag/1.5.10 ; https://github.com/roundcube/roundcubemail/releases/tag/1.6.11 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49113
cwes: CWE-502
cveID: CVE-2025-68461
vendorProject: Roundcube
product: Webmail
vulnerabilityName: RoundCube Webmail Cross-site Scripting Vulnerability
dateAdded: 2026-02-20
shortDescription: RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-13
knownRansomwareCampaignUse: Unknown
notes: https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12 ; https://github.com/roundcube/roundcubemail/commit/bfa032631c36b900e7444dfa278340b33cbf7cdb ; https://nvd.nist.gov/vuln/detail/CVE-2025-68461
cwes: CWE-79
cveID: CVE-2021-22175
vendorProject: GitLab
product: GitLab
vulnerabilityName: GitLab Server-Side Request Forgery (SSRF) Vulnerability
dateAdded: 2026-02-18
shortDescription: GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-11
knownRansomwareCampaignUse: Unknown
notes: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22175.json ; https://nvd.nist.gov/vuln/detail/CVE-2021-22175
cwes: CWE-918
cveID: CVE-2026-22769
vendorProject: Dell
product: RecoverPoint for Virtual Machines (RP4VMs)
vulnerabilityName: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
dateAdded: 2026-02-18
shortDescription: Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-02-21
knownRansomwareCampaignUse: Unknown
notes: https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079 ; https://www.dell.com/support/kbdoc/en-us/000426742/recoverpoint-for-vms-apply-the-remediation-script-for-dsa ; https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day ; https://nvd.nist.gov/vuln/detail/CVE-2026-22769
cwes: CWE-798
cveID: CVE-2020-7796
vendorProject: Synacor
product: Zimbra Collaboration Suite
vulnerabilityName: Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
dateAdded: 2026-02-17
shortDescription: Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is enabled.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-10
knownRansomwareCampaignUse: Unknown
notes: https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 ; https://nvd.nist.gov/vuln/detail/CVE-2020-7796
cwes: CWE-918
cveID: CVE-2024-7694
vendorProject: TeamT5
product: ThreatSonar Anti-Ransomware
vulnerabilityName: TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
dateAdded: 2026-02-17
shortDescription: TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system commands on the server.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-10
knownRansomwareCampaignUse: Unknown
notes: https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/ ; https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-7694
cwes: CWE-434
cveID: CVE-2008-0015
vendorProject: Microsoft
product: Windows
vulnerabilityName:  Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
dateAdded: 2026-02-17
shortDescription: Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-10
knownRansomwareCampaignUse: Unknown
notes: https://web.archive.org/web/20110305211119/https://www.microsoft.com/technet/security/bulletin/ms09-032.mspx ; https://nvd.nist.gov/vuln/detail/CVE-2008-0015
cveID: CVE-2026-2441
vendorProject: Google
product: Chromium
vulnerabilityName: Google Chromium CSS Use-After-Free Vulnerability
dateAdded: 2026-02-17
shortDescription: Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-10
knownRansomwareCampaignUse: Unknown
notes: https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-2441
cwes: CWE-416
cveID: CVE-2026-1731
vendorProject: BeyondTrust
product: Remote Support (RS) and Privileged Remote Access (PRA)
vulnerabilityName: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
dateAdded: 2026-02-13
shortDescription: BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation could allow an unauthenticated remote attacker to execute operating system commands in the context of the site user. Successful exploitation requires no authentication or user interaction and may lead to system compromise, including unauthorized access, data exfiltration, and service disruption.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-02-16
knownRansomwareCampaignUse: Known
notes: Please adhere to the vendor's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible BeyondTrust products affected by this vulnerability. For more information please: see: https://www.beyondtrust.com/trust-center/security-advisories/bt26-02 ; https://nvd.nist.gov/vuln/detail/CVE-2026-1731
cwes: CWE-78
cveID: CVE-2026-20700
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Buffer Overflow Vulnerability
dateAdded: 2026-02-12
shortDescription: Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.
requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dueDate: 2026-03-05
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/126346 ; https://support.apple.com/en-us/126348 ; https://support.apple.com/en-us/126351 ; https://support.apple.com/en-us/126352 ; https://support.apple.com/en-us/126353 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20700
cwes: CWE-119