PatchTheCVESecurity software: vulnerabilities and fixes
Antivirus, EDR and security product vulnerabilities from Sophos, Trend Micro, McAfee, Symantec, CrowdStrike and others. 19 CVEs tracked.
Security software has 19 tracked vulnerabilities, 4 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 12. Most recent: 2026-10-23. Highest priority: CVE-2026-16232 (score 97/100).
- CVE-2026-16232 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Check Point SmartConsole Improper Authentication Vulnerability
- CVE-2026-85102 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Check Point Multiple Products Improper Certificate Validation Vulnerability
- CVE-2026-93616 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Check Point Multiple Products Path Traversal Vulnerability
- CVE-2026-61609 HIGH 7.5 Pterodactyl is a free, open-source game server management panel
- CVE-2026-20043 CRITICAL 9.0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
- CVE-2026-74038 HIGH 7.1 UPGRADE Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers
- CVE-2026-74044 MEDIUM 6.5 UPGRADE Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to d
- CVE-2026-74039 MEDIUM 6.5 UPGRADE Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated
- CVE-2026-73325 HIGH 7.8 Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that a
- CVE-2026-20218 MEDIUM 5.8 A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco prod
- CVE-2026-54123 MEDIUM 5.5 UPGRADE Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an author
- CVE-2026-74046 MEDIUM 4.9 UPGRADE Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function withi
- CVE-2026-57208 MEDIUM 6.2 Entire CLI hooks into Git workflows to capture AI agent sessions
- CVE-2026-115883 MEDIUM 6.0 LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and
- CVE-2026-48121 MEDIUM 6.7 @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses Mongo
- CVE-2026-20291 HIGH 7.8 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source S
- CVE-2026-69112 HIGH 7.1 Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and
- CVE-2026-75104 MEDIUM 5.5 Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to r
- CVE-2026-65920 MEDIUM 4.3 Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpo
FAQ
How do I fix Security software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is Security software being exploited right now?
Yes: 3 Security software CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.
Which Security software CVE should I patch first?
CVE-2026-16232 currently ranks highest (97/100): Check Point SmartConsole Improper Authentication Vulnerability.
Software in this group
People search for: antivirus, edr, sophos, trend micro, mcafee, crowdstrike, wazuh.