Mikrotik RouterOs

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV Weekly CVE report chart comparing Daily Cybersecurity exploited vulnerabilities against the CISA KEV catalog

Weekly CVE report chart comparing Daily Cybersecurity exploited vulnerabilities against the CISA KEV catalog

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

Do Son September 14, 2026

Between September 7 and September 13, 2026, our tracker logged 3,856 new CVEs. This weekly CVE report...

CVE-2022-45313: Mikrotik RouterOs flaw can lead to execute arbitrary code

Do Son December 5, 2022

A vulnerability exists in MikroTik’s RouterOS in versions prior to stable v7.5, released on August 31, 2018....

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 7 days →

CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-94130CVSS 9.3
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection...
📅 Updated: Sep 27, 2026
CVE-2026-97161CVSS 9.2
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
📅 Updated: Sep 27, 2026
CVE-2026-97163CVSS 10.0
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
📅 Updated: Sep 27, 2026
CVE-2026-94132CVSS 9.5
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension <...
📅 Updated: Sep 27, 2026
CVE-2026-97160CVSS 9.4
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
📅 Updated: Sep 27, 2026
CVE-2026-100835CVSS 9.1
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified...
📅 Updated: Sep 27, 2026
CVE-2026-100721CVSS 9.5
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with...
📅 Updated: Sep 27, 2026
CVE-2026-100740CVSS 9.4
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of...
📅 Updated: Sep 27, 2026

Critical Alert 2 Active Exploits Detected Today

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

CVE-2022-45313: Mikrotik RouterOs flaw can lead to execute arbitrary code