CVEs published in February 2026
141 tracked CVEs from 16 vendors had their first vendor advisory published in February 2026: 30 critical, 59 high, 9 in CISA KEV. Newest first.
206 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform
VMware · 1 advisory - Added
CVE-2026-22716Medium
Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform
VMware · 1 advisory - Added
CVE-2025-66516Critical
Apache Tika Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-49861High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-41996High
Diffie-Hellman Key Exchange Protocol Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2022-40735High
Diffie-Hellman Key Exchange Protocol Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2002-20001High
Diffie-Hellman Key Exchange Protocol Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-22722Medium
malicious actor with authenticated user privileges on a Windows based Workstation host
VMware · 1 advisory - Added
CVE-2026-22715Medium
Workstation: VMWare Workstation and Fusion contain a logic flaw in the management of network packets.
VMware · 1 advisory - Added
CVE-2026-27141Critical
Denial of Service due to malformed HTTP/2 frames
NetApp, Red Hat, Splunk · 4 advisories - Added
CVE-2026-22728Medium
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.
VMware · 1 advisory - Added
CVE-2026-27959Critical
Host header injection vulnerability due to malformed HTTP Host header parsing
Red Hat, Splunk · 2 advisories - Added
CVE-2026-27904Critical
Denial of Service via catastrophic backtracking in glob expressions
NetApp, Red Hat · 2 advisories - Added
CVE-2026-22721Medium
vCenter: VMware Aria Operations contains a privilege escalation vulnerability.
VMware · 1 advisory - Added
CVE-2026-22720High
Aria Operations: VMware Aria Operations contains a stored cross-site scripting vulnerability.
VMware · 1 advisory - Added
CVE-2026-22719HighCISA KEV
Broadcom VMware Aria Operations Command Injection Vulnerability
VMware · 1 advisory - Added
CVE-2026-21902Critical
Junos: Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper…
Juniper · 1 advisory - Added
CVE-2026-20107Medium
Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20099Medium
Cisco FXOS and UCS Manager Software Command Injection Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20091Medium
Cisco FXOS and UCS Manager Software Stored Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20051High
Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20048High
Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20037Medium
Cisco UCS Manager Software Privilege Escalation Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20036Medium
Cisco UCS Manager Software Command Injection Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20033High
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20010High
Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
Cisco · 1 advisory - Added
Util-linux Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-2914Medium
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower
Palo Alto · 1 advisory - Added
CVE-2026-25747High
Arbitrary code execution via deserialization of untrusted data
Apache, Red Hat · 4 advisories - Added
CVE-2025-65995Unrated
Apache Airflow: Disclosure of secrets to UI via kwargs
Apache · 1 advisory - Added
CVE-2026-26996Critical
Denial of Service via specially crafted glob patterns
NetApp, Red Hat, Splunk · 3 advisories - Added
CVE-2026-25940Critical
PDF injection in AcroForm module allows arbitrary JavaScript execution (RadioButton children)
Red Hat, Splunk · 2 advisories - Added
CVE-2026-25755Critical
PDF object injection via unsanitized input in addJS method
Red Hat, Splunk · 2 advisories - Added
CVE-2026-25535Critical
denial of service via malicious GIF dimensions
Red Hat, Splunk · 2 advisories - Added
CVE-2025-14009Critical
Zip Slip Vulnerability in nltk Leading to Code Execution
NetApp, Red Hat · 2 advisories - Added
CVE-2026-2507High
BIG-IP: When BIG-IP AFM or BIG-IP DDoS is provisioned, undisclosed traffic can cause TMM to terminate.
F5 · 1 advisory - Added
CVE-2026-23599High
local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux
Aruba · 1 advisory - Added
CVE-2026-24734High
Certificate revocation bypass due to improper OCSP response validation
Apache, Red Hat · 2 advisories - Added
CVE-2026-24733Medium
security constraint bypass with HTTP/0.9
NetApp, Red Hat · 2 advisories - Added
CVE-2025-66614Medium
Client certificate verification bypass due to virtual host mapping
Apache, NetApp, Red Hat · 3 advisories - Added
CVE-2026-23193High
Fix use-after-free in iscsit_dec_session_usage_count
NetApp, Red Hat · 2 advisories - Added
CVE-2025-39973Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-39971Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-38666High
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-38622Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-2006Critical
PostgreSQL missing validation of multibyte character length executes arbitrary code
Red Hat, Splunk · 2 advisories - Added
CVE-2026-2005Critical
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
Red Hat, Splunk · 2 advisories - Added
CVE-2026-2004Critical
PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
Red Hat, Splunk · 2 advisories - Added
CVE-2026-25990High
Out-of-bounds Write via Specially Crafted PSD Image
Red Hat, Splunk · 2 advisories - Added
CVE-2026-0229High
denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software
Palo Alto · 1 advisory - Added
CVE-2026-0228Medium
improper certificate validation vulnerability in PAN-OS
Palo Alto · 1 advisory - Added
CVE-2026-26158High
Busybox Vulnerability in NetApp Products
NetApp, Red Hat · 3 advisories - Added
CVE-2026-26157High
Busybox Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2025-69873Critical
ReDoS via $data reference
Red Hat, Splunk · 2 advisories - Added
CVE-2026-26007Critical
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
NetApp, Red Hat, Splunk · 5 advisories - Added
CVE-2025-14847LowCISA KEV
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
Commvault · 1 advisory - Added
CVE-2026-0965Medium
Denial of Service via improper configuration file handling
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0966Medium
Denial of Service via zero-length input in ssh_get_hexa
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0967Medium
Denial of Service via inefficient regular expression processing
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0968Medium
Denial of Service due to malformed SFTP message
NetApp, Red Hat · 2 advisories - Added
CVE-2026-0964Medium
Improper sanitation of paths received from SCP servers
NetApp, Red Hat · 2 advisories - Added
CVE-2026-20846High
GDI+ Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21222Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21231High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21232High
Windows HTTP.sys Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21237High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21238High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21239High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21241High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21240High
Windows HTTP.sys Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21243High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21244High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21245High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
Windows NTLM Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21250High
Windows HTTP.sys Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21251High
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21253High
Mailslot File System Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21255High
Windows Hyper-V Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21508High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21511High
Microsoft Outlook Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21525MediumCISA KEV
Microsoft Windows NULL Pointer Dereference Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21510HighCISA KEV
Microsoft Windows Shell Protection Mechanism Failure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21527Medium
Microsoft Exchange Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21513HighCISA KEV
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21533HighCISA KEV
Microsoft Windows Improper Privilege Management Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21236High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21234High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21235High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21242High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21246High
Windows Graphics Component Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21247High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21248High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21260High
Microsoft Outlook Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-21519HighCISA KEV
Microsoft Windows Type Confusion Vulnerability
MS Server · 1 advisory - Added
CVE-2026-25646Critical
LIBPNG has a heap buffer overflow in png_set_quantize
NetApp, Red Hat · 2 advisories - Added
CVE-2026-21743High
missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions…
Fortinet · 1 advisory - Added
CVE-2025-68686MediumCISA KEV
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet · 1 advisory - Added
CVE-2025-64157Medium
use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9…
Fortinet · 1 advisory - Added
CVE-2025-62676High
FortiClient: Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet…
Fortinet · 1 advisory - Added
CVE-2025-62439Medium
Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0…
Fortinet · 1 advisory