CVEs published in February 2026
141 tracked CVEs from 16 vendors had their first vendor advisory published in February 2026: 30 critical, 59 high, 9 in CISA KEV. Newest first.
206 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-55018Medium
inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS…
Fortinet · 1 advisory - Added
CVE-2025-52436High
FortiSandbox: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in…
Fortinet · 1 advisory - Added
CVE-2026-1602Medium
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database
Ivanti · 1 advisory - Added
CVE-2026-22153High
LDAP authentication bypass in Agentless VPN and FSSO
Fortinet · 1 advisory - Added
CVE-2026-25639High
Axios Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2025-14831Medium
Denial of Service via excessive resource consumption during certificate verification
NetApp, Red Hat · 2 advisories - Added
CVE-2026-22922Unrated
Apache Airflow: Airflow externalLogUrl Permission Bypass
Apache · 1 advisory - Added
CVE-2026-24098Unrated
Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors
Apache · 1 advisory - Added
Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems
Apache · 1 advisory - Added
CVE-2026-25749High
Vim Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-21643CriticalCISA KEV
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · 1 advisory - Added
CVE-2026-2100Medium
NULL dereference via C_DeriveKey with specific NULL parameters
NetApp, Red Hat · 2 advisories - Added
CVE-2025-8177Medium
LibTIFF Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-8176Medium
LibTIFF Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-68121Critical
Incorrect certificate validation during TLS session resumption
NetApp, Red Hat, Splunk, Veeam · 5 advisories - Added
CVE-2025-58190Critical
Infinite parsing loop in golang.org/x/net
Red Hat, Splunk, Veeam · 3 advisories - Added
CVE-2025-47911Critical
Quadratic parsing complexity in golang.org/x/net/html
Red Hat, Splunk, Veeam · 3 advisories - Added
CVE-2025-61732Critical
Go cgo: Code smuggling due to comment parsing discrepancy
Red Hat, Splunk, Veeam · 3 advisories - Added
CVE-2025-22873Critical
Information disclosure via path traversal using specially crafted filenames
Red Hat, Veeam · 2 advisories - Added
CVE-2026-25499High
Proxmox Virtual Environment: Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment.
Proxmox · 1 advisory - Added
CVE-2026-22549Medium
vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets
F5 · 1 advisory - Added
CVE-2026-20123Medium
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Open Redirect Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20119High
Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20111Medium
Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20098High
Cisco Meeting Management Arbitrary File Upload Vulnerability
Cisco · 1 advisory - Added
CVE-2026-20056Medium
Cisco Secure Web Appliance Real-Time Scanning Archive File Bypass Vulnerability
Cisco · 1 advisory - Added
CVE-2026-22548Medium
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions…
F5 · 1 advisory - Added
vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages
F5 · 1 advisory - Added
vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may
F5 · 1 advisory - Added
CVE-2026-1642Critical
vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers
F5, NetApp, Red Hat, Splunk · 4 advisories - Added
CVE-2026-23066High
Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg
NetApp, Red Hat · 2 advisories - Added
CVE-2025-68813Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-56779Medium
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-14550Critical
Denial of Service via crafted request with duplicate headers
Red Hat, Splunk · 2 advisories - Added
CVE-2026-1312Critical
SQL injection via crafted column aliases in QuerySet.order_by
Red Hat, Splunk · 2 advisories - Added
CVE-2026-1287Critical
SQL Injection via crafted column aliases
Red Hat, Splunk · 2 advisories - Added
CVE-2026-1285Critical
Denial of Service via crafted HTML inputs
Red Hat, Splunk · 2 advisories - Added
CVE-2026-1207Critical
SQL Injection via RasterField band index parameter
Red Hat, Splunk · 2 advisories - Added
CVE-2026-24040Critical
Cross-User Data Leakage via race condition in addJS method
Red Hat, Splunk · 2 advisories - Added
CVE-2026-24737Critical
Arbitrary code execution via unsanitized input in Acroform module
Red Hat, Splunk · 2 advisories - Added
CVE-2026-1757Medium
Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell
NetApp, Red Hat · 2 advisories