VULNERABILITY REMEDIATIONCVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions. 01Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
02Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
03Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
19,287 guide candidatesPage 1051 of 1608
Review reviewHighResearch in progress
CVE-2026-3505Legion of the Bouncy Castle Inc. BC-JAVA, Red Hat Build of Apache Camel 4.14 for Quarkus 3.27, Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14
- Affected
- >= 1.74 < 1.80.2, >= 1.81 < 1.81.1, >= 1.82 < 1.84
- Fixed
- No verified fixed-version field is available yet
Review reviewCriticalResearch in progress
CVE-2025-14813Legion of the Bouncy Castle Inc. BC-JAVA, Red Hat AMQ Broker 7.12.7, Red Hat AMQ Broker 7.13.5
- Affected
- >= 1.59 < 1.80.2, >= 1.81 < 1.81.1, >= 1.82 < 1.84
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-33806fastify fastify, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)
- Affected
- >= 5.3.2 < 5.8.5
- Fixed
- 5.8.5
Review reviewHighFixed-version data
CVE-2026-40688Fortinet FortiWeb, fortiweb
- Affected
- >= 8.0.0 <= 8.0.3, >= 7.6.0 <= 7.6.6, >= 7.4.0 <= 7.4.11, >= 7.4.0 < 7.4.12, >= 7.6.0 < 7.6.7, >= 8.0.0 < 8.0.4
- Fixed
- 7.4.12, 7.6.7, 8.0.4
Review reviewCriticalResearch in progress
CVE-2026-39399NuGet NuGetGallery
- Affected
- < 0e80f87628349207cdcaf55358491f8a6f1ca276
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-39387BoidCMS BoidCMS, boidcms
- Affected
- < 2.1.3
- Fixed
- 2.1.3
Review reviewCriticalFixed-version data
CVE-2026-35589HKUDS nanobot
- Affected
- < 0.1.5
- Fixed
- 0.1.5
Review reviewCriticalFixed-version data
CVE-2026-35033jellyfin
- Affected
- < 10.11.7
- Fixed
- 10.11.7
Review reviewHighFixed-version data
CVE-2026-35032jellyfin
- Affected
- < 10.11.7
- Fixed
- 10.11.7
Review reviewHighFixed-version data
CVE-2026-35031jellyfin
- Affected
- < 10.11.7
- Fixed
- 10.11.7
Review reviewCriticalFixed-version data
CVE-2026-34457oauth2-proxy oauth2-proxy, oauth2 proxy
- Affected
- < 7.15.2
- Fixed
- 7.15.2
Review reviewHighResearch in progress
CVE-2026-33023saitoha libsixel
- Affected
- < 1.8.7-r1, <= 1.8.7
- Fixed
- No verified fixed-version field is available yet