Confirm exposure first
Match the product, version, installation path, and external exposure before treating a score as an action order.
VULNERABILITY REMEDIATION
CVE remediation guides
Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.
These defensive guides do not provide exploit reproduction or bypass instructions.Prefer supported fixes
Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.
Verify and retain rollback
Confirm version state, service health, access paths, logs, and rollback readiness after the change.
19,042 guide candidatesPage 1130 of 1587
Review reviewHighFixed-version data
CVE-2026-31844Koha Community Koha, koha
- Affected
- >= 24.11.0 <= 24.11.12, >= 25.05.0 <= 25.05.07, >= 25.11.0 <= 25.11.01, >= 24.11.0 < 24.11.12, >= 25.05.0 < 25.05.07, 25.11.00
- Fixed
- 24.11.12, 25.05.07
Review reviewCriticalResearch in progress
CVE-2026-29515MiCode FileExplorer, fileexplorer
- Affected
- See the vendor advisory and NVD configuration data
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-31837istio istio, Red Hat OpenShift AI 2.25, Red Hat OpenShift Service Mesh 3.0
- Affected
- >= >= 1.29.0-alpha.0, >= >= 1.28.0-alpha.0, < 1.27.8, >= 1.28.0 < 1.28.5, >= 1.29.0 < 1.29.1
- Fixed
- 1.27.8, 1.28.5, 1.29.1
Review reviewHighResearch in progress
CVE-2026-31812quinn-rs quinn, Logging Subsystem for Red Hat OpenShift 6.4, Red Hat Ansible Automation Platform 2.6
- Affected
- < 0.11.14
- Fixed
- No verified fixed-version field is available yet
Review reviewHighFixed-version data
CVE-2026-30951sequelize sequelize, Red Hat Satellite 6.18, Confidential Compute Attestation
- Affected
- >= >= 6.0.0-beta.1, < 6.37.8
- Fixed
- 6.37.8
Review reviewCriticalFixed-version data
CVE-2026-28292steveukx simple-git, Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 8
- Affected
- >= >= 3.15.0, < 3.32.3, >= 3.15.0 < 3.32.2
- Fixed
- 3.32.2
Review reviewCriticalFixed-version data
CVE-2026-3843Nefteprodukttekhnika LLC BUK TS-G Gas Station Automation System, buk ts-g gas station automation system, linux kernel
- Affected
- >= 2.9.1 <= 2.10.2, >= 2.9.1 < 2.10.2
- Fixed
- 2.10.2
Review reviewHighFixed-version data
CVE-2026-2273Schneider Electric EcoStruxure™ Automation Expert, ecostruxure automation expert
- Affected
- Versions prior to v25.0.1, < 25.0.1
- Fixed
- 25.0.1
Review reviewHighFixed-version data
CVE-2026-26130Microsoft ASP.NET Core 10.0, ASP.NET Core 8.0, ASP.NET Core 9.0
- Affected
- >= 10.0 < 10.0.4, >= 8.0 < 8.0.25, >= 9.0 < 9.0.14, >= 8.0.0 < 8.0.25, >= 9.0.0 < 9.0.14, >= 10.0.0 < 10.0.4
- Fixed
- 8.0.25, 9.0.14, 10.0.4
Review reviewHighFixed-version data
CVE-2026-24294Microsoft Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2
- Affected
- 10.0.14393.0, 10.0.17763.0, 10.0.19044.0, 10.0.19045.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 6.2.9200.0, 6.3.9600.0, 10.0.20348.0, 10.0.25398.0, < 10.0.14393.8957, < 10.0.17763.8511, < 10.0.19044.7058, < 10.0.19045.7058, < 10.0.22631.6783, < 10.0.26100.7979, < 10.0.26200.7979, < 10.0.28000.1719
- Fixed
- 10.0.14393.8957, 10.0.17763.8511, 10.0.19044.7058, 10.0.19045.7058, 10.0.22631.6783, 10.0.26100.7979, 10.0.26200.7979, 10.0.28000.1719, 10.0.20348.4830, 10.0.25398.2207, 10.0.26100.32463
Review reviewHighFixed-version data
CVE-2026-21262Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31)
- Affected
- 13.0.0, 14.0.0, 15.0.0.0, 15.0.0, 16.0.0, 16.0.0.0, 17.0.0.0, 17.0.1050.2, >= 13.0.6300.2 < 13.0.6480.4, >= 13.0.7000.253 < 13.0.7075.5, >= 14.0.1000.169 < 14.0.2100.4, >= 14.0.3006.16 < 14.0.3520.4, >= 15.0.2000.5 < 15.0.2160.4, >= 15.0.4003.23 < 15.0.4460.4, >= 16.0.1000.6 < 16.0.1170.5, >= 16.0.4003.1 < 16.0.4240.4, >= 17.0.1000.7 < 17.0.1105.2, >= 17.0.4006.2 < 17.0.4020.2
- Fixed
- 13.0.6480.4, 13.0.7075.5, 14.0.2100.4, 14.0.3520.4, 15.0.2160.4, 15.0.4460.4, 16.0.1170.5, 16.0.4240.4, 17.0.1105.2, 17.0.4020.2
Review reviewHighFixed-version data
CVE-2026-1286Schneider Electric EcoStruxure™ Foxboro DCS, ecostruxure foxboro dcs control software
- Affected
- Versions prior to CS8.1, < 8.1
- Fixed
- 8.1