By year
03
05
07
20
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-81945 PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in theHigh 7.5 · Sep 18, 2026
- CVE-2026-81944 PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in theHigh 7.7 · Sep 18, 2026
- CVE-2026-81943 PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the emHigh 8.4 · Sep 18, 2026
- CVE-2026-81942 PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerabilitHigh 8.7 · Sep 18, 2026
- CVE-2026-75124 PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _reHigh 8.7 · Aug 28, 2026
- CVE-2026-75123 PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.High 8.6 · Aug 28, 2026
- CVE-2026-75122 PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi.High 8.6 · Aug 28, 2026
- CVE-2026-75121 PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi.High 8.6 · Aug 28, 2026
- CVE-2025-54406 Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54405 Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54404 Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54403 Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54402 Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54401 Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54400 Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-54399 Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-48826 A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.High 8.8 · Oct 7, 2025
- CVE-2025-9972 Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackeCritical 9.3 · Sep 17, 2025
- CVE-2025-9971 Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackCritical 9.3 · Sep 17, 2025
- CVE-2025-44898 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function.Critical 9.8 · May 20, 2025
- CVE-2025-44897 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function.Critical 9.8 · May 20, 2025
- CVE-2025-44896 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post function.Critical 9.8 · May 20, 2025
- CVE-2025-44894 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function.Critical 9.8 · May 20, 2025
- CVE-2025-44891 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function.Critical 9.8 · May 20, 2025
- CVE-2025-44883 FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function.Critical 9.8 · May 20, 2025
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.