Notable CVEs (NVD)

Critical pre-authentication bypass in cPanel & WHM. Exploited in ransomware campaigns since February 2026.

Elevation of privilege in Windows Kerberos KDC. Actively exploited. Patch included in May 2026 update.

Pre-authentication heap-based buffer overflow in SonicWall SMA 1000 series allowing unauthenticated RCE.