RA
Product
Ruggedcom Ape1808 Firmware
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
9
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 8High 8Medium 2Low 0
Watch
Add Ruggedcom Ape1808 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109618 In wildKEVNew | 9.8 | Oct 21 | RCE via OOM corruption Affected: All versions, or not specified |
| CVE-2026-0300 In wildKEV | 9.8 | May 6 | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal Affected: All versions, or not specified |
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: All versions, or not specified |
| CVE-2025-25249 In wildKEV | 9.8 | Jan 13 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2025-59718 In wildKEV | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Affected: All versions, or not specified |
| CVE-2026-0257 RansomwareIn wildKEV | 9.1 | May 13 | PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Affected: All versions, or not specified |
| CVE-2026-109619 In wildKEVNew | 8.1 | Oct 21 | RCE via stale global state Affected: All versions, or not specified |
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: All versions, or not specified |
| CVE-2025-61624 In wildKEV | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2026-0264 | 9.8 | May 13 | PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution Affected: All versions, or not specified |
| CVE-2026-0258 | 9.1 | May 13 | PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching Affected: All versions, or not specified |
| CVE-2021-42554 | 8.2 | Feb 3 | An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before… Affected: All versions, or not specified |
| CVE-2026-0265 | 8.1 | May 13 | PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled Affected: All versions, or not specified |
| CVE-2026-0262 | 7.5 | May 13 | PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Affected: All versions, or not specified |
| CVE-2021-33625 | 7.5 | Feb 3 | An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword Affected: All versions, or not specified |
| CVE-2020-5953 | 7.5 | Feb 3 | A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer… Affected: All versions, or not specified |
| CVE-2026-0261 | 7.2 | May 13 | PAN-OS: Authenticated Admin Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2026-0256 | 4.8 | May 13 | PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface Affected: All versions, or not specified |
Showing 18