NIS2 & DORA Compliance

Regulatory triage for vulnerability prioritization – classification based on existing CVE data

Regulatory Triage ICT Providers
NIS2 Relevant
448
DORA Relevant
65
Internet-Facing
383
Third-Party ICT
65
Unpatched
445
Exploited
73
Framework:
Period:
Sort:
CVE-2026-4154
Integer overflow in GIMP XPM file parser enables remote code execution when processing malicious XPM image files. Affects GIMP installations across platforms. Attackers can execute arbitrary code in victim's process context by delivering crafted XPM files via social engineering or drive-by downloads. Vulnerability requires user interaction (opening malicious file). CVSS 7.8 (High severity). No public exploit identified at time of analysis. Upstream patch committed to GIMP repository; vendor-released version not independently confirmed.
NIS2 DORA Edge exposure ICT dependency SUSE
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • Third-party ICT: SUSE
  • • Strong evidence (KEV / high EPSS / multi-source)
DORA Relevant
  • • HIGH severity
  • • ICT provider: SUSE (Infrastructure & Virtualization)
7.8
CVSS 3.0
0.1%
EPSS
39
Priority
CVE-2026-4151
Remote code execution in GIMP via integer overflow during ANI (animated cursor) file parsing allows unauthenticated attackers to execute arbitrary code with user privileges when malicious ANI files are opened. Exploitation requires user interaction (opening crafted file or visiting attacker-controlled page). Insufficient validation of user-supplied data triggers integer overflow before buffer allocation, enabling memory corruption. No public exploit identified at time of analysis. CVSS 7.8 (High) reflects local attack vector with no privilege requirements.
NIS2 DORA Edge exposure ICT dependency SUSE
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • Third-party ICT: SUSE
  • • Strong evidence (KEV / high EPSS / multi-source)
DORA Relevant
  • • HIGH severity
  • • ICT provider: SUSE (Infrastructure & Virtualization)
7.8
CVSS 3.0
0.1%
EPSS
39
Priority
CVE-2026-4153
Heap-based buffer overflow in GIMP's PSP (Paint Shop Pro) file parser enables remote code execution when processing malicious PSP image files. Unauthenticated attackers can execute arbitrary code with user privileges by convincing targets to open crafted PSP files. CVSS 7.8 (High) reflects local attack vector requiring user interaction. No public exploit identified at time of analysis. Vulnerability tracked as ZDI-CAN-28874 by Zero Day Initiative.
NIS2 DORA Edge exposure ICT dependency SUSE
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • Third-party ICT: SUSE
  • • Strong evidence (KEV / high EPSS / multi-source)
DORA Relevant
  • • HIGH severity
  • • ICT provider: SUSE (Infrastructure & Virtualization)
7.8
CVSS 3.0
0.1%
EPSS
39
Priority
CVE-2026-4152
Heap-based buffer overflow in GIMP's JP2 image parser enables unauthenticated remote code execution when users open crafted JPEG 2000 files. The vulnerability stems from insufficient validation of user-supplied data length before copying to heap memory, allowing attackers to execute arbitrary code with user privileges. Exploitation requires social engineering to convince targets to open malicious JP2 files. No public exploit identified at time of analysis.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
7.8
CVSS 3.0
0.1%
EPSS
39
Priority
CVE-2026-5495
Out-of-bounds write in Labcenter Electronics Proteus PDSPRJ file parser enables unauthenticated remote code execution when victims open crafted project files. The vulnerability stems from insufficient validation during PDSPRJ file processing, allowing buffer overflow conditions that permit arbitrary code execution with victim's privileges. Exploitation requires user interaction-opening a malicious PDSPRJ file or visiting attacker-controlled web content. CVSS 7.8 (High) reflects local attack vector with no privileges required but mandatory user interaction. No public exploit identified at time of analysis. Affects all versions per available CPE data.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Moderate evidence (PoC / elevated EPSS)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2026-5496
Type confusion in Labcenter Electronics Proteus PDSPRJ file parser enables remote code execution when users open malicious project files. Attackers exploit insufficient validation during file parsing to trigger memory corruption, achieving arbitrary code execution with victim user privileges. Requires social engineering to deliver weaponized PDSPRJ files via email, web download, or file sharing. Publicly available exploit code exists (ZDI advisory disclosure). CVSS 7.8 reflects local attack vector requiring user interaction but no authentication.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Moderate evidence (PoC / elevated EPSS)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2026-5493
Out-of-bounds write during PDSPRJ file parsing in Labcenter Electronics Proteus enables remote code execution when users open malicious project files. Attackers exploit insufficient input validation to write beyond allocated buffer boundaries, executing arbitrary code with victim's privileges. Requires user interaction (opening crafted PDSPRJ file). CWE-787 memory corruption vulnerability. No public exploit identified at time of analysis.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2026-5494
Out-of-bounds write in Labcenter Electronics Proteus PDSPRJ file parser enables unauthenticated remote code execution with high integrity impact. Exploitation requires user interaction (opening malicious PDSPRJ file or visiting attacker-controlled page). Insufficient input validation during PDSPRJ processing allows buffer overflow, writing arbitrary data beyond allocated memory boundaries. Successful exploitation grants attacker code execution in application context with full confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2026-21380
Local privilege escalation via use-after-free in Qualcomm Snapdragon video memory management allows authenticated attackers with low privileges to achieve complete system compromise. The vulnerability exists in deprecated DMABUF IOCTL interfaces used for direct memory access buffer operations. No public exploit identified at time of analysis, with EPSS data unavailable for this 2026 CVE. Qualcomm addressed this in their April 2026 security bulletin.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21382
Memory corruption in Qualcomm Snapdragon components allows local authenticated users to achieve arbitrary code execution with high impact to confidentiality, integrity, and availability through malformed power management requests. The vulnerability stems from improper validation of input/output buffer sizes in power management handlers. EPSS data not available; no confirmed active exploitation (not listed in CISA KEV) or public exploit code identified at time of analysis. Qualcomm addressed this in their April 2026 security bulletin.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21378
Local privilege escalation in Qualcomm Snapdragon camera sensor drivers allows authenticated users to execute arbitrary code with elevated privileges through memory corruption. The vulnerability stems from unbounded buffer access during IOCTL processing, enabling attackers to corrupt memory and achieve complete system compromise (confidentiality, integrity, and availability impact). EPSS data not available; no public exploit identified at time of analysis. Affects Qualcomm Snapdragon-powered devices across mobile and IoT ecosystems.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21373
Local privilege escalation in Qualcomm Snapdragon products allows authenticated attackers to gain kernel-level code execution through memory corruption during IOCTL processing. The vulnerability stems from unchecked buffer size validation when writing to output buffers, enabling high-impact compromise of confidentiality, integrity, and availability on affected mobile and embedded devices. With a CVSS score of 7.8 and low attack complexity (AC:L), this represents a significant privilege escalation vector for malicious applications or local users, though no public exploit or active exploitation has been identified at time of analysis.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-5054
Local privilege escalation in NoMachine allows authenticated low-privileged attackers to execute arbitrary code as root through improper validation of command line path parameters. The vulnerability stems from insufficient sanitization of user-supplied file paths in file operations, enabling path traversal to manipulate privileged system resources. Exploitation requires existing low-privileged code execution on the target system. CVSS 7.8 (High) reflects local attack vector with low complexity and no user interaction required. No public exploit identified at time of analysis.
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2026-21375
Memory corruption in Qualcomm Snapdragon chipsets allows authenticated local attackers with low privileges to execute arbitrary code, elevate privileges, or cause system crashes through improper IOCTL buffer validation. The vulnerability achieves complete compromise of confidentiality, integrity, and availability (CVSS 7.8 HIGH). No public exploit code identified at time of analysis, though exploitation requires only low attack complexity once local access is obtained. Qualcomm addressed this in their April 2026 security bulletin.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-5055
Local privilege escalation in NoMachine Device Server allows authenticated low-privileged attackers to execute arbitrary code with SYSTEM privileges by exploiting unsafe library loading from an unsecured search path. The vulnerability (ZDI-CAN-28494) requires prior local access but enables full system compromise through DLL hijacking or similar path manipulation. No KEV listing or public exploit identified at time of analysis. CVSS 7.8 (High) with attack vector requiring local access and low privileges (AV:L/PR:L).
NIS2 Edge exposure No patch available
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Internet-facing technique: rce
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
7.8
CVSS 3.0
0.0%
EPSS
39
Priority
CVE-2025-14821
Local privilege escalation in libssh on Windows systems allows authenticated users with low privileges to conduct man-in-the-middle attacks against SSH connections by creating malicious configuration files in C:\etc. The vulnerability stems from insecure default behavior where libssh automatically loads SSH configuration from a world-writable directory location. Red Hat Enterprise Linux 6-10, RHEL Hardened Images, and OpenShift Container Platform 4 are affected. No public exploit identified at time of analysis, though EPSS data is not available and exploitation complexity is low (CVSS AC:L).
NIS2 DORA ICT dependency No patch available Red Hat
Why flagged?
NIS2 Relevant
  • • HIGH severity
  • • Third-party ICT: Red Hat
  • • No patch available
  • • Strong evidence (KEV / high EPSS / multi-source)
DORA Relevant
  • • HIGH severity
  • • ICT provider: Red Hat (Infrastructure & Virtualization)
  • • No remediation available
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-25203
Local privilege escalation in Samsung MagicINFO 9 Server versions prior to 21.1091.1 enables authenticated low-privileged users to escalate to high privileges through incorrect default file/directory permissions. Attackers with local access can obtain complete system control, compromising confidentiality, integrity, and availability. Attack requires local access and low-level authentication but no user interaction. No public exploit identified at time of analysis.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2025-47391
Local privilege escalation in Qualcomm Snapdragon allows authenticated users to execute arbitrary code through memory corruption when processing frame requests. This CWE-121 stack-based buffer overflow enables complete system compromise (high confidentiality, integrity, and availability impact). No public exploit identified at time of analysis, with CVSS 7.8 indicating high severity requiring low attack complexity and low privileges. Qualcomm's April 2026 security bulletin addresses this vulnerability.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21376
Local privilege escalation in Qualcomm Snapdragon camera sensor drivers allows authenticated attackers with low privileges to execute arbitrary code with elevated permissions through unchecked output buffer access during IOCTL operations. This out-of-bounds read vulnerability (CWE-126) achieves complete system compromise (confidentiality, integrity, and availability impact all rated High in CVSS). No public exploit identified at time of analysis, though the local attack vector and low complexity suggest proof-of-concept development is feasible for researchers with device access.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21371
Memory corruption in Qualcomm Snapdragon components allows local authenticated attackers to execute arbitrary code with high privileges. A buffer overflow vulnerability (CWE-126) occurs during output buffer retrieval due to insufficient size validation, enabling complete system compromise with high confidentiality, integrity, and availability impact. EPSS risk data not available; no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis. The local attack vector (AV:L) and low complexity (AC:L) make this exploitable by malicious apps or local users on affected Snapdragon-powered devices.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21374
Memory corruption in Qualcomm Snapdragon auxiliary sensor I/O control processing allows authenticated local attackers to achieve arbitrary code execution with high integrity and confidentiality impact. The vulnerability stems from insufficient buffer size validation (CWE-126: Buffer Over-read) when handling sensor control commands. With CVSS 7.8 and local attack vector requiring low privileges, this represents a moderate real-world risk for privilege escalation attacks on Android and IoT devices using affected Snapdragon chipsets. No public exploit code or CISA KEV listing identified at time of analysis, though the April 2026 bulletin date suggests recent disclosure.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2025-47389
Local privilege escalation in Qualcomm Snapdragon components enables authenticated users to achieve arbitrary code execution with elevated privileges through memory corruption triggered by integer overflow during attestation report generation. The vulnerability requires low attack complexity and low-level authentication (CVSS:3.1/AV:L/AC:L/PR:L), allowing complete compromise of confidentiality, integrity, and availability on affected devices. With CVSS 7.8 (High severity) and local attack vector, this represents a significant risk on multi-user Android devices where malicious apps could exploit the flaw to break out of sandboxing. No public exploit identified at time of analysis, though the buffer overflow class (CWE-120) is well-understood by exploit developers.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-21372
Local privilege escalation in Qualcomm Snapdragon components allows authenticated local attackers to corrupt kernel memory through malformed IOCTL requests. Exploitation requires low-privilege local access but no user interaction (CVSS 7.8, AV:L/PR:L). The vulnerability enables attackers to achieve high impact across confidentiality, integrity, and availability through unsafe memcpy operations that fail to validate buffer sizes. No public exploit identified at time of analysis, though the straightforward attack complexity (AC:L) suggests exploitation development is feasible for adversaries with local access.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2025-47390
Local privilege escalation via memory corruption in Qualcomm Snapdragon JPEG driver allows authenticated local users to achieve full system compromise (high confidentiality, integrity, and availability impact). The buffer overflow vulnerability (CWE-126) occurs during IOCTL request preprocessing, a common attack surface in kernel-mode device drivers. CVSS 7.8 indicates high severity with low attack complexity. No public exploit identified at time of analysis, and EPSS data not available in provided intelligence. Qualcomm's April 2026 security bulletin addresses this issue, indicating coordinated disclosure timeframe.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
CVE-2026-5726
Stack-based buffer overflow in Delta Electronics ASDA-Soft allows local attackers with no privileges to execute arbitrary code by tricking users into opening a malicious file. The vulnerability achieves complete system compromise (confidentiality, integrity, availability all rated High in CVSS) through user interaction with crafted input. No public exploit identified at time of analysis, though the low attack complexity and lack of required privileges increase realistic exploitation risk once details emerge.
No patch available
Why flagged?
7.8
CVSS 3.1
0.0%
EPSS
39
Priority
Prev Page 16 of 26 (632 CVEs) Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy