Threat advisories
Two lists. The first is written by us. The second is imported automatically from the public CISA catalogue of vulnerabilities that attackers are exploiting right now: we do not review it entry by entry, so read it as a warning light and ask us if one of these affects you.
Actively exploited automatic · CISA KEV catalogue
Source: CISA Known Exploited Vulnerabilities catalogue (1756 entries). Checked automatically every few hours; last checked 2026-10-26 06:00 UTC. CISA adds entries several times a week, not every day.
| CVE | Product | Vulnerability | Added | CISA due date (US agencies) |
|---|---|---|---|---|
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 2026-10-23 | 2026-10-26 |
| CVE-2026-110447 | Collabora Collabora Online – Built-in CODE Server | Collabora Online – Built-in CODE Server OS Command Injection Vulnerability | 2026-10-23 | 2026-10-26 |
| CVE-2026-106931 | EG Secure Solutions SiteGuard Server Edition | EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability | 2026-10-20 | 2026-10-23 |
| CVE-2026-96656 | Plex Media Server | Plex Media Server External Control of File Name or Path Vulnerability | 2026-10-20 | 2026-10-23 |
| CVE-2026-96655 | Plex Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-10-20 | 2026-11-03 |
| CVE-2026-96654 | Plex Media Server | Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability | 2026-10-20 | 2026-10-23 |
| CVE-2026-96652 | Plex Media Server | Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability | 2026-10-20 | 2026-11-03 |
| CVE-2026-110936 | Siemens Software Center | Siemens Software Center Uncontrolled Search Path Element Vulnerability | 2026-10-20 | 2026-11-03 |
| CVE-2026-102764 | BeyondTrust Remote Support | BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability | 2026-10-16 | 2026-10-19 |
| CVE-2025-61624 | Fortinet Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | 2026-10-16 | 2026-10-19 |
| CVE-2026-21589 | Atlassian Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | 2026-10-15 | 2026-10-18 |
| CVE-2026-105134 | Ahsay AhsayCBS | Ahsay AhsayCBS Command Injection Vulnerability | 2026-10-14 | 2026-10-17 |
| CVE-2026-76519 | Cisco Secure Email Gateway | Cisco Secure Email Gateway Relative Path Traversal Vulnerability | 2026-10-14 | 2026-10-17 |
| CVE-2026-105133 | Ahsay AhsayCBS | Ahsay AhsayCBS Improper Authentication Vulnerability | 2026-10-14 | 2026-10-17 |
| CVE-2026-0322 | Palo Alto Networks PAN-OS | Palo Alto Networks PAN-OS Code Injection Vulnerability | 2026-10-14 | 2026-10-17 |
Show the latest 60 · Not sure whether one affects you? Book a free consultation.