Threat advisories

Two lists. The first is written by us. The second is imported automatically from the public CISA catalogue of vulnerabilities that attackers are exploiting right now: we do not review it entry by entry, so read it as a warning light and ask us if one of these affects you.

Actively exploited automatic · CISA KEV catalogue

Source: CISA Known Exploited Vulnerabilities catalogue (1756 entries). Checked automatically every few hours; last checked 2026-10-26 06:00 UTC. CISA adds entries several times a week, not every day.

CVEProductVulnerabilityAddedCISA due date (US agencies)
CVE-2026-114625Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator SQL Injection Vulnerability2026-10-232026-10-26
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server Collabora Online – Built-in CODE Server OS Command Injection Vulnerability2026-10-232026-10-26
CVE-2026-106931EG Secure Solutions SiteGuard Server Edition EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability2026-10-202026-10-23
CVE-2026-96656Plex Media Server Plex Media Server External Control of File Name or Path Vulnerability2026-10-202026-10-23
CVE-2026-96655Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability2026-10-202026-11-03
CVE-2026-96654Plex Media Server Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability2026-10-202026-10-23
CVE-2026-96652Plex Media Server Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability2026-10-202026-11-03
CVE-2026-110936Siemens Software Center Siemens Software Center Uncontrolled Search Path Element Vulnerability2026-10-202026-11-03
CVE-2026-102764BeyondTrust Remote Support BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability2026-10-162026-10-19
CVE-2025-61624Fortinet Multiple Products Fortinet Multiple Products Path Traversal Vulnerability2026-10-162026-10-19
CVE-2026-21589Atlassian Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability2026-10-152026-10-18
CVE-2026-105134Ahsay AhsayCBS Ahsay AhsayCBS Command Injection Vulnerability2026-10-142026-10-17
CVE-2026-76519Cisco Secure Email Gateway Cisco Secure Email Gateway Relative Path Traversal Vulnerability2026-10-142026-10-17
CVE-2026-105133Ahsay AhsayCBS Ahsay AhsayCBS Improper Authentication Vulnerability2026-10-142026-10-17
CVE-2026-0322Palo Alto Networks PAN-OS Palo Alto Networks PAN-OS Code Injection Vulnerability2026-10-142026-10-17
CVE-2026-104935Ivanti Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability2026-10-132026-10-16
CVE-2026-96951Microsoft Windows Microsoft Windows Command Injection Vulnerability2026-10-132026-10-16
CVE-2015-5477ISC BIND ISC BIND Data Processing Errors Vulnerability2026-10-082026-10-11
CVE-2016-3081Apache Struts Apache Struts Command Injection Vulnerability2026-10-082026-10-11
CVE-2023-22894Strapi Strapi Strapi Cleartext Storage of Sensitive Information Vulnerability2026-10-082026-10-11
CVE-2021-3199ONLYOFFICE Docs ONLYOFFICE Docs Server Path Traversal Vulnerability2026-10-082026-10-11
CVE-2015-3306ProFTPD ProFTPD ProFTPD Improper Access Control Vulnerability2026-10-082026-10-11
CVE-2026-88779Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-10-042026-10-07
CVE-2026-102490Zammad GmbH Zammad Zammad GmbH Zammad Improper Privilege Management Vulnerability2026-10-022026-10-05
CVE-2026-102489Zammad GmbH Zammad Zammad GmbH Zammad Session Fixation Vulnerability2026-10-022026-10-05
CVE-2026-104286Fortinet FortiMail Fortinet FortiMail Path Traversal Vulnerability2026-10-012026-10-04
CVE-2026-76504Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability2026-09-302026-10-03
CVE-2026-86950Apple Multiple Products Apple Multiple Products Out-of-Bounds Write Vulnerability2026-09-292026-10-13
CVE-2026-88772Citrix NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability2026-09-272026-09-30
CVE-2026-88771Citrix NetScaler Citrix NetScaler Improper Input Validation Vulnerability2026-09-272026-09-30
CVE-2026-67279MikroTik RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability2026-09-252026-09-28
CVE-2026-65660Microsoft SharePoint Microsoft SharePoint Code Injection Vulnerability2026-09-252026-09-28
CVE-2026-87902WordPress Core WordPress Core Remote File Inclusion Vulnerability2026-09-252026-09-28
CVE-2026-5430WSO2 Multiple Products WSO2 Multiple Products Path Traversal Vulnerability 2026-09-242026-09-27
CVE-2026-71362Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability 2026-09-242026-09-27
CVE-2026-93952Arista VeloCloud Orchestrator Arista VeloCloud Orchestrator Improper Input Validation Vulnerability2026-09-222026-09-25
CVE-2026-94127F5 BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability2026-09-222026-09-25
CVE-2026-93616Check Point Multiple Products Check Point Multiple Products Path Traversal Vulnerability2026-09-222026-09-25
CVE-2026-85102Check Point Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability2026-09-222026-09-25
CVE-2026-7273Zyxel GS1900 Series Switches Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability2026-09-212026-09-24
CVE-2025-39964Linux Kernel Linux Kernel Race Condition Vulnerability2026-09-182026-09-21
CVE-2026-53266Linux Kernel Linux Kernel Out-of-Bounds Write Vulnerability2026-09-182026-09-21
CVE-2025-39682Linux Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability2026-09-182026-09-21
CVE-2026-58704Google Pixel Google Pixel Improper Authorization Vulnerability2026-09-162026-09-19
CVE-2026-76460Cisco Identity Services Engine Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability2026-09-162026-09-19
CVE-2026-87886Acronis Backup Acronis Backup Incorrect Default Permissions Vulnerability2026-09-162026-09-19
CVE-2026-76461Cisco Secure Email Gateway Cisco Secure Email Gateway SQL Injection Vulnerability2026-09-142026-09-17
CVE-2026-84869ConnectWise ScreenConnect ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability2026-09-112026-09-14
CVE-2026-42016JFrog Artifactory JFrog Artifactory Incorrect Authorization Vulnerability2026-09-112026-09-25
CVE-2026-42018JFrog Artifactory JFrog Artifactory Improper Authentication Vulnerability2026-09-112026-09-25
CVE-2026-85706GitLab Community Edition and Enterprise Edition GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability2026-09-112026-09-14
CVE-2026-86060MikroTik RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability2026-09-102026-09-13
CVE-2026-67277MikroTik RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability2026-09-102026-09-13
CVE-2026-19490Citrix NetScaler Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-09-092026-09-12
CVE-2025-25249Fortinet Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability2026-09-092026-09-12
CVE-2026-87491Google Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability2026-09-092026-09-23
CVE-2026-20079Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability2026-09-092026-09-12
CVE-2026-75650Adobe Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability2026-09-082026-09-11
CVE-2026-81963Microsoft Windows Microsoft Windows Link Following Vulnerability2026-09-082026-09-22
CVE-2026-86218N-able N-central N-able N-central Static Code Injection Vulnerability2026-09-082026-09-11

Show fewer · Not sure whether one affects you? Book a free consultation.