Exploited vulnerabilities

CVEs named in our security coverage, matched against CISA's catalog of flaws known to be exploited in the wild.

350 CVEs covered · Updated as we publish · Page 1 of 7

124 in CISA's known-exploited catalog

SearchVendor

Status

350 CVEs

CVE	Vendor / product	Exploited	Our coverage
CVE-2026-46300	Linux KernelLinux Kernel Missing Initialization of a Variable Vulnerability	Known exploitedAdded Oct 28	A Custom PHP2Shell Build Rooted 25 PAN-OS Firewalls, Three Tied to a US Government Environment, Dream SaysOct 29
CVE-2025-61882	Oracle E-Business SuiteOracle E-Business Suite Unspecified Vulnerability	Known exploitedAdded Oct 6Ransomware	Oracle E-Business Suite CVE-2026-101767: Probing Begins Seven Days After the October PatchOct 28
CVE-2026-46817	Oracle E-Business SuiteOracle E-Business Suite Improper Privilege Management Vulnerability	Known exploitedAdded Jul 15	Oracle E-Business Suite CVE-2026-101767: Probing Begins Seven Days After the October PatchOct 28
CVE-2026-114625	Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection Vulnerability	Known exploitedAdded Oct 23	July's VeloCloud Orchestrator Fixes Do Not Cover Exploited CVE-2026-114625Oct 26
CVE-2026-110447	Collabora Collabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection Vulnerability	Known exploitedAdded Oct 23	Nextcloud's Built-in Collabora Server Was Attacked for Four Weeks Before Its CVE ExistedOct 25 Nextcloud Servers Were Exploited 34 Days Before Collabora's CVE-2026-110447 ExistedOct 26
CVE-2022-22706	Arm Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Unspecified Vulnerability	Known exploitedAdded Mar 30	A TCL TV Root Toolkit Leans on a Mali Bug CISA Flagged in 2023, on a 2024 Patch LevelOct 24
CVE-2020-3259	Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure Vulnerability	Known exploitedAdded Feb 15Ransomware	SafePay's Five Named CVEs Are All Two Years Old or More, and All Sit on Cisco, Veeam and SonicWall GearOct 24 SafePay Ransomware Hit 600 Victims, and the Advisory's Newest CVE Is From 2024Oct 26
CVE-2023-20269	Cisco Adaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability	Known exploitedAdded Sep 13Ransomware	SafePay's Five Named CVEs Are All Two Years Old or More, and All Sit on Cisco, Veeam and SonicWall GearOct 24 SafePay Ransomware Hit 600 Victims, and the Advisory's Newest CVE Is From 2024Oct 26
CVE-2023-27532	Veeam Backup & ReplicationVeeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability	Known exploitedAdded Aug 22Ransomware	SafePay's Five Named CVEs Are All Two Years Old or More, and All Sit on Cisco, Veeam and SonicWall GearOct 24 SafePay Ransomware Hit 600 Victims, and the Advisory's Newest CVE Is From 2024Oct 26
CVE-2024-40711	Veeam Backup & ReplicationVeeam Backup and Replication Deserialization Vulnerability	Known exploitedAdded Oct 17Ransomware	SafePay's Five Named CVEs Are All Two Years Old or More, and All Sit on Cisco, Veeam and SonicWall GearOct 24 SafePay Ransomware Hit 600 Victims, and the Advisory's Newest CVE Is From 2024Oct 26
CVE-2024-40766	SonicWall SonicOSSonicWall SonicOS Improper Access Control Vulnerability	Known exploitedAdded Sep 9Ransomware	SafePay's Five Named CVEs Are All Two Years Old or More, and All Sit on Cisco, Veeam and SonicWall GearOct 24 SafePay Ransomware Hit 600 Victims, and the Advisory's Newest CVE Is From 2024Oct 26
CVE-2026-106931	EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability	Known exploitedAdded Oct 20	Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 SiteGuard WAF Flaw CVE-2026-106931 Is Exploited, and Patching Can Erase the EvidenceOct 26
CVE-2026-110936	Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element Vulnerability	Known exploitedAdded Oct 20	Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 Siemens Software Center Flaw CVE-2026-110936 Is Exploited Through a Signed Copy of Its Own AppOct 25
CVE-2026-96652	Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability	Known exploitedAdded Oct 20	CISA Gave Federal Agencies Three Days on Two Plex Flaws and 14 on Two Others in the Same Exploit ChainOct 22 Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 CISA Splits Plex2Shell Into Oct. 23 and Nov. 3 Patch DeadlinesOct 25 Plex2Shell Chains Four Plex Media Server Flaws Into Code Execution, 74 Days After the PatchOct 27
CVE-2026-96654	Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability	Known exploitedAdded Oct 20	CISA Gave Federal Agencies Three Days on Two Plex Flaws and 14 on Two Others in the Same Exploit ChainOct 22 Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 CISA Splits Plex2Shell Into Oct. 23 and Nov. 3 Patch DeadlinesOct 25 Plex2Shell Chains Four Plex Media Server Flaws Into Code Execution, 74 Days After the PatchOct 27
CVE-2026-96655	Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) Vulnerability	Known exploitedAdded Oct 20	CISA Gave Federal Agencies Three Days on Two Plex Flaws and 14 on Two Others in the Same Exploit ChainOct 22 Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 CISA Splits Plex2Shell Into Oct. 23 and Nov. 3 Patch DeadlinesOct 25 Plex2Shell Chains Four Plex Media Server Flaws Into Code Execution, 74 Days After the PatchOct 27
CVE-2026-96656	Plex Media ServerPlex Media Server External Control of File Name or Path Vulnerability	Known exploitedAdded Oct 20	CISA Gave Federal Agencies Three Days on Two Plex Flaws and 14 on Two Others in the Same Exploit ChainOct 22 Plex2Shell Chains Four CVEs Into Unauthenticated Code Execution; CISA Lists It as ExploitedOct 23 CISA Splits Plex2Shell Into Oct. 23 and Nov. 3 Patch DeadlinesOct 25 Plex2Shell Chains Four Plex Media Server Flaws Into Code Execution, 74 Days After the PatchOct 27
CVE-2026-111497	Google BrotliGoogle Brotli Unchecked Return Value Vulnerability	Known exploitedAdded Oct 27	Node.js Patches 10 CVEs, Including a Brotli Out-of-Bounds Write OpenAI's Codex Security FoundOct 22 HTTP2Shell Is a Brotli Bug, Not a Node.js One, and Its Fixes Span PyPI, Envoy, Istio and BunOct 24 OpenAI Moves Frontier Training Offline and Reports VM Escapes in Kata, gVisor and Docker, a Week After Federal Containment GuidanceOct 24 Node.js Fixes 10 CVEs, and Four Are Follow-Ups to Earlier Patches That Did Not HoldOct 27 Brotli's Decoder Bug Was Fixed in February and Disclosed in October, and CISA Now Lists ItOct 29 CISA Gives Agencies Three Days to Patch PHP2Shell After a Honeypot Caught Working ExploitationOct 29 OpenAI Says AI Found PHP2Shell Before Attackers. The Disclosure Timeline Supports Part of ThatOct 29
CVE-2026-109618	PHP Group PHPPHP Memory Corruption Vulnerability	Known exploitedAdded Oct 26	PHP Pre-Announces Two CVSS 9.2 Flaws for 14:00 UTC and Names No VersionsOct 21 PHP 8.5.12 Fixes Two Out-of-Memory RCE Bugs; 8.1 and Older Get No Official PatchOct 21 AWS Says Its Services Are Not Affected by the PHP Flaws, but Lightsail Instances Cannot Be Patched in PlaceOct 22 OpenAI Says AI Found the PHP Flaws Before Attackers. Cloudflare Says They Leaked and Drew Attack TrafficOct 22 Amazon Logged a PHP2Shell Attempt Four Days Before the Patch; Dataminr Saw Only ScanningOct 23 PHP2Shell Patches Leave a Third PHP Flaw, CVE-2026-115560, UnfixedOct 25 Coolify 4.5.0 Encrypts Stored Secrets and Breaks Three Things Self-Hosters May Rely OnOct 25 Amazon Saw PHP2Shell Exploit Attempts Four Days Before PHP Shipped the FixOct 27 PHP's CVE-2026-115560 Is Not Fixed by the PHP2Shell Releases, and Has No Patch DateOct 29 CISA Gives Agencies Three Days to Patch PHP2Shell After a Honeypot Caught Working ExploitationOct 29 OpenAI Says AI Found PHP2Shell Before Attackers. The Disclosure Timeline Supports Part of ThatOct 29 A Custom PHP2Shell Build Rooted 25 PAN-OS Firewalls, Three Tied to a US Government Environment, Dream SaysOct 29
CVE-2026-109619	PHP Group PHPPHP Stale Internal Request-State Vulnerability	Known exploitedAdded Oct 26	PHP Pre-Announces Two CVSS 9.2 Flaws for 14:00 UTC and Names No VersionsOct 21 PHP 8.5.12 Fixes Two Out-of-Memory RCE Bugs; 8.1 and Older Get No Official PatchOct 21 AWS Says Its Services Are Not Affected by the PHP Flaws, but Lightsail Instances Cannot Be Patched in PlaceOct 22 OpenAI Says AI Found the PHP Flaws Before Attackers. Cloudflare Says They Leaked and Drew Attack TrafficOct 22 Amazon Logged a PHP2Shell Attempt Four Days Before the Patch; Dataminr Saw Only ScanningOct 23 PHP Has an Unpatched RCE, CVE-2026-115560, That Needs Three Conditions Including a Runtime Serialize-Handler SwitchOct 24 PHP2Shell Patches Leave a Third PHP Flaw, CVE-2026-115560, UnfixedOct 25 Coolify 4.5.0 Encrypts Stored Secrets and Breaks Three Things Self-Hosters May Rely OnOct 25 Amazon Saw PHP2Shell Exploit Attempts Four Days Before PHP Shipped the FixOct 27 PHP's CVE-2026-115560 Is Not Fixed by the PHP2Shell Releases, and Has No Patch DateOct 29 CISA Gives Agencies Three Days to Patch PHP2Shell After a Honeypot Caught Working ExploitationOct 29 OpenAI Says AI Found PHP2Shell Before Attackers. The Disclosure Timeline Supports Part of ThatOct 29 A Custom PHP2Shell Build Rooted 25 PAN-OS Firewalls, Three Tied to a US Government Environment, Dream SaysOct 29
CVE-2025-20393	Cisco Multiple ProductsCisco Multiple Products Improper Input Validation Vulnerability	Known exploitedAdded Dec 17	Cisco Secure Email Gateway CVE-2026-76519: One Crafted Attachment Reaches RootOct 18
CVE-2025-22457	Ivanti Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	Known exploitedAdded Apr 4Ransomware	Ivanti Connect Secure Zero-Day CVE-2026-104935 Was Exploited for 10 Days Before PatchesOct 17
CVE-2025-61624	Fortinet Multiple ProductsFortinet Multiple Products Path Traversal Vulnerability	Known exploitedAdded Oct 16	CISA Lists Fortinet CVE-2025-61624, a 6.0-Rated CLI Flaw Patched 185 Days Earlier, as ExploitedOct 16
CVE-2026-102764	BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability	Known exploitedAdded Oct 16	BeyondTrust Remote Support CVE-2026-102764 Was Exploited for 47 Days Before Disclosure, and Its Own Alerts Were Closed as False PositivesOct 16 CISA Lists Fortinet CVE-2025-61624, a 6.0-Rated CLI Flaw Patched 185 Days Earlier, as ExploitedOct 16 BeyondTrust Remote Support Zero-Day Was Exploited From Late August, Before Any PatchOct 18
CVE-2023-46805	Ivanti Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability	Known exploitedAdded Jan 10Ransomware	BeyondTrust Remote Support CVE-2026-102764 Was Exploited for 47 Days Before Disclosure, and Its Own Alerts Were Closed as False PositivesOct 16 Ivanti Connect Secure Zero-Day CVE-2026-104935 Was Exploited for 10 Days Before PatchesOct 17
CVE-2024-21887	Ivanti Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection Vulnerability	Known exploitedAdded Jan 10Ransomware	BeyondTrust Remote Support CVE-2026-102764 Was Exploited for 47 Days Before Disclosure, and Its Own Alerts Were Closed as False PositivesOct 16 Ivanti Connect Secure Zero-Day CVE-2026-104935 Was Exploited for 10 Days Before PatchesOct 17
CVE-2025-0282	Ivanti Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	Known exploitedAdded Jan 8Ransomware	BeyondTrust Remote Support CVE-2026-102764 Was Exploited for 47 Days Before Disclosure, and Its Own Alerts Were Closed as False PositivesOct 16 Ivanti Connect Secure Zero-Day CVE-2026-104935 Was Exploited for 10 Days Before PatchesOct 17
CVE-2023-4966	Citrix NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability	Known exploitedAdded Oct 18Ransomware	BeyondTrust Remote Support CVE-2026-102764 Was Exploited for 47 Days Before Disclosure, and Its Own Alerts Were Closed as False PositivesOct 16
CVE-2026-0322	Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability	Known exploitedAdded Oct 14	Exploited PAN-OS and Cisco Gateway Flaws Have No WorkaroundsOct 15 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Palo Alto Patches PAN-OS CVE-2026-0322 as Attackers Reach Management InterfacesOct 18 PAN-OS CVE-2026-0322 Gives Root on the Firewall, but Only to Someone Already Holding an Admin LoginOct 19 AhsayCBS 10.3.4 Was Not the Fix, Huntress Found, Before CISA Listed ItOct 25
CVE-2026-76519	Cisco Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability	Known exploitedAdded Oct 14	Exploited PAN-OS and Cisco Gateway Flaws Have No WorkaroundsOct 15 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Cisco Secure Email Gateway CVE-2026-76519: One Crafted Attachment Reaches RootOct 18 AhsayCBS 10.3.4 Was Not the Fix, Huntress Found, Before CISA Listed ItOct 25
CVE-2026-105133	Ahsay AhsayCBSAhsay AhsayCBS Improper Authentication Vulnerability	Known exploitedAdded Oct 14	Ahsay's First AhsayCBS Patch Failed Against Two Exploited FlawsOct 15 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 AhsayCBS Patch Failed to Close Two Flaws Attackers Are ChainingOct 17 AhsayCBS Backup Servers Exploited Through Two Flaws That Ahsay's First Two Patches Did Not FixOct 19 AhsayCBS 10.3.4 Was Not the Fix, Huntress Found, Before CISA Listed ItOct 25
CVE-2026-105134	Ahsay AhsayCBSAhsay AhsayCBS Command Injection Vulnerability	Known exploitedAdded Oct 14	Ahsay's First AhsayCBS Patch Failed Against Two Exploited FlawsOct 15 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 AhsayCBS Patch Failed to Close Two Flaws Attackers Are ChainingOct 17 AhsayCBS Backup Servers Exploited Through Two Flaws That Ahsay's First Two Patches Did Not FixOct 19 AhsayCBS 10.3.4 Was Not the Fix, Huntress Found, Before CISA Listed ItOct 25
CVE-2022-0185	Linux KernelLinux Kernel Heap-Based Buffer Overflow Vulnerability	Known exploitedAdded Aug 21	A Corrupted ISO Download Led One User to a Qualcomm Driver Bug in TP-Link's EAP770, Which Is End-of-LifeOct 15
CVE-2026-97229	GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability	Known exploitedAdded Oct 29	GitLab Patches CVSS 10.0 Code Execution Flaw in CI/CD Regex CompilerOct 14 Atlassian CVE-2026-21589 Probed Within Two Hours of Public ExploitOct 15 FortiMail and NetScaler Flaws Were Exploited Before Fixes ShippedOct 15 Microsoft Patch Tuesday Lists 1,411 Flaws and Floats Risk CohortsOct 15 GitLab Patches a Second CVSS 10.0 Regex Overflow Nine Days After the FirstOct 22 GitLab Patches CVE-2026-110264, a CVSS 10.0 Unauthenticated RCE, in 19.5.1Oct 23 Alpine's Two GitLab Upgrades Missed a Fix Hidden in RubyOct 29 Alpine Logged GitLab CVE-2026-97229 Attacks Nine Days Before CISA Listed ItOct 31 Anthropic's Claude Exploit Chains Hit Five Targets, Each With LimitsNov 2 Go Team Weighs Turning Off Default MPTCP After Linux FlawNov 2
CVE-2026-96951	Microsoft WindowsMicrosoft Windows Command Injection Vulnerability	Known exploitedAdded Oct 13	Microsoft's October Patch Tuesday Lists 1,413 CVEs by One Count and 1,415 by Another, With One Exploited Windows Shell BugOct 14 Microsoft Patch Tuesday Lists 1,411 Flaws and Floats Risk CohortsOct 15 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Windows CVE-2026-96951 Strips Mark of the Web Warnings, and Microsoft Confirms It Was Exploited Before the October 13 FixOct 16 Microsoft's October Patch Tuesday Sets a Record, but Outlets Count 1,411 and 1,413 CVEsOct 17 Microsoft Fixes 1,411 Flaws in October Patch Tuesday, One ExploitedOct 18
CVE-2026-104935	Ivanti Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability	Known exploitedAdded Oct 13	Ivanti Connect Secure Chain Gives Root on Patched Appliances, and One Link Still Has No FixOct 13 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Ivanti Connect Secure Zero-Day CVE-2026-104935 Was Exploited for 10 Days Before PatchesOct 17 Ivanti Connect Secure Zero-Day Chain Gave Root on a Patched VPN, and the Integrity Checker Misses ItNov 1
CVE-2026-15409	SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	Known exploitedAdded Jul 14Ransomware	SonicWall SMA1000 CVSS 10.0 Flaw Draws 135 Attempts From Two IP AddressesOct 13
CVE-2026-15410	SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection Vulnerability	Known exploitedAdded Jul 14Ransomware	SonicWall SMA1000 CVSS 10.0 Flaw Draws 135 Attempts From Two IP AddressesOct 13
CVE-2026-0257	Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Authentication Bypass Vulnerability	Known exploitedAdded May 29Ransomware	Qilin and Settra Ransomware Crews Exploit Palo Alto GlobalProtect Cookie Flaw CVE-2026-0257Oct 12
CVE-2015-3246	Red Hat LibuserRed Hat Libuser Race Condition Vulnerability	Known exploitedAdded Aug 26	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2015-5287	Red Hat Automatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability	Known exploitedAdded Aug 26	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2019-1068	Microsoft SQL ServerMicrosoft SQL Server Remote Code Execution Vulnerability	Known exploitedAdded Aug 26	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2021-23758	Ajax.NET Professional Ajax.NET ProfessionalAjax.NET Professional Deserialization of Untrusted Data Vulnerability	Known exploitedAdded Aug 26	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2022-0995	Linux KernelLinux Kernel Out-of-Bounds Write Vulnerability	Known exploitedAdded Aug 26	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2023-49105	ownCloud ownCloudownCloud Improper Authentication Vulnerability	Known exploitedAdded Aug 27	CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10
CVE-2024-23692	Rejetto HTTP File ServerRejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	Known exploitedAdded Jul 9Ransomware	Rejetto HFS CVE-2026-61500, Found With Anthropic's Mythos, Was Probed One Day After DisclosureOct 9
CVE-2014-6278	GNU GNU BashGNU Bash OS Command Injection Vulnerability	Known exploitedAdded Oct 2	FBI Seizes Seven Domains Tied to Integrity Tech's MicroScan and FishHubOct 9 Flax Typhoon Advisory AA26-281A Names Integrity Tech and Eight Old CVEsOct 11 Seven Nations Name Integrity Tech Behind Flax Typhoon Tools as FBI Seizes Seven DomainsOct 13 Why a 2015 BIND Bug Is Now on CISA's Must-Patch List: Inside Advisory AA26-281AOct 18
CVE-2015-3306	ProFTPD ProFTPDProFTPD Improper Access Control Vulnerability	Known exploitedAdded Oct 8	FBI Seizes Seven Domains Tied to Integrity Tech's MicroScan and FishHubOct 9 CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10 Flax Typhoon Advisory AA26-281A Names Integrity Tech and Eight Old CVEsOct 11 CISA Adds Five Bugs, Up to 11 Years Old, to Its Exploited ListOct 11 Seven Nations Name Integrity Tech Behind Flax Typhoon Tools as FBI Seizes Seven DomainsOct 13 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Why a 2015 BIND Bug Is Now on CISA's Must-Patch List: Inside Advisory AA26-281AOct 18
CVE-2015-5477	ISC BIND ISC BIND Data Processing Errors Vulnerability	Known exploitedAdded Oct 8	FBI Seizes Seven Domains Tied to Integrity Tech's MicroScan and FishHubOct 9 CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10 Flax Typhoon Advisory AA26-281A Names Integrity Tech and Eight Old CVEsOct 11 CISA Adds Five Bugs, Up to 11 Years Old, to Its Exploited ListOct 11 Seven Nations Name Integrity Tech Behind Flax Typhoon Tools as FBI Seizes Seven DomainsOct 13 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Why a 2015 BIND Bug Is Now on CISA's Must-Patch List: Inside Advisory AA26-281AOct 18
CVE-2016-3081	Apache StrutsApache Struts Command Injection Vulnerability	Known exploitedAdded Oct 8	FBI Seizes Seven Domains Tied to Integrity Tech's MicroScan and FishHubOct 9 CISA Gave Agencies Three Days for Five 2015-2023 Bugs, and Four Come With a Forensic Triage OrderOct 10 Flax Typhoon Advisory AA26-281A Names Integrity Tech and Eight Old CVEsOct 11 CISA Adds Five Bugs, Up to 11 Years Old, to Its Exploited ListOct 11 Seven Nations Name Integrity Tech Behind Flax Typhoon Tools as FBI Seizes Seven DomainsOct 13 All 16 CISA Exploited-Flaw Listings in October Carry a Three-Day Deadline, and 13 Add a Forensic-Triage OrderOct 16 Why a 2015 BIND Bug Is Now on CISA's Must-Patch List: Inside Advisory AA26-281AOct 18

Latest additions to CISA's catalog

The newest flaws the U.S. Cybersecurity and Infrastructure Security Agency has confirmed are being exploited, whether or not we have written about them.

Added	CVE	Vendor / product	Flaw
October 30, 2026	CVE-2026-118527	Ivanti Connect Secure	Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
October 30, 2026	CVE-2026-111357	Ivanti Connect Secure	Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
October 29, 2026	CVE-2026-97229Covered	GitLab Community Edition and Enterprise Edition	GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
October 29, 2026	CVE-2026-76418	Cisco Secure Firewall ASA Software and Cisco Secure FTD Software	Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
October 28, 2026	CVE-2026-41709	Broadcom VMware ESX	Broadcom VMWare ESX Insufficient Logging Vulnerability
October 28, 2026	CVE-2026-46300Covered	Linux Kernel	Linux Kernel Missing Initialization of a Variable Vulnerability
October 27, 2026	CVE-2026-48356	Adobe Commerce and Magento	Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
October 27, 2026	CVE-2026-111497Covered	Google Brotli	Google Brotli Unchecked Return Value Vulnerability
October 26, 2026	CVE-2026-109618Covered	PHP Group PHP	PHP Memory Corruption Vulnerability
October 26, 2026	CVE-2026-109619Covered	PHP Group PHP	PHP Stale Internal Request-State Vulnerability
October 23, 2026	CVE-2026-114625Covered	Arista VeloCloud Orchestrator	Arista VeloCloud Orchestrator SQL Injection Vulnerability
October 23, 2026	CVE-2026-110447Covered	Collabora Collabora Online – Built-in CODE Server	Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
October 20, 2026	CVE-2026-106931Covered	EG Secure Solutions SiteGuard Server Edition	EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
October 20, 2026	CVE-2026-96656Covered	Plex Media Server	Plex Media Server External Control of File Name or Path Vulnerability
October 20, 2026	CVE-2026-96655Covered	Plex Media Server	Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog, refreshed twice a day.