2026-09-18Friday, September 18, 2026

Independent reporting and reviews on artificial intelligence, software, hardware, security, and the companies building them.

Exploited vulnerabilities

CVEs named in our security coverage, matched against CISA's catalog of flaws known to be exploited in the wild.

69 CVEs covered · Updated as we publish · Page 2 of 2

27 in CISA's known-exploited catalog

SearchVendor

Status

69 CVEs

CVE	Vendor / product	Exploited	Our coverage
CVE-2026-86207	—	Not in catalog	N-able Denied Exploits Four Days Before Confirming ThemSep 13
CVE-2026-24763	—	Not in catalog	OpenClaw's Maintainers Detail a Year of Fighting Fake Pull RequestsSep 12
CVE-2026-38056	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38057	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38058	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-38059	—	Not in catalog	iDirect Satellite Modem Flaw Skips Authentication EntirelySep 12 CISA Raises Severity on an iDirect Satellite Terminal BugSep 13
CVE-2026-75925	—	Not in catalog	IXON Patches a 9.6-Severity RCE in Its Industrial VPN ClientSep 11
CVE-2026-78224	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-82578	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-82583	—	Not in catalog	NextGen's Mirth Connect Gets Three High-Severity PatchesSep 11 NextGen Healthcare Patches Three Flaws in Mirth ConnectSep 12
CVE-2026-81821	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81822	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81823	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-81824	—	Not in catalog	AVEVA Patches Hard-Coded Crypto Key in Pipeline SoftwareSep 11 AVEVA Patches a Hardcoded Encryption Key in Pipeline SoftwareSep 12
CVE-2026-67276	—	Not in catalog	CISA Adds Two of Six Exploited MikroTik RouterOS Flaws to KEVSep 11 MikroTik Patches RouterOS Flaws Attackers Exploited FirstSep 17
CVE-2026-27660	—	Not in catalog	Forgejo Patches a 9.9-Severity RCE in Template RepositoriesSep 10
CVE-2026-89094	—	Not in catalog	Forgejo Patches a 9.9-Severity RCE in Template RepositoriesSep 10
CVE-2026-69676	—	Not in catalog	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9
CVE-2026-69730	—	Not in catalog	September Patch Tuesday: Two Zero-Days, and a Number Nobody Agrees OnSep 9