{ "source": "Patch Sonar (patchsonar.com)", "license": "https://patchsonar.com/api#terms", "updated": "2026-11-04", "description": "Exploited vulnerabilities from the last 90 days: CISA's catalog plus vendor-confirmed early warnings, one entry per advisory.", "count": 106, "items": [ { "cve": "CVE-2024-27834", "cves": [ "CVE-2024-27834" ], "vendor": "Apple", "product": "Apple Multiple Products", "category": "devices", "categoryName": "Phones & computers", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.006, "added": "2026-11-04", "cisaDeadline": "2026-11-18", "headline": "Apple Multiple Products Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2024-27834", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-27834" ] }, { "cve": "CVE-2026-119977", "cves": [ "CVE-2026-119977" ], "vendor": "WordPress", "product": "WordPress Core", "category": "web", "categoryName": "Websites & online stores", "status": "new", "zeroDay": true, "ransomware": false, "epss": 0.0102, "added": "2026-11-03", "cisaDeadline": "2026-11-06", "headline": "WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-119977", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-119977" ] }, { "cve": "CVE-2026-118527", "cves": [ "CVE-2026-118527" ], "vendor": "Ivanti", "product": "Ivanti Connect Secure", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "new", "zeroDay": true, "ransomware": false, "epss": 0.0082, "added": "2026-10-30", "cisaDeadline": "2026-11-13", "headline": "Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-118527", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-118527" ] }, { "cve": "CVE-2026-111357", "cves": [ "CVE-2026-111357" ], "vendor": "Ivanti", "product": "Ivanti Connect Secure", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.0053, "added": "2026-10-30", "cisaDeadline": "2026-11-02", "headline": "Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-111357", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111357" ] }, { "cve": "CVE-2026-97229", "cves": [ "CVE-2026-97229" ], "vendor": "GitLab", "product": "GitLab Community Edition and Enterprise Edition", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.6522, "added": "2026-10-29", "cisaDeadline": "2026-11-01", "headline": "GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-97229", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-97229" ] }, { "cve": "CVE-2026-76418", "cves": [ "CVE-2026-76418" ], "vendor": "Cisco", "product": "Cisco Secure Firewall ASA Software and Cisco Secure FTD Software", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "new", "zeroDay": true, "ransomware": false, "epss": 0.0082, "added": "2026-10-29", "cisaDeadline": "2026-11-01", "headline": "Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-76418", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76418" ] }, { "cve": "CVE-2026-46300", "cves": [ "CVE-2026-46300" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.1613, "added": "2026-10-28", "cisaDeadline": "2026-10-31", "headline": "Linux Kernel Missing Initialization of a Variable Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-46300", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-46300" ] }, { "cve": "CVE-2026-41709", "cves": [ "CVE-2026-41709" ], "vendor": "Broadcom", "product": "Broadcom VMware ESX", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.0069, "added": "2026-10-28", "cisaDeadline": "2026-11-11", "headline": "Broadcom VMWare ESX Insufficient Logging Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-41709", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-41709" ] }, { "cve": "CVE-2026-48356", "cves": [ "CVE-2026-48356" ], "vendor": "Adobe", "product": "Adobe Commerce / Magento", "category": "web", "categoryName": "Websites & online stores", "status": "patch", "zeroDay": false, "ransomware": false, "epss": 0.4747, "added": "2026-10-27", "cisaDeadline": "2026-11-10", "headline": "Hackers have broken into hundreds of online stores through a Magento upload flaw", "whatToDo": "Install Adobe's security patch for this flaw, then check your store's CMS blocks for code you didn't add.", "url": "https://patchsonar.com/cve/CVE-2026-48356", "sources": [ "https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html" ] }, { "cve": "CVE-2026-111497", "cves": [ "CVE-2026-111497" ], "vendor": "Google", "product": "Brotli / Node.js", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "soon", "zeroDay": true, "ransomware": false, "epss": 0.8264, "added": "2026-10-27", "cisaDeadline": "2026-11-10", "headline": "A bug in a common compression library puts Node.js apps at risk", "whatToDo": "Upgrade Node.js; there is no workaround. Bun, Envoy, Python, .NET and PHP on Windows have also shipped fixes.", "url": "https://patchsonar.com/cve/CVE-2026-111497", "sources": [ "https://thehackernews.com/2026/10/adobe-commerce-polyshell-attacks-breach.html" ] }, { "cve": "CVE-2026-109619", "cves": [ "CVE-2026-109618", "CVE-2026-109619" ], "vendor": "PHP Group", "product": "PHP", "category": "web", "categoryName": "Websites & online stores", "status": "patch", "zeroDay": true, "ransomware": false, "epss": 1, "added": "2026-10-26", "cisaDeadline": "2026-10-29", "headline": "Two PHP flaws let attackers take over web servers with no login", "whatToDo": "Upgrade PHP. If a hosting company runs your site, ask them to confirm they've updated. Check for updates to any software or appliance that bundles PHP.", "url": "https://patchsonar.com/cve/CVE-2026-109619", "sources": [ "https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html" ] }, { "cve": "CVE-2026-114625", "cves": [ "CVE-2026-114625" ], "vendor": "Arista", "product": "Arista VeloCloud Orchestrator", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "new", "zeroDay": true, "ransomware": false, "epss": 0.0103, "added": "2026-10-23", "cisaDeadline": "2026-10-26", "headline": "Arista VeloCloud Orchestrator SQL Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-114625", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-114625" ] }, { "cve": "CVE-2026-110447", "cves": [ "CVE-2026-110447" ], "vendor": "Collabora", "product": "Collabora Online – Built-in CODE Server", "category": "office", "categoryName": "Office, email & file sharing", "status": "new", "zeroDay": false, "ransomware": false, "epss": 0.7331, "added": "2026-10-23", "cisaDeadline": "2026-10-26", "headline": "Collabora Online – Built-in CODE Server OS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-110447", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110447" ] }, { "cve": "CVE-2026-96656", "cves": [ "CVE-2026-96656" ], "vendor": "Plex", "product": "Plex Media Server", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0179, "added": "2026-10-20", "cisaDeadline": "2026-10-23", "headline": "Plex Media Server External Control of File Name or Path Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-96656", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96656" ] }, { "cve": "CVE-2026-96655", "cves": [ "CVE-2026-96655" ], "vendor": "Plex", "product": "Plex Media Server", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0164, "added": "2026-10-20", "cisaDeadline": "2026-11-03", "headline": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-96655", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96655" ] }, { "cve": "CVE-2026-96654", "cves": [ "CVE-2026-96654" ], "vendor": "Plex", "product": "Plex Media Server", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0195, "added": "2026-10-20", "cisaDeadline": "2026-10-23", "headline": "Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-96654", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96654" ] }, { "cve": "CVE-2026-96652", "cves": [ "CVE-2026-96652" ], "vendor": "Plex", "product": "Plex Media Server", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.1189, "added": "2026-10-20", "cisaDeadline": "2026-11-03", "headline": "Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-96652", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-96652" ] }, { "cve": "CVE-2026-110936", "cves": [ "CVE-2026-110936" ], "vendor": "Siemens", "product": "Siemens Software Center", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0097, "added": "2026-10-20", "cisaDeadline": "2026-11-03", "headline": "Siemens Software Center Uncontrolled Search Path Element Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-110936", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110936" ] }, { "cve": "CVE-2026-106931", "cves": [ "CVE-2026-106931" ], "vendor": "EG Secure Solutions", "product": "EG Secure Solutions SiteGuard Server Edition", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0253, "added": "2026-10-20", "cisaDeadline": "2026-10-23", "headline": "EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-106931", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-106931" ] }, { "cve": "CVE-2026-102764", "cves": [ "CVE-2026-102764" ], "vendor": "BeyondTrust", "product": "BeyondTrust Remote Support", "category": "remote", "categoryName": "Remote access & IT tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.7799, "added": "2026-10-16", "cisaDeadline": "2026-10-19", "headline": "BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-102764", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102764" ] }, { "cve": "CVE-2025-61624", "cves": [ "CVE-2025-61624" ], "vendor": "Fortinet", "product": "Fortinet Multiple Products", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0134, "added": "2026-10-16", "cisaDeadline": "2026-10-19", "headline": "Fortinet Multiple Products Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2025-61624", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61624" ] }, { "cve": "CVE-2026-21589", "cves": [ "CVE-2026-21589" ], "vendor": "Atlassian", "product": "Atlassian Multiple Products", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.9966, "added": "2026-10-15", "cisaDeadline": "2026-10-18", "headline": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-21589", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21589" ] }, { "cve": "CVE-2026-76519", "cves": [ "CVE-2026-76519" ], "vendor": "Cisco", "product": "Cisco Secure Email Gateway", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0215, "added": "2026-10-14", "cisaDeadline": "2026-10-17", "headline": "Cisco Secure Email Gateway Relative Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-76519", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76519" ] }, { "cve": "CVE-2026-105134", "cves": [ "CVE-2026-105134" ], "vendor": "Ahsay", "product": "AhsayCBS", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.8176, "added": "2026-10-14", "cisaDeadline": "2026-10-17", "headline": "Ahsay AhsayCBS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-105134", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105134" ] }, { "cve": "CVE-2026-105133", "cves": [ "CVE-2026-105133" ], "vendor": "Ahsay", "product": "AhsayCBS", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.7947, "added": "2026-10-14", "cisaDeadline": "2026-10-17", "headline": "Ahsay AhsayCBS Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-105133", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-105133" ] }, { "cve": "CVE-2026-0322", "cves": [ "CVE-2026-0322" ], "vendor": "Palo Alto Networks", "product": "Palo Alto Networks PAN-OS", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0174, "added": "2026-10-14", "cisaDeadline": "2026-10-17", "headline": "Palo Alto Networks PAN-OS Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-0322", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-0322" ] }, { "cve": "CVE-2026-96951", "cves": [ "CVE-2026-96951" ], "vendor": "Microsoft", "product": "Windows", "category": "devices", "categoryName": "Phones & computers", "status": "soon", "zeroDay": true, "ransomware": false, "epss": 0.0981, "added": "2026-10-13", "cisaDeadline": "2026-10-16", "headline": "A Windows flaw lets booby-trapped files skip the β€œAre you sure?” warning", "whatToDo": "Open Settings, go to Windows Update, select Check for updates, then install and restart. October was also the last update for Windows 11 24H2 Home and Pro, so upgrade if you're on that version.", "url": "https://patchsonar.com/cve/CVE-2026-96951", "sources": [ "https://www.malwarebytes.com/blog/bugs/2026/10/update-windows-record-patch-tuesday-fixes-flaw-already-under-attack", "https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days/" ] }, { "cve": "CVE-2026-104935", "cves": [ "CVE-2026-104935" ], "vendor": "Ivanti", "product": "Ivanti Connect Secure", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "patch", "zeroDay": true, "ransomware": false, "epss": 0.8894, "added": "2026-10-13", "cisaDeadline": "2026-10-16", "headline": "An Ivanti VPN flaw lets attackers in without a password", "whatToDo": "Upgrade Connect Secure to the fixed version.", "url": "https://patchsonar.com/cve/CVE-2026-104935", "sources": [ "https://securityaffairs.com/?p=200887" ] }, { "cve": "CVE-2023-22894", "cves": [ "CVE-2023-22894" ], "vendor": "Strapi", "product": "Strapi", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0411, "added": "2026-10-08", "cisaDeadline": "2026-10-11", "headline": "Strapi Cleartext Storage of Sensitive Information Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2023-22894", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-22894" ] }, { "cve": "CVE-2021-3199", "cves": [ "CVE-2021-3199" ], "vendor": "ONLYOFFICE", "product": "ONLYOFFICE Docs", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.3024, "added": "2026-10-08", "cisaDeadline": "2026-10-11", "headline": "ONLYOFFICE Docs Server Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2021-3199", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-3199" ] }, { "cve": "CVE-2016-3081", "cves": [ "CVE-2016-3081" ], "vendor": "Apache", "product": "Apache Struts", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.9653, "added": "2026-10-08", "cisaDeadline": "2026-10-11", "headline": "Apache Struts Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2016-3081", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3081" ] }, { "cve": "CVE-2015-5477", "cves": [ "CVE-2015-5477" ], "vendor": "ISC", "product": "ISC BIND", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.9958, "added": "2026-10-08", "cisaDeadline": "2026-10-11", "headline": " ISC BIND Data Processing Errors Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2015-5477", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5477" ] }, { "cve": "CVE-2015-3306", "cves": [ "CVE-2015-3306" ], "vendor": "ProFTPD", "product": "ProFTPD", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.995, "added": "2026-10-08", "cisaDeadline": "2026-10-11", "headline": "ProFTPD Improper Access Control Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2015-3306", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3306" ] }, { "cve": "CVE-2026-88779", "cves": [ "CVE-2026-88779" ], "vendor": "Citrix", "product": "Citrix NetScaler", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.1139, "added": "2026-10-04", "cisaDeadline": "2026-10-07", "headline": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-88779", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88779" ] }, { "cve": "CVE-2026-102490", "cves": [ "CVE-2026-102490" ], "vendor": "Zammad GmbH", "product": "Zammad GmbH Zammad", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.1094, "added": "2026-10-02", "cisaDeadline": "2026-10-05", "headline": "Zammad GmbH Zammad Improper Privilege Management Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-102490", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102490" ] }, { "cve": "CVE-2026-102489", "cves": [ "CVE-2026-102489" ], "vendor": "Zammad GmbH", "product": "Zammad GmbH Zammad", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.2248, "added": "2026-10-02", "cisaDeadline": "2026-10-05", "headline": "Zammad GmbH Zammad Session Fixation Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-102489", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-102489" ] }, { "cve": "CVE-2026-104286", "cves": [ "CVE-2026-104286" ], "vendor": "Fortinet", "product": "Fortinet FortiMail", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0457, "added": "2026-10-01", "cisaDeadline": "2026-10-04", "headline": "Fortinet FortiMail Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-104286", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-104286" ] }, { "cve": "CVE-2026-76504", "cves": [ "CVE-2026-76504" ], "vendor": "Cisco", "product": "Cisco Catalyst SD-WAN Manager", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.3893, "added": "2026-09-30", "cisaDeadline": "2026-10-03", "headline": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-76504", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76504" ] }, { "cve": "CVE-2026-86950", "cves": [ "CVE-2026-86950" ], "vendor": "Apple", "product": "iPhone, iPad & Mac", "category": "devices", "categoryName": "Phones & computers", "status": "soon", "zeroDay": true, "ransomware": false, "epss": 0.2617, "added": "2026-09-29", "cisaDeadline": "2026-10-13", "headline": "Apple fixes a flaw used in targeted attacks on iPhones and Macs", "whatToDo": "On iPhone or iPad: Settings, General, Software Update. On Mac: System Settings, General, Software Update. Until you've updated, don't open unexpected files from strangers.", "url": "https://patchsonar.com/cve/CVE-2026-86950", "sources": [ "https://securityonline.info/exploited-apple-zero-day-vulnerability-cve-2026-86950/" ] }, { "cve": "CVE-2026-88772", "cves": [ "CVE-2026-88772" ], "vendor": "Citrix", "product": "Citrix NetScaler", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.7816, "added": "2026-09-27", "cisaDeadline": "2026-09-30", "headline": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-88772", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88772" ] }, { "cve": "CVE-2026-88771", "cves": [ "CVE-2026-88771" ], "vendor": "Citrix", "product": "Citrix NetScaler", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.832, "added": "2026-09-27", "cisaDeadline": "2026-09-30", "headline": "Citrix NetScaler Improper Input Validation Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-88771", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-88771" ] }, { "cve": "CVE-2026-87902", "cves": [ "CVE-2026-87902" ], "vendor": "WordPress", "product": "WordPress Core", "category": "web", "categoryName": "Websites & online stores", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.9577, "added": "2026-09-25", "cisaDeadline": "2026-09-28", "headline": "WordPress Core Remote File Inclusion Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-87902", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-87902" ] }, { "cve": "CVE-2026-67279", "cves": [ "CVE-2026-67279" ], "vendor": "MikroTik", "product": "MikroTik RouterOS", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0228, "added": "2026-09-25", "cisaDeadline": "2026-09-28", "headline": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-67279", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-67279" ] }, { "cve": "CVE-2026-65660", "cves": [ "CVE-2026-65660" ], "vendor": "Microsoft", "product": "Microsoft SharePoint", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0819, "added": "2026-09-25", "cisaDeadline": "2026-09-28", "headline": "Microsoft SharePoint Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-65660", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65660" ] }, { "cve": "CVE-2026-71362", "cves": [ "CVE-2026-71362" ], "vendor": "Adobe", "product": "Adobe Commerce and Magento ", "category": "web", "categoryName": "Websites & online stores", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.9049, "added": "2026-09-24", "cisaDeadline": "2026-09-27", "headline": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-71362", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-71362" ] }, { "cve": "CVE-2026-5430", "cves": [ "CVE-2026-5430" ], "vendor": "WSO2", "product": "WSO2 Multiple Products", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.2239, "added": "2026-09-24", "cisaDeadline": "2026-09-27", "headline": "WSO2 Multiple Products Path Traversal Vulnerability ", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-5430", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5430" ] }, { "cve": "CVE-2026-94127", "cves": [ "CVE-2026-94127" ], "vendor": "F5", "product": "F5 BIG-IP APM", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.2655, "added": "2026-09-22", "cisaDeadline": "2026-09-25", "headline": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-94127", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-94127" ] }, { "cve": "CVE-2026-93952", "cves": [ "CVE-2026-93952" ], "vendor": "Arista", "product": "Arista VeloCloud Orchestrator", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0138, "added": "2026-09-22", "cisaDeadline": "2026-09-25", "headline": "Arista VeloCloud Orchestrator Improper Input Validation Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-93952", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-93952" ] }, { "cve": "CVE-2026-93616", "cves": [ "CVE-2026-93616" ], "vendor": "Check Point", "product": "Check Point Multiple Products", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.9161, "added": "2026-09-22", "cisaDeadline": "2026-09-25", "headline": "Check Point Multiple Products Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-93616", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-93616" ] }, { "cve": "CVE-2026-85102", "cves": [ "CVE-2026-85102" ], "vendor": "Check Point", "product": "Check Point Multiple Products", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.5414, "added": "2026-09-22", "cisaDeadline": "2026-09-25", "headline": "Check Point Multiple Products Improper Certificate Validation Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-85102", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85102" ] }, { "cve": "CVE-2026-7273", "cves": [ "CVE-2026-7273" ], "vendor": "Zyxel", "product": "Zyxel GS1900 Series Switches", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0278, "added": "2026-09-21", "cisaDeadline": "2026-09-24", "headline": "Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-7273", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-7273" ] }, { "cve": "CVE-2026-53266", "cves": [ "CVE-2026-53266" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0093, "added": "2026-09-18", "cisaDeadline": "2026-09-21", "headline": "Linux Kernel Out-of-Bounds Write Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-53266", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-53266" ] }, { "cve": "CVE-2025-39964", "cves": [ "CVE-2025-39964" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0161, "added": "2026-09-18", "cisaDeadline": "2026-09-21", "headline": "Linux Kernel Race Condition Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2025-39964", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-39964" ] }, { "cve": "CVE-2025-39682", "cves": [ "CVE-2025-39682" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0325, "added": "2026-09-18", "cisaDeadline": "2026-09-21", "headline": "Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2025-39682", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-39682" ] }, { "cve": "CVE-2026-87886", "cves": [ "CVE-2026-87886" ], "vendor": "Acronis", "product": "Acronis Backup", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0023, "added": "2026-09-16", "cisaDeadline": "2026-09-19", "headline": "Acronis Backup Incorrect Default Permissions Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-87886", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-87886" ] }, { "cve": "CVE-2026-76460", "cves": [ "CVE-2026-76460" ], "vendor": "Cisco", "product": "Cisco Identity Services Engine", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.756, "added": "2026-09-16", "cisaDeadline": "2026-09-19", "headline": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-76460", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76460" ] }, { "cve": "CVE-2026-58704", "cves": [ "CVE-2026-58704" ], "vendor": "Google", "product": "Google Pixel", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0063, "added": "2026-09-16", "cisaDeadline": "2026-09-19", "headline": "Google Pixel Improper Authorization Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-58704", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-58704" ] }, { "cve": "CVE-2026-76461", "cves": [ "CVE-2026-76461" ], "vendor": "Cisco", "product": "Cisco Secure Email Gateway", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.2954, "added": "2026-09-14", "cisaDeadline": "2026-09-17", "headline": "Cisco Secure Email Gateway SQL Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-76461", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-76461" ] }, { "cve": "CVE-2026-85706", "cves": [ "CVE-2026-85706" ], "vendor": "GitLab", "product": "GitLab Community Edition and Enterprise Edition", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.9736, "added": "2026-09-11", "cisaDeadline": "2026-09-14", "headline": "GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-85706", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85706" ] }, { "cve": "CVE-2026-84869", "cves": [ "CVE-2026-84869" ], "vendor": "ConnectWise", "product": "ConnectWise ScreenConnect", "category": "remote", "categoryName": "Remote access & IT tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0092, "added": "2026-09-11", "cisaDeadline": "2026-09-14", "headline": "ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-84869", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-84869" ] }, { "cve": "CVE-2026-42018", "cves": [ "CVE-2026-42018" ], "vendor": "JFrog", "product": "JFrog Artifactory", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0998, "added": "2026-09-11", "cisaDeadline": "2026-09-25", "headline": "JFrog Artifactory Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-42018", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42018" ] }, { "cve": "CVE-2026-42016", "cves": [ "CVE-2026-42016" ], "vendor": "JFrog", "product": "JFrog Artifactory", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0864, "added": "2026-09-11", "cisaDeadline": "2026-09-25", "headline": "JFrog Artifactory Incorrect Authorization Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-42016", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-42016" ] }, { "cve": "CVE-2026-86060", "cves": [ "CVE-2026-86060" ], "vendor": "MikroTik", "product": "MikroTik RouterOS", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0639, "added": "2026-09-10", "cisaDeadline": "2026-09-13", "headline": "MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-86060", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86060" ] }, { "cve": "CVE-2026-67277", "cves": [ "CVE-2026-67277" ], "vendor": "MikroTik", "product": "MikroTik RouterOS", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0156, "added": "2026-09-10", "cisaDeadline": "2026-09-13", "headline": "MikroTik RouterOS Missing Authentication for Critical Function Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-67277", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-67277" ] }, { "cve": "CVE-2026-87491", "cves": [ "CVE-2026-87491" ], "vendor": "Google", "product": "Google Chromium V8", "category": "browsers", "categoryName": "Web browsers", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0351, "added": "2026-09-09", "cisaDeadline": "2026-09-23", "headline": "Google Chromium V8 Out of Bounds Write Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-87491", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-87491" ] }, { "cve": "CVE-2026-20079", "cves": [ "CVE-2026-20079" ], "vendor": "Cisco", "product": "Cisco Secure Firewall Management Center", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "patch", "zeroDay": false, "ransomware": false, "epss": 0.8866, "added": "2026-09-09", "cisaDeadline": "2026-09-12", "headline": "Ransomware groups are exploiting a perfect-10 Cisco firewall flaw", "whatToDo": "Upgrade to Cisco's fixed build for your release, and keep the management screen off the public internet.", "url": "https://patchsonar.com/cve/CVE-2026-20079", "sources": [ "https://www.resecurity.com/en/blog/article/cisa-kev-alert-cisco-citrix-and-fortinet-vulnerabilities-under-active-exploitation" ] }, { "cve": "CVE-2026-19490", "cves": [ "CVE-2026-19490" ], "vendor": "Citrix", "product": "Citrix NetScaler", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "patch", "zeroDay": false, "ransomware": false, "epss": 0.3265, "added": "2026-09-09", "cisaDeadline": "2026-09-12", "headline": "A Citrix NetScaler login bypass has no workaround", "whatToDo": "Upgrade; Citrix says there's no workaround. If you can't upgrade right away, limit access to known IP addresses and require multi-factor sign-in.", "url": "https://patchsonar.com/cve/CVE-2026-19490", "sources": [ "https://www.resecurity.com/en/blog/article/cisa-kev-alert-cisco-citrix-and-fortinet-vulnerabilities-under-active-exploitation" ] }, { "cve": "CVE-2025-25249", "cves": [ "CVE-2025-25249" ], "vendor": "Fortinet", "product": "Fortinet FortiGate", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "patch", "zeroDay": false, "ransomware": false, "epss": 0.0374, "added": "2026-09-09", "cisaDeadline": "2026-09-12", "headline": "Attackers are hijacking unpatched FortiGate firewalls at scale", "whatToDo": "Update FortiOS and confirm the new version is running. Block UDP ports 5246 to 5249 from untrusted networks, and check for the signs of compromise in Fortinet's advisory.", "url": "https://patchsonar.com/cve/CVE-2025-25249", "sources": [ "https://www.resecurity.com/en/blog/article/cisa-kev-alert-cisco-citrix-and-fortinet-vulnerabilities-under-active-exploitation" ] }, { "cve": "CVE-2026-86218", "cves": [ "CVE-2026-86218" ], "vendor": "N-able", "product": "N-able N-central", "category": "remote", "categoryName": "Remote access & IT tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.1538, "added": "2026-09-08", "cisaDeadline": "2026-09-11", "headline": "N-able N-central Static Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-86218", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86218" ] }, { "cve": "CVE-2026-85880", "cves": [ "CVE-2026-85880" ], "vendor": "Microsoft", "product": "Microsoft Windows", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0039, "added": "2026-09-08", "cisaDeadline": "2026-09-22", "headline": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-85880", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-85880" ] }, { "cve": "CVE-2026-81963", "cves": [ "CVE-2026-81963" ], "vendor": "Microsoft", "product": "Microsoft Windows", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0039, "added": "2026-09-08", "cisaDeadline": "2026-09-22", "headline": "Microsoft Windows Link Following Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-81963", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-81963" ] }, { "cve": "CVE-2026-75650", "cves": [ "CVE-2026-75650" ], "vendor": "Adobe", "product": "Adobe Commerce and Magento", "category": "web", "categoryName": "Websites & online stores", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0395, "added": "2026-09-08", "cisaDeadline": "2026-09-11", "headline": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-75650", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-75650" ] }, { "cve": "CVE-2026-85046", "cves": [ "CVE-2026-85046" ], "vendor": "Google", "product": "Google Chrome", "category": "browsers", "categoryName": "Web browsers", "status": "soon", "zeroDay": true, "ransomware": false, "epss": 0.0181, "added": "2026-09-04", "cisaDeadline": "2026-09-18", "headline": "Chrome's sixth zero-day of the year is patched", "whatToDo": "Open the Chrome menu, go to Help, then About Google Chrome. Let it update, then relaunch. IT teams should check versions across devices instead of relying on auto-update.", "url": "https://patchsonar.com/cve/CVE-2026-85046", "sources": [ "https://esecurityplanet.com/threats/news-google-chrome-cve-2026-85046-zero-day" ] }, { "cve": "CVE-2026-9586", "cves": [ "CVE-2026-9586" ], "vendor": "Sangoma", "product": "Sangoma Switchvox", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.1898, "added": "2026-09-02", "cisaDeadline": "2026-09-05", "headline": "Sangoma Switchvox SQL Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-9586", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-9586" ] }, { "cve": "CVE-2026-83549", "cves": [ "CVE-2026-83549" ], "vendor": "SonicWall", "product": "SonicWall SMA1000 Appliances", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0989, "added": "2026-09-02", "cisaDeadline": "2026-09-05", "headline": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-83549", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-83549" ] }, { "cve": "CVE-2026-83548", "cves": [ "CVE-2026-83548" ], "vendor": "SonicWall", "product": "SonicWall SMA1000 Appliances", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0804, "added": "2026-09-02", "cisaDeadline": "2026-09-05", "headline": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-83548", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-83548" ] }, { "cve": "CVE-2026-82329", "cves": [ "CVE-2026-82329" ], "vendor": "JFrog", "product": "JFrog Artifactory", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.1437, "added": "2026-09-02", "cisaDeadline": "2026-09-05", "headline": "JFrog Artifactory Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-82329", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-82329" ] }, { "cve": "CVE-2026-59822", "cves": [ "CVE-2026-59822" ], "vendor": "BerriAI", "product": "BerriAI LiteLLM", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0084, "added": "2026-09-02", "cisaDeadline": "2026-09-16", "headline": "BerriAI LiteLLM Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-59822", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59822" ] }, { "cve": "CVE-2026-49869", "cves": [ "CVE-2026-49869" ], "vendor": "Kestra", "product": "Kestra OSS", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.021, "added": "2026-09-02", "cisaDeadline": "2026-09-05", "headline": "Kestra OSS OS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-49869", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-49869" ] }, { "cve": "CVE-2026-48710", "cves": [ "CVE-2026-48710" ], "vendor": "Kludex", "product": "Kludex Starlette", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.7029, "added": "2026-09-02", "cisaDeadline": "2026-09-16", "headline": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-48710", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48710" ] }, { "cve": "CVE-2026-82078", "cves": [ "CVE-2026-82078" ], "vendor": "PaperCut", "product": "PaperCut NG/MF", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.6305, "added": "2026-08-31", "cisaDeadline": "2026-09-14", "headline": "PaperCut NG/MF Unsafe Reflection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-82078", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-82078" ] }, { "cve": "CVE-2026-81578", "cves": [ "CVE-2026-81578" ], "vendor": "PaperCut", "product": "PaperCut NG/MF", "category": "apps", "categoryName": "Other business software", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.8473, "added": "2026-08-31", "cisaDeadline": "2026-09-14", "headline": "PaperCut NG/MF Missing Authentication for Critical Function Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-81578", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-81578" ] }, { "cve": "CVE-2026-66384", "cves": [ "CVE-2026-66384" ], "vendor": "JFrog", "product": "JFrog Artifactory", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0067, "added": "2026-08-27", "cisaDeadline": "2026-09-10", "headline": "JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-66384", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-66384" ] }, { "cve": "CVE-2026-53362", "cves": [ "CVE-2026-53362" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0071, "added": "2026-08-27", "cisaDeadline": "2026-08-30", "headline": "Linux Kernel Unspecified Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-53362", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-53362" ] }, { "cve": "CVE-2023-49105", "cves": [ "CVE-2023-49105" ], "vendor": "ownCloud", "product": "ownCloud", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.4319, "added": "2026-08-27", "cisaDeadline": "2026-08-30", "headline": "ownCloud Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2023-49105", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-49105" ] }, { "cve": "CVE-2026-8452", "cves": [ "CVE-2026-8452" ], "vendor": "Citrix", "product": "Citrix NetScaler ADC and NetScaler Gateway", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0101, "added": "2026-08-26", "cisaDeadline": "2026-08-29", "headline": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-8452", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8452" ] }, { "cve": "CVE-2022-0995", "cves": [ "CVE-2022-0995" ], "vendor": "Linux", "product": "Linux Kernel", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0886, "added": "2026-08-26", "cisaDeadline": "2026-08-29", "headline": "Linux Kernel Out-of-Bounds Write Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2022-0995", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-0995" ] }, { "cve": "CVE-2021-23758", "cves": [ "CVE-2021-23758" ], "vendor": "Ajax.NET Professional", "product": "Ajax.NET Professional", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.8258, "added": "2026-08-26", "cisaDeadline": "2026-09-09", "headline": "Ajax.NET Professional Deserialization of Untrusted Data Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2021-23758", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-23758" ] }, { "cve": "CVE-2019-1068", "cves": [ "CVE-2019-1068" ], "vendor": "Microsoft", "product": "Microsoft SQL Server", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.5727, "added": "2026-08-26", "cisaDeadline": "2026-08-29", "headline": "Microsoft SQL Server Remote Code Execution Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2019-1068", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1068" ] }, { "cve": "CVE-2015-5287", "cves": [ "CVE-2015-5287" ], "vendor": "Red Hat", "product": "Red Hat Automatic Bug Reporting Tool", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.05, "added": "2026-08-26", "cisaDeadline": "2026-09-09", "headline": "Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2015-5287", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-5287" ] }, { "cve": "CVE-2015-3246", "cves": [ "CVE-2015-3246" ], "vendor": "Red Hat", "product": "Red Hat Libuser", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.085, "added": "2026-08-26", "cisaDeadline": "2026-09-09", "headline": "Red Hat Libuser Race Condition Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2015-3246", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-3246" ] }, { "cve": "CVE-2026-60004", "cves": [ "CVE-2026-60004" ], "vendor": "Gitea", "product": "Gitea", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.2399, "added": "2026-08-25", "cisaDeadline": "2026-08-28", "headline": "Gitea Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-60004", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-60004" ] }, { "cve": "CVE-2026-21962", "cves": [ "CVE-2026-21962" ], "vendor": "Oracle", "product": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.7319, "added": "2026-08-24", "cisaDeadline": "2026-08-27", "headline": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-21962", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-21962" ] }, { "cve": "CVE-2026-73570", "cves": [ "CVE-2026-73570" ], "vendor": "Synacor", "product": "Synacor Zimbra Collaboration Suite (ZCS)", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.7166, "added": "2026-08-21", "cisaDeadline": "2026-08-24", "headline": "Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-73570", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-73570" ] }, { "cve": "CVE-2026-72530", "cves": [ "CVE-2026-72530" ], "vendor": "TrueConf", "product": "TrueConf Server", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0169, "added": "2026-08-20", "cisaDeadline": "2026-09-03", "headline": "TrueConf Server Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-72530", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72530" ] }, { "cve": "CVE-2026-72529", "cves": [ "CVE-2026-72529" ], "vendor": "TrueConf", "product": "TrueConf Server", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0146, "added": "2026-08-20", "cisaDeadline": "2026-08-23", "headline": "TrueConf Server Missing Authentication for Critical Function Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-72529", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72529" ] }, { "cve": "CVE-2026-64849", "cves": [ "CVE-2026-64849" ], "vendor": "MLflow", "product": "MLflow", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.1002, "added": "2026-08-19", "cisaDeadline": "2026-09-02", "headline": "MLflow Server-Side Request Forgery Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-64849", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-64849" ] }, { "cve": "CVE-2026-65400", "cves": [ "CVE-2026-65400" ], "vendor": "Apple", "product": "Apple macOS", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.0172, "added": "2026-08-18", "cisaDeadline": "2026-08-21", "headline": "Apple macOS Improper Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-65400", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-65400" ] }, { "cve": "CVE-2026-59310", "cves": [ "CVE-2026-59310" ], "vendor": "Broadcom", "product": "Broadcom VMware vCenter", "category": "servers", "categoryName": "Servers, cloud & backup", "status": "listed", "zeroDay": false, "ransomware": true, "epss": 0.0257, "added": "2026-08-18", "cisaDeadline": "2026-08-21", "headline": "Broadcom VMware vCenter Path Traversal Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-59310", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-59310" ] }, { "cve": "CVE-2026-55040", "cves": [ "CVE-2026-55040" ], "vendor": "Microsoft", "product": "Microsoft SharePoint", "category": "office", "categoryName": "Office, email & file sharing", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.6954, "added": "2026-08-18", "cisaDeadline": "2026-08-21", "headline": "Microsoft SharePoint Weak Authentication Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-55040", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-55040" ] }, { "cve": "CVE-2026-33824", "cves": [ "CVE-2026-33824" ], "vendor": "Microsoft", "product": "Microsoft Internet Key Exchange (IKE) Service Extensions", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.7705, "added": "2026-08-18", "cisaDeadline": "2026-08-21", "headline": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-33824", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-33824" ] }, { "cve": "CVE-2025-62593", "cves": [ "CVE-2025-62593" ], "vendor": "Ray-Project", "product": "Ray-Project Ray", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.6015, "added": "2026-08-17", "cisaDeadline": "2026-08-20", "headline": "Ray-Project Ray Code Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2025-62593", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-62593" ] }, { "cve": "CVE-2026-72898", "cves": [ "CVE-2026-72898" ], "vendor": "Metabase", "product": "Metabase", "category": "dev", "categoryName": "Developer, data & AI tools", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.9881, "added": "2026-08-11", "cisaDeadline": "2026-08-14", "headline": "Metabase SQL Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-72898", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-72898" ] }, { "cve": "CVE-2026-68820", "cves": [ "CVE-2026-68820" ], "vendor": "Microsoft", "product": "Microsoft Windows Ancillary Function Driver for WinSock ", "category": "devices", "categoryName": "Phones & computers", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0857, "added": "2026-08-11", "cisaDeadline": "2026-08-25", "headline": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-68820", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820" ] }, { "cve": "CVE-2026-20349", "cves": [ "CVE-2026-20349" ], "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": true, "ransomware": false, "epss": 0.0101, "added": "2026-08-11", "cisaDeadline": "2026-08-14", "headline": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-20349", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349" ] }, { "cve": "CVE-2026-8037", "cves": [ "CVE-2026-8037" ], "vendor": "Progress", "product": "Progress LoadMaster", "category": "network", "categoryName": "Firewalls, VPNs & network gear", "status": "listed", "zeroDay": false, "ransomware": false, "epss": 0.9979, "added": "2026-08-07", "cisaDeadline": "2026-08-10", "headline": "Progress LoadMaster Command Injection Vulnerability", "whatToDo": "Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.", "url": "https://patchsonar.com/cve/CVE-2026-8037", "sources": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-8037" ] } ] }