https://patchsonar.com/ Zero-days and exploited vulnerabilities, in plain English, from CISA's catalog and vendor advisories. en-us https://patchsonar.com/cve/CVE-2026-46300 https://patchsonar.com/cve/CVE-2026-46300 Wed, 28 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 28, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-41709 https://patchsonar.com/cve/CVE-2026-41709 Wed, 28 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 28, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-48356 https://patchsonar.com/cve/CVE-2026-48356 Tue, 27 Oct 2026 12:00:00 GMT Websites & online stores Yes. Security firm Sansec says attackers have been planting a hidden loader in store content blocks since at least July 2025. What to do: Install Adobe's security patch for this flaw, then check your store's CMS blocks for code you didn't add. https://patchsonar.com/cve/CVE-2026-111497 https://patchsonar.com/cve/CVE-2026-111497 Tue, 27 Oct 2026 12:00:00 GMT Developer, data & AI tools Early signs only. Honeypots have logged a few attempts, apparently from a mass-scanning group. Whether you're exposed depends on how your app handles compressed data. What to do: Upgrade Node.js; there is no workaround. Bun, Envoy, Python, .NET and PHP on Windows have also shipped fixes. https://patchsonar.com/cve/CVE-2026-109619 https://patchsonar.com/cve/CVE-2026-109619 Mon, 26 Oct 2026 12:00:00 GMT Websites & online stores Yes. CISA confirmed active exploitation on Oct. 26, two days after researchers saw successful attacks on test servers. What to do: Upgrade PHP. If a hosting company runs your site, ask them to confirm they've updated. Check for updates to any software or appliance that bundles PHP. https://patchsonar.com/cve/CVE-2026-109618 https://patchsonar.com/cve/CVE-2026-109618 Mon, 26 Oct 2026 12:00:00 GMT Websites & online stores Yes. CISA confirmed active exploitation on Oct. 26, two days after researchers saw successful attacks on test servers. What to do: Upgrade PHP. If a hosting company runs your site, ask them to confirm they've updated. Check for updates to any software or appliance that bundles PHP. https://patchsonar.com/cve/CVE-2026-114625 https://patchsonar.com/cve/CVE-2026-114625 Fri, 23 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 23, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-110447 https://patchsonar.com/cve/CVE-2026-110447 Fri, 23 Oct 2026 12:00:00 GMT Office, email & file sharing Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 23, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-96656 https://patchsonar.com/cve/CVE-2026-96656 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-96655 https://patchsonar.com/cve/CVE-2026-96655 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-96654 https://patchsonar.com/cve/CVE-2026-96654 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-96652 https://patchsonar.com/cve/CVE-2026-96652 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-110936 https://patchsonar.com/cve/CVE-2026-110936 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-106931 https://patchsonar.com/cve/CVE-2026-106931 Tue, 20 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 20, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-102764 https://patchsonar.com/cve/CVE-2026-102764 Fri, 16 Oct 2026 12:00:00 GMT Remote access & IT tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 16, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2025-61624 https://patchsonar.com/cve/CVE-2025-61624 Fri, 16 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 16, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-21589 https://patchsonar.com/cve/CVE-2026-21589 Thu, 15 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 15, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-76519 https://patchsonar.com/cve/CVE-2026-76519 Wed, 14 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-105134 https://patchsonar.com/cve/CVE-2026-105134 Wed, 14 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-105133 https://patchsonar.com/cve/CVE-2026-105133 Wed, 14 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-0322 https://patchsonar.com/cve/CVE-2026-0322 Wed, 14 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-96951 https://patchsonar.com/cve/CVE-2026-96951 Tue, 13 Oct 2026 12:00:00 GMT Phones & computers Yes. Attackers send a crafted file by email or chat. It only works if someone opens it. What to do: Open Settings, go to Windows Update, select Check for updates, then install and restart. October was also the last update for Windows 11 24H2 Home and Pro, so upgrade if you're on that version. https://patchsonar.com/cve/CVE-2026-104935 https://patchsonar.com/cve/CVE-2026-104935 Tue, 13 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. Ivanti says a limited number of customers were hit before the fix came out. What to do: Upgrade Connect Secure to the fixed version. https://patchsonar.com/cve/CVE-2023-22894 https://patchsonar.com/cve/CVE-2023-22894 Thu, 08 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2021-3199 https://patchsonar.com/cve/CVE-2021-3199 Thu, 08 Oct 2026 12:00:00 GMT Office, email & file sharing Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2016-3081 https://patchsonar.com/cve/CVE-2016-3081 Thu, 08 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2015-5477 https://patchsonar.com/cve/CVE-2015-5477 Thu, 08 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2015-3306 https://patchsonar.com/cve/CVE-2015-3306 Thu, 08 Oct 2026 12:00:00 GMT Office, email & file sharing Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-88779 https://patchsonar.com/cve/CVE-2026-88779 Sun, 04 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 4, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-102490 https://patchsonar.com/cve/CVE-2026-102490 Fri, 02 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-102489 https://patchsonar.com/cve/CVE-2026-102489 Fri, 02 Oct 2026 12:00:00 GMT Other business software Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-104286 https://patchsonar.com/cve/CVE-2026-104286 Thu, 01 Oct 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 1, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-76504 https://patchsonar.com/cve/CVE-2026-76504 Wed, 30 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 30, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-86950 https://patchsonar.com/cve/CVE-2026-86950 Tue, 29 Sep 2026 12:00:00 GMT Phones & computers Yes, in targeted attacks on specific people. Opening a malicious file can let an attacker run code on the device. What to do: On iPhone or iPad: Settings, General, Software Update. On Mac: System Settings, General, Software Update. Until you've updated, don't open unexpected files from strangers. https://patchsonar.com/cve/CVE-2026-88772 https://patchsonar.com/cve/CVE-2026-88772 Sun, 27 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 27, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-88771 https://patchsonar.com/cve/CVE-2026-88771 Sun, 27 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 27, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-87902 https://patchsonar.com/cve/CVE-2026-87902 Fri, 25 Sep 2026 12:00:00 GMT Websites & online stores Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 25, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-67279 https://patchsonar.com/cve/CVE-2026-67279 Fri, 25 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 25, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-65660 https://patchsonar.com/cve/CVE-2026-65660 Fri, 25 Sep 2026 12:00:00 GMT Office, email & file sharing Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 25, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-71362 https://patchsonar.com/cve/CVE-2026-71362 Thu, 24 Sep 2026 12:00:00 GMT Websites & online stores Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 24, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-5430 https://patchsonar.com/cve/CVE-2026-5430 Thu, 24 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 24, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-94127 https://patchsonar.com/cve/CVE-2026-94127 Tue, 22 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 22, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-93952 https://patchsonar.com/cve/CVE-2026-93952 Tue, 22 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 22, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-93616 https://patchsonar.com/cve/CVE-2026-93616 Tue, 22 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 22, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-85102 https://patchsonar.com/cve/CVE-2026-85102 Tue, 22 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 22, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-7273 https://patchsonar.com/cve/CVE-2026-7273 Mon, 21 Sep 2026 12:00:00 GMT Firewalls, VPNs & network gear Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 21, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-53266 https://patchsonar.com/cve/CVE-2026-53266 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2025-39964 https://patchsonar.com/cve/CVE-2025-39964 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2025-39682 https://patchsonar.com/cve/CVE-2025-39682 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. https://patchsonar.com/cve/CVE-2026-87886 https://patchsonar.com/cve/CVE-2026-87886 Wed, 16 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 16, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.