Welcome to CVE Watch — a curated view of actively exploited vulnerabilities. This page syncs with CISA’s Known Exploited Vulnerabilities (KEV) catalog and prioritizes based on homelab and enterprise relevance.

🔥 Critical (Actively Exploited)

CVECVSSProductPatched?Homelab Impact
CVE-2026-41091 (Defender LPE)~7.8Microsoft Defender (Link Following)✅ Patched (Engine 1.1.26040.8)🔴 High (all Windows endpoints)
CVE-2026-45498 (Defender DoS)~7.5Microsoft Defender Platform✅ Patched (Platform 4.18.26040.7)🔴 High (all Windows endpoints)
CVE-2026-43121 (Damned OOB)~7.8Linux Kernel io_uring ZCRX✅ Patched (6.18.16+)🟡 Medium (servers/containers)
CVE-2026-33825 (BlueHammer)7.8Microsoft Windows Defender✅ Patched (Apr 14)🔴 High (all Windows endpoints)
CVE-2026-346218.6Adobe Acrobat/Reader✅ Patched🟡 Medium (PDF readers)
CVE-2026-43284 (Dirty Frag)~7.8Linux Kernel (ESP variant)✅ Patched (6.18+)🔴 High (all Linux)
CVE-2026-31431 (Copy Fail)7.0Linux Kernel (AF_ALG)✅ Patched🟡 Medium (Linux servers)
CVE-2026-356169.1Fortinet FortiClient EMS✅ Hotfix🟡 Medium (if using EMS)
CVE-2026-216439.8Fortinet FortiClient EMS (SQLi)✅ Patched🟡 Medium (if using EMS)
CVE-2025-607107.8Windows Host Process (EoP)✅ Patched🟡 Medium (Windows VMs/endpoints)
CVE-2023-215298.8Microsoft Exchange Server✅ Patched🟡 Medium (if running Exchange)
CVE-2024-340010.0Palo Alto GlobalProtect✅ Patched🟡 Medium (if using PAN-OS)
CVE-2020-97157.8Adobe Acrobat Use-After-Free✅ Patched🟢 Low (legacy)
CVE-2012-18549.3Microsoft VBA Insecure Library Loading✅ Patched🟢 Low (legacy)

📊 This Week’s Summary

Week of October 26, 2026

CategoryCount
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
CategoryCount
———-——-
New KEV Additions (last 2 weeks)17
Critical (≥9.0)0
Affecting Homelab Common Stack1
Affecting Enterprise Common Stack16

New Additions (CISA KEV — October 26, 2026)

  1. CVE-2026-114625 — VeloCloud Orchestrator: Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functional

    • CVSS: 9.9 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-110447 — Collabora Online – Built-in CODE Server: Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows f

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  3. CVE-2026-106931 — SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS comman

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  4. CVE-2026-96656 — Media Server: Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be e

    • CVSS: 7.2 | Severity: HIGH
    • Action: Patch within 2 weeks

  5. CVE-2026-96655 — Media Server: Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or

    • CVSS: 4.3 | Severity: MEDIUM
    • Action: Review and patch if applicable

  6. CVE-2026-96654 — Media Server: Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other pl

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-96652 — Media Server: Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-110936 — Software Center: Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a special

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-102764 — Remote Support: BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations o

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2025-61624 — Multiple Products: FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profi

  1. CVE-2026-21589 — Multiple Products: Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Dat
  1. CVE-2026-105134 — AhsayCBS: Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of
  1. CVE-2026-76519 — Secure Email Gateway: Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary fi
  1. CVE-2026-105133 — AhsayCBS: Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the r
  1. CVE-2026-0322 — PAN-OS: Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary

  1. CVE-2026-102764 — Remote Support: BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations o

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2025-61624 — Multiple Products: FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profi

    • CVSS: 6.0 | Severity: MEDIUM
    • Action: Review and patch if applicable

  3. CVE-2026-21589 — Multiple Products: Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Dat

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  4. CVE-2026-105134 — AhsayCBS: Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2026-76519 — Secure Email Gateway: Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary fi

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-105133 — AhsayCBS: Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the r

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-0322 — PAN-OS: Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-104935 — Connect Secure: Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary c

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-96951 — Windows: Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2015-5477 — BIND: ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

  1. CVE-2016-3081 — Struts: Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Me
  1. CVE-2023-22894 — Strapi: Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensi
  1. CVE-2021-3199 — Docs: ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could all
  1. CVE-2015-3306 — ProFTPD: ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and

  1. CVE-2015-5477 — BIND: ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

    • CVSS: 7.5 | Severity: HIGH
    • Action: Patch within 2 weeks

  2. CVE-2016-3081 — Struts: Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Me

    • CVSS: 8.1 | Severity: HIGH
    • Action: Patch within 2 weeks

  3. CVE-2023-22894 — Strapi: Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensi

    • CVSS: 4.9 | Severity: MEDIUM
    • Action: Review and patch if applicable

  4. CVE-2021-3199 — Docs: ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could all

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2015-3306 — ProFTPD: ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-88779 — NetScaler: Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-102490 — Zammad: Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This v

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-102489 — Zammad: Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chai

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-104286 — FortiMail: Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthentic

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-76504 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system

  1. CVE-2026-86950 — Multiple Products: Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

  1. CVE-2026-88779 — NetScaler: Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within

    • CVSS: 7.5 | Severity: HIGH
    • Action: Patch within 2 weeks

  2. CVE-2026-102490 — Zammad: Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This v

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-102489 — Zammad: Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chai

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-104286 — FortiMail: Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthentic

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2026-76504 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-86950 — Multiple Products: Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-88772 — NetScaler: Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-88771 — NetScaler: Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-67279 — RouterOS: Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session c

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-65660 — SharePoint: Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.

  1. CVE-2026-87902 — Core: WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a
  1. CVE-2026-5430 — Multiple Products: WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file
  1. CVE-2026-71362 — Commerce and Magento : Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain eleva
  1. CVE-2026-93952 — VeloCloud Orchestrator: Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged
  1. CVE-2026-94127 — BIG-IP APM: F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vul

  1. CVE-2026-82078 — NG/MF: PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  2. CVE-2026-81578 — NG/MF: PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  3. CVE-2023-49105 — ownCloud: ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-53362 — Kernel: Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impac

    • CVSS: 7.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  5. CVE-2026-66384 — Artifactory: JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write

    • CVSS: 5.3 | Severity: MEDIUM
    • Action: Review and patch if applicable

  6. CVE-2021-23758 — Ajax.NET Professional: Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .N

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2015-3246 — Libuser: Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of ser

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2015-5287 — Automatic Bug Reporting Tool: Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gai

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2022-0995 — Kernel: Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of servic

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-8452 — NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which coul

  1. CVE-2019-1068 — SQL Server: Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Data
  1. CVE-2026-60004 — Gitea: Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endp
  1. CVE-2026-21962 — HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation,
  1. CVE-2026-73570 — Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafte
  1. CVE-2026-72530 — Server: TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use

  1. CVE-2026-73570 — Zimbra Collaboration Suite (ZCS): Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafte

    • CVSS: 8.9 | Severity: HIGH
    • Action: Patch within 2 weeks

  2. CVE-2026-72530 — Server: TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use

    • CVSS: 9.0 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-72529 — Server: TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network ac

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-64849 — MLflow: MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response

    • CVSS: 9.3 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2026-33824 — Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-59310 — VMware vCenter: Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary c

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-55040 — SharePoint: Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-65400 — macOS: Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without va

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2025-62593 — Ray: Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be expo

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-20349 — Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could al

  1. CVE-2026-68820 — Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileg
  1. CVE-2026-72898 — Metabase: Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application d

  1. CVE-2026-20349 — Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) : Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap inspection vulnerability that could al

    • CVSS: 8.6 | Severity: HIGH
    • Action: Patch within 2 weeks

  2. CVE-2026-68820 — Windows Ancillary Function Driver for WinSock : Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileg

    • CVSS: 7.0 | Severity: HIGH
    • Action: Patch within 2 weeks

  3. CVE-2026-72898 — Metabase: Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application d

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-8037 — LoadMaster: Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaste

    • CVSS: 9.6 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2026-63077 — TeamCity: JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent pol

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-18556 — N-central: N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-34486 — Tomcat: Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can b

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-9198 — Langflow: Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deplo

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-18577 — N-central: N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-centr

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-8037 — LoadMaster: Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaste

    • CVSS: 9.6 | Severity: CRITICAL
    • Action: Patch immediately

  11. CVE-2026-63077 — TeamCity: JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent pol

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  12. CVE-2026-18556 — N-central: N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.

    • CVSS: 7.4 | Severity: HIGH
    • Action: Patch within 2 weeks

  13. CVE-2026-34486 — Tomcat: Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can b

    • CVSS: 7.5 | Severity: HIGH
    • Action: Patch within 2 weeks

  14. CVE-2026-9198 — Langflow: Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deplo

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  15. CVE-2026-18577 — N-central: N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-centr

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  16. CVE-2026-20316 — Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that c

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  17. CVE-2025-68686 — FortiOS: Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacke

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  18. CVE-2026-16812 — VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal fu

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  19. CVE-2026-20316 — Secure Firewall Management Center (FMC): Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that c

    • CVSS: 5.3 | Severity: MEDIUM
    • Action: Review and patch if applicable

  20. CVE-2025-68686 — FortiOS: Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacke

    • CVSS: 5.9 | Severity: MEDIUM
    • Action: Review and patch if applicable

  21. CVE-2026-16812 — VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal fu

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  22. CVE-2026-16232 — SmartConsole: Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an applicati

    • CVSS: 9.1 | Severity: CRITICAL
    • Action: Patch immediately

  23. CVE-2026-50522 — SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a netw

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  24. CVE-2026-60137 — Core: WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chaine

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  25. CVE-2026-63030 — Core: WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Executi

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  26. CVE-2026-0770 — Langflow: Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  27. CVE-2021-27137 — DD-WRT: DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP a

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  28. CVE-2026-16232 — SmartConsole: Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an applicati

    • CVSS: 9.1 | Severity: CRITICAL
    • Action: Patch immediately

  29. CVE-2026-50522 — SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a netw

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  30. CVE-2026-60137 — Core: WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chaine

    • CVSS: 5.9 | Severity: MEDIUM
    • Action: Review and patch if applicable

  31. CVE-2026-63030 — Core: WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Executi

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  32. CVE-2026-0770 — Langflow: Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on

    • CVSS: 0.0 | Severity: UNKNOWN
    • Action: Review and patch if applicable

  33. CVE-2021-27137 — DD-WRT: DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP a

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  34. CVE-2026-58644 — SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  35. CVE-2026-25089 — FortiSandbox: Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  36. CVE-2026-39808 — FortiSandbox: Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or comm

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  37. CVE-2026-46817 — E-Business Suite: Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP t

  1. CVE-2023-4346 — KNX Protocol Connection Authorization Option 1: KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow
  1. CVE-2026-56155 — Active Directory Federation Services: Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker
  1. CVE-2026-56164 — SharePoint Server: Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges
  1. CVE-2026-15409 — SMA1000 Appliances: SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cau
  1. CVE-2026-15410 — SMA1000 Appliances: SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attac

  1. CVE-2026-58644 — SharePoint: Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-25089 — FortiSandbox: Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-39808 — FortiSandbox: Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or comm

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-46817 — E-Business Suite: Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP t

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  5. CVE-2023-4346 — KNX Protocol Connection Authorization Option 1: KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow

    • CVSS: 7.5 | Severity: HIGH
    • Action: Patch within 2 weeks

  6. CVE-2026-56155 — Active Directory Federation Services: Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-56164 — SharePoint Server: Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-15409 — SMA1000 Appliances: SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cau

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-15410 — SMA1000 Appliances: SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attac

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2008-4128 — IOS: Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain “show

  1. CVE-2026-56291 — Forms: Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which cou
  1. CVE-2026-48939 — iCagenda: iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment fe
  1. CVE-2026-48908 — SP Page Builder: JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbit
  1. CVE-2026-55255 — Langflow: Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belongi
  1. CVE-2026-56290 — Page Builder: Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file

  1. CVE-2026-56291 — Forms: Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload which cou

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-48939 — iCagenda: iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment fe

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-48908 — SP Page Builder: JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbit

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  4. CVE-2026-55255 — Langflow: Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belongi

    • CVSS: 8.4 | Severity: HIGH
    • Action: Patch within 2 weeks

  5. CVE-2026-56290 — Page Builder: Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  6. CVE-2026-48282 — ColdFusion: Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-45659 — SharePoint Server: Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a netw

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-48558 — SimpleHelp: SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens su

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-45659 — SharePoint Server: Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a netw

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-48558 — SimpleHelp: SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens su

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  11. CVE-2026-12569 — Windchill and FlexPLM: PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code b

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  12. CVE-2026-20230 — Unified Communications Manager: Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a serve

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  13. CVE-2025-67038 — EDS5000: Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Inje

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  14. CVE-2026-34910 — UniFi OS: Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct comman

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  15. CVE-2026-34909 — UniFi OS: Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underl

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  16. CVE-2026-34908 — UniFi OS: Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorize

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  17. CVE-2026-12569 — Windchill and FlexPLM: PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code b

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  18. CVE-2026-20230 — Unified Communications Manager: Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a serve

    • CVSS: 8.6 | Severity: HIGH
    • Action: Patch within 2 weeks

  19. CVE-2025-67038 — EDS5000: Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Inje

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  20. CVE-2026-34910 — UniFi OS: Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct comman

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  21. CVE-2026-34909 — UniFi OS: Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underl

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  22. CVE-2026-34908 — UniFi OS: Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorize

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  23. CVE-2026-20253 — Enterprise: Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncat

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  24. CVE-2026-48907 — Joomla Content Editor : Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  25. CVE-2026-54420 — cPanel Plugin: LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shar

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  26. CVE-2026-20262 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file

  1. CVE-2026-20253 — Enterprise: Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncat

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-48907 — Joomla Content Editor : Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-54420 — cPanel Plugin: LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shar

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  4. CVE-2026-20262 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  5. CVE-2026-35273 — PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated at

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  6. CVE-2026-10520 — Sentry: Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-11645 — Chromium V8: Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a craf

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-7473 — Extensible Operating System: Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-20245 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allo

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2026-42271 — LiteLLM: BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user k

  1. CVE-2026-50751 — Security Gateway: Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attack

  1. CVE-2026-35273 — PeopleSoft Enterprise PeopleTools: Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which could allow an unauthenticated at

    • CVSS: 9.8 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-10520 — Sentry: Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  3. CVE-2026-11645 — Chromium V8: Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a craf

    • CVSS: 8.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  4. CVE-2026-7473 — Extensible Operating System: Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate

    • CVSS: 5.8 | Severity: MEDIUM
    • Action: Review and patch if applicable

  5. CVE-2026-20245 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allo

    • CVSS: 7.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  6. CVE-2026-42271 — LiteLLM: BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user k

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-50751 — Security Gateway: Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attack

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-28318 — Serv-U: SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding:

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2026-45247 — Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remot

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2022-0492 — Kernel: Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

  1. CVE-2025-48595 — Framework: Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
  1. CVE-2024-21182 — WebLogic Server: Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Orac

  1. CVE-2026-10520 — Sentry: Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to

    • CVSS: 10.0 | Severity: CRITICAL
    • Action: Patch immediately

  2. CVE-2026-11645 — Chromium V8: Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a craf

    • CVSS: 8.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  3. CVE-2026-7473 — Extensible Operating System: Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate

    • CVSS: 5.8 | Severity: MEDIUM
    • Action: Review and patch if applicable

  4. CVE-2026-20245 — Catalyst SD-WAN Manager: Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allo

    • CVSS: 7.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  5. CVE-2026-42271 — LiteLLM: BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user k

    • CVSS: 8.8 | Severity: HIGH
    • Action: Patch within 2 weeks

  6. CVE-2026-50751 — Security Gateway: Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attack

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  7. CVE-2026-28318 — Serv-U: SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding:

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  8. CVE-2026-45247 — Mirasvit Full Page Cache Warmer: Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remot

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  9. CVE-2022-0492 — Kernel: Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

    • CVSS: 0 | Severity:
    • Action: Review and patch if applicable

  10. CVE-2025-48595 — Framework: Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

  1. CVE-2024-21182 — WebLogic Server: Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Orac
  1. CVE-2026-0257 — PAN-OS: Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unaut

  1. CVE-2026-34621 — Adobe Acrobat/Reader Prototype Pollution

    • CVSS: 8.6 | Actively exploited
    • Crafted PDF → arbitrary code execution via prototype pollution
    • Action: Update Adobe Acrobat/Reader immediately. Versions 24.001.30356, 26.001.21367 and earlier are affected.

  2. CVE-2026-21643 — Fortinet FortiClient EMS SQL Injection

    • CVSS: 9.8 | Pre-auth SQLi → RCE
    • Action: Update FortiClient EMS to 7.4.7+ immediately. Same product as CVE-2026-35616 — if you patched 35616, verify you also have the 21643 fix.

  3. CVE-2025-60710 — Windows Host Process Elevation of Privilege

    • CVSS: 7.8 | Link following → local EoP
    • Affects Windows 11 24H2, Server 2025
    • Action: Apply April 2026 Patch Tuesday updates.

  4. CVE-2023-21529 — Microsoft Exchange Server Deserialization RCE

    • CVSS: 8.8 | Legacy but still actively exploited
    • Action: If running on-prem Exchange, ensure you’re on the latest CU + security patches.

  5. CVE-2023-36424 — Windows Out-of-Bounds Read

    • CVSS: 5.5 | Information disclosure
    • Action: Patched in late 2023 updates. Verify systems are current.

  6. CVE-2020-9715 — Adobe Acrobat Use-After-Free

    • CVSS: 7.8 | Legacy exploitation still active
    • Action: Ensure Adobe Reader is updated to the latest version.

  7. CVE-2012-1854 — Microsoft VBA Insecure Library Loading

    • CVSS: 9.3 | Ancient but still in KEV for active exploitation
    • Action: Ensure all Windows systems have MS12-057 applied. Legacy systems are at risk.

🏠 Homelab Priorities

Based on common homelab stacks, these vulnerabilities need immediate attention:

Windows (VMs & Endpoints)

Adobe Acrobat/Reader

Fortinet (if running EMS)

Proxmox VE

Docker

Nginx Proxy Manager

TrueNAS / Synology

🔧 Detection Commands

Quick checks for common vulnerabilities:

Check Windows Patch Level (CVE-2025-60710)

# Check April 2026 Patch Tuesday applied
Get-HotFix | Where-Object {$_.InstalledOn -gt (Get-Date).AddDays(-30)} | Sort-Object InstalledOn -Descending

Check Adobe Reader Version (CVE-2026-34621)

# Affected: ≤ 24.001.30356 or ≤ 26.001.21367
Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*" | Where-Object {$_.DisplayName -like "*Adobe*"} | Select-Object DisplayName, DisplayVersion

Check FortiClient EMS Version (CVE-2026-21643 / CVE-2026-35616)

# On EMS server
cat /opt/FortiClientEMS/bin/version.txt

# Affected: 7.4.4, 7.4.5, 7.4.6
# Safe: 7.4.7+

Check Proxmox Kernel

# Current kernel
uname -r

# Check for updates
apt list --upgradable | grep pve-kernel

Check Docker Version

# Must be >= 25.0.2 for runc fix
docker version | grep Version

# Check for runc vulnerability
runc --version

📅 Archive

Weekly CVE summaries are archived below:

🔄 Data Source

This page pulls from:

🔔 Subscribe

Get CVE updates via:

Last updated: October 26, 2026, 08:40 CDT