CISA: software flaws known to be exploited in real attacks.
Sunday 27 September 2026
2 records- Vulnerability
NetScaler Improper Input Validation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-88771
- Vulnerability
NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-88772
Friday 25 September 2026
3 records- Vulnerability
Core Remote File Inclusion Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-87902
- Vulnerability
RouterOS Improper Enforcement of Behavioral Workflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-67279
- Vulnerability
SharePoint Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-65660
Thursday 24 September 2026
2 records- Vulnerability
Multiple Products Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-5430
- Vulnerability
Commerce and Magento Incorrect Authorization Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-71362
Tuesday 22 September 2026
4 records- Vulnerability
Multiple Products Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-93616
- Vulnerability
VeloCloud Orchestrator Improper Input Validation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-93952
- Vulnerability
BIG-IP APM Heap-based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-94127
- Vulnerability
Multiple Products Improper Certificate Validation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-85102
Monday 21 September 2026
1 record- Vulnerability
GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-7273
Friday 18 September 2026
3 records- Vulnerability
Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-39682
- Vulnerability
Kernel Out-of-Bounds Write Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-53266
- Vulnerability
Kernel Race Condition Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-39964
Wednesday 16 September 2026
3 records- Vulnerability
Backup Incorrect Default Permissions Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-87886
- Vulnerability
Pixel Improper Authorization Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-58704
- Vulnerability
Identity Services Engine Incorrect Use of Privileged APIs Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-76460