CISA: software flaws known to be exploited in real attacks.
Tuesday 13 October 2026
2 records- Vulnerability
Windows Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-96951
- Vulnerability
Connect Secure Authentication Bypass by Spoofing Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-104935
Thursday 8 October 2026
5 records- Vulnerability
BIND Data Processing Errors Vulnerability added to the US list of exploited vulnerabilities
CVE-2015-5477
- Vulnerability
Struts Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2016-3081
- Vulnerability
Cleartext Storage of Sensitive Information Vulnerability added to the US list of exploited vulnerabilities
CVE-2023-22894
- Vulnerability
Docs Server Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2021-3199
- Vulnerability
Improper Access Control Vulnerability added to the US list of exploited vulnerabilities
CVE-2015-3306
Sunday 4 October 2026
1 record- Vulnerability
NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-88779
Friday 2 October 2026
2 records- Vulnerability
Zammad Improper Privilege Management Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-102490
- Vulnerability
Zammad Session Fixation Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-102489
Thursday 1 October 2026
1 record- Vulnerability
FortiMail Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-104286
Wednesday 30 September 2026
1 record- Vulnerability
Catalyst SD-WAN Manager Hex Encoding Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-76504
Tuesday 29 September 2026
1 record- Vulnerability
Multiple Products Out-of-Bounds Write Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-86950