CISA: software flaws known to be exploited in real attacks.
Tuesday 27 October 2026
2 records- Vulnerability
Brotli Unchecked Return Value Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-111497
- Vulnerability
Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-48356
Monday 26 October 2026
2 records- Vulnerability
PHP Stale Internal Request-State Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-109619
- Vulnerability
PHP Memory Corruption Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-109618
Friday 23 October 2026
2 records- Vulnerability
Online – Built-in CODE Server OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-110447
- Vulnerability
VeloCloud Orchestrator SQL Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-114625
Tuesday 20 October 2026
6 records- Vulnerability
Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-96654
- Vulnerability
Software Center Uncontrolled Search Path Element Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-110936
- Vulnerability
SiteGuard Server Edition OS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-106931
- Vulnerability
Media Server External Control of File Name or Path Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-96656
- Vulnerability
Media Server Server-Side Request Forgery (SSRF) Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-96655
- Vulnerability
Media Server Server-Side Request Forgery (SSRF) Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-96652
Friday 16 October 2026
2 records- Vulnerability
Remote Support Authentication Bypass by Spoofing Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-102764
- Vulnerability
Multiple Products Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2025-61624
Thursday 15 October 2026
1 record- Vulnerability
Multiple Products Files or Directories Accessible to External Parties Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-21589
Wednesday 14 October 2026
4 records- Vulnerability
PAN-OS Code Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-0322
- Vulnerability
AhsayCBS Command Injection Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-105134
- Vulnerability
Secure Email Gateway Relative Path Traversal Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-76519
- Vulnerability
AhsayCBS Improper Authentication Vulnerability added to the US list of exploited vulnerabilities
CVE-2026-105133