Vulnerability Bulletin
The latest known-exploited vulnerabilities and recently published CVEs, aggregated from official government feeds.
Last updated: 2026-10-30 · CISA KEV · NVD · JPCERT/CC · CERT-FR
- Known exploited (KEV)
- 1,764
- Added — last 30 days
- 34
- Ransomware-associated
- 361
Japan Advisories
Official security advisories and alerts from JPCERT/CC.
Last updated: 2026-10-30 · Data source: JPCERT/CC
In plain language
- What is happening:
- A vulnerability or incident that could let attackers cause a security problem has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
In plain language
- What is happening:
- A vulnerability or incident that could let attackers crash the system or execute code has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
In plain language
- What is happening:
- A vulnerability or incident that could let attackers gain unauthorized access to systems has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
In plain language
- What is happening:
- A vulnerability or incident that could let attackers run system commands has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
Microsoft has released October 2026 Security Updates to address the vulnerabilities in their products. Attackers leveraging these vulnerabilities may be able to execute arbitrary code remotely without authentication or b…
In plain language
- What is happening:
- A vulnerability or incident that could let attackers run their own code on the system has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
In plain language
- What is happening:
- A vulnerability or incident that could let attackers cause a security problem has been reported.
- Why it matters:
- An official JPCERT/CC advisory — check whether your products or services are affected.
- What to do:
- Apply the updates and other actions recommended by JPCERT/CC.
Known Exploited Vulnerabilities
Actively exploited vulnerabilities from the CISA KEV catalog, with the required remediation action for each.
Last updated: 2026-10-30 · Data source: CISA KEV
CVE-2026-97229Community Edition and Enterprise Edition has a flaw that could let attackers run their own code on the system without needing to log in.
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
GitLab — Community Edition and Enterprise Edition
In plain language
- What it means:
- Community Edition and Enterprise Edition has a flaw that could let attackers run their own code on the system without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Community Edition and Enterprise Edition to the latest version by 2026-11-01. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-76418Secure Firewall ASA Software and Cisco Secure FTD Software has a flaw that could let attackers crash or disrupt the service without needing to log in.
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
Cisco — Secure Firewall ASA Software and Cisco Secure FTD Software
In plain language
- What it means:
- Secure Firewall ASA Software and Cisco Secure FTD Software has a flaw that could let attackers crash or disrupt the service without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Secure Firewall ASA Software and Cisco Secure FTD Software to the latest version by 2026-11-01. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-41709VMware ESX has a flaw that could let attackers crash or disrupt the service.
Broadcom VMWare ESX Insufficient Logging Vulnerability
Broadcom — VMware ESX
In plain language
- What it means:
- VMware ESX has a flaw that could let attackers crash or disrupt the service.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update VMware ESX to the latest version by 2026-11-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-46300Kernel has a flaw that could let attackers cause a security problem.
Linux Kernel Missing Initialization of a Variable Vulnerability
Linux — Kernel
In plain language
- What it means:
- Kernel has a flaw that could let attackers cause a security problem.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Kernel to the latest version by 2026-10-31. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-48356Commerce and Magento has a flaw that could let attackers run their own code on the system.
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Adobe — Commerce and Magento
In plain language
- What it means:
- Commerce and Magento has a flaw that could let attackers run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Commerce and Magento to the latest version by 2026-11-10. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-111497Brotli has a flaw that could let attackers run their own code on the system without needing to log in.
Google Brotli Unchecked Return Value Vulnerability
Google — Brotli
In plain language
- What it means:
- Brotli has a flaw that could let attackers run their own code on the system without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Brotli to the latest version by 2026-11-10. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-109618PHP has a flaw that could let attackers run their own code on the system without needing to log in.
PHP Memory Corruption Vulnerability
PHP Group — PHP
In plain language
- What it means:
- PHP has a flaw that could let attackers run their own code on the system without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update PHP to the latest version by 2026-10-29. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-109619PHP has a flaw that could let attackers run their own code on the system without needing to log in.
PHP Stale Internal Request-State Vulnerability
PHP Group — PHP
In plain language
- What it means:
- PHP has a flaw that could let attackers run their own code on the system without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update PHP to the latest version by 2026-10-29. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-114625VeloCloud Orchestrator has a flaw that could let attackers read or alter database contents.
Arista VeloCloud Orchestrator SQL Injection Vulnerability
Arista — VeloCloud Orchestrator
In plain language
- What it means:
- VeloCloud Orchestrator has a flaw that could let attackers read or alter database contents.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update VeloCloud Orchestrator to the latest version by 2026-10-26. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-110447Collabora Online – Built-in CODE Server has a flaw that could let attackers run their own code on the system.
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora — Collabora Online – Built-in CODE Server
In plain language
- What it means:
- Collabora Online – Built-in CODE Server has a flaw that could let attackers run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Collabora Online – Built-in CODE Server to the latest version by 2026-10-26. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-106931SiteGuard Server Edition has a flaw that could let attackers run system commands.
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions — SiteGuard Server Edition
In plain language
- What it means:
- SiteGuard Server Edition has a flaw that could let attackers run system commands.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update SiteGuard Server Edition to the latest version by 2026-10-23. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-96656Media Server has a flaw that could let attackers cause a security problem.
Plex Media Server External Control of File Name or Path Vulnerability
Plex — Media Server
In plain language
- What it means:
- Media Server has a flaw that could let attackers cause a security problem.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Media Server to the latest version by 2026-10-23. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-96655Media Server has a flaw that could let an attacker with an account make the server access unintended locations.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex — Media Server
In plain language
- What it means:
- Media Server has a flaw that could let an attacker with an account make the server access unintended locations.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Media Server to the latest version by 2026-11-03. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-96654Media Server has a flaw that could let attackers cause a security problem.
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex — Media Server
In plain language
- What it means:
- Media Server has a flaw that could let attackers cause a security problem.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Media Server to the latest version by 2026-10-23. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-96652Media Server has a flaw that could let attackers make the server access unintended locations.
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex — Media Server
In plain language
- What it means:
- Media Server has a flaw that could let attackers make the server access unintended locations.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Media Server to the latest version by 2026-11-03. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-110936Software Center has a flaw that could let an attacker with an account run their own code on the system.
Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens — Software Center
In plain language
- What it means:
- Software Center has a flaw that could let an attacker with an account run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Software Center to the latest version by 2026-11-03. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-102764Remote Support has a flaw that could let attackers bypass login or access controls.
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
BeyondTrust — Remote Support
In plain language
- What it means:
- Remote Support has a flaw that could let attackers bypass login or access controls.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Remote Support to the latest version by 2026-10-19. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2025-61624Multiple Products has a flaw that could let an attacker with an account read files they should not be able to access.
Fortinet Multiple Products Path Traversal Vulnerability
Fortinet — Multiple Products
In plain language
- What it means:
- Multiple Products has a flaw that could let an attacker with an account read files they should not be able to access.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Multiple Products to the latest version by 2026-10-19. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-21589Multiple Products has a flaw that could let attackers cause a security problem without needing to log in.
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Atlassian — Multiple Products
In plain language
- What it means:
- Multiple Products has a flaw that could let attackers cause a security problem without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Multiple Products to the latest version by 2026-10-18. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-105134AhsayCBS has a flaw that could let attackers run system commands.
Ahsay AhsayCBS Command Injection Vulnerability
Ahsay — AhsayCBS
In plain language
- What it means:
- AhsayCBS has a flaw that could let attackers run system commands.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update AhsayCBS to the latest version by 2026-10-17. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-76519Secure Email Gateway has a flaw that could let attackers read files they should not be able to access without needing to log in.
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Cisco — Secure Email Gateway
In plain language
- What it means:
- Secure Email Gateway has a flaw that could let attackers read files they should not be able to access without needing to log in.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Secure Email Gateway to the latest version by 2026-10-17. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-105133AhsayCBS has a flaw that could let attackers bypass login or access controls.
Ahsay AhsayCBS Improper Authentication Vulnerability
Ahsay — AhsayCBS
In plain language
- What it means:
- AhsayCBS has a flaw that could let attackers bypass login or access controls.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update AhsayCBS to the latest version by 2026-10-17. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-0322PAN-OS has a flaw that could let an attacker with an account run their own code on the system.
Palo Alto Networks PAN-OS Code Injection Vulnerability
Palo Alto Networks — PAN-OS
In plain language
- What it means:
- PAN-OS has a flaw that could let an attacker with an account run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update PAN-OS to the latest version by 2026-10-17. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-104935Connect Secure has a flaw that could let attackers bypass login or access controls.
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti — Connect Secure
In plain language
- What it means:
- Connect Secure has a flaw that could let attackers bypass login or access controls.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Connect Secure to the latest version by 2026-10-16. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2026-96951Windows has a flaw that could let attackers run system commands.
Microsoft Windows Command Injection Vulnerability
Microsoft — Windows
In plain language
- What it means:
- Windows has a flaw that could let attackers run system commands.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Windows to the latest version by 2026-10-16. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2015-5477BIND has a flaw that could let attackers crash or disrupt the service.
ISC BIND Data Processing Errors Vulnerability
ISC — BIND
In plain language
- What it means:
- BIND has a flaw that could let attackers crash or disrupt the service.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update BIND to the latest version by 2026-10-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2016-3081Struts has a flaw that could let attackers run their own code on the system.
Apache Struts Command Injection Vulnerability
Apache — Struts
In plain language
- What it means:
- Struts has a flaw that could let attackers run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Struts to the latest version by 2026-10-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2023-22894Strapi has a flaw that could let attackers run their own code on the system.
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi — Strapi
In plain language
- What it means:
- Strapi has a flaw that could let attackers run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Strapi to the latest version by 2026-10-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2021-3199Docs has a flaw that could let attackers run their own code on the system.
ONLYOFFICE Docs Server Path Traversal Vulnerability
ONLYOFFICE — Docs
In plain language
- What it means:
- Docs has a flaw that could let attackers run their own code on the system.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update Docs to the latest version by 2026-10-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →CVE-2015-3306ProFTPD has a flaw that could let attackers cause a security problem.
ProFTPD Improper Access Control Vulnerability
ProFTPD — ProFTPD
In plain language
- What it means:
- ProFTPD has a flaw that could let attackers cause a security problem.
- Why it matters:
- Attackers are actively exploiting this right now, so it isn't just theoretical.
- What to do:
- Update ProFTPD to the latest version by 2026-10-11. If you can't patch, isolate it from the internet until you can.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
View in NVD →Recently Published CVEs
Recently published vulnerabilities from the NIST NVD, by severity.
Last updated: 2026-10-30 · Data source: NIST NVD
CRITICALCVE-2026-1076852026-10-23Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via
In plain language: This flaw could let attackers cause a security problem. Rated Critical severity — treat it as urgent if it affects your systems.
View in NVD →CRITICALCVE-2026-1157272026-10-23AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the de
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the de
In plain language: This flaw could let attackers run their own code on the system. Rated Critical severity — treat it as urgent if it affects your systems.
View in NVD →HIGHCVE-2026-1129042026-10-23Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file G
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file G
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-1157232026-10-23Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers co
Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers co
In plain language: This flaw could let attackers crash the system or execute code. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-1157262026-10-23Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifica
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifica
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568322026-10-23PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord
PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later non-bot message in the configured Discord
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568332026-10-23PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable
PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The module also exports agent-callable
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568342026-10-23PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_tools(). The implemented artifact tools do
PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_tools(). The implemented artifact tools do
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568352026-10-23PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack mes
PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-user pairing policy in the normal Slack mes
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568362026-10-23PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and
PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe command is registered in the Typer app and
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568372026-10-23PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is ab
PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_SECRET as optional. When the secret is ab
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568382026-10-23PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The
PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly passes allow_dangerous_tools=True. The
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-568402026-10-23PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled
PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval dashboard HTML. An attacker-controlled
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →HIGHCVE-2026-988702026-10-23In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbd_sessions_deregister() removes a connection's channels from other sessions' channel li
In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbd_sessions_deregister() removes a connection's channels from other sessions' channel li
In plain language: This flaw could let attackers cause a security problem. Rated High severity — prioritize a fix.
View in NVD →MEDIUMCVE-2026-1119652026-10-23The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator confi
The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator confi
In plain language: This flaw could let an attacker with an account cause a security problem. Rated Medium severity — address it in your normal update cycle.
View in NVD →MEDIUMCVE-2026-1157222026-10-23RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes p
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes p
In plain language: This flaw could let attackers cause a security problem. Rated Medium severity — address it in your normal update cycle.
View in NVD →MEDIUMCVE-2026-942632026-10-23The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end form
The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end form
In plain language: This flaw could let attackers cause a security problem. Rated Medium severity — address it in your normal update cycle.
View in NVD →LOWCVE-2026-1157242026-10-23VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed a
VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed a
In plain language: This flaw could let attackers cause a security problem. Rated Low severity.
View in NVD →LOWCVE-2026-1157252026-10-23Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations cre
Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations cre
In plain language: This flaw could let an attacker with an account cause a security problem. Rated Low severity.
View in NVD →LOWCVE-2026-956202026-10-23A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availabili
A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availabili
In plain language: This flaw could let attackers crash the system or execute code. Rated Low severity.
View in NVD →European Advisories
Security advisories from CERT-FR (ANSSI, France).
Last updated: 2026-10-30 · Data source: CERT-FR (ANSSI)
Data source: Known Exploited Vulnerabilities data from the CISA KEV catalog; recent CVEs from the NIST National Vulnerability Database (NVD). Feeds are fetched at build time and refreshed on each deploy.
Vulnerability data is provided in English from the official source feeds.
This bulletin aggregates official public data for informational purposes only. It is not an assessment of any specific environment and does not replace vendor advisories or your own risk evaluation.