Service & Internet Intelligence

Security intelligence

Newly published and actively exploited vulnerabilities from official sources: CISA KEV, NVD, ENISA EUVD, GitHub Advisories, OSV, Microsoft, Red Hat, Ubuntu, Debian, php.net, national CERTs (USOM, CERT-EU, NCSC UK, CERT-Bund, CERT-FR, JPCERT/CC) and vendor PSIRTs (Cisco, Fortinet, Palo Alto Networks). Every item states its sources, publication time and verification state.

Last updated: October 25 at 07:06 UTC · 10:06 TRT · 26 of 26 sources reachable · Next Microsoft Patch Tuesday: November 10, 2026

50 of 61 items

  1. CriticalVERIFIED

    Arista VeloCloud Orchestrator SQL Injection Vulnerability

    Affected: Arista — VeloCloud OrchestratorCVE-2026-114625CVSS 9.4 (v4.0, EUVD)EPSS 0.8% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 26, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV, EUVD

  2. CriticalVERIFIED

    Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

    Affected: Collabora — Collabora Online – Built-in CODE ServerCVE-2026-110447CVSS 9.2 (v4.0, EUVD)EPSS 2.3% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 26, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV, EUVD

  3. CriticalVERIFIED

    Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    Affected: Cisco — Secure Email GatewayCVE-2026-76519EPSS 1.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 17, 2026

    Malware

    Severity set by the Korantix rule

    Sources: CISA KEV, Cisco PSIRT

  4. CriticalVERIFIED

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    Affected: Cisco — Catalyst SD-WAN ManagerCVE-2026-76504EPSS 1.8% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 3, 2026

    Authentication bypass

    Severity set by the Korantix rule

    Sources: CISA KEV, Cisco PSIRT

  5. CriticalVERIFIED

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Affected: Cisco — Secure Email GatewayCVE-2026-76461EPSS 30% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 17, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV, Cisco PSIRT

  7. HighVERIFIED

    EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability

    Affected: EG Secure Solutions — SiteGuard Server EditionCVE-2026-106931CVSS 8.5 (v4.0, EUVD)EPSS 1.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 23, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV, EUVD

  8. HighVERIFIED

    Plex Media Server External Control of File Name or Path Vulnerability

    Affected: Plex — Media ServerCVE-2026-96656CVSS 8.6 (v4.0, NVD)EPSS 0.8% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 23, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  9. HighVERIFIED

    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

    Affected: Plex — Media ServerCVE-2026-96655CVSS 5.3 (v4.0, NVD)EPSS 0.5% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: November 3, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  10. HighVERIFIED

    Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

    Affected: Plex — Media ServerCVE-2026-96654CVSS 6.9 (v4.0, NVD)EPSS 0.5% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 23, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  11. HighVERIFIED

    Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

    Affected: Plex — Media ServerCVE-2026-96652EPSS 0.5% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: November 3, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  12. HighVERIFIED

    Siemens Software Center Uncontrolled Search Path Element Vulnerability

    Affected: Siemens — Software CenterCVE-2026-110936CVSS 8.4 (v4.0, EUVD)EPSS 0.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: November 3, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV, EUVD

  13. HighVERIFIED

    BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

    Affected: BeyondTrust — Remote SupportCVE-2026-102764EPSS 1.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 19, 2026

    Authentication bypass

    Severity set by the Korantix rule

    Sources: CISA KEV

  14. HighVERIFIED

    Fortinet Multiple Products Path Traversal Vulnerability

    Affected: Fortinet — Multiple ProductsCVE-2025-61624EPSS 1.1% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 19, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  15. HighVERIFIED

    Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

    Affected: Atlassian — Multiple ProductsCVE-2026-21589EPSS 13% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 18, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  16. HighVERIFIED

    Ahsay AhsayCBS Command Injection Vulnerability

    Affected: Ahsay — AhsayCBSCVE-2026-105134EPSS 38% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 17, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  17. HighVERIFIED

    Ahsay AhsayCBS Improper Authentication Vulnerability

    Affected: Ahsay — AhsayCBSCVE-2026-105133EPSS 5.8% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 17, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  18. HighVERIFIED

    Palo Alto Networks PAN-OS Code Injection Vulnerability

    Affected: Palo Alto Networks — PAN-OSCVE-2026-0322EPSS 1.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 17, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV, Palo Alto PSIRT

  19. HighVERIFIED

    Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

    Affected: Ivanti — Connect SecureCVE-2026-104935EPSS 26% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 16, 2026

    Authentication bypass

    Severity set by the Korantix rule

    Sources: CISA KEV, CERT-FR

  20. HighVERIFIED

    Microsoft Windows Command Injection Vulnerability

    Affected: Microsoft — WindowsCVE-2026-96951EPSS 1.5% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 16, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  21. HighVERIFIED

    ISC BIND Data Processing Errors Vulnerability

    Affected: ISC — BINDCVE-2015-5477EPSS 99% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 11, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  22. HighVERIFIED

    Apache Struts Command Injection Vulnerability

    Affected: Apache — StrutsCVE-2016-3081EPSS 96% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 11, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  23. HighVERIFIED

    Strapi Cleartext Storage of Sensitive Information Vulnerability

    Affected: Strapi — StrapiCVE-2023-22894EPSS 3.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 11, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  24. HighVERIFIED

    ONLYOFFICE Docs Server Path Traversal Vulnerability

    Affected: ONLYOFFICE — DocsCVE-2021-3199EPSS 20% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 11, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  25. HighVERIFIED

    ProFTPD Improper Access Control Vulnerability

    Affected: ProFTPD — ProFTPDCVE-2015-3306EPSS 99% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 11, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  26. HighVERIFIED

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    Affected: Citrix — NetScalerCVE-2026-88779EPSS 0.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 7, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV, CERT-FR

  27. HighVERIFIED

    Zammad GmbH Zammad Improper Privilege Management Vulnerability

    Affected: Zammad GmbH — ZammadCVE-2026-102490EPSS 0.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 5, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  28. HighVERIFIED

    Zammad GmbH Zammad Session Fixation Vulnerability

    Affected: Zammad GmbH — ZammadCVE-2026-102489EPSS 1.3% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 5, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  29. HighVERIFIED

    Fortinet FortiMail Path Traversal Vulnerability

    Affected: Fortinet — FortiMailCVE-2026-104286EPSS 2.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 4, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  30. HighVERIFIED

    Apple Multiple Products Out-of-Bounds Write Vulnerability

    Affected: Apple — Multiple ProductsCVE-2026-86950EPSS 1.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: October 13, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  31. HighVERIFIED

    Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

    Affected: Citrix — NetScalerCVE-2026-88772EPSS 5.3% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 30, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  32. HighVERIFIED

    Citrix NetScaler Improper Input Validation Vulnerability

    Affected: Citrix — NetScalerCVE-2026-88771EPSS 5.1% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 30, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  33. HighVERIFIED

    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

    Affected: MikroTik — RouterOSCVE-2026-67279EPSS 1% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 28, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  34. HighVERIFIED

    Microsoft SharePoint Code Injection Vulnerability

    Affected: Microsoft — SharePointCVE-2026-65660EPSS 2.1% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 28, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  35. HighVERIFIED

    WordPress Core Remote File Inclusion Vulnerability

    Affected: WordPress — CoreCVE-2026-87902EPSS 40% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 28, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  36. HighVERIFIED

    WSO2 Multiple Products Path Traversal Vulnerability

    Affected: WSO2 — Multiple ProductsCVE-2026-5430EPSS 0.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 27, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  37. HighVERIFIED

    Adobe Commerce and Magento Incorrect Authorization Vulnerability

    Affected: Adobe — Commerce and MagentoCVE-2026-71362EPSS 88% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 27, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  38. HighVERIFIED

    Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

    Affected: Arista — VeloCloud OrchestratorCVE-2026-93952EPSS 1.1% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 25, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  39. HighVERIFIED

    F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

    Affected: F5 — BIG-IP APMCVE-2026-94127EPSS 2.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 25, 2026

    Remote code execution

    Severity set by the Korantix rule

    Sources: CISA KEV

  40. HighVERIFIED

    Check Point Multiple Products Path Traversal Vulnerability

    Affected: Check Point — Multiple ProductsCVE-2026-93616EPSS 76% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 25, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  41. HighVERIFIED

    Check Point Multiple Products Improper Certificate Validation Vulnerability

    Affected: Check Point — Multiple ProductsCVE-2026-85102EPSS 54% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 25, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  42. HighVERIFIED

    Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

    Affected: Zyxel — GS1900 Series SwitchesCVE-2026-7273EPSS 2.5% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 24, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  43. HighVERIFIED

    Linux Kernel Race Condition Vulnerability

    Affected: Linux — KernelCVE-2025-39964EPSS 1.4% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 21, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  44. HighVERIFIED

    Linux Kernel Out-of-Bounds Write Vulnerability

    Affected: Linux — KernelCVE-2026-53266EPSS 0.8% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 21, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  45. HighVERIFIED

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Affected: Linux — KernelCVE-2025-39682EPSS 2.9% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 21, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  46. HighVERIFIED

    Google Pixel Improper Authorization Vulnerability

    Affected: Google — PixelCVE-2026-58704EPSS 0.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 19, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  47. HighVERIFIED

    Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

    Affected: Cisco — Identity Services EngineCVE-2026-76460CVE-2026-20130CVE-2026-20192CVE-2026-20194CVE-2026-20234CVE-2026-20237 +4EPSS 67% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 19, 2026

    Remote code executionAuthentication bypass

    Severity set by the Korantix rule

    Sources: CISA KEV, Cisco PSIRT

  48. HighVERIFIED

    Acronis Backup Incorrect Default Permissions Vulnerability

    Affected: Acronis — BackupCVE-2026-87886EPSS 0.2% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 19, 2026

    Privilege escalation

    Severity set by the Korantix rule

    Sources: CISA KEV

  49. HighVERIFIED

    ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability

    Affected: ConnectWise — ScreenConnectCVE-2026-84869EPSS 0.9% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 14, 2026

    Severity set by the Korantix rule

    Sources: CISA KEV

  50. HighVERIFIED

    JFrog Artifactory Incorrect Authorization Vulnerability

    Affected: JFrog — ArtifactoryCVE-2026-42016EPSS 8.6% (FIRST)

    Known exploited (CISA KEV)

    Operational impact
    Attackers are using this vulnerability in real attacks.
    Recommended first step
    Update the affected product now or apply the vendor's mitigation; prioritise internet-facing systems. CISA due date for US federal agencies: September 25, 2026

    Privilege escalation

    Severity set by the Korantix rule

    Sources: CISA KEV

Source status

  • CISA Known Exploited Vulnerabilities: working (October 25 at 06:57 UTC · 09:57 TRT)
  • USOM — T.C. Siber Güvenlik Başkanlığı: working (October 25 at 06:57 UTC · 09:57 TRT)
  • Cisco PSIRT: working (October 25 at 06:57 UTC · 09:57 TRT)
  • CERT-EU — Cybersecurity Service for the EU institutions: working (October 25 at 06:57 UTC · 09:57 TRT)
  • JPCERT/CC — Japan Computer Emergency Response Team: working (October 25 at 06:57 UTC · 09:57 TRT)
  • BleepingComputer: working (October 25 at 06:57 UTC · 09:57 TRT)
  • The Record: working (October 25 at 06:57 UTC · 09:57 TRT)
  • SANS Internet Storm Center: working (October 25 at 06:57 UTC · 09:57 TRT)
  • KrebsOnSecurity: working (October 25 at 06:57 UTC · 09:57 TRT)
  • NIST NVD 2.0 — critical CVEs (last 72 h): working (October 25 at 06:57 UTC · 09:57 TRT)
  • NIST NVD 2.0 — PHP (CPE php:php, last 14 days): working (October 25 at 06:57 UTC · 09:57 TRT)
  • ENISA EU Vulnerability Database (CVSS ≥ 7, last 3 days): working (October 25 at 06:57 UTC · 09:57 TRT)
  • ENISA EUVD — exploited vulnerabilities: working (October 25 at 06:57 UTC · 09:57 TRT)
  • GitHub Security Advisories (reviewed, all ecosystems): working (October 25 at 06:57 UTC · 09:57 TRT)
  • GitHub Security Advisories — Composer (PHP): working (October 25 at 06:57 UTC · 09:57 TRT)
  • OSV.dev — Packagist (PHP) ecosystem: working (October 25 at 06:57 UTC · 09:57 TRT)
  • Microsoft Security Response Center — Security Update Guide: working (October 25 at 06:57 UTC · 09:57 TRT)
  • Red Hat Security Data API: working (October 25 at 06:57 UTC · 09:57 TRT)
  • Ubuntu Security (CVE tracker): working (October 25 at 06:57 UTC · 09:57 TRT)
  • Debian Security Advisories: working (October 25 at 06:57 UTC · 09:57 TRT)
  • php.net — release feed (security releases): working (October 25 at 06:57 UTC · 09:57 TRT)
  • NCSC (UK National Cyber Security Centre): working (October 25 at 06:57 UTC · 09:57 TRT)
  • BSI CERT-Bund (WID advisories, high/critical, new): working (October 25 at 06:57 UTC · 09:57 TRT)
  • CERT-FR (ANSSI): working (October 25 at 06:57 UTC · 09:57 TRT)
  • Fortinet PSIRT (FortiGuard): working (October 25 at 06:57 UTC · 09:57 TRT)
  • Palo Alto Networks Security Advisories: working (October 25 at 06:57 UTC · 09:57 TRT)

Severity: the vendor's or authority's own rating when it has one; otherwise the documented Korantix rule (a CISA KEV entry is at least High; Critical when used by ransomware or CVSS is 9.0 or higher; without a rating, the band of the published CVSS score). Top priority badge: only when the CVE is in CISA KEV, its FIRST EPSS is at least 0.5 and its published CVSS is at least 9.0. EPSS and CVSS are never estimated; a missing value stays blank. Times are shown in UTC and TRT. When sources disagree, the conflict is shown on the item, not hidden. Source terms: docs/growth/security-intelligence.md. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS scores: FIRST (first.org/epss).